Black-box Adversarial Example Attack towards FCG Based Android Malware Detection under Incomplete Feature Information. - Heng Li 008; Zhang Cheng; Bang Wu 002; Liheng Yuan; Cuiying Gao; Wei Yuan 001; Xiapu Luo (USENIX Security Symposium, 2023)

Resisting DNN-Based Website Fingerprinting Attacks Enhanced by Adversarial Training. - Litao Qiao; Bang Wu 002; Shuijun Yin; Heng Li 008; Wei Yuan 001; Xiapu Luo (IEEE Trans. Inf. Forensics Secur., 2023)

Trace-agnostic and Adversarial Training-resilient Website Fingerprinting Defense. - Litao Qiao; Bang Wu 002; Heng Li 008; Cuiying Gao; Wei Yuan 001; Xiapu Luo (INFOCOM, 2024)

Automated Mass Malware Factory: The Convergence of Piggybacking and Adversarial Example in Android Malicious Software Generation. - Heng Li 008; Zhiyuan Yao; Bang Wu 002; Cuiying Gao; Teng Xu; Wei Yuan 001; Xiapu Luo (NDSS, 2025)

An Efficient Adversarial Attack on FCG-Based Android Malware Detection Systems. - Heng Li 008; Bang Wu 002; Wei Zhou; Wei Yuan 001; Cuiying Gao; Xinge You; Xiapu Luo (IEEE Trans. Inf. Forensics Secur., 2025)