Education

• Ph.D. in Information Security, Institute of Software, Chinese Academy of Sciences (ISCAS), advised by Dengguo Feng, 2011
• B.S. in Software Engineering, Xidian University, 2005

Work experience

• Mar 2011: Research Assistant
  • Institute of Software, Chinese Academy of Sciences
• Jul 2014: Associate Professor
  • Institute of Software, Chinese Academy of Sciences
• Oct 2025: Professor
  • Institute of Software, Chinese Academy of Sciences

Honors & Awards

• Recipient of the First Prize, Electronic Information Science and Technology Award, Chinese Institute of Electronics
• Member of the Youth Innovation Promotion Association, Chinese Academy of Sciences
• Recipient of the Outstanding Young Talent Program, Institute of Software, Chinese Academy of Sciences

Publications

Model Hijacking Attack in Federated Learning

Z Li, S Wu, R Chen, P Aditya, IE Akkus, M Vanga, M Zhang, H Li*, Y Zhang. (2026). "Model Hijacking Attack in Federated Learning." IEEE TIFS.

Enhanced Label-Only Membership Inference Attacks with Fewer Queries

H Li, Z Li, S Wu, Y Ye, M Zhang, D Feng, Y Zhang. (2025). "Enhanced Label-Only Membership Inference Attacks with Fewer Queries." USENIX Security.

RAG-leaks: Difficulty-Calibrated Membership Inference Attacks on Retrieval-Augmented Generation

G Wang, J He, H Li*, M Zhang, D Feng. (2025). "RAG-leaks: Difficulty-Calibrated Membership Inference Attacks on Retrieval-Augmented Generation." Science China Information Sciences.

SeqMIA: Sequential-Metric Based Membership Inference Attack

H Li, Z Li, S Wu, C Hu, Y Ye, M Zhang, D Feng, Y Zhang. (2024). "SeqMIA: Sequential-Metric Based Membership Inference Attack." ACM CCS.

TULAM: Trajectory-User Linking via Attention Mechanism

H Li, S Cao, Y Chen, M Zhang, D Feng. (2024). "TULAM: Trajectory-User Linking via Attention Mechanism." Science China Information Sciences.

Privacy-Aware Risk-Adaptive Access Control in Health Information Systems using Topic Models

W Zhang, H Li*, M Zhang, Z Lv. (2018). "Privacy-Aware Risk-Adaptive Access Control in Health Information Systems using Topic Models." SACMAT.

PC Member/Reviewer

• 2026: TIFS, TDSC, AAAI, NDSS
• 2025: WWW, TIFS, Cybersecurity
• 2024: Cybersecurity