---
title: "Auto-Stega — paper by Zhou et al. (2026) — summary and ideas"
description: "Auto-Stega replaces these with an agent system that works only at inference time, with no training, fine-tuning or parameter… 41 references."
authors: ["Jiuan Zhou", "Yu Cheng", "Yuan Xie", "Zhaoxia Yin"]
year: 2026
venue: "Findings of the Association for Computational Linguistics: ACL 2026"
source: "https://aclanthology.org/2026.findings-acl.1612/"
doi: "10.18653/v1/2026.findings-acl.1612"
licence: "CC BY 4.0 (ACL Anthology)"
licence_url: "https://creativecommons.org/licenses/by/4.0/"
summary_licence: "Elamur Cosmic License"
canonical: "https://research.elamur.ai/free/en/papers/zhou-2026-auto-stega-agent-driven-system/"
---
[Elamur Research](https://md.research.elamur.ai/free/en/) · [this page in HTML](https://research.elamur.ai/free/en/papers/zhou-2026-auto-stega-agent-driven-system/)

[home](https://md.research.elamur.ai/free/en/) / [papers](https://md.research.elamur.ai/free/en/papers/) / [2026](https://md.research.elamur.ai/free/en/papers/2026/page/23/) / Auto-Stega: An Agent-Driven System for Lifelong Strategy Evolution in LLM-Based Text Steganography

# Auto-Stega: An Agent-Driven System for Lifelong Strategy Evolution in LLM-Based Text Steganography

**Authors:** Jiuan Zhou, [Yu Cheng](https://md.research.elamur.ai/free/en/authors/yu-cheng/), [Yuan Xie](https://md.research.elamur.ai/free/en/authors/yuan-xie/) and [Zhaoxia Yin](https://md.research.elamur.ai/free/en/authors/zhaoxia-yin/) · **Year:** 2026 · **Venue:** [Findings of the Association for Computational Linguistics: ACL 2026](https://md.research.elamur.ai/free/en/venues/findings/) ([Findings of the Association for Computational Linguistics 2026](https://md.research.elamur.ai/free/en/venues/findings/2026/)) · **Publisher:** [Association for Computational Linguistics](https://md.research.elamur.ai/free/en/publishers/association-for-computational-linguistics/) · **Licence:** [CC BY 4.0 (ACL Anthology)](https://creativecommons.org/licenses/by/4.0/)

**Links:** [Publisher's page](https://aclanthology.org/2026.findings-acl.1612/) · [PDF](https://aclanthology.org/2026.findings-acl.1612.pdf) · [DOI 10.18653/v1/2026.findings-acl.1612](https://doi.org/10.18653/v1/2026.findings-acl.1612) · [OpenAlex](https://openalex.org/W4415315884)

**Citations:** 0 citations (OpenAlex, 2026-10-14)

## Summary
Text steganography hides secret bits inside generated text. It must balance capacity, natural-looking output and resistance to automated detectors, and this "trilemma" gets harder as embedding rates rise. Existing LLM-based schemes such as ADG, Discop and LLM-Stega depend on fixed, manually designed strategies. Auto-Stega replaces these with an agent system that works only at inference time, with no training, fine-tuning or parameter access. A web searcher mines recent literature for candidate strategies and turns them into library entries. The system then retrieves and ranks strategies for each request, a steganography LLM writes the stego text, and a scorer LLM checks it against several criteria. A summarizer LLM records successful strategies back into the library, and on the receiving end a decoding LLM extracts the message using the shared strategy. For high embedding rates, the authors add PC-DNTE, an optional module that keeps token sampling close to the base model's distribution. On News, Movie and Tweet corpora, Auto-Stega lowers normalized perplexity by 42.2% and makes steganalysis about 1.2% less accurate than the strongest baseline. This shows that self-improving strategy libraries can ease the trilemma.

## Key points
- The closed loop runs in four stages: generate, evaluate, summarize, update. Library entries carry an "Applicable Scenarios" field used to filter candidates, and new candidates join only if their score exceeds a threshold S_T.
- PC-DNTE is a plug-and-play mapping that aligns probability mass per bin, so quality holds up at high embedding rates.
- Against steganalyzers trained on 10,000/1,000/1,000 cover–stego pairs, detection accuracy on Auto-Stega text stays near chance: SANet 51.05%, BiLSTM-Dense 49.65%, Bert-FT 52.35%.
- In BERT-based sentence-level KLD, Auto-Stega scores lowest on News and second lowest on Movie and Tweet. On those two corpora, ADG and Discop are the respective leaders.
- Human raters scored Auto-Stega above all three baselines for fluency, coherence and relevance. Planned future work covers multilingual and multimodal covers, adaptive steganalyzers and lower latency.

*Our summary of the paper, in our own words — not its text. The work belongs to its authors; read it at the links above.*

## Institutions

- [East China Normal University](https://md.research.elamur.ai/free/en/universities/east-china-normal-university/) — University, Shanghai, China · 69 works · 2,490 citations
- [Shanghai Innovation Institute](https://md.research.elamur.ai/free/en/universities/shanghai-innovation-institute/) — University, Shanghai, China · 34 works · 325 citations

📚 Shelves (3): [🖥️ Computer Science](https://md.research.elamur.ai/free/en/shelves/computer-science/) · 18,614 works · [🤖 Artificial Intelligence](https://md.research.elamur.ai/free/en/shelves/computer-science/artificial-intelligence/) · 17,965 works · [👁️ Computer Vision and Pattern Recognition](https://md.research.elamur.ai/free/en/shelves/computer-science/computer-vision-and-pattern-recognition/) · 3,486 works

## Cite

Cite as: Jiuan Zhou, Yu Cheng, Yuan Xie and Zhaoxia Yin. 2026. Auto-Stega: An Agent-Driven System for Lifelong Strategy Evolution in LLM-Based Text Steganography. Findings of the Association for Computational Linguistics: ACL 2026.

The paper itself, not this page. BibTeX from the library's record of the work.

```bibtex
@inproceedings{zhou2026auto,
  title = {{Auto-Stega: An Agent-Driven System for Lifelong Strategy Evolution in LLM-Based Text Steganography}},
  author = {Jiuan Zhou, Yu Cheng, Yuan Xie and Zhaoxia Yin},
  booktitle = {Findings of the Association for Computational Linguistics: ACL 2026},
  year = {2026},
  doi = {10.18653/v1/2026.findings-acl.1612},
  url = {https://doi.org/10.18653/v1/2026.findings-acl.1612}
}
```

- [← previous Authorship Verification of Transcribed German-Language Videos](https://md.research.elamur.ai/free/en/papers/halvani-2026-authorship-verification-transcribed-german-language/)
- [next → AutoAnoEval: Semantic-Aware Model Selection via Tree-Guided LLM Reasoning for Tabular Anomaly Detection](https://md.research.elamur.ai/free/en/papers/yoon-2026-autoanoeval-semantic-aware-model-selection/)
- [↑ back to papers of 2026](https://md.research.elamur.ai/free/en/papers/2026/page/23/)

## References

41 references, 8 of them with a card of ours. ↗ leads to the work, «find» searches for one we have no id for yet.

1. Jinheon Baek, Sujay Kumar Jauhar, Silviu Cucerzan, and Sung Ju Hwang. 2025. [ResearchAgent: Iterative research idea generation over scientific literature with large language models](https://md.research.elamur.ai/free/en/papers/baek-2024-researchagent-iterative-research-idea/). In Proceedings of the 2025 Conference of the Nations of the Americas Chapter of the Association for Computational Lingu…
2. Mathias Benedek, Tanja Könen, and Aljoscha C Neubauer. 2012. Associative abilities underlying creativity. Psychology of Aesthetics, Creativity, and the Arts, 6(3):273. [find](https://scholar.google.com/scholar?q=Mathias+Benedek%2C+Tanja+K%C3%B6nen%2C+and+Aljoscha+C+Neubauer%2E+2012%2E+Associative+abilities+underlying+creativity%2E+Psychology+of+Aesthetics%2C+Creativity%2C+and+the+Arts%2C+6%283%29%3A273%2E)
3. Yew Ken Chia, Lidong Bing, Soujanya Poria, and Luo Si. 2022. [RelationPrompt: Leveraging prompts to generate synthetic data for zero-shot relation triplet extraction](https://md.research.elamur.ai/free/en/papers/chia-2022-relationprompt-leveraging-prompts-generate-synthetic/). In Findings of the Association for Computational Linguistics: ACL 2022, pages 45–57.
4. Jinyang Ding, Kejiang Chen, Yaofei Wang, Na Zhao, Weiming Zhang, and Nenghai Yu. 2023. Discop: Provably secure steganography in practice based on" distribution copies". In 2023 IEEE Symposium on Security and Privacy, pages 2238–2255. [find](https://scholar.google.com/scholar?q=Jinyang+Ding%2C+Kejiang+Chen%2C+Yaofei+Wang%2C+Na+Zhao%2C+Weiming+Zhang%2C+and+Nenghai+Yu%2E+2023%2E+Discop%3A+Provably+secure+steganography+in+practice+based+on%22+distribution+copies%22%2E+In+2023+IEEE+Symposium+on+Secur)
5. Alec Go, Richa Bhayani, and Lei Huang. 2009. Twitter sentiment classification using distant supervision. CS224N project report, Stanford, 1(12):2009. [find](https://scholar.google.com/scholar?q=Alec+Go%2C+Richa+Bhayani%2C+and+Lei+Huang%2E+2009%2E+Twitter+sentiment+classification+using+distant+supervision%2E+CS224N+project+report%2C+Stanford%2C+1%2812%29%3A2009%2E)
6. Mingzhi Hu and Hongxia Wang. 2025. Mutual information-optimized steganalysis for generative steganography. IEEE Transactions on Information Forensics and Security, 20:1852–1865. [find](https://scholar.google.com/scholar?q=Mingzhi+Hu+and+Hongxia+Wang%2E+2025%2E+Mutual+information%2Doptimized+steganalysis+for+generative+steganography%2E+IEEE+Transactions+on+Information+Forensics+and+Security%2C+20%3A1852%E2%80%931865%2E)
7. Anuj Karpatne, Aryan Deshwal, Xiaowei Jia, Wei Ding, Michael Steinbach, Aidong Zhang, and Vipin Kumar. 2025. Ai-enabled scientific revolution in the age of generative ai: second nsf workshop report. npj Artificial Intelligence, 1(1):18. [find](https://scholar.google.com/scholar?q=Anuj+Karpatne%2C+Aryan+Deshwal%2C+Xiaowei+Jia%2C+Wei+Ding%2C+Michael+Steinbach%2C+Aidong+Zhang%2C+and+Vipin+Kumar%2E+2025%2E+Ai%2Denabled+scientific+revolution+in+the+age+of+generative+ai%3A+second+nsf+workshop+report%2E+n)
8. Arthur Koestler. 1964. The act of creation. [find](https://scholar.google.com/scholar?q=Arthur+Koestler%2E+1964%2E+The+act+of+creation%2E)
9. Byung Cheol Lee and Jaeyeon Chung. 2024. An empirical investigation of the impact of chatgpt on creativity. Nature Human Behaviour, 8(10):1906–1914. [find](https://scholar.google.com/scholar?q=Byung+Cheol+Lee+and+Jaeyeon+Chung%2E+2024%2E+An+empirical+investigation+of+the+impact+of+chatgpt+on+creativity%2E+Nature+Human+Behaviour%2C+8%2810%29%3A1906%E2%80%931914%2E)
10. Mengdi Li, Kai Mu, Ping Zhong, Juan Wen, and Yiming Xue. 2019. Generating steganographic image description by dynamic synonym substitution. Signal Processing, 164:193–201. [find](https://scholar.google.com/scholar?q=Mengdi+Li%2C+Kai+Mu%2C+Ping+Zhong%2C+Juan+Wen%2C+and+Yiming+Xue%2E+2019%2E+Generating+steganographic+image+description+by+dynamic+synonym+substitution%2E+Signal+Processing%2C+164%3A193%E2%80%93201%2E)
11. Yiming Li, Kejiang Chen, Yaofei Wang, Xin Zhang, Guanjie Wang, Weiming Zhang, and Nenghai Yu. 2025. Coas: Composite audio steganography based on text and speech synthesis. IEEE Transactions on Information Forensics and Security, 20:5978–5991. [find](https://scholar.google.com/scholar?q=Yiming+Li%2C+Kejiang+Chen%2C+Yaofei+Wang%2C+Xin+Zhang%2C+Guanjie+Wang%2C+Weiming+Zhang%2C+and+Nenghai+Yu%2E+2025%2E+Coas%3A+Composite+audio+steganography+based+on+text+and+speech+synthesis%2E+IEEE+Transactions+on+Informa)
12. Guorui Liao, Jinshuai Yang, Weizhi Shao, and Yongfeng Huang. 2025. A framework for designing provably secure steganography. In 34th USENIX Security Symposium, pages 6837–6856. [find](https://scholar.google.com/scholar?q=Guorui+Liao%2C+Jinshuai+Yang%2C+Weizhi+Shao%2C+and+Yongfeng+Huang%2E+2025%2E+A+framework+for+designing+provably+secure+steganography%2E+In+34th+USENIX+Security+Symposium%2C+pages+6837%E2%80%936856%2E)
13. Xiaogeng Liu, Peiran Li, G. Edward Suh, Yevgeniy Vorobeychik, Zhuoqing Mao, Somesh Jha, Patrick McDaniel, Huan Sun, Bo Li, and Chaowei Xiao. 2025. Autodan-turbo: A lifelong agent for strategy self-exploration to jailbreak llms. In International Conference on Learning Representations. [find](https://scholar.google.com/scholar?q=Xiaogeng+Liu%2C+Peiran+Li%2C+G%2E+Edward+Suh%2C+Yevgeniy+Vorobeychik%2C+Zhuoqing+Mao%2C+Somesh+Jha%2C+Patrick+McDaniel%2C+Huan+Sun%2C+Bo+Li%2C+and+Chaowei+Xiao%2E+2025%2E+Autodan%2Dturbo%3A+A+lifelong+agent+for+strategy+self%2Dexp)
14. Daniil A Boiko, Robert MacKnight, Ben Kline, and Gabe Gomes. 2023. [Autonomous chemical research with large language models](https://md.research.elamur.ai/free/en/papers/boiko-2023-autonomous-chemical-research-large-language/). Nature, 624(7992):570– 578.
15. Yinhan Liu, Myle Ott, Naman Goyal, Jingfei Du, Mandar Joshi, Danqi Chen, Omer Levy, Mike Lewis, Luke Zettlemoyer, and Veselin Stoyanov. 2019. [Roberta: A robustly optimized bert pretraining approach](https://md.research.elamur.ai/free/en/papers/liu-2019-roberta-robustly-optimized-bert-pretraining/). arXiv preprint arXiv:1907.11692.
16. Yu Cheng, Jiuan Zhou, Jiawei Chen, Zhaoxia Yin, and Xinpeng Zhang. 2025. Rfnns: Robust fixed neural network steganography with popular deep generative models. arXiv preprint arXiv:2505.04116. — [arXiv:2505.04116](https://arxiv.org/abs/2505.04116) [find](https://scholar.google.com/scholar?q=Yu+Cheng%2C+Jiuan+Zhou%2C+Jiawei+Chen%2C+Zhaoxia+Yin%2C+and+Xinpeng+Zhang%2E+2025%2E+Rfnns%3A+Robust+fixed+neural+network+steganography+with+popular+deep+generative+models%2E+arXiv+preprint+arXiv%3A2505%2E04116%2E+%E2%80%94+%5BarXiv)
17. Ziming Luo, Zonglin Yang, Zexin Xu, Wei Yang, and Xinya Du. 2025. Llm4sr: A survey on large language models for scientific research. arXiv preprint arXiv:2501.04306. 32211 9 [find](https://scholar.google.com/scholar?q=Ziming+Luo%2C+Zonglin+Yang%2C+Zexin+Xu%2C+Wei+Yang%2C+and+Xinya+Du%2E+2025%2E+Llm4sr%3A+A+survey+on+large+language+models+for+scientific+research%2E+arXiv+preprint+arXiv%3A2501%2E04306%2E+32211+9)
18. Andres M. Bran, Sam Cox, Oliver Schilter, Carlo Baldassari, Andrew D White, and Philippe Schwaller. 2024. Augmenting large language models with chemistry tools. Nature Machine Intelligence, 6(5):525– 535. [find](https://scholar.google.com/scholar?q=Andres+M%2E+Bran%2C+Sam+Cox%2C+Oliver+Schilter%2C+Carlo+Baldassari%2C+Andrew+D+White%2C+and+Philippe+Schwaller%2E+2024%2E+Augmenting+large+language+models+with+chemistry+tools%2E+Nature+Machine+Intelligence%2C+6%285%29%3A525%E2%80%93+)
19. Andrew Maas, Raymond E Daly, Peter T Pham, Dan Huang, Andrew Y Ng, and Christopher Potts. 2011. [Learning word vectors for sentiment analysis](https://md.research.elamur.ai/free/en/papers/maas-2011-learning-word-vectors-sentiment-analysis/). In Proceedings of the 49th annual meeting of the association for computational linguistics: Human language technologies, pages 142–150.
20. Laijin Meng, Xinghao Jiang, Qiang Xu, and Tanfeng Sun. 2025. A robust coverless video steganography based on two-level dct features against video attacks. IEEE Transactions on Multimedia, 27:6434–6448. [find](https://scholar.google.com/scholar?q=Laijin+Meng%2C+Xinghao+Jiang%2C+Qiang+Xu%2C+and+Tanfeng+Sun%2E+2025%2E+A+robust+coverless+video+steganography+based+on+two%2Dlevel+dct+features+against+video+attacks%2E+IEEE+Transactions+on+Multimedia%2C+27%3A6434%E2%80%936448)
21. Tomas Mikolov, Martin Karafiát, Lukas Burget, Jan Cernockỳ, and Sanjeev Khudanpur. 2010. Recurrent neural network based language model. In Interspeech, volume 2, pages 1045–1048. [find](https://scholar.google.com/scholar?q=Tomas+Mikolov%2C+Martin+Karafi%C3%A1t%2C+Lukas+Burget%2C+Jan+Cernocky%CC%80%2C+and+Sanjeev+Khudanpur%2E+2010%2E+Recurrent+neural+network+based+language+model%2E+In+Interspeech%2C+volume+2%2C+pages+1045%E2%80%931048%2E)
22. Rishabh Misra. 2022. News category dataset. arXiv preprint arXiv:2209.11429. — [arXiv:2209.11429](https://arxiv.org/abs/2209.11429) [find](https://scholar.google.com/scholar?q=Rishabh+Misra%2E+2022%2E+News+category+dataset%2E+arXiv+preprint+arXiv%3A2209%2E11429%2E+%E2%80%94+%5BarXiv%3A2209%2E11429%5D%28https%3A%2F%2Farxiv%2Eorg%2Fabs%2F2209%2E11429%29)
23. Wanli Peng, Jinyu Zhang, Yiming Xue, and Zhenghong Yang. 2021. Real-time text steganalysis based on multi-stage transfer learning. IEEE Signal Processing Letters, 28:1510–1514. [find](https://scholar.google.com/scholar?q=Wanli+Peng%2C+Jinyu+Zhang%2C+Yiming+Xue%2C+and+Zhenghong+Yang%2E+2021%2E+Real%2Dtime+text+steganalysis+based+on+multi%2Dstage+transfer+learning%2E+IEEE+Signal+Processing+Letters%2C+28%3A1510%E2%80%931514%2E)
24. Yinyin Peng, Yaofei Wang, Donghui Hu, Kejiang Chen, Xianjin Rong, and Weiming Zhang. 2024. Ldstega: Practical and robust generative image steganography based on latent diffusion models. In Proceedings of the 32nd ACM International Conference on Multimedia, pages 3001–3009. [find](https://scholar.google.com/scholar?q=Yinyin+Peng%2C+Yaofei+Wang%2C+Donghui+Hu%2C+Kejiang+Chen%2C+Xianjin+Rong%2C+and+Weiming+Zhang%2E+2024%2E+Ldstega%3A+Practical+and+robust+generative+image+steganography+based+on+latent+diffusion+models%2E+In+Proceedings)
25. Nils Reimers and Iryna Gurevych. 2019. [Sentence-BERT: Sentence embeddings using Siamese BERT-networks](https://md.research.elamur.ai/free/en/papers/reimers-2019-sentence-bert-sentence-embeddings-siamese/). In Proceedings of the 2019 Conference on Empirical Methods in Natural Language Processing and the 9th International Joint Conference on Natural Language Processing, pages 3982–3992.
26. Kai Ruan, Xuan Wang, Jixiang Hong, Peng Wang, Yang Liu, and Hao Sun. 2024. [Liveideabench: Evaluating llms’ divergent thinking for scientific idea generation with minimal context](https://md.research.elamur.ai/free/en/papers/ruan-2024-evaluating-llms-divergent-thinking-capabilities/). arXiv preprint arXiv:2412.17596.
27. Timo Schick and Hinrich Schütze. 2021. [Generating datasets with pretrained language models](https://md.research.elamur.ai/free/en/papers/schick-2021-generating-datasets-pretrained-language-models/). In Proceedings of the 2021 Conference on Empirical Methods in Natural Language Processing, pages 6943– 6951.
28. Mohammad Shirali-Shahreza. 2008. Text steganography by changing words spelling. In 2008 10th international conference on advanced communication technology, volume 3, pages 1912–1913. [find](https://scholar.google.com/scholar?q=Mohammad+Shirali%2DShahreza%2E+2008%2E+Text+steganography+by+changing+words+spelling%2E+In+2008+10th+international+conference+on+advanced+communication+technology%2C+volume+3%2C+pages+1912%E2%80%931913%2E)
29. Jie Wang, Yihao Wang, Yihao Li, Ru Zhang, and Jianyi Liu. 2025a. Multi-classification of linguistic steganography driven by large language models. IEEE Signal Processing Letters, 32:1440–1444. [find](https://scholar.google.com/scholar?q=Jie+Wang%2C+Yihao+Wang%2C+Yihao+Li%2C+Ru+Zhang%2C+and+Jianyi+Liu%2E+2025a%2E+Multi%2Dclassification+of+linguistic+steganography+driven+by+large+language+models%2E+IEEE+Signal+Processing+Letters%2C+32%3A1440%E2%80%931444%2E)
30. Zhuang Wang, Linna Zhou, Xuekai Chen, Zhili Zhou, and Zhongliang Yang. 2025b. Stlc-kg: A social text steganalysis method combining large-scale language models and common-sense knowledge graphs. In Proceedings of the AAAI Conference on Artificial Intelligence, volume 39, pages 25461–25469. [find](https://scholar.google.com/scholar?q=Zhuang+Wang%2C+Linna+Zhou%2C+Xuekai+Chen%2C+Zhili+Zhou%2C+and+Zhongliang+Yang%2E+2025b%2E+Stlc%2Dkg%3A+A+social+text+steganalysis+method+combining+large%2Dscale+language+models+and+common%2Dsense+knowledge+graphs%2E+In+Pro)
31. Juan Wen, Xuejing Zhou, Ping Zhong, and Yiming Xue. 2019. Convolutional neural network based text steganalysis. IEEE Signal Processing Letters, 26(3):460–464. [find](https://scholar.google.com/scholar?q=Juan+Wen%2C+Xuejing+Zhou%2C+Ping+Zhong%2C+and+Yiming+Xue%2E+2019%2E+Convolutional+neural+network+based+text+steganalysis%2E+IEEE+Signal+Processing+Letters%2C+26%283%29%3A460%E2%80%93464%2E)
32. Jiaxuan Wu, Zhengxian Wu, Yiming Xue, Juan Wen, and Wanli Peng. 2024. Generative text steganography with large language model. In Proceedings of the 32nd ACM International Conference on Multimedia, pages 10345–10353. [find](https://scholar.google.com/scholar?q=Jiaxuan+Wu%2C+Zhengxian+Wu%2C+Yiming+Xue%2C+Juan+Wen%2C+and+Wanli+Peng%2E+2024%2E+Generative+text+steganography+with+large+language+model%2E+In+Proceedings+of+the+32nd+ACM+International+Conference+on+Multimedia%2C+pa)
33. Yiming Xue, Jiaxuan Wu, Ronghua Ji, Ping Zhong, Juan Wen, and Wanli Peng. 2024. Adaptive domain-invariant feature extraction for cross-domain linguistic steganalysis. IEEE Transactions on Information Forensics and Security, 19:920–933. [find](https://scholar.google.com/scholar?q=Yiming+Xue%2C+Jiaxuan+Wu%2C+Ronghua+Ji%2C+Ping+Zhong%2C+Juan+Wen%2C+and+Wanli+Peng%2E+2024%2E+Adaptive+domain%2Dinvariant+feature+extraction+for+cross%2Ddomain+linguistic+steganalysis%2E+IEEE+Transactions+on+Information+)
34. Hao Yang, YongJian Bao, Zhongliang Yang, Sheng Liu, Yongfeng Huang, and Saimei Jiao. 2020. Linguistic steganalysis via densely connected lstm with feature pyramid. In Proceedings of the 2020 ACM Workshop on Information Hiding and Multimedia Security, pages 5–10. [find](https://scholar.google.com/scholar?q=Hao+Yang%2C+YongJian+Bao%2C+Zhongliang+Yang%2C+Sheng+Liu%2C+Yongfeng+Huang%2C+and+Saimei+Jiao%2E+2020%2E+Linguistic+steganalysis+via+densely+connected+lstm+with+feature+pyramid%2E+In+Proceedings+of+the+2020+ACM+Works)
35. Zhongliang Yang, Xiaoqing Guo, Ziming Chen, Yongfeng Huang, and Yujin Zhang. 2018. Rnn-stega: Linguistic steganography based on recurrent neural networks. IEEE Transactions on Information Forensics and Security, 14(5):1280–1295. [find](https://scholar.google.com/scholar?q=Zhongliang+Yang%2C+Xiaoqing+Guo%2C+Ziming+Chen%2C+Yongfeng+Huang%2C+and+Yujin+Zhang%2E+2018%2E+Rnn%2Dstega%3A+Linguistic+steganography+based+on+recurrent+neural+networks%2E+IEEE+Transactions+on+Information+Forensics+an)
36. Siyu Zhang, Zhongliang Yang, Jinshuai Yang, and Yongfeng Huang. 2021. Provably secure generative linguistic steganography. In Findings of the Association for Computational Linguistics: ACL-IJCNLP 2021, pages 3046–3055. [find](https://scholar.google.com/scholar?q=Siyu+Zhang%2C+Zhongliang+Yang%2C+Jinshuai+Yang%2C+and+Yongfeng+Huang%2E+2021%2E+Provably+secure+generative+linguistic+steganography%2E+In+Findings+of+the+Association+for+Computational+Linguistics%3A+ACL%2DIJCNLP+2021)
37. Xin Zhang, Kejiang Chen, Na Zhao, Weiming Zhang, and Nenghai Yu. 2025a. Provably secure public-key steganography based on admissible encoding. IEEE Transactions on Information Forensics and Security, 20:3161–3175. [find](https://scholar.google.com/scholar?q=Xin+Zhang%2C+Kejiang+Chen%2C+Na+Zhao%2C+Weiming+Zhang%2C+and+Nenghai+Yu%2E+2025a%2E+Provably+secure+public%2Dkey+steganography+based+on+admissible+encoding%2E+IEEE+Transactions+on+Information+Forensics+and+Security%2C+)
38. Ziping Zhang, Jiamin Zeng, Yan Xu, Xiaowei Yi, Yun Cao, and Changjun Liu. 2025b. Triple-stage robust audio steganography framework with aac encoding for lossy social media channels. In Proceedings of the ACM Workshop on Information Hiding and Multimedia Security, pages 131–141. [find](https://scholar.google.com/scholar?q=Ziping+Zhang%2C+Jiamin+Zeng%2C+Yan+Xu%2C+Xiaowei+Yi%2C+Yun+Cao%2C+and+Changjun+Liu%2E+2025b%2E+Triple%2Dstage+robust+audio+steganography+framework+with+aac+encoding+for+lossy+social+media+channels%2E+In+Proceedings+of+)
39. Andy Zhou, Kevin Wu, Francesco Pinto, Zhaorun Chen, Yi Zeng, Yu Yang, Shuang Yang, Sanmi Koyejo, James Zou, and Bo Li. 2025a. Autoredteamer: Autonomous red teaming with lifelong attack integration. arXiv preprint arXiv:2503.15754. — [arXiv:2503.15754](https://arxiv.org/abs/2503.15754) [find](https://scholar.google.com/scholar?q=Andy+Zhou%2C+Kevin+Wu%2C+Francesco+Pinto%2C+Zhaorun+Chen%2C+Yi+Zeng%2C+Yu+Yang%2C+Shuang+Yang%2C+Sanmi+Koyejo%2C+James+Zou%2C+and+Bo+Li%2E+2025a%2E+Autoredteamer%3A+Autonomous+red+teaming+with+lifelong+attack+integration%2E+ar)
40. Pengcheng Zhou, Zhengyang Fang, Zhongliang Yang, Zhili Zhou, and Linna Zhou. 2025b. Efficient streaming voice steganalysis in challenging detection scenarios. IEEE Transactions on Information Forensics and Security, 20:5966–5977. 32212 10 [find](https://scholar.google.com/scholar?q=Pengcheng+Zhou%2C+Zhengyang+Fang%2C+Zhongliang+Yang%2C+Zhili+Zhou%2C+and+Linna+Zhou%2E+2025b%2E+Efficient+streaming+voice+steganalysis+in+challenging+detection+scenarios%2E+IEEE+Transactions+on+Information+Forensic)
41. Qing Zhou, Ping Wei, Zhenxing Qian, Xinpeng Zhang, Sheng Li, and Chuan Qin. 2025c. Conditional flow-based generative steganography. IEEE Transactions on Dependable and Secure Computing, 22(5):5632– 5647. 32213 11 [find](https://scholar.google.com/scholar?q=Qing+Zhou%2C+Ping+Wei%2C+Zhenxing+Qian%2C+Xinpeng+Zhang%2C+Sheng+Li%2C+and+Chuan+Qin%2E+2025c%2E+Conditional+flow%2Dbased+generative+steganography%2E+IEEE+Transactions+on+Dependable+and+Secure+Computing%2C+22%285%29%3A5632%E2%80%93+56)

*Updated 2 November 2026*