WraLUPOPL'24CCF-ACORE-A*ReLU Hull Approximation
Zhongkui Ma, Jiaying Li, Guangdong Bai
Approximate ReLU hulls by reusing their linear pieces and constructing enclosing upper faces, rather than building the exact hull.
PhD Candidate · UQ
Zhongkui Ma
Concrete to abstract to concrete
Selected research
A first-author verification line, alongside selected top-tier collaborations.
PhD research · first author
From ReLU geometry, to general activations, to nonlinear structure in back-substitution.
WraLUPOPL'24CCF-ACORE-A*WraActOOPSLA'25CCF-ACORE-AConvex Hull Approximation for Activation Functions
Zhongkui Ma, Zihan Wang, Guangdong Bai
Use double-linear-piece functions to simplify local activation geometry and construct convex over-approximations beyond ReLU.
TiSumICSE'27AcceptedCCF-ACORE-A*Local Nonlinear Substitution for Bounding Activation Functions
Zhongkui Ma, Mengdie Huang, Zihan Wang, Elisa Bertino, Guangdong Bai
Carry quadratic symbolic bounds through one local back-substitution step, then return to linear form before nonlinear terms proliferate, preserving cancellation that purely linear bounds lose.
Selected collaborations
Model and data control, and privacy, at NeurIPS, IEEE S&P, and CCS.
NTENeurIPS'26AcceptedCCF-ACORE-A*Catch-Only-One: Non-Transferable Examples for Model-Specific Authorization
Zihan Wang, Zhiyong Ma, Zhongkui Ma, Shuofeng Liu, Akide Liu, Derui Wang, Minhui Xue, Guangdong Bai
Recode released data along a designated model's low-sensitivity subspace so the intended model retains task utility while other models lose it, without retraining or control over deployment.
CoreLockerS&P'24CCF-ACORE-A*CoreLocker: Neuron-level Usage Control
Zihan Wang, Zhongkui Ma, Xinguo Feng, Ruoxi Sun, Hu Wang, Minhui Xue, Guangdong Bai
Lock a network behind a small subset of its own significant weights, so holding the key gives the whole capability and not holding it gives part of it.
GRABCCS'24CCF-ACORE-A*Uncovering Gradient Inversion Risks in Practical Language Model Training
Xinguo Feng, Zhongkui Ma, Zihan Wang, Eu Joe Chegne, Mengyao Ma, Alsharif Abuadbba, Guangdong Bai
Recover private training text from shared language-model gradients under practical conditions, exposing how architecture and training choices shape leakage beyond idealized attacks in collaborative learning deployments.
Explore how these projects connect across my research, or browse the complete publication list.
Beyond publications
Learn the ideas. Use the tools.
Tutorial · A series in progress
A Guide to Neural Network Verification
29 chapters in 4 parts, from what a verifier proves to how bounds, relaxations, and solver pipelines work.
Open-source infrastructure
Research software
5 focused tools for activation bounds, ONNX models, and verification specifications, including wraact and the model-processing libraries behind the research workflow.
News
Acceptances, awards, talks and releases.
📄
Oct. 2026Paper Accepted
Our paper Local Nonlinear Substitution for Bounding Activation Functions is accepted by ICSE'27. It is the third study in my neural network verification line and the third representative work of my PhD.
📄
Sept. 2026Paper Accepted
Our paper Catch-Only-One: Non-Transferable Examples for Model-Specific Authorization is accepted by NeurIPS'26 as an oral presentation (112 of 30709 submissions, about 0.36%). Congrats, Zihan and Zhiyong!
🏆
Aug. 2026Best Paper Award
Our paper Non-Transferable Examples receives the Best Paper Award - Runner Up at the ECCV'26 LifeGenIP Workshop. Congrats, Zihan!
📄
Mar. 2026Paper Accepted
Our paper Re-Key-Free, Risky-Free: Adaptable Model Usage Control is accepted by Euro S&P'26. Congrats, Zihan!
📄
Nov. 2025Paper Accepted
Our paper Mitigating Gradient Inversion Risks in Language Models via Token Obfuscation is accepted by Asia CCS'2026. Congrats, Xinguo!
📄
Aug. 2025Paper Accepted
Our paper Convex Hull Approximation for Activation Functions is accepted by OOPSLA'25 within SPLASH'25. Happy!
📄
Jan. 2025Paper Accepted
Our paper AI Model Modulation with Logits Redistribution is accepted by WWW'25. Congrats, Zihan!
🏆
Dec. 2024Distinguished Speaker Award
Tutorial: Robustness Verification of Neural Networks using WraLU at Australasian Database Conference (ADC 2024), Gold Coast, Australia. Joint with Guangdong Bai.
📄
Aug. 2024Paper Accepted
Our paper Uncovering Gradient Inversion Risks in Practical Language Model Training is accepted by CCS'24. Congrats, Xinguo!
🎤
May 2024Workshop presentation
Workshop presentation: ReLU Hull Approximation Workshop at Formal Methods in Australia and New Zealand, The University of Queensland, St Lucia, Australia.
🎤
May 2024Talk
Talk: ReLU hull approximation at FPTalks / FPBench community meeting, Online.
📄
Apr. 2024Paper Accepted
Our paper CORELOCKER: Neuron-level Usage Control is accepted by S&P'24. Congrats, Zihan! [Live Video]
📄
Nov. 2023Paper Accepted
Our paper ReLU Hull Approximation is accepted by POPL'24.
Selected notes
The questions behind the work, and the choices that turn them into methods.
Why Linear Bounds Lose Cancellation When They Are Summed
A valid bound for every activation can still produce a weak bound for their sum. The missing information is how their approximation errors move together.
October 2026Data That Only One Model Can Read
Adversarial examples exploit what a model notices; non-transferable examples use what it does not. How data can remain useful to a designated model without being equally useful to other models.
October 2026