Don't Let One Rotten Apple Spoil the Whole Barrel: Towards Automated Detection of Shadowed Domains. - Daiping Liu; Zhou Li 001; Kun Du; Haining Wang 001; Baojun Liu 002; Hai-Xin Duan (CCS, 2017)

A Reexamination of Internationalized Domain Names: The Good, the Bad and the Ugly. - Baojun Liu 002; Chaoyi Lu; Zhou Li 001; Ying Liu 024; Hai-Xin Duan; Shuang Hao 001; Zaifeng Zhang (DSN, 2018)

Abusing CDNs for Fun and Profit: Security Issues in CDNs' Origin Validation. - Run Guo; Jianjun Chen 005; Baojun Liu 002; Jia Zhang 004; Chao Zhang 008; Hai-Xin Duan; Tao Wan 004; Jian Jiang 002; Shuang Hao 001; Yaoqi Jia (SRDS, 2018)

Measuring Privacy Threats in China-Wide Mobile Networks. - Mingming Zhang 010; Baojun Liu 002; Chaoyi Lu; Jia Zhang 004; Shuang Hao 001; Hai-Xin Duan (FOCI @ USENIX Security Symposium, 2018)

Who is answering my queries: understanding and characterizing interception of the DNS resolution path. - Baojun Liu 002; Chaoyi Lu; Hai-Xin Duan; Ying Liu 024; Zhou Li 001; Shuang Hao 001; Min Yang 002 (ANRW, 2019)

TraffickStop: Detecting and Measuring Illicit Traffic Monetization Through Large-Scale DNS Analysis. - Baojun Liu 002; Zhou Li 001; Peiyuan Zong; Chaoyi Lu; Hai-Xin Duan; Ying Liu 024; Sumayah A. Alrwais; XiaoFeng Wang 001; Shuang Hao 001; Yaoqi Jia; Yiming Zhang 009; Kai Chen 012; et al. (EuroS&P, 2019)

An End-to-End, Large-Scale Measurement of DNS-over-Encryption: How Far Have We Come? - Chaoyi Lu; Baojun Liu 002; Zhou Li 001; Shuang Hao 001; Hai-Xin Duan; Mingming Zhang 010; Chunying Leng; Ying Liu 024; Zaifeng Zhang; Jianping Wu (Internet Measurement Conference, 2019)

Cracking the Wall of Confinement: Understanding and Analyzing Malicious Domain Take-downs. - Eihal Alowaisheq; Peng Wang 088; Sumayah A. Alrwais; Xiaojing Liao; XiaoFeng Wang 001; Tasneem Alowaisheq; Xianghang Mi; Siyuan Tang; Baojun Liu 002 (NDSS, 2019)

TL;DR Hazard: A Comprehensive Study of Levelsquatting Scams. - Kun Du; Hao Yang; Zhou Li 001; Hai-Xin Duan; Shuang Hao 001; Baojun Liu 002; Yuxiao Ye; Mingxuan Liu 006; XiaoDong Su; Guang Liu; Zhifeng Geng; Zaifeng Zhang; et al. (SecureComm (2), 2019)

Resident Evil: Understanding Residential IP Proxy as a Dark Service. - Xianghang Mi; Xuan Feng 005; Xiaojing Liao; Baojun Liu 002; XiaoFeng Wang 001; Feng Qian 001; Zhou Li 001; Sumayah A. Alrwais; Limin Sun 001; Ying Liu 024 (IEEE Symposium on Security and Privacy, 2019)

Lies in the Air: Characterizing Fake-base-station Spam Ecosystem in China. - Yiming Zhang 009; Baojun Liu 002; Chaoyi Lu; Zhou Li 001; Haixin Duan; Shuang Hao 001; Mingxuan Liu 006; Ying Liu 024; Dong Wang; Qiang Li (CCS, 2020)

Talking with Familiar Strangers: An Empirical Study on HTTPS Context Confusion Attacks. - Mingming Zhang 010; Xiaofeng Zheng; Kaiwen Shen; Ziqiao Kong; Chaoyi Lu; Yu Wang 288; Haixin Duan; Shuang Hao 001; Baojun Liu 002; Min Yang 002 (CCS, 2020)

CDN Backfired: Amplification Attacks Based on HTTP Range Requests. - Weizhong Li; Kaiwen Shen; Run Guo; Baojun Liu 002; Jia Zhang 004; Haixin Duan; Shuang Hao 001; Xiarun Chen; Yao Wang (DSN, 2020)

CDN Judo: Breaking the CDN DoS Protection with Itself. - Run Guo; Weizhong Li; Baojun Liu 002; Shuang Hao 001; Jia Zhang 004; Haixin Duan; Kaiwen Shen; Jianjun Chen 005; Ying Liu 024 (NDSS, 2020)

Poison Over Troubled Forwarders: A Cache Poisoning Attack Targeting DNS Forwarding Devices. - Xiaofeng Zheng; Chaoyi Lu; Jian Peng; Qiushi Yang; Dongjie Zhou; Baojun Liu 002; Keyu Man; Shuang Hao 001; Haixin Duan; Zhiyun Qian (USENIX Security Symposium, 2020)

Detecting and Characterizing SMS Spearphishing Attacks. - Mingxuan Liu 006; Yiming Zhang 009; Baojun Liu 002; Zhou Li 001; Haixin Duan; Donghong Sun (ACSAC, 2021)

Rusted Anchors: A National Client-Side View of Hidden Root CAs in the Web PKI Ecosystem. - Yiming Zhang 009; Baojun Liu 002; Chaoyi Lu; Zhou Li 001; Haixin Duan; Jiachen Li; Zaifeng Zhang (CCS, 2021)

Fast IPv6 Network Periphery Discovery and Security Implications. - Xiang Li 108; Baojun Liu 002; Xiaofeng Zheng; Haixin Duan; Qi Li 002; Youjun Huang (DSN, 2021)

From WHOIS to WHOWAS: A Large-Scale Measurement Study of Domain Registration Privacy under the GDPR. - Chaoyi Lu; Baojun Liu 002; Yiming Zhang 009; Zhou Li 001; Fenglu Zhang; Haixin Duan; Ying Liu 024; Joann Qiongna Chen; Jinjin Liang; Zaifeng Zhang; Shuang Hao 001; Min Yang 002 (NDSS, 2021)

Weak Links in Authentication Chains: A Large-scale Analysis of Email Sender Spoofing Attacks. - Kaiwen Shen; Chuhan Wang 001; Minglei Guo; Xiaofeng Zheng; Chaoyi Lu; Baojun Liu 002; Yuxuan Zhao; Shuang Hao 001; Haixin Duan; Qingfeng Pan; Min Yang 002 (USENIX Security Symposium, 2021)

DNSWeight: Quantifying Country-Wise Importance of Domain Name System. - Deliang Chang; Shanshan Hao; Zhou Li 001; Baojun Liu 002; Xing Li 001 (IEEE Access, 2021)

Exploring the Characteristics and Security Risks of Emerging Emoji Domain Names. - Mingxuan Liu 006; Yiming Zhang 009; Baojun Liu 002; Haixin Duan (ESORICS (3), 2022)

Trampoline Over the Air: Breaking in IoT Devices Through MQTT Brokers. - Huikai Xu; Miao Yu; Yanhao Wang; Yue Liu; Qinsheng Hou; Zhenbang Ma; Haixin Duan; Jianwei Zhuge; Baojun Liu 002 (EuroS&P, 2022)

PMTUD is not Panacea: Revisiting IP Fragmentation Attacks against TCP. - Xuewei Feng; Qi Li 002; Kun Sun 001; Ke Xu 002; Baojun Liu 002; Xiaofeng Zheng; Qiushi Yang; Haixin Duan; Zhiyun Qian (NDSS, 2022)

Measuring the Practical Effect of DNS Root Server Instances: A China-Wide Case Study. - Fenglu Zhang; Chaoyi Lu; Baojun Liu 002; Haixin Duan; Ying Liu 024 (PAM, 2022)

A Large-scale and Longitudinal Measurement Study of DKIM Deployment. - Chuhan Wang 001; Kaiwen Shen; Minglei Guo; Yuxuan Zhao; Mingming Zhang 010; Jianjun Chen 005; Baojun Liu 002; Xiaofeng Zheng; Haixin Duan; Yanzhong Lin; Qingfeng Pan (USENIX Security Symposium, 2022)

Building an Open, Robust, and Stable Voting-Based Domain Top List. - Qinge Xie; Shujun Tang; Xiaofeng Zheng; Qingran Lin; Baojun Liu 002; Haixin Duan; Frank Li 001 (USENIX Security Symposium, 2022)

Silence is not Golden: Disrupting the Load Balancing of Authoritative DNS Servers. - Fenglu Zhang; Baojun Liu 002; Eihal Alowaisheq; Jianjun Chen 005; Chaoyi Lu; Linjian Song; Yong Ma; Ying Liu 024; Haixin Duan; Min Yang 002 (ACM TUR-C, 2023)

TsuKing: Coordinating DNS Resolvers and Queries into Potent DoS Amplifiers. - Wei Xu 064; Xiang Li 108; Chaoyi Lu; Baojun Liu 002; Haixin Duan; Jia Zhang 004; Jianjun Chen 005; Tao Wan 004 (CCS, 2023)

Under the Dark: A Systematical Study of Stealthy Mining Pools (Ab)use in the Wild. - Zhenrui Zhang; Geng Hong; Xiang Li 108; Zhuoqun Fu; Jia Zhang 004; Mingxuan Liu 006; Chuhan Wang 001; Jianjun Chen 005; Baojun Liu 002; Haixin Duan; Chao Zhang 008; Min Yang 002 (CCS, 2023)

Wolf in Sheep's Clothing: Evaluating Security Risks of the Undelegated Record on DNS Hosting Services. - Fenglu Zhang; Yunyi Zhang; Baojun Liu 002; Eihal Alowaisheq; Lingyun Ying; Xiang Li 108; Zaifeng Zhang; Ying Liu 024; Haixin Duan; Min Zhang 054 (IMC, 2023)

Ghost Domain Reloaded: Vulnerable Links in Domain Name Delegation and Revocation. - Xiang Li 108; Baojun Liu 002; Xuesong Bai; Mingming Zhang 010; Qifan Zhang 002; Zhou Li 001; Haixin Duan; Qi Li 002 (NDSS, 2023)

Detecting and Measuring Security Risks of Hosting-Based Dangling Domains. - Mingming Zhang 010; Xiang Li 108; Baojun Liu 002; Jianyu Lu; Yiming Zhang 009; Jianjun Chen 005; Haixin Duan; Shuang Hao 001; Xiaofeng Zheng (SIGMETRICS (Abstracts), 2023)

Temporal CDN-Convex Lens: A CDN-Assisted Practical Pulsing DDoS Attack. - Run Guo; Jianjun Chen 005; Yihang Wang; Keran Mu; Baojun Liu 002; Xiang Li 108; Chao Zhang 008; Haixin Duan; Jianping Wu (USENIX Security Symposium, 2023)

The Maginot Line: Attacking the Boundary of DNS Caching Protection. - Xiang Li 108; Chaoyi Lu; Baojun Liu 002; Qifan Zhang 002; Zhou Li 001; Haixin Duan; Qi Li 002 (USENIX Security Symposium, 2023)

Bounce in the Wild: A Deep Dive into Email Delivery Failures from a Large Email Service Provider. - Ruixuan Li 008; Shaodong Xiao; Baojun Liu 002; Yanzhong Lin; Haixin Duan; Qingfeng Pan; Jianjun Chen 005; Jia Zhang 004; Ximeng Liu; Xiuqi Lu; Jun Shao 001 (IMC, 2024)

Yesterday Once More: Global Measurement of Internet Traffic Shadowing Behaviors. - Yunpeng Xing; Chaoyi Lu; Baojun Liu 002; Haixin Duan; Junzhe Sun; Zhou Li 001 (IMC, 2024)

Understanding the Implementation and Security Implications of Protective DNS Services. - Mingxuan Liu 006; Yiming Zhang 009; Xiang Li 108; Chaoyi Lu; Baojun Liu 002; Haixin Duan; Xiaofeng Zheng (NDSS, 2024)

TuDoor Attack: Systematically Exploring and Exploiting Logic Vulnerabilities in DNS Response Pre-processing with Malformed Packets. - Xiang Li 108; Wei Xu 064; Baojun Liu 002; Mingming Zhang 010; Zhou Li 001; Jia Zhang 004; Deliang Chang; Xiaofeng Zheng; Chuhan Wang 001; Jianjun Chen 005; Haixin Duan; Qi Li 002 (SP, 2024)

Tickets or Privacy? Understand the Ecosystem of Chinese Ticket Grabbing Apps. - Yijing Liu 007; Yiming Zhang 009; Baojun Liu 002; Haixin Duan; Qiang Li; Mingxuan Liu 006; Ruixuan Li 008; Jia Yao (USENIX Security Symposium, 2024)

Rethinking the Security Threats of Stale DNS Glue Records. - Yunyi Zhang; Baojun Liu 002; Haixin Duan; Min Zhang 054; Xiang Li 108; Fan Shi 003; Chengxi Xu; Eihal Alowaisheq (USENIX Security Symposium, 2024)

Into the Dark: Unveiling Internal Site Search Abused for Black Hat SEO. - Yunyi Zhang; Mingxuan Liu 006; Baojun Liu 002; Yiming Zhang 009; Haixin Duan; Min Zhang 054; Hui Jiang; Yanzhe Li; Fan Shi 003 (USENIX Security Symposium, 2024)

Cross the Zone: Toward a Covert Domain Hijacking via Shared DNS Infrastructure. - Yunyi Zhang; Mingming Zhang 010; Baojun Liu 002; Zhan Liu; Jia Zhang 004; Haixin Duan; Min Zhang 054; Fan Shi 003; Chengxi Xu (USENIX Security Symposium, 2024)

A Worldwide View on the Reachability of Encrypted DNS Services. - Ruixuan Li 008; Baojun Liu 002; Chaoyi Lu; Haixin Duan; Jun Shao 001 (WWW, 2024)

Investigating Deployment Issues of DNS Root Server Instances From a China-Wide View. - Fenglu Zhang; Baojun Liu 002; Chaoyi Lu; Yunpeng Xing; Haixin Duan; Ying Liu 024; Liyuan Chang (IEEE Trans. Dependable Secur. Comput., 2024)

RebirthDay Attack: Reviving DNS Cache Poisoning with the Birthday Paradox. - Xiang Li 108; Mingming Zhang 010; Zuyao Xu; Fasheng Miao; Yuqi Qiu; Baojun Liu 002; Jia Zhang 004; Xiaofeng Zheng; Haixin Duan; Zheli Liu; Yunhai Zhang; Dunqiu Fan (CCS, 2025)

Exploring and Analyzing Cross Layer DoS Attack Against UDP-based Services on Linux. - Dashuai Wu; Yunyi Zhang; Baojun Liu 002; Xiang Li 108; Eihal Alowaisheq; Haixin Duan (CCS, 2025)

Decoding DNS Centralization: Measuring and Identifying NS Domains Across Hosting Providers. - Qihang Peng; Mingming Zhang 010; Deliang Chang; Jia Zhang 004; Baojun Liu 002; Haixin Duan (DSN, 2025)

Email Cloaking: Deceiving Users and Spam Email Detectors with Invisible HTML Settings. - Bingyang Guo; Mingxuan Liu 006; Yihui Ma; Ruixuan Li 008; Fan Shi 003; Min Zhang 054; Baojun Liu 002; Chengxi Xu; Haixin Duan; Geng Hong; Min Yang 002; Qingfeng Pan (ESORICS (4), 2025)

Understanding and Characterizing Intermediate Paths of Email Delivery: The Hidden Dependencies. - Ruixuan Li 008; Chaoyi Lu; Baojun Liu 002; Yanzhong Lin; Haixin Duan; Qingfeng Pan; Jun Shao 001 (IMC, 2025)

Dive into the Cloud: Unveiling the (Ab)Usage of Serverless Cloud Function in the Wild. - Yijing Liu 007; Mingxuan Liu 006; Yiming Zhang 009; Baojun Liu 002; Jia Zhang 004; Geng Hong; Haixin Duan; Min Yang 002 (IMC, 2025)

Poster: RMap: Uncovering Risky DNS Resolution Chains and Misconfigurations. - Fasheng Miao; Shuying Zhuang; Xiang Li 108; Changqing An; Deliang Chang; Baojun Liu 002; Jia Zhang 004; Jilong Wang 001 (IMC, 2025)

Chaos in the Chain: Evaluate Deployment and Construction Compliance of Web PKI Certificate Chain. - Jia Yao; Yiming Zhang 009; Baojun Liu 002; Zhan Liu; Mingming Zhang 010; Haixin Duan (IMC, 2025)

Analyzing Compliance and Complications of Integrating Internationalized X.509 Certificates. - Mingming Zhang 010; Jinfeng Guo; Yiming Zhang 009; Shenglin Zhang; Baojun Liu 002; Hanqing Zhao; Xiang Li 108; Haixin Duan (IMC, 2025)

HADES Attack: Understanding and Evaluating Manipulation Risks of Email Blocklists. - Ruixuan Li 008; Chaoyi Lu; Baojun Liu 002; Yunyi Zhang; Geng Hong; Haixin Duan; Yanzhong Lin; Qingfeng Pan; Min Yang 002; Jun Shao 001 (NDSS, 2025)

Revealing the Black Box of Device Search Engine: Scanning Assets, Strategies, and Ethical Consideration. - Mengying Wu; Geng Hong; Jinsong Chen; Qi Liu; Shujun Tang; Youhao Li; Baojun Liu 002; Haixin Duan; Min Yang 002 (NDSS, 2025)

Beyond Exploit Scanning: A Functional Change-Driven Approach to Remote Software Version Identification. - Jinsong Chen; Mengying Wu; Geng Hong; Baichao An; Mingxuan Liu 006; Lei Zhang 096; Baojun Liu 002; Haixin Duan; Min Yang 002 (USENIX Security Symposium, 2025)

NOKEScam: Understanding and Rectifying Non-Sense Keywords Spear Scam in Search Engines. - Mingxuan Liu 006; Yunyi Zhang; Lijie Wu; Baojun Liu 002; Geng Hong; Yiming Zhang 009; Hui Jiang; Jia Zhang 004; Haixin Duan; Min Zhang 054; Wei Guan; Fan Shi 003; et al. (USENIX Security Symposium, 2025)

Misty Registry: An Empirical Study of Flawed Domain Registry Operation. - Mingming Zhang 010; Yunyi Zhang; Baojun Liu 002; Haixin Duan; Min Zhang 054; Fan Shi 003; Chengxi Xu (USENIX Security Symposium, 2025)

You Can't Eat Your Cake and Have It Too: The Performance Degradation of LLMs with Jailbreak Defense. - Wuyuao Mai; Geng Hong; Pei Chen; Xudong Pan; Baojun Liu 002; Yuan Zhang 009; Haixin Duan; Min Yang 002 (WWW, 2025)

CoordMail: Exploiting SMTP Timeout and Command Interaction to Coordinate Email Middleware for Convergence Amplification Attack. - Ruixuan Li 008; Chaoyi Lu; Baojun Liu 002; Yanzhong Lin; Qingfeng Pan; Jun Shao 001 (NDSS, 2026)

One Email, Many Faces: A Deep Dive into Identity Confusion in Email Aliases. - Mengying Wu; Geng Hong; Jiatao Chen; Baojun Liu 002; Mingxuan Liu 006; Min Yang 002 (NDSS, 2026)

Understanding the Status and Strategies of the Code Signing Abuse Ecosystem. - Hanqing Zhao; Yiming Zhang 009; Lingyun Ying; Mingming Zhang 010; Baojun Liu 002; Haixin Duan; Zi-Quan You; Shuhao Zhang (NDSS, 2026)

Unveiling the Resilience of LLM-Enhanced Search Engines against Black-Hat SEO Manipulation. - Pei Chen; Geng Hong; Xinyi Wu; Mengying Wu; Zixuan Zhu; Mingxuan Liu 006; Baojun Liu 002; Mi Zhang 001; Min Yang 002 (WWW, 2026)

Characterizing Iran's Phased National Internet Shutdown in 2025: A Progressive and Distributed Action. - Shibo Cui; Mingxuan Liu 006; Baojun Liu 002; Haixin Duan; Ruixuan Li 008; Chaoyi Lu; Jin Zhang; Zhicheng Wang; Jinghua Bai (WWW, 2026)

When Bots Take the Bait: Exposing and Mitigating the Emerging Social Engineering Attack in Web Automation Agent. - Xinyi Wu; Geng Hong; Yueyue Chen; MingXuan Liu; Feier Jin; Xudong Pan; Jiarun Dai; Baojun Liu 002 (CoRR, 2026)