DSS: Discrepancy-Aware Seed Selection Method for ICS Protocol Fuzzing. - Shuangpeng Bai; Hui Wen; Dongliang Fang; Yue Sun; Puzhuo Liu; Limin Sun 001 (ACNS (2), 2021)

ICS3Fuzzer: A Framework for Discovering Protocol Implementation Bugs in ICS Supervisory Software by Fuzzing. - Dongliang Fang; Zhanwei Song; Le Guan; Puzhuo Liu; Anni Peng; Kai Cheng; Yaowen Zheng; Peng Liu 005; Hongsong Zhu; Limin Sun 001 (ACSAC, 2021)

Automatic Inference of Taint Sources to Discover Vulnerabilities in SOHO Router Firmware. - Kai Cheng; Dongliang Fang; Chuan Qin; Huizhao Wang; Yaowen Zheng; Nan Yu; Limin Sun 001 (SEC, 2021)

Finding Vulnerabilities in Internal-binary of Firmware with Clues. - Puzhuo Liu; Dongliang Fang; Chuan Qin; Kai Cheng; Shichao Lv; Hongsong Zhu; Limin Sun 001 (ICC, 2022)

Fuzzing proprietary protocols of programmable controllers to find vulnerabilities that affect physical control. - Puzhuo Liu; Yaowen Zheng; Zhanwei Song; Dongliang Fang; Shichao Lv; Limin Sun 001 (J. Syst. Archit., 2022)

FITS: Inferring Intermediate Taint Sources for Effective Vulnerability Analysis of IoT Device Firmware. - Puzhuo Liu; Yaowen Zheng; Chengnian Sun; Chuan Qin; Dongliang Fang; Mingdong Liu; Limin Sun 001 (ASPLOS (4), 2023)

CEFI: Command Execution Flow Integrity for Embedded Devices. - Anni Peng; Dongliang Fang; Wei Zhou 026; Erik van der Kouwe; Yin Li; Yuqing Zhang 001 (DIMVA, 2023)

MSGFuzzer: Message Sequence Guided Industrial Robot Protocol Fuzzing. - Yang Zhang; Dongliang Fang; Puzhuo Liu; Laile Xi; Xiao Lu; Xin Chen; Shuaizong Si; Limin Sun (ICST, 2024)

Adversarial Attack against Intrusion Detectors in Cyber-Physical Systems With Minimal Perturbations. - Mingqiang Bai; Puzhuo Liu; Fei Lv 010; Dongliang Fang; Shichao Lv; Weidong Zhang; Limin Sun 001 (ISPA, 2024)

X-MBA: Towards Heterogeneous Mixed Boolean-Arithmetic Deobfuscation. - Gengwang Li; Min Yu; Dongliang Fang; Gang Li; Xiang Meng; Jianguo Jiang; Weiqing Huang (MILCOM, 2024)

PowerGuard: Using Power Side-Channel Signals to Secure Motion Controllers in ICS. - Shijie Li; Yuqi Chen 001; Xin Chen; Zedong Li; Dongliang Fang; Kaixiang Liu; Shichao Lv; Limin Sun 001 (IEEE Trans. Inf. Forensics Secur., 2024)

Bitmap-Based Security Monitoring for Deeply Embedded Systems. - Anni Peng; Dongliang Fang; Le Guan; Erik van der Kouwe; Yin Li; Wenwen Wang 001; Limin Sun 001; Yuqing Zhang 001 (ACM Trans. Softw. Eng. Methodol., 2024)

PNetGPT: Proprietary Protocol Network Traffic Generation with Pre-trained Transformer. - Zedong Li; Shijie Li; Dongliang Fang; Xin Chen; Zhanwei Song; Zhi Li 018; Shichao Lv; Limin Sun 001 (ICASSP, 2025)

Automated Flaw Detection for Industrial Robot RESTful Service. - Yuncheng Wang; Puzhuo Liu; Yaowen Zheng; Dongliang Fang; Shuaizong Si; Zhiwen Pan; Weidong Zhang; Limin Sun 001 (VMCAI (2), 2025)

Discovering PLC Web Application Vulnerabilities Impacting Physical Control Using LLM-Based Fuzzing. - Jiaxing Cheng; Dongliang Fang; Zhongwei Gu; Shichao Lv; Shuaizong Si; Limin Sun 001 (WASA (1), 2025)

ICSPFuzzer: An Efficient Fuzzing Technique for ICS Protocols. - Zhanwei Song; Dongliang Fang; Shunchao Xu; Yaowen Zheng; Hong Li 004; Shichao Lv; Zhiqiang Shi; Limin Sun 001 (WASA (2), 2025)

SFACIF: A safety function attack and anomaly industrial condition identified framework. - Kaixiang Liu; Yongfang Xie; Yuqi Chen 001; Shiwen Xie; Xin Chen; Dongliang Fang; Limin Sun 001 (Comput. Networks, 2025)

ICEPRE: ICS Protocol Reverse Engineering via Data-Driven Concolic Execution. - Yibo Qu; Dongliang Fang; Zhen Wang 043; Jiaxing Cheng; Shuaizong Si; Yongle Chen; Limin Sun 001 (Proc. ACM Softw. Eng., 2025)

InvisiGuard: Data Integrity for Microcontroller-Based Devices via Hardware-Triggered Write Monitoring. - Dongliang Fang; Anni Peng; Le Guan; Erik van der Kouwe; Klaus von Gleissenthall; Wenwen Wang 001; Yuqing Zhang 001; Limin Sun 001 (IEEE Trans. Dependable Secur. Comput., 2025)

EMFuzz: Use Electromagnetic Fuzzing for Automated Attack Surface Assessment of Actuators. - Shiquan Dong; Zhi Li 018; Jianshuo Liu; Hong Li 004; Dongliang Fang; Shichao Lv; Haining Wang 001; Limin Sun 001 (IEEE Trans. Inf. Forensics Secur., 2025)

Fixseeker: An Empirical Driven Graph-based Approach for Detecting Silent Vulnerability Fixes in Open Source Software. - Yiran Cheng; Ting Zhang 011; Lwin Khin Shar; Zhe Lang; David Lo 001; Shichao Lv; Dongliang Fang; Zhiqiang Shi; Limin Sun 001 (CoRR, 2025)