Gray-box extraction of execution graphs for anomaly detection. - Debin Gao; Michael K. Reiter; Dawn Xiaodong Song (CCS, 2004)

On Gray-Box Program Tracking for Anomaly Detection. - Debin Gao; Michael K. Reiter; Dawn Xiaodong Song (USENIX Security Symposium, 2004)

Behavioral Distance for Intrusion Detection. - Debin Gao; Michael K. Reiter; Dawn Xiaodong Song (RAID, 2005)

Behavioral Distance Measurement Using Hidden Markov Models. - Debin Gao; Michael K. Reiter; Dawn Xiaodong Song (RAID, 2006)

Bridging the Gap between Data-Flow and Control-Flow Analysis for Anomaly Detection. - Peng Li 059; Hyundo Park; Debin Gao; Jianming Fu (ACSAC, 2008)

BinHunt: Automatically Finding Semantic Differences in Binary Programs. - Debin Gao; Michael K. Reiter; Dawn Xiaodong Song (ICICS, 2008)

Distinguishing between FE and DDoS Using Randomness Check. - Hyundo Park; Peng Li 059; Debin Gao; Heejo Lee; Robert H. Deng (ISC, 2008)

On the Effectiveness of Software Diversity: A Systematic Study on Real-World Vulnerabilities. - Jin Han 002; Debin Gao; Robert H. Deng (DIMVA, 2009)

Denial-of-Service Attacks on Host-Based Generic Unpackers. - Limin Liu; Jiang Ming 002; Zhi Wang 014; Debin Gao; Chunfu Jia (ICICS, 2009)

Automatically Adapting a Trained Anomaly Detector to Software Patches. - Peng Li 059; Debin Gao; Michael K. Reiter (RAID, 2009)

Beyond Output Voting: Detecting Compromised Replicas Using HMM-Based Behavioral Distance. - Debin Gao; Michael K. Reiter; Dawn Xiaodong Song (IEEE Trans. Dependable Secur. Comput., 2009)

A multi-user steganographic file system on untrusted shared storage. - Jin Han 002; Meng Pan; Debin Gao; HweeHwa Pang (ACSAC, 2010)

Revisiting Address Space Randomization. - Zhi Wang 014; Renquan Cheng; Debin Gao (ICISC, 2010)

On Challenges in Evaluating Malware Clustering. - Peng Li 059; Limin Liu; Debin Gao; Michael K. Reiter (RAID, 2010)

Fighting Coercion Attacks in Key Generation using Skin Conductance. - Payas Gupta; Debin Gao (USENIX Security Symposium, 2010)

deRop: removing return-oriented programming from malware. - Kangjie Lu; Dabi Zou; Weiping Wen; Debin Gao (ACSAC, 2011)

Linear Obfuscation to Combat Symbolic Execution. - Zhi Wang 014; Jiang Ming 002; Chunfu Jia; Debin Gao (ESORICS, 2011)

Towards ground truthing observations in gray-box anomaly detection. - Jiang Ming 002; Haibin Zhang; Debin Gao (NSS, 2011)

Packed, Printable, and Polymorphic Return-Oriented Programming. - Kangjie Lu; Dabi Zou; Weiping Wen; Debin Gao (RAID, 2011)

On Detection of Erratic Arguments. - Jin Han 002; Qiang Yan 001; Robert H. Deng; Debin Gao (SecureComm, 2011)

Launching Return-Oriented Programming Attacks against Randomized Relocatable Executables. - Limin Liu; Jin Han 002; Debin Gao; Jiwu Jing; Daren Zha (TrustCom, 2011)

Active malware analysis using stochastic games. - Simon Andrew Williamson; Pradeep Varakantham; Ong Chen Hui; Debin Gao (AAMAS, 2012)

Coercion resistance in authentication responsibility shifting. - Payas Gupta; Xuhua Ding; Debin Gao (AsiaCCS, 2012)

OTO: online trust oracle for user-centric trust establishment. - Tiffany Hyun-Jin Kim; Payas Gupta; Jun Han 001; Emmanuel Owusu; Jason I. Hong; Adrian Perrig; Debin Gao (CCS, 2012)

iBinHunt: Binary Hunting with Inter-procedural Control Flow. - Jiang Ming 002; Meng Pan; Debin Gao (ICISC, 2012)

Learning Fine-Grained Structured Input for Memory Corruption Detection. - Lei Zhao 012; Debin Gao; Lina Wang 001 (ISC, 2012)

HuMan: Creating memorable fingerprints of mobile users. - Payas Gupta; Tan Kiat Wee; Narayan Ramasubbu; David Lo 001; Debin Gao; Rajesh Krishna Balan (PerCom Workshops, 2012)

Launching Generic Attacks on iOS with Approved Third-Party Applications. - Jin Han 002; Su Mon Kywe; Qiang Yan 001; Feng Bao 001; Robert H. Deng; Debin Gao; Yingjiu Li; Jianying Zhou 001 (ACNS, 2013)

Keystroke Timing Analysis of on-the-fly Web Apps. - Chee Meng Tey; Payas Gupta; Debin Gao; Yan Zhang (ACNS, 2013)

Your love is public now: questioning the use of personal information in authentication. - Payas Gupta; Swapna Gottipati; Jing Jiang 001; Debin Gao (AsiaCCS, 2013)

Mitigating access-driven timing channels in clouds using StopWatch. - Peng Li 059; Debin Gao; Michael K. Reiter (DSN, 2013)

Defending against Heap Overflow by Using Randomization in Nested Virtual Clusters. - Chee Meng Tey; Debin Gao (ICICS, 2013)

Comparing Mobile Privacy Protection through Cross-Platform Applications. - Jin Han 002; Qiang Yan 001; Debin Gao; Jianying Zhou 001; Robert H. Deng (NDSS, 2013)

I can be You: Questioning the use of Keystroke Dynamics as Biometrics. - Chee Meng Tey; Payas Gupta; Debin Gao (NDSS, 2013)

RopSteg: program steganography with return oriented programming. - Kangjie Lu; Siyang Xiong; Debin Gao (CODASPY, 2014)

Keystroke biometrics: the user perspective. - Chee Meng Tey; Payas Gupta; Kartik Muralidharan; Debin Gao (CODASPY, 2014)

Control Flow Obfuscation Using Neural Network to Fight Concolic Testing. - Haoyu Ma; Xinjie Ma; Weijie Liu 004; Zhipeng Huang 006; Debin Gao; Chunfu Jia (SecureComm (1), 2014)

StopWatch: A Cloud Architecture for Timing Channel Mitigation. - Peng Li 059; Debin Gao; Michael K. Reiter (ACM Trans. Inf. Syst. Secur., 2014)

Software Watermarking using Return-Oriented Programming. - Haoyu Ma; Kangjie Lu; Xinjie Ma; Haining Zhang; Chunfu Jia; Debin Gao (AsiaCCS, 2015)

Replica Placement for Availability in the Worst Case. - Peng Li 059; Debin Gao; Michael K. Reiter (ICDCS, 2015)

Stack Layout Randomization with Minimal Rewriting of Android Binaries. - Yu Liang; Xinjie Ma; Daoyuan Wu; Xiaoxiao Tang; Debin Gao; Guojun Peng; Chunfu Jia; Huanguo Zhang (ICISC, 2015)

MobiPot: Understanding Mobile Telephony Threats with Honeycards. - Marco Balduzzi; Payas Gupta; Lion Gu; Debin Gao; Mustaque Ahamad (AsiaCCS, 2016)

On the Effectiveness of Code-Reuse-Based Android Application Obfuscation. - Xiaoxiao Tang; Yu Liang; Xinjie Ma; Yan Lin 003; Debin Gao (ICISC, 2016)

Control Flow Integrity Enforcement with Dynamic Code Optimization. - Yan Lin 003; Xiaoxiao Tang; Debin Gao; Jianming Fu (ISC, 2016)

SecComp: Towards Practically Defending Against Component Hijacking in Android Applications. - Daoyuan Wu; Debin Gao; Yingjiu Li; Robert H. Deng (CoRR, 2016)

MopEye: Monitoring Per-app Network Performance with Zero Measurement Traffic. - Daoyuan Wu; Weichao Li 001; Rocky K. C. Chang; Debin Gao (CoRR, 2016)

A novel covert channel detection method in cloud based on XSRM and improved event association algorithm. - Lina Wang 001; Weijie Liu 004; Neeraj Kumar 001; Debiao He; Cheng Tan 006; Debin Gao (Secur. Commun. Networks, 2016)

Integrated Software Fingerprinting via Neural-Network-Based Control Flow Obfuscation. - Haoyu Ma; Ruiqi Li; Xiaoxu Yu; Chunfu Jia; Debin Gao (IEEE Trans. Inf. Forensics Secur., 2016)

SafeStack ^+ : Enhanced Dual Stack to Combat Data-Flow Hijacking. - Yan Lin 003; Xiaoxiao Tang; Debin Gao (ACISP (2), 2017)

On-Demand Time Blurring to Support Side-Channel Defense. - Weijie Liu 004; Debin Gao; Michael K. Reiter (ESORICS (2), 2017)

On Return Oriented Programming Threats in Android Runtime. - Akshaya Venkateswara Raja; Jehyun Lee; Debin Gao (PST, 2017)

MopEye: Opportunistic Monitoring of Per-app Mobile Network Performance. - Daoyuan Wu; Rocky K. C. Chang; Weichao Li 001; Eric K. T. Cheng; Debin Gao (USENIX ATC, 2017)

Measuring the Declared SDK Versions and Their Consistency with API Calls in Android Apps. - Daoyuan Wu; Ximing Liu; Jiayun Xu; David Lo 001; Debin Gao (WASA, 2017)

SCLib: A Practical and Lightweight Defense against Component Hijacking in Android Applications. - Daoyuan Wu; Yao Cheng; Debin Gao; Yingjiu Li; Robert H. Deng (CODASPY, 2018)

Towards Mining Comprehensive Android Sandboxes. - Tien-Duy B. Le; Lingfeng Bao; David Lo 001; Debin Gao; Li Li 029 (ICECCS, 2018)

Towards Dynamically Monitoring Android Applications on Non-rooted Devices in the Wild. - Xiaoxiao Tang; Yan Lin 003; Daoyuan Wu; Debin Gao (WISEC, 2018)

DynOpVm: VM-Based Software Obfuscation with Dynamic Opcode Mapping. - Xiaoyang Cheng; Yan Lin 003; Debin Gao; Chunfu Jia (ACNS, 2019)

Control-Flow Carrying Code. - Yan Lin 003; Xiaoyang Cheng; Debin Gao (AsiaCCS, 2019)

Towards Understanding Android System Vulnerabilities: Techniques and Insights. - Daoyuan Wu; Debin Gao; Eric K. T. Cheng; Yichen Cao; Jintao Jiang; Robert H. Deng (AsiaCCS, 2019)

An empirical study of mobile network behavior and application performance in the wild. - Shiwei Zhang; Weichao Li 001; Daoyuan Wu; Bo Jin 002; Rocky K. C. Chang; Debin Gao; Yi Wang 004; Ricky K. P. Mok (IWQoS, 2019)

Understanding Open Ports in Android Applications: Discovery, Diagnosis, and Security Assessment. - Daoyuan Wu; Debin Gao; Rocky K. C. Chang; En He; Eric K. T. Cheng; Robert H. Deng (NDSS, 2019)

SplitSecond: Flexible Privilege Separation of Android Apps. - Jehyun Lee; Akshaya Venkateswara Raja; Debin Gao (PST, 2019)

AppMoD: Helping Older Adults Manage Mobile Security with Online Social Help. - Zhiyuan Wan; Lingfeng Bao; Debin Gao; Eran Toch; Xin Xia 001; Tamir Mendel; David Lo 001 (Proc. ACM Interact. Mob. Wearable Ubiquitous Technol., 2019)

Walls Have Ears: Eavesdropping User Behaviors via Graphics-Interrupt-Based Side Channel. - Haoyu Ma; Jianwen Tian; Debin Gao; Chunfu Jia (ISC, 2020)

When Program Analysis Meets Bytecode Search: Targeted and Efficient Inter-procedural Analysis of Modern Android Apps in BackDroid. - Daoyuan Wu; Debin Gao; Robert H. Deng; Rocky K. C. Chang (DSN, 2021)

An Exploratory Study of Social Support Systems to Help Older Adults in Managing Mobile Safety. - Tamir Mendel; Debin Gao; David Lo 001; Eran Toch (MobileHCI, 2021)

When Function Signature Recovery Meets Compiler Optimization. - Yan Lin 003; Debin Gao (SP, 2021)

Scalable online vetting of Android apps for measuring declared SDK versions and their consistency with API calls. - Daoyuan Wu; Debin Gao; David Lo 001 (Empir. Softw. Eng., 2021)

Deep-Learning-Based App Sensitive Behavior Surveillance for Android Powered Cyber-Physical Systems. - Haoyu Ma; Jianwen Tian; Kefan Qiu; David Lo 001; Debin Gao; Daoyuan Wu; Chunfu Jia; Thar Baker (IEEE Trans. Ind. Informatics, 2021)

ReSIL: Revivifying Function Signature Inference using Deep Learning with Domain-Specific Knowledge. - Yan Lin 003; Debin Gao; David Lo 001 (CODASPY, 2022)

UIPDroid: Unrooted Dynamic Monitor of Android App UIs for Fine-Grained Permission Control. - Mulin Duan; Lingxiao Jiang; Lwin Khin Shar; Debin Gao (ICSE-Companion, 2022)

Chosen-Instruction Attack Against Commercial Code Virtualization Obfuscators. - Shijia Li; Chunfu Jia; Pengda Qiu; Qiyuan Chen 006; Jiang Ming 002; Debin Gao (NDSS, 2022)

On the Usability (In)Security of In-App Browsing Interfaces in Mobile Apps. - Zicheng Zhang; Daoyuan Wu; Lixiang Li 004; Debin Gao (CoRR, 2022)

Secure Repackage-Proofing Framework for Android Apps Using Collatz Conjecture. - Haoyu Ma; Shijia Li; Debin Gao; Chunfu Jia (IEEE Trans. Dependable Secur. Comput., 2022)

Active Warden Attack: On the (In)Effectiveness of Android App Repackage-Proofing. - Haoyu Ma; Shijia Li; Debin Gao; Daoyuan Wu; Qiaowen Jia; Chunfu Jia (IEEE Trans. Dependable Secur. Comput., 2022)

On the Effectiveness of Using Graphics Interrupt as a Side Channel for User Behavior Snooping. - Haoyu Ma; Jianwen Tian; Debin Gao; Chunfu Jia (IEEE Trans. Dependable Secur. Comput., 2022)

BinAlign: Alignment Padding Based Compiler Provenance Recovery. - Maliha Ismail; Yan Lin 003; DongGyun Han; Debin Gao (ACISP, 2023)

TypeSqueezer: When Static Recovery of Function Signatures for Binary Executables Meets Dynamic Analysis. - Ziyi Lin; Jinku Li; Bowen Li; Haoyu Ma; Debin Gao; Jianfeng Ma 001 (CCS, 2023)

AutoDebloater: Automated Android App Debloating. - Jiakun Liu; Xing Hu 008; Ferdian Thung; Shahar Maoz; Eran Toch; Debin Gao; David Lo 001 (ASE, 2023)

Sparsity Brings Vulnerabilities: Exploring New Metrics in Backdoor Attacks. - Jianwen Tian; Kefan Qiu; Debin Gao; Zhi Wang 014; Xiaohui Kuang; Gang Zhao (USENIX Security Symposium, 2023)

FA3: Fine-Grained Android Application Analysis. - Yan Lin 003; Joshua Wong; Debin Gao (HotMobile, 2023)

MtdScout: Complementing the Identification of Insecure Methods in Android Apps via Source-to-Bytecode Signature Generation and Tree-based Layered Search. - Zicheng Zhang; Haoyu Ma; Daoyuan Wu; Debin Gao; Xiao Yi; Yufan Chen; Yan Wu; Lingxiao Jiang (EuroS&P, 2024)

MiniMon: Minimizing Android Applications with Intelligent Monitoring-Based Debloating. - Jiakun Liu; Zicheng Zhang; Xing Hu 008; Ferdian Thung; Shahar Maoz; Debin Gao; Eran Toch; Zhipeng Zhao; David Lo 001 (ICSE, 2024)

Beyond a Joke: Dead Code Elimination Can Delete Live Code. - Haoxin Tu; Lingxiao Jiang; Debin Gao; He Jiang 001 (NIER@ICSE, 2024)

Towards Speedy Permission-Based Debloating for Android Apps. - Ferdian Thung; Jiakun Liu; Pattarakrit Rattanukul; Shahar Maoz; Eran Toch; Debin Gao; David Lo 001 (MOBILESoft@ICSE, 2024)

Custom Permission Misconfigurations in Android: A Large-Scale Security Analysis. - Rui Li 102; Wenrui Diao; Debin Gao (TrustCom, 2024)

Peep With A Mirror: Breaking The Integrity of Android App Sandboxing via Unprivileged Cache Side Channel. - Yan Lin 003; Joshua Wong; Xiang Li; Haoyu Ma; Debin Gao (USENIX Security Symposium, 2024)

Analyzing and revivifying function signature inference using deep learning. - Yan Lin 003; Trisha Singhal; Debin Gao; David Lo 001 (Empir. Softw. Eng., 2024)

Density Boosts Everything: A One-stop Strategy for Improving Performance, Robustness, and Sustainability of Malware Detectors. - Jianwen Tian; Wei Kong; Debin Gao; Tong Wang; Taotao Gu; Kefan Qiu; Zhi Wang 014; Xiaohui Kuang (NDSS, 2025)

DynDebloater: Dynamically Debloating Unwanted Features of Android Apps without APK Modification. - Zicheng Zhang; Jiakun Liu; Ferdian Thung; Xing Hu 008; Wei Minn; Yan Naing Tun; Lwin Khin Shar; David Lo 001; Debin Gao (SIGSOFT FSE Companion, 2025)

CacheAlarm: Monitoring Sensitive Behaviors of Android Apps Using Cache Side Channel. - Jianwen Tian; Haoyu Ma; Debin Gao; Xiaohui Kuang (IEEE Trans. Dependable Secur. Comput., 2025)

Shelving it rather than Ditching it: Dynamically Debloating DEX and Native Methods of Android Applications without APK Modification. - Zicheng Zhang; Jiakun Liu; Ferdian Thung; Haoyu Ma; Rui Li 102; Yan Naing Tun; Wei Minn; Lwin Khin Shar; Shahar Maoz; Eran Toch; David Lo 001; Joshua Wong; et al. (CoRR, 2025)

AutoTEE: Automated Migration and Protection of Programs in Trusted Execution Environments. - Ruidong Han; Zhou Yang 003; Chengyan Ma 001; Ye Liu 012; Yuqing Niu; Siqi Ma; Debin Gao; David Lo 001 (CoRR, 2025)

Towards Secure Program Partitioning for Smart Contracts with LLM's In-Context Learning. - Ye Liu 012; Yuqing Niu; Chengyan Ma 001; Ruidong Han; Wei Ma; Yi Li 008; Debin Gao; David Lo 001 (CoRR, 2025)

DITING: A Static Analyzer for Identifying Bad Partitioning Issues in TEE Applications. - Chengyan Ma 001; Ruidong Han; Ye Liu 012; Yuqing Niu; Di Lu 001; Chuang Tian; Jianfeng Ma 001; Debin Gao; David Lo 001 (CoRR, 2025)

Rethinking and Exploring String-Based Malware Family Classification in the Era of LLMs and RAG. - Yufan Chen; Daoyuan Wu; Juantao Zhong; Zicheng Zhang; Debin Gao; Shuai Wang 011; Yingjiu Li; Ning Liu (CoRR, 2025)