AUTOPROBE: Towards Automatic Active Malicious Server Probing Using Dynamic Binary Analysis. - Zhaoyan Xu; Antonio Nappa; Robert Baykov; Guangliang Yang 001; Juan Caballero; Guofei Gu (CCS, 2014)

Using Provenance Patterns to Vet Sensitive Behaviors in Android Apps. - Chao Yang 022; Guangliang Yang 001; Ashish Gehani; Vinod Yegneswaran; Dawood Tariq; Guofei Gu (SecureComm, 2015)

Precisely and Scalably Vetting JavaScript Bridge in Android Hybrid Apps. - Guangliang Yang 001; Abner Mendoza; Jialong Zhang 001; Guofei Gu (RAID, 2017)

Machine Learning for Muon Imaging. - Guangliang Yang 001; David Ireland; Ralf Kaiser; David Mahon (BICS, 2018)

Towards Fine-grained Network Security Forensics and Diagnosis in the SDN Era. - Haopei Wang; Guangliang Yang 001; Phakpoom Chinprutthiwong; Lei Xu 024; Yangyong Zhang; Guofei Gu (CCS, 2018)

Automated Generation of Event-Oriented Exploits in Android Hybrid Apps. - Guangliang Yang 001; Jeff Huang 001; Guofei Gu (NDSS, 2018)

Study and Mitigation of Origin Stripping Vulnerabilities in Hybrid-postMessage Enabled Mobile Applications. - Guangliang Yang 001; Jeff Huang 001; Guofei Gu; Abner Mendoza (IEEE Symposium on Security and Privacy, 2018)

Life after Speech Recognition: Fuzzing Semantic Misinterpretation for Voice Assistant Applications. - Yangyong Zhang; Lei Xu 024; Abner Mendoza; Guangliang Yang 001; Phakpoom Chinprutthiwong; Guofei Gu (NDSS, 2019)

Iframes/Popups Are Dangerous in Mobile WebView: Studying and Mitigating Differential Context Vulnerabilities. - Guangliang Yang 001; Jeff Huang 001; Guofei Gu (USENIX Security Symposium, 2019)

Security Study of Service Worker Cross-Site Scripting. - Phakpoom Chinprutthiwong; Raj Vardhan; Guangliang Yang 001; Guofei Gu (ACSAC, 2020)

MinerGate: A Novel Generic and Accurate Defense Solution Against Web Based Cryptocurrency Mining Attacks. - Guorui Yu; Guangliang Yang 001; Tongxin Li; Xinhui Han; Shijie Guan; Jialong Zhang 001; Guofei Gu (CNCERT, 2020)

The Service Worker Hiding in Your Browser: The Next Web Attack Target? - Phakpoom Chinprutthiwong; Raj Vardhan; Guangliang Yang 001; Yangyong Zhang; Guofei Gu (RAID, 2021)

Abusing Hidden Properties to Attack the Node.js Ecosystem. - Feng Xiao; Jianwei Huang; Yichang Xiong; Guangliang Yang 001; Hong Hu 004; Guofei Gu; Wenke Lee (USENIX Security Symposium, 2021)

SEPAL: Towards a Large-scale Analysis of SEAndroid Policy Customization. - Dongsong Yu; Guangliang Yang 001; Guozhu Meng; Xiaorui Gong; Xiu Zhang; Xiaobo Xiang; Xiaoyu Wang; Yue Jiang; Kai Chen 012; Wei Zou; Wenke Lee; Wenchang Shi (WWW, 2021)

Collect Responsibly But Deliver Arbitrarily?: A Study on Cross-User Privacy Leakage in Mobile Apps. - Shuai Li 006; Zhemin Yang; Nan Hua; Peng Liu 005; Xiaohan Zhang 001; Guangliang Yang 001; Min Yang 002 (CCS, 2022)

Understanding and Mitigating Remote Code Execution Vulnerabilities in Cross-platform Ecosystem. - Feng Xiao; Zheng Yang; Joey Allen; Guangliang Yang 001; Grant Williams; Wenke Lee (CCS, 2022)

Identity Confusion in WebView-based Mobile App-in-app Ecosystems. - Lei Zhang 096; Zhibo Zhang; Ancong Liu; Yinzhi Cao; Xiaohan Zhang 001; Yanjun Chen; Yuan Zhang 009; Guangliang Yang 001; Min Yang 002 (USENIX Security Symposium, 2022)

NestFuzz: Enhancing Fuzzing with Comprehensive Understanding of Input Processing Logic. - Peng Deng; Zhemin Yang; Lei Zhang 096; Guangliang Yang 001; Wenzheng Hong; Yuan Zhang 009; Min Yang 002 (CCS, 2023)

TrustedDomain Compromise Attack in App-in-app Ecosystems. - Zhibo Zhang; Zhangyue Zhang; Keke Lian; Guangliang Yang 001; Lei Zhang 096; Yuan Zhang 009; Min Yang 002 (SaTS@CCS, 2023)

Notice the Imposter! A Study on User Tag Spoofing Attack in Mobile Apps. - Shuai Li 006; Zhemin Yang; Guangliang Yang 001; Hange Zhang; Nan Hua; Yurui Huang; Min Yang 002 (USENIX Security Symposium, 2023)

Jasmine: Scale up JavaScript Static Security Analysis with Computation-based Semantic Explanation. - Feng Xiao; Zhongfu Su; Guangliang Yang 001; Wenke Lee (SP, 2024)

Component Security Ten Years Later: An Empirical Study of Cross-Layer Threats in Real-World Mobile Applications. - Keke Lian; Lei Zhang 096; Guangliang Yang 001; Shuo Mao; Xinjie Wang; Yuan Zhang 009; Min Yang 002 (Proc. ACM Softw. Eng., 2024)

The Dark Forest: Understanding Security Risks of Cross-Party Delegated Resources in Mobile App-in-App Ecosystems. - Zhibo Zhang; Lei Zhang 096; Guangliang Yang 001; Yanjun Chen; Jiahao Xu; Min Yang 002 (IEEE Trans. Inf. Forensics Secur., 2024)

The Skeleton Keys: A Large Scale Analysis of Credential Leakage in Mini-apps. - Yizhe Shi; Zhemin Yang; Kangwei Zhong; Guangliang Yang 001; Yifan Yang; Xiaohan Zhang 001; Min Yang 002 (NDSS, 2025)

Detecting Taint-Style Vulnerabilities in Microservice-Structured Web Applications. - Fengyu Liu; Yuan Zhang 009; Tian Chen; Youkun Shi; Guangliang Yang 001; Zihan Lin; Min Yang 002; Junyao He; Qi Li (SP, 2025)

MOCGuard: Automatically Detecting Missing-Owner-Check Vulnerabilities in Java Web Applications. - Fengyu Liu; Youkun Shi; Yuan Zhang 009; Guangliang Yang 001; Enhao Li; Min Yang 002 (SP, 2025)