Hello๐! I am Mingzhe Li(ๆๆๅฒ), a second-year Ph.D student at University of Massachusetts, Amherst, advised by Prof. Shiqing Ma.
I received my B.Eng in Cyberspace Security from Wuhan University in 2025. Before my time at WHU, I completed three years of study at the No.1 Middle School Affiliated to Central China Normal University ๏ผๅไธญๅธๅคงไธ้ไธญ๏ผ.
My research focuses on artificial intelligence security and privacy, Responsible Generative AI, and Agentic AI.
You can find my CV here.
I am actively looking for a research internship for Summer 2027. Feel free to reach out!
๐ฅ News
- 2026.10 ย ๐๐ TAILOR released: code is now open-sourced.
- 2026.08 ย ย ๐๐ 1 paper is accepted to EMNLP 2026.
- 2026.07 ย ย ๐๐ 1 paper is accepted to COLM 2026.
- 2026.05 ย ๐๐ CiteTracer released โ code and dataset are now open-sourced.
- 2026.02 ย ย ๐๐ PROMPTMINER is accepted to CVPR 2026. See you in Denver!
- 2025.11 ย ๐๐ PROMPTMINER released โ code is now open-sourced.
- 2025.04 ย ๐๐ I am selected as an outstanding undergraduate graduate.
- 2025.01: ย ๐๐ PAPILLON is accepted to Usenix Security 2025.
- 2024.12: ย ๐๐ 1 paper is accepted to IEEE TIFS 2025.
๐ Selected Publications
For the full publication list, please see my CV.

Made to Measure: Designing Image Watermarks to Specification
Mingzhe Li, Yuefeng Peng, Kejing Xia, Pranav Jeyakumar, Ruolan Leslie Famularo, Shiqing Ma
Preprint

Source or It Didnโt Happen: A Multi-Agent Framework for Citation Hallucination Detection
Mingzhe Li, Zhiqiang Lin, Shiqing Ma
Preprint

Membership Inference Attacks on Vision-Language-Action Models
Yuefeng Peng*, Mingzhe Li*, Kejing Xia, Renhao Zhang, Amir Houmansadr
Preprint, * indicates equal contribution

Disappearing Ink: Obfuscation Breaks N-gram Code Watermarks in Theory and Practice
Gehao Zhang, Mingzhe Li, Eugene Bagdasarian, Shiqing Ma, Juan Zhai
Conference on Empirical Methods in Natural Language Processing (EMNLP 2026, Findings)

Mingzhe Li, Renhao Zhang, Zhiyang Wen, Siqi Pan, Bruno Castro da Silva, Juan Zhai, Shiqing Ma
Conference on Computer Vision and Pattern Recognition (CVPR 2026, main)

EDITOR: Effective and Interpretable Prompt Inversion for Text-to-Image Diffusion Models
Mingzhe Li, Kejing Xia, Gehao Zhang, Zhenting Wang, Guanhong Tao, Siqi Pan, Juan Zhai, Shiqing Ma
Preprint

PAPILLON: Efficient and Stealthy Fuzz Testing-Powered Jailbreaks for LLMs
Xueluan Gong*, Mingzhe Li*, Yilin Zhang, Fengyuan Ran, Chen Chen, Yanjiao Chen, Qian Wang, Kwok-Yan Lam
34th Usenix Security Symposium (USENIX Security 2025), * indicates equal contribution

Augmenting Model Extraction Attacks against Disruption-Based Defenses
Xueluan Gong, Shuaike Li, Yanjiao Chen, Mingzhe Li, Rubin Wei, Qian Wang and Kwok Yan Lam
IEEE Transactions on Information Forensics & Security (TIFS 2025)
๐ Honors and Awards
- Outstanding Undergraduate Graduate, WHU Apr. 2025
- National Second Prize in Contemporary Undergraduate Math Contest in Modeling, Top 2% nationwide Nov. 2023
- Second Prize in the Chinese Collegiate Computing Competition Jun. 2023
- Second Prize in the โHuazhong Cupโ College Student Mathematics Modeling Challenge May 2023
- Third Prize in the Hubei Province College Student Mathematics Competition Mar. 2023
- โMerit Studentโ Honorary Title, Twice Sept. 2023 & Sept. 2022
- โActive Participant in Social Activitiesโ Honorary Title Jun. 2022
๐ Educations
- 2025.09 - Present, Ph.D Student, University of Massachusetts, Amherst
- 2021.09 - 2025.06, Undergraduate, School of Cyber Science and Engineering, Wuhan University
- 2018.09 - 2021.06, Senior Middle School Student, the No.1 Middle School Affiliated to Central China Normal University
๐ป Internships
- 2025.02 - 2025.06, Research & Development Intern, ByteDance, Shenzhen, China. Worked on AI security.
๐ Teaching
- 2026 Summer, Teaching Assistant, COMPSCI 683: Artificial Intelligence, UMass Amherst
- 2026 Summer, Teaching Assistant, COMPSCI 426: Scalable Web Systems, UMass Amherst
- 2025 Fall, Teaching Assistant, COMPSCI 520: Theory and Practice of Software Engineering, UMass Amherst
๐ค Service
- Reviewer, International Conference on Learning Representations (ICLR 2027)
- Sub-reviewer, USENIX Security Symposium 2026 (Cycle 1)