Zhu Haotian

Dr. Zhu Haotian

orcid

Research Focus & Metrics

Academic Career Length

17Years (2010-Present)

(Calculated once Scilit publication data is synced: current year − year of first publication + 1)

Representative Publications

View All Publications
1 August 2024 in IEEE Internet of Things Journal
Verified
Journal Article
Closed access
WWWei Wu
Wei Wu
HPHaipeng Peng
Haipeng Peng
ZHZhu Haotian
Zhu Haotian
Lixiang LiLixiang Li
Lixiang Li
With the rapid development of the Internet of Things (IoT), a substantial number of mobile devices may need to be connected to and communicate with the other devices. IoT smart nodes, which play a key role in these processes, provide not only connectivity but also data security during data collection and transmission. While existing research has considered security issues concerning data collection and transmission to some extent, the inherent vulnerabilities of smart nodes themselves have rarely received adequate attention. Actually, smart nodes can be susceptible to malware attacks, and the fundamental task to protect them is the timely and accurate identification of malware. However, the stealthy nature of malware, the imbalance in its types, and the sharp increase in malware variants make this task challenging. Existing static malware classification methods, which require known malware features, may struggle with a whole new set of malware variants. Dynamic methods plausibly have the potential to identify malware variants but necessitate running malware beforehand. In this article, we propose a deep-learning-based malware classification method designed to help most smart IoT nodes running mainstream operating systems preventing attacks from the malware and its variants. The proposed method incorporates an automatically adjusting threshold mechanism to extract trivial features of malware, refining the classification process even if original features are modified. It also performs well with insufficient malware samples and is compatible with most mainstream convolutional neural network (CNN) models allowing flexible implements. Experiments concerning byte-level variants, operation-code-level variants, and noise-caused variants are conducted. The results show that for the malware files and their variants, the proposed method can accurately accomplish the malware classification tasks. In addition, the proposed method offers a robust solution for the malware classification, which helps to enhance the security of smart nodes against a wide range of malware and its variants. Last but not least, its compatibility with mainstream CNN models and flexibility in deployment make it a practical approach for real-world applications.

30 June 2024 in Sensors
Verified
Journal Article
Open access
PDF file
WWWei Wu
Wei Wu
HPHaipeng Peng
Haipeng Peng
ZHZhu Haotian
Zhu Haotian
DZDerun Zhang
Derun Zhang
With the rapid development of the Internet of Things (IoT), the sophistication and intelligence of sensors are continually evolving, playing increasingly important roles in smart homes, industrial automation, and remote healthcare. However, these intelligent sensors face many security threats, particularly from malware attacks. Identifying and classifying malware is crucial for preventing such attacks. As the number of sensors and their applications grow, malware targeting sensors proliferates. Processing massive malware samples is challenging due to limited bandwidth and resources in IoT environments. Therefore, compressing malware samples before transmission and classification can improve efficiency. Additionally, sharing malware samples between classification participants poses security risks, necessitating methods that prevent sample exploitation. Moreover, the complex network environments also necessitate robust classification methods. To address these challenges, this paper proposes CSMC (Compressed Sensing Malware Classification), an efficient malware classification method based on compressed sensing. This method compresses malware samples before sharing and classification, thus facilitating more effective sharing and processing. By introducing deep learning, the method can extract malware family features during compression, which classical methods cannot achieve. Furthermore, the irreversibility of the method enhances security by preventing classification participants from exploiting malware samples. Experimental results demonstrate that for malware targeting Windows and Android operating systems, CSMC outperforms many existing methods based on compressed sensing and machine or deep learning. Additionally, experiments on sample reconstruction and noise demonstrate CSMC’s capabilities in terms of security and robustness.

21 April 2025 in IEEE Internet of Things Journal
Verified
Journal Article
Closed access
ZHZhu Haotian
Zhu Haotian
WWWei Wu
Wei Wu
HPHaipeng Peng
Haipeng Peng
DZDawei Zhao
Dawei Zhao
Deep-learning-based compressed sensing (CS) techniques have exhibited exceptional prowess in signal reconstruction and data-sharing applications, particularly within the realm of Internet of Things sensor data processing. However, existing methods overlook a critical security vulnerability: the susceptibility of CS techniques to backdoor attacks during the reconstruction phase, which could pose severe security risks to downstream applications. This study pioneers an investigation into the feasibility of backdoor injection during the reconstruction phase, presenting the stealthy multiconstraint adversarial backdoor network against compressed learning (MACS-BNet) and substantiating its efficacy in subverting downstream classification tasks. MACS-BNet synergistically incorporates detailed sensing enhancement, fortified by local information relative positional encoding (LiRPE), to elevate image reconstruction fidelity. Concurrently, it employs a multiconstrained adversarial optimization that integrates sparsity, amplitude regulation, and spatial smoothness constraints, achieving an optimal tradeoff between perturbation imperceptibility and attack efficacy. Consequently, victim models are subtly manipulated to yield outputs consistent with the attacker’s objectives. Extensive empirical evaluations reveal that MACS-BNet consistently surpasses seven cutting-edge attack methodologies across attack success rate (ASR), clean sample classification accuracy, and stealthiness under both all-to-one and all-to-all attack paradigms. Specifically, MACS-BNet attains an unparalleled clean classification accuracy of 99.52% and an ASR of 99.43% in the all-to-one mode, while simultaneously ensuring high-quality image reconstruction. Furthermore, MACS-BNet exhibits formidable resistance against detection by seven state-of-the-art defense mechanisms, underscoring its superior stealth and robustness.

1 November 2010
Verified
Conference Paper
Closed access
YSYe Shen
Ye Shen
JFJing Feng
Jing Feng
ZHZhu Haotian
Zhu Haotian
GML, a geographic information coding standard, has been widely used in WebGIS, heterogeneous GIS data sharing, integration, and interoperation. However, its features of large amount of redundancy inherited from XML file structure and geographic information system make a serious obstacle in WebGIS applications. According to the characteristics of GML, a data stream-based compression algorithm GDSC ( GML data stream compression ) was given, which separated the GML into structure data and value data using “Draw Pattern”, replaced the structure data with dictionary table during the separation process, and compressed the structure data and value data respectively to increase compression rate. In order to reduce compression time, GDSC uses two sub-threads for compression, decompression and network transmission.

15 May 2026 in IEEE Internet of Things Journal
Verified
Journal Article
Closed access
ZHZhu Haotian
Zhu Haotian
WWWei Wu
Wei Wu
HPHaipeng Peng
Haipeng Peng
Lixiang LiLixiang Li
Lixiang Li
With the widespread deployment of the Internet of Things (IoT) and distributed sensing systems, visual data are frequently transmitted over bandwidth-limited and unreliable links, where compression and noise degradation are inevitable. This poses significant challenges to secure, imperceptible, and reversible image communication. Existing steganographic methods often suffer from limited reversibility, noticeable statistical distortion, and weak resistance to steganalysis under realistic channel conditions. This paper proposes Rivic, a reversible image hiding framework for robust and secure visual communication. Rivic integrates wavelet-domain multi-frequency modeling, hierarchical spectral refinement, multi-attentive correction, and multi-domain synergistic recovery into an end-to-end invertible network, aiming to enhance embedding stability and noise-resilient reconstruction. Experimental results on ImageNet, COCO, and ImageHide demonstrate that Rivic achieves 34–35 dB PSNR and 0.93–0.95 SSIM in the cover–stego task, yielding a 5–7 dB PSNR improvement over the strongest CNN-based baselines. Under various channel degradations, including additive noise and JPEG compression, Rivic consistently maintains reconstruction quality above 30 dB. Moreover, when evaluated against advanced steganalysis networks such as SRNet, Yedroudj-Net, and SiaSteg-Net, Rivic reduces the average detection accuracy to 0.50–0.62, approaching the level of random guessing. These results indicate that Rivic enables high-fidelity, robust, and secure reversible visual communication in IoT sensing and control systems operating under practical transmission constraints.

31 August 2026 in Neurocomputing
Verified
Journal Article
Closed access
YCYuhan Cao
Yuhan Cao
ZHZhu Haotian
Zhu Haotian
BZBimei Zhao
Bimei Zhao
WGWenbo Guan
Wenbo Guan
YLYuping Lai
Yuping Lai