Policy based access control framework for large networks. - Hai-Xin Duan; Jianping Wu; Xing Li 001 (ICON, 2000)

Distributed IDS Tracing Back to Attacking Sources. - Wu Liu; Hai-Xin Duan; Jianping Wu; Ping Ren; Li-Hua Lu (GCC (1), 2003)

Algorithms for Congestion Detection and Control. - Wu Liu; Hai-Xin Duan; Jianping Wu; Xing Li 001; Ping Ren (GCC Workshops, 2004)

XML Based X.509 Authorization in CERNET Grid. - Wu Liu; Jianping Wu; Hai-Xin Duan; Xing Li 001; Ping Ren (GCC, 2004)

Improved algorithms tracing back to attacking sources. - Wu Liu; Hai-Xin Duan; Yong Feng; Yong-Bin Li; Ping Ren (Parallel and Distributed Computing and Networks, 2004)

Workflow Oriented Network Management - A Web/Java Approach. - Jiahai Yang 001; Hai-Xin Duan; Jianping Wu; Xing Li 001 (J. Netw. Syst. Manag., 2004)

PDTM: A Policy-Driven Trust Management Framework in Distributed Systems. - Wu Liu; Hai-Xin Duan; Jianping Wu; Xing Li 001 (CIS (2), 2005)

An Extensible AAA Infrastructure for IPv6. - Hong Zhang; Hai-Xin Duan; Wu Liu; Jianping Wu (CIS (2), 2005)

New Algorithm Mining Intrusion Patterns. - Wu Liu; Jianping Wu; Hai-Xin Duan; Xing Li 001 (FSKD (2), 2005)

New Method for Intrusion Features Mining in IDS. - Wu Liu; Jianping Wu; Hai-Xin Duan; Xing Li 001 (ICIC (1), 2005)

Port Scan Behavior Diagnosis by Clustering. - Lanjia Wang; Hai-Xin Duan; Xing Li 001 (ICICS, 2005)

Improved Marking Model ERPPM Tracing Back to DDoS Attacker. - Wu Liu; Hai-Xin Duan; Jianping Wu; Xing Li 001 (ICITA (2), 2005)

The Authorization Service in Dynamic Trust Domains. - Wu Liu; Jianping Wu; Hai-Xin Duan; Xing Li 001 (ICITA (2), 2005)

Anomaly Internet Network Traffic Detection by Kernel Principle Component Classifier. - Hanghang Tong; Chongrong Li; Jingrui He; Jiajian Chen; Quang-Anh Tran; Hai-Xin Duan; Xing Li 001 (ISNN (3), 2005)

Modeling and analyzing of the interaction between worms and antiworms during network worm propagation. - Feng Yang; Hai-Xin Duan; Xing Li 001 (Sci. China Ser. F Inf. Sci., 2005)

Efficient performance estimate for one-class support vector machine. - Quang-Anh Tran; Xing Li 001; Hai-Xin Duan (Pattern Recognit. Lett., 2005)

Scheduling Peers Based on Credit Construction Period in Peer-to-Peer Networks. - Lei Hou; Hai-Xin Duan; Jianping Wu (ICPADS, 2008)

Attacking Test and Online Forensics in IPv6 Networks. - Wu Liu; Hai-Xin Duan; Tao Lin; Xing Li 001; Jian-Ping Wu (IMF, 2008)

An Admission Control Policy Based on Social Networks for P2P Systems. - Yuan Liang; Hai-Xin Duan (WAIM, 2008)

AMCAS: An Automatic Malicious Code Analysis System. - Jia Zhang 004; Yuntao Guan; Xiaoxin Jiang; Hai-Xin Duan; Jianping Wu (WAIM, 2008)

Dynamic emulation based modeling and detection of polymorphic shellcode at the network level. - Lanjia Wang; Hai-Xin Duan; Xing Li 001 (Sci. China Ser. F Inf. Sci., 2008)

RRM: An incentive reputation model for promoting good behaviors in distributed systems. - Hong Zhang; Hai-Xin Duan; Wu Liu (Sci. China Ser. F Inf. Sci., 2008)

Selecting Trust Peers Based on Updated Credit Value in Peer-to-Peer Networks. - Lei Hou; Hai-Xin Duan; Jianping Wu (Security and Management, 2009)

WindTalker: A P2P-Based Low-Latency Anonymous Communication Network. - Jia Zhang 004; Hai-Xin Duan; Wu Liu; Jianping Wu (IEICE Trans. Commun., 2009)

Distinguishing the Master to Defend DDoS Attack in Peer-to-Peer Networks. - Lei Hou; Hai-Xin Duan; Jianping Wu (CIT, 2010)

Analysis of Anonymity in P2P Anonymous Communication Systems. - Jia Zhang 004; Hai-Xin Duan; Wu Liu; Jianping Wu (AINA Workshops, 2010)

IABA: An improved PNN Algorithm for anomaly detection in network security management. - Wu Liu; Hai-Xin Duan; Ping Ren; Jianping Wu (ICNC, 2010)

A federated identity management system with centralized trust and unified Single Sign-On. - Jian Jiang 002; Hai-Xin Duan; Tao Lin; Fenglin Qin; Hong Zhang (CHINACOM, 2011)

User cooperation trust model and its application in network security management. - Wu Liu; Ping Ren; Ke Liu; Hai-Xin Duan (FSKD, 2011)

Cooperation-Based Trust Model and Its Application in Network Security Management. - Wu Liu; Hai-Xin Duan; Ping Ren (ICA3PP (1), 2011)

Anonymous Communication over Invisible Mix Rings. - Ming Zheng; Hai-Xin Duan; Jianping Wu (ICA3PP (1), 2011)

Anonymity analysis of P2P anonymous communication systems. - Jia Zhang 004; Hai-Xin Duan; Wu Liu; Jianping Wu (Comput. Commun., 2011)

Ghost Domain Names: Revoked Yet Still Resolvable. - Jian Jiang 002; Jinjin Liang; Kang Li 001; Jun Li 001; Hai-Xin Duan; Jianping Wu (NDSS, 2012)

Measuring Query Latency of Top Level DNS Servers. - Jinjin Liang; Jian Jiang 002; Hai-Xin Duan; Kang Li 001; Jianping Wu (PAM, 2013)

An empirical reexamination of global DNS behavior. - Hongyu Gao; Vinod Yegneswaran; Yan Chen 004; Phillip A. Porras; Shalini Ghosh; Jian Jiang 002; Hai-Xin Duan (SIGCOMM, 2013)

Research on the Anti-attack Design Principles of Low-Latency Anonymous Communication. - Ming Zheng; Jianping Wu; Hai-Xin Duan (TrustCom/ISPA/IUCC, 2013)

IntentFuzzer: detecting capability leaks of android applications. - Kun Yang; Jianwei Zhuge; Yongke Wang; Lujue Zhou; Hai-Xin Duan (AsiaCCS, 2014)

When HTTPS Meets CDN: A Case of Authentication in Delegated Service. - Jinjin Liang; Jian Jiang 002; Hai-Xin Duan; Kang Li 001; Tao Wan 004; Jianping Wu (IEEE Symposium on Security and Privacy, 2014)

Route Leaks Identification by Detecting Routing Loops. - Song Li; Hai-Xin Duan; Zhiliang Wang; Xing Li 001 (SecureComm, 2015)

Cookies Lack Integrity: Real-World Implications. - Xiaofeng Zheng; Jian Jiang 002; Jinjin Liang; Hai-Xin Duan; Shuo Chen 001; Tao Wan 004; Nicholas Weaver (USENIX Security Symposium, 2015)

Host of Troubles: Multiple Host Ambiguities in HTTP Implementations. - Jianjun Chen 005; Jian Jiang 002; Hai-Xin Duan; Nicholas Weaver; Tao Wan 004; Vern Paxson (CCS, 2016)

What You See Isn't Always What You Get: A Measurement Study of Usage Fraud on Android Apps. - Wei Liu; Yueqian Zhang; Zhou Li 001; Hai-Xin Duan (SPSM@CCS, 2016)

Forwarding-Loop Attacks in Content Delivery Networks. - Jianjun Chen 005; Xiaofeng Zheng; Hai-Xin Duan; Jinjin Liang; Jian Jiang 002; Kang Li 001; Tao Wan 004; Vern Paxson (NDSS, 2016)

Seeking Nonsense, Looking for Trouble: Efficient Promotional-Infection Detection through Semantic Inconsistency Search. - Xiaojing Liao; Kan Yuan; XiaoFeng Wang 001; Zhongyu Pei; Hao Yang; Jianjun Chen 005; Hai-Xin Duan; Kun Du; Eihal Alowaisheq; Sumayah A. Alrwais; Luyi Xing; Raheem A. Beyah (IEEE Symposium on Security and Privacy, 2016)

The Ever-Changing Labyrinth: A Large-Scale Analysis of Wildcard DNS Powered Blackhat SEO. - Kun Du; Hao Yang; Zhou Li 001; Hai-Xin Duan; Kehuan Zhang (USENIX Security Symposium, 2016)

An accurate distributed scheme for detection of prefix interception. - Song Li; Hai-Xin Duan; Zhiliang Wang; Jinjin Liang; Xing Li 001 (Sci. China Inf. Sci., 2016)

MAF-SAM: An effective method to perceive data plane threats of inter domain routing system. - Yi Guo; Hai-Xin Duan; Jikun Chen; Fu Miao (Comput. Networks, 2016)

Reexamining DNS From a Global Recursive Resolver Perspective. - Hongyu Gao; Vinod Yegneswaran; Jian Jiang 002; Yan Chen 004; Phillip A. Porras; Shalini Ghosh; Hai-Xin Duan (IEEE/ACM Trans. Netw., 2016)

Don't Let One Rotten Apple Spoil the Whole Barrel: Towards Automated Detection of Shadowed Domains. - Daiping Liu; Zhou Li 001; Kun Du; Haining Wang 001; Baojun Liu; Hai-Xin Duan (CCS, 2017)

How to Notify a Vulnerability to the Right Person? Case Study: In an ISP Scope. - Jia Zhang 004; Hai-Xin Duan; Wu Liu; Xingkun Yao (GLOBECOM, 2017)

How to Learn Klingon without a Dictionary: Detection and Measurement of Black Keywords Used by the Underground Economy. - Hao Yang; Xiulin Ma; Kun Du; Zhou Li 001; Hai-Xin Duan; XiaoDong Su; Guang Liu; Zhifeng Geng; Jianping Wu (IEEE Symposium on Security and Privacy, 2017)

How You Get Shot in the Back: A Systematical Study about Cryptojacking in the Real World. - Geng Hong; Zhemin Yang; Sen Yang; Lei Zhang 096; Yuhong Nan; Zhibo Zhang; Min Yang 002; Yuan Zhang 009; Zhiyun Qian; Hai-Xin Duan (CCS, 2018)

Path Leaks of HTTPS Side-Channel by Cookie Injection. - Fuqing Chen; Hai-Xin Duan; Xiaofeng Zheng; Jian Jiang 002; Jianjun Chen 005 (COSADE, 2018)

A Reexamination of Internationalized Domain Names: The Good, the Bad and the Ugly. - Baojun Liu; Chaoyi Lu; Zhou Li 001; Ying Liu 024; Hai-Xin Duan; Shuang Hao 001; Zaifeng Zhang (DSN, 2018)

Analysis and Measurement of Zone Dependency in the Domain Name System. - Jian Jiang 002; Jia Zhang 004; Hai-Xin Duan; Kang Li 001; Wu Liu (ICC, 2018)

ICUFuzzer: Fuzzing ICU Library for Exploitable Bugs in Multiple Software. - Kun Yang; Yuan Deng; Chao Zhang 008; Jianwei Zhuge; Hai-Xin Duan (ISC, 2018)

Abusing CDNs for Fun and Profit: Security Issues in CDNs' Origin Validation. - Run Guo; Jianjun Chen 005; Baojun Liu; Jia Zhang 004; Chao Zhang 008; Hai-Xin Duan; Tao Wan 004; Jian Jiang 002; Shuang Hao 001; Yaoqi Jia (SRDS, 2018)

We Still Don't Have Secure Cross-Domain Requests: an Empirical Study of CORS. - Jianjun Chen 005; Jian Jiang 002; Hai-Xin Duan; Tao Wan 004; Shuo Chen 001; Vern Paxson; Min Yang 002 (USENIX Security Symposium, 2018)

Who Is Answering My Queries: Understanding and Characterizing Interception of the DNS Resolution Path. - Baojun Liu; Chaoyi Lu; Hai-Xin Duan; Ying Liu 024; Zhou Li 001; Shuang Hao 001; Min Yang 002 (USENIX Security Symposium, 2018)

Measuring Privacy Threats in China-Wide Mobile Networks. - Mingming Zhang; Baojun Liu; Chaoyi Lu; Jia Zhang 004; Shuang Hao 001; Hai-Xin Duan (FOCI @ USENIX Security Symposium, 2018)

An Empirical Study of Web Resource Manipulation in Real-world Mobile Applications. - Xiaohan Zhang 001; Yuan Zhang 009; Qianqian Mo; Hao Xia; Zhemin Yang; Min Yang 002; Xiaofeng Wang 006; Long Lu; Hai-Xin Duan (USENIX Security Symposium, 2018)

Casino royale: a deep exploration of illegal online gambling. - Hao Yang; Kun Du; Yubao Zhang; Shuang Hao 001; Zhou Li 001; Mingxuan Liu; Haining Wang 001; Hai-Xin Duan; Yazhou Shi; XiaoDong Su; Guang Liu; Zhifeng Geng; et al. (ACSAC, 2019)

TraffickStop: Detecting and Measuring Illicit Traffic Monetization Through Large-Scale DNS Analysis. - Baojun Liu; Zhou Li 001; Peiyuan Zong; Chaoyi Lu; Hai-Xin Duan; Ying Liu 024; Sumayah A. Alrwais; XiaoFeng Wang 001; Shuang Hao 001; Yaoqi Jia; Yiming Zhang 009; Kai Chen 012; et al. (EuroS&P, 2019)

NETHCF: Enabling Line-rate and Adaptive Spoofed IP Traffic Filtering. - Guanyu Li; Menghao Zhang 001; Chang Liu 021; Xiao Kong; Ang Chen 001; Guofei Gu; Haixin Duan (ICNP, 2019)

An End-to-End, Large-Scale Measurement of DNS-over-Encryption: How Far Have We Come? - Chaoyi Lu; Baojun Liu; Zhou Li 001; Shuang Hao 001; Hai-Xin Duan; Mingming Zhang; Chunying Leng; Ying Liu 024; Zaifeng Zhang; Jianping Wu (Internet Measurement Conference, 2019)

TL;DR Hazard: A Comprehensive Study of Levelsquatting Scams. - Kun Du; Hao Yang; Zhou Li 001; Hai-Xin Duan; Shuang Hao 001; Baojun Liu; Yuxiao Ye; Mingxuan Liu; XiaoDong Su; Guang Liu; Zhifeng Geng; Zaifeng Zhang; et al. (SecureComm (2), 2019)

Fuzzing IPC with Knowledge Inference. - Kun Yang; Hanqing Zhao; Chao Zhang 008; Jianwei Zhuge; Haixin Duan (SRDS, 2019)

Finding the best answer: measuring the optimization of public and authoritative DNS. - Jia Zhang 004; Hai-Xin Duan; Jian Jiang 002; Jinjin Liang; Jianping Wu (Sci. China Inf. Sci., 2019)

Understanding Promotion-as-a-Service on GitHub. - Kun Du; Hao Yang; Yubao Zhang; Haixin Duan; Haining Wang 001; Shuang Hao 001; Zhou Li 001; Min Yang 002 (ACSAC, 2020)

Lies in the Air: Characterizing Fake-base-station Spam Ecosystem in China. - Yiming Zhang 009; Baojun Liu; Chaoyi Lu; Zhou Li 001; Haixin Duan; Shuang Hao 001; Mingxuan Liu; Ying Liu 024; Dong Wang; Qiang Li (CCS, 2020)

DNS Cache Poisoning Attack Reloaded: Revolutions with Side Channels. - Keyu Man; Zhiyun Qian; Zhongjie Wang 002; Xiaofeng Zheng; Youjun Huang; Haixin Duan (CCS, 2020)

Talking with Familiar Strangers: An Empirical Study on HTTPS Context Confusion Attacks. - Mingming Zhang; Xiaofeng Zheng; Kaiwen Shen; Ziqiao Kong; Chaoyi Lu; Yu Wang; Haixin Duan; Shuang Hao 001; Baojun Liu; Min Yang 002 (CCS, 2020)

CDN Backfired: Amplification Attacks Based on HTTP Range Requests. - Weizhong Li; Kaiwen Shen; Run Guo; Baojun Liu; Jia Zhang 004; Haixin Duan; Shuang Hao 001; Xiarun Chen; Yao Wang (DSN, 2020)

Argot: Generating Adversarial Readable Chinese Texts. - Zihan Zhang; Mingxuan Liu; Chao Zhang 008; Yiming Zhang 009; Zhou Li 001; Qi Li 002; Haixin Duan; Donghong Sun (IJCAI, 2020)

CDN Judo: Breaking the CDN DoS Protection with Itself. - Run Guo; Weizhong Li; Baojun Liu; Shuang Hao 001; Jia Zhang 004; Haixin Duan; Kaiwen Sheng; Jianjun Chen 005; Ying Liu 024 (NDSS, 2020)

TextExerciser: Feedback-driven Text Input Exercising for Android Applications. - Yuyu He; Lei Zhang 096; Zhemin Yang; Yinzhi Cao; Keke Lian; Shuai Li 006; Wei Yang 013; Zhibo Zhang; Min Yang 002; Yuan Zhang 009; Haixin Duan (SP, 2020)

Poison Over Troubled Forwarders: A Cache Poisoning Attack Targeting DNS Forwarding Devices. - Xiaofeng Zheng; Chaoyi Lu; Jian Peng; Qiushi Yang; Dongjie Zhou; Baojun Liu; Keyu Man; Shuang Hao 001; Haixin Duan; Zhiyun Qian (USENIX Security Symposium, 2020)

Characterizing Transnational Internet Performance and the Great Bottleneck of China. - Pengxiong Zhu; Keyu Man; Zhongjie Wang 002; Zhiyun Qian; Roya Ensafi; J. Alex Halderman; Hai-Xin Duan (Proc. ACM Meas. Anal. Comput. Syst., 2020)

Detecting and Characterizing SMS Spearphishing Attacks. - Mingxuan Liu; Yiming Zhang 009; Baojun Liu; Zhou Li 001; Haixin Duan; Donghong Sun (ACSAC, 2021)

Rusted Anchors: A National Client-Side View of Hidden Root CAs in the Web PKI Ecosystem. - Yiming Zhang 009; Baojun Liu; Chaoyi Lu; Zhou Li 001; Haixin Duan; Jiachen Li; Zaifeng Zhang (CCS, 2021)

Fast IPv6 Network Periphery Discovery and Security Implications. - Xiang Li 108; Baojun Liu; Xiaofeng Zheng; Haixin Duan; Qi Li 002; Youjun Huang (DSN, 2021)

Mingling of Clear and Muddy Water: Understanding and Detecting Semantic Confusion in Blackhat SEO. - Hao Yang; Kun Du; Yubao Zhang; Shuai Hao 001; Haining Wang 001; Jia Zhang 004; Haixin Duan (ESORICS (1), 2021)

On Evaluating Delegated Digital Signing of Broadcasting Messages in 5G. - Hui Gao; Yiming Zhang 009; Tao Wan 004; Jia Zhang 004; Haixin Duan (GLOBECOM, 2021)

From WHOIS to WHOWAS: A Large-Scale Measurement Study of Domain Registration Privacy under the GDPR. - Chaoyi Lu; Baojun Liu; Yiming Zhang 009; Zhou Li 001; Fenglu Zhang; Haixin Duan; Ying Liu 024; Joann Qiongna Chen; Jinjin Liang; Zaifeng Zhang; Shuang Hao 001; Min Yang 002 (NDSS, 2021)

Sharing More and Checking Less: Leveraging Common Input Keywords to Detect Bugs in Embedded Systems. - Libo Chen 001; Yanhao Wang; Quanpu Cai; Yunfan Zhan; Hong Hu 004; Jiaqi Linghu; Qinsheng Hou; Chao Zhang 008; Haixin Duan; Zhi Xue (USENIX Security Symposium, 2021)

Weak Links in Authentication Chains: A Large-scale Analysis of Email Sender Spoofing Attacks. - Kaiwen Shen; Chuhan Wang; Minglei Guo; Xiaofeng Zheng; Chaoyi Lu; Baojun Liu; Yuxuan Zhao; Shuang Hao 001; Haixin Duan; Qingfeng Pan; Min Yang 002 (USENIX Security Symposium, 2021)

SFuzz: Slice-based Fuzzing for Real-Time Operating Systems. - Libo Chen 001; Quanpu Cai; Zhenbang Ma; Yanhao Wang; Hong Hu 004; Minghang Shen; Yue Liu; Shanqing Guo; Haixin Duan; Kaida Jiang; Zhi Xue (CCS, 2022)

An Extensive Study of Residential Proxies in China. - Mingshuo Yang; Yunnan Yu; Xianghang Mi; Shujun Tang; Shanqing Guo; Yilin Li; Xiaofeng Zheng; Haixin Duan (CCS, 2022)

Invoke-Deobfuscation: AST-Based and Semantics-Preserving Deobfuscation for PowerShell Scripts. - Huajun Chai; Lingyun Ying; Haixin Duan; Daren Zha (DSN, 2022)

HDiff: A Semi-automatic Framework for Discovering Semantic Gap Attack in HTTP Implementations. - Kaiwen Shen; Jianyu Lu; Yaru Yang; Jianjun Chen 005; Mingming Zhang; Haixin Duan; Jia Zhang 004; Xiaofeng Zheng (DSN, 2022)

Exploring the Characteristics and Security Risks of Emerging Emoji Domain Names. - Mingxuan Liu; Yiming Zhang 009; Baojun Liu; Haixin Duan (ESORICS (3), 2022)

Trampoline Over the Air: Breaking in IoT Devices Through MQTT Brokers. - Huikai Xu; Miao Yu; Yanhao Wang; Yue Liu; Qinsheng Hou; Zhenbang Ma; Haixin Duan; Jianwei Zhuge; Baojun Liu (EuroS&P, 2022)

Ethics in Security Research: Visions, Reality, and Paths Forward. - Yiming Zhang 009; Mingxuan Liu; Mingming Zhang; Chaoyi Lu; Haixin Duan (EuroS&P Workshops, 2022)

Large-scale Security Measurements on the Android Firmware Ecosystem. - Qinsheng Hou; Wenrui Diao; Yanhao Wang; Xiaofeng Liu 013; Song Liu; Lingyun Ying; Shanqing Guo; Yuanzhi Li; Meining Nie; Haixin Duan (ICSE, 2022)

ValCAT: Variable-Length Contextualized Adversarial Transformations Using Encoder-Decoder Language Model. - Chuyun Deng; Mingxuan Liu; Yue Qin; Jia Zhang 004; Hai-Xin Duan; Donghong Sun (NAACL-HLT, 2022)

PMTUD is not Panacea: Revisiting IP Fragmentation Attacks against TCP. - Xuewei Feng; Qi Li 002; Kun Sun 001; Ke Xu 002; Baojun Liu; Xiaofeng Zheng; Qiushi Yang; Haixin Duan; Zhiyun Qian (NDSS, 2022)

Measuring the Practical Effect of DNS Root Server Instances: A China-Wide Case Study. - Fenglu Zhang; Chaoyi Lu; Baojun Liu; Haixin Duan; Ying Liu 024 (PAM, 2022)

Encrypted Malware Traffic Detection via Graph-based Network Analysis. - Zhuoqun Fu; Mingxuan Liu; Yue Qin; Jia Zhang 004; Yuan Zou; Qilei Yin; Qi Li 002; Haixin Duan (RAID, 2022)

Exploit the Last Straw That Breaks Android Systems. - Lei Zhang 096; Keke Lian; Haoyu Xiao; Zhibo Zhang; Peng Liu 005; Yuan Zhang 009; Min Yang 002; Haixin Duan (SP, 2022)

Analyzing Ground-Truth Data of Mobile Gambling Scams. - Geng Hong; Zhemin Yang; Sen Yang; Xiaojing Liao; Xiaolin Du; Min Yang 002; Haixin Duan (SP, 2022)

Timing-Based Browsing Privacy Vulnerabilities Via Site Isolation. - Zihao Jin; Ziqiao Kong; Shuo Chen 001; Haixin Duan (SP, 2022)

A Large-scale and Longitudinal Measurement Study of DKIM Deployment. - Chuhan Wang; Kaiwen Shen; Minglei Guo; Yuxuan Zhao; Mingming Zhang; Jianjun Chen 005; Baojun Liu; Xiaofeng Zheng; Haixin Duan; Yanzhong Lin; Qingfeng Pan (USENIX Security Symposium, 2022)

Building an Open, Robust, and Stable Voting-Based Domain Top List. - Qinge Xie; Shujun Tang; Xiaofeng Zheng; Qingran Lin; Baojun Liu; Haixin Duan; Frank Li 001 (USENIX Security Symposium, 2022)

Measuring the Deployment of 5G Security Enhancement. - Shiyue Nie; Yiming Zhang 009; Tao Wan 004; Haixin Duan; Song Li (WISEC, 2022)

Stolen Risks of Models with Security Properties. - Yue Qin; Zhuoqun Fu; Chuyun Deng; Xiaojing Liao; Jia Zhang 004; Haixin Duan (CCS, 2023)

TsuKing: Coordinating DNS Resolvers and Queries into Potent DoS Amplifiers. - Wei Xu; Xiang Li 108; Chaoyi Lu; Baojun Liu; Haixin Duan; Jia Zhang 004; Jianjun Chen 005; Tao Wan 004 (CCS, 2023)

Under the Dark: A Systematical Study of Stealthy Mining Pools (Ab)use in the Wild. - Zhenrui Zhang; Geng Hong; Xiang Li 108; Zhuoqun Fu; Jia Zhang 004; Mingxuan Liu; Chuhan Wang; Jianjun Chen 005; Baojun Liu; Haixin Duan; Chao Zhang 008; Min Yang 002 (CCS, 2023)

Silence is not Golden: Disrupting the Load Balancing of Authoritative DNS Servers. - Fenglu Zhang; Baojun Liu; Eihal Alowaisheq; Jianjun Chen 005; Chaoyi Lu; Linjian Song; Yong Ma; Ying Liu 024; Haixin Duan; Min Yang 002 (CCS, 2023)

Wolf in Sheep's Clothing: Evaluating Security Risks of the Undelegated Record on DNS Hosting Services. - Fenglu Zhang; Yunyi Zhang; Baojun Liu; Eihal Alowaisheq; Lingyun Ying; Xiang Li 108; Zaifeng Zhang; Ying Liu 024; Haixin Duan; Min Zhang 054 (IMC, 2023)

A Security Study about Electron Applications and a Programming Methodology to Tame DOM Functionalities. - Zihao Jin; Shuo Chen 001; Yang Chen; Haixin Duan; Jianjun Chen 005; Jianping Wu (NDSS, 2023)

Ghost Domain Reloaded: Vulnerable Links in Domain Name Delegation and Revocation. - Xiang Li 108; Baojun Liu; Xuesong Bai; Mingming Zhang; Qifan Zhang 002; Zhou Li 001; Haixin Duan; Qi Li 002 (NDSS, 2023)

Continuous Intrusion: Characterizing the Security of Continuous Integration Services. - Yacong Gu; Lingyun Ying; Huajun Chai; Chu Qiao; Haixin Duan; Xing Gao 001 (SP, 2023)

Investigating Package Related Security Threats in Software Registries. - Yacong Gu; Lingyun Ying; Yingyuan Pu; Xiao Hu; Huajun Chai; Ruimin Wang; Xing Gao 001; Haixin Duan (SP, 2023)

MTSan: A Feasible and Practical Memory Sanitizer for Fuzzing COTS Binaries. - Xingman Chen; Yinghao Shi; Zheyu Jiang; Yuan Li 061; Ruoyu Wang 001; Haixin Duan; Haoyu Wang 001; Chao Zhang 008 (USENIX Security Symposium, 2023)

Temporal CDN-Convex Lens: A CDN-Assisted Practical Pulsing DDoS Attack. - Run Guo; Jianjun Chen 005; Yihang Wang; Keran Mu; Baojun Liu; Xiang Li 108; Chao Zhang 008; Haixin Duan; Jianping Wu (USENIX Security Symposium, 2023)

The Maginot Line: Attacking the Boundary of DNS Caching Protection. - Xiang Li 108; Chaoyi Lu; Baojun Liu; Qifan Zhang 002; Zhou Li 001; Haixin Duan; Qi Li 002 (USENIX Security Symposium, 2023)

Automatic Generation of Adversarial Readable Chinese Texts. - Mingxuan Liu; Zihan Zhang; Yiming Zhang 009; Chao Zhang 008; Zhou Li 001; Qi Li 002; Haixin Duan; Donghong Sun (IEEE Trans. Dependable Secur. Comput., 2023)

TAICHI: Transform Your Secret Exploits Into Mine From a Victim's Perspective. - Zhongyu Pei; Xingman Chen; Songtao Yang; Haixin Duan; Chao Zhang 008 (IEEE Trans. Dependable Secur. Comput., 2023)

Detecting and Measuring Security Risks of Hosting-Based Dangling Domains. - Mingming Zhang; Xiang Li 108; Baojun Liu; Jianyu Lu; Yiming Zhang 009; Jianjun Chen 005; Haixin Duan; Shuang Hao 001; Xiaofeng Zheng (Proc. ACM Meas. Anal. Comput. Syst., 2023)

Can We Trust the Phone Vendors? Comprehensive Security Measurements on the Android Firmware Ecosystem. - Qinsheng Hou; Wenrui Diao; Yanhao Wang; Chenglin Mao; Lingyun Ying; Song Liu; Xiaofeng Liu 013; Yuanzhi Li; Shanqing Guo; Meining Nie; Haixin Duan (IEEE Trans. Software Eng., 2023)

Dissecting Open Edge Computing Platforms: Ecosystem, Usage, and Security Risks. - Yu Bi; Mingshuo Yang; Yong Fang; Xianghang Mi; Shanqing Guo; Shujun Tang; Haixin Duan (ACSAC, 2024)

Toward Understanding the Security of Plugins in Continuous Integration Services. - Xiaofan Li; Yacong Gu; Chu Qiao; Zhenkai Zhang 002; Daiping Liu; Lingyun Ying; Haixin Duan; Xing Gao 001 (CCS, 2024)

PowerPeeler: A Precise and General Dynamic Deobfuscation Method for PowerShell Scripts. - Ruijie Li; Chenyang Zhang; Huajun Chai; Lingyun Ying; Haixin Duan; Jun Tao 003 (CCS, 2024)

Internet's Invisible Enemy: Detecting and Measuring Web Cache Poisoning in the Wild. - Yuejia Liang; Jianjun Chen 005; Run Guo; Kaiwen Shen; Hui Jiang; Man Hou; Yue Yu; Haixin Duan (CCS, 2024)

Inbox Invasion: Exploiting MIME Ambiguities to Evade Email Attachment Detectors. - Jiahe Zhang; Jianjun Chen 005; Qi Wang 094; Hangyu Zhang; Chuhan Wang; Jianwei Zhuge; Haixin Duan (CCS, 2024)

MiniCAT: Understanding and Detecting Cross-Page Request Forgery Vulnerabilities in Mini-Programs. - Zidong Zhang; Qinsheng Hou; Lingyun Ying; Wenrui Diao; Yacong Gu; Rui Li 102; Shanqing Guo; Haixin Duan (CCS, 2024)

ChatScam: Unveiling the Rising Impact of ChatGPT on Domain Name Abuse. - Mingxuan Liu; Zhenglong Jin; Jiahai Yang 001; Baoiun Liu; Haixin Duan; Ying Liu 024; Ximeng Liu; Shujun Tang (DSN, 2024)

Bounce in the Wild: A Deep Dive into Email Delivery Failures from a Large Email Service Provider. - Ruixuan Li 008; Shaodong Xiao; Baojun Liu; Yanzhong Lin; Haixin Duan; Qingfeng Pan; Jianjun Chen 005; Jia Zhang 004; Ximeng Liu; Xiuqi Lu; Jun Shao 001 (IMC, 2024)

Yesterday Once More: Global Measurement of Internet Traffic Shadowing Behaviors. - Yunpeng Xing; Chaoyi Lu; Baojun Liu; Haixin Duan; Junzhe Sun; Zhou Li 001 (IMC, 2024)

Understanding the Implementation and Security Implications of Protective DNS Services. - Mingxuan Liu; Yiming Zhang 009; Xiang Li 108; Chaoyi Lu; Baojun Liu; Haixin Duan; Xiaofeng Zheng (NDSS, 2024)

BreakSPF: How Shared Infrastructures Magnify SPF Vulnerabilities Across the Internet. - Chuhan Wang; Yasuhiro Kuranaga; Yihang Wang; Mingming Zhang; Linkai Zheng; Xiang Li 108; Jianjun Chen 005; Haixin Duan; Yanzhong Lin; Qingfeng Pan (NDSS, 2024)

ReqsMiner: Automated Discovery of CDN Forwarding Request Inconsistencies and DoS Attacks with Grammar-based Fuzzing. - Linkai Zheng; Xiang Li 108; Chuhan Wang; Run Guo; Haixin Duan; Jianjun Chen 005; Chao Zhang 008; Kaiwen Shen (NDSS, 2024)

CrypTody: Cryptographic Misuse Analysis of IoT Firmware via Data-flow Reasoning. - Jianing Wang; Shanqing Guo; Wenrui Diao; Yue Liu; Haixin Duan; Yichen Liu; Zhenkai Liang (RAID, 2024)

More Haste, Less Speed: Cache Related Security Threats in Continuous Integration Services. - Yacong Gu; Lingyun Ying; Huajun Chai; Yingyuan Pu; Haixin Duan; Xing Gao 001 (SP, 2024)

DNSBomb: A New Practical-and-Powerful Pulsing DoS Attack Exploiting DNS Queries-and-Responses. - Xiang Li 108; Dashuai Wu; Haixin Duan; Qi Li 002 (SP, 2024)

TuDoor Attack: Systematically Exploring and Exploiting Logic Vulnerabilities in DNS Response Pre-processing with Malformed Packets. - Xiang Li 108; Wei Xu; Baojun Liu; Mingming Zhang; Zhou Li 001; Jia Zhang 004; Deliang Chang; Xiaofeng Zheng; Chuhan Wang; Jianjun Chen 005; Haixin Duan; Qi Li 002 (SP, 2024)

Break the Wall from Bottom: Automated Discovery of Protocol-Level Evasion Vulnerabilities in Web Application Firewalls. - Qi Wang 094; Jianjun Chen 005; Zheyu Jiang; Run Guo; Ximeng Liu; Chao Zhang 008; Haixin Duan (SP, 2024)

Where URLs Become Weapons: Automated Discovery of SSRF Vulnerabilities in Web Applications. - Enze Wang; Jianjun Chen 005; Wei Xie 007; Chuhan Wang; Yifei Gao; Zhenhua Wang; Haixin Duan; Yang Liu 003; Baosheng Wang (SP, 2024)

Tickets or Privacy? Understand the Ecosystem of Chinese Ticket Grabbing Apps. - Yijing Liu; Yiming Zhang 009; Baojun Liu; Haixin Duan; Qiang Li; Mingxuan Liu; Ruixuan Li 008; Jia Yao (USENIX Security Symposium, 2024)

ResolverFuzz: Automated Discovery of DNS Resolver Vulnerabilities with Query-Response Fuzzing. - Qifan Zhang 002; Xuesong Bai; Xiang Li 108; Haixin Duan; Qi Li 002; Zhou Li 001 (USENIX Security Symposium, 2024)

Rethinking the Security Threats of Stale DNS Glue Records. - Yunyi Zhang; Baojun Liu; Haixin Duan; Min Zhang 054; Xiang Li 108; Fan Shi; Chengxi Xu; Eihal Alowaisheq (USENIX Security Symposium, 2024)

Into the Dark: Unveiling Internal Site Search Abused for Black Hat SEO. - Yunyi Zhang; Mingxuan Liu; Baojun Liu; Yiming Zhang 009; Haixin Duan; Min Zhang 054; Hui Jiang; Yanzhe Li; Fan Shi (USENIX Security Symposium, 2024)

Cross the Zone: Toward a Covert Domain Hijacking via Shared DNS Infrastructure. - Yunyi Zhang; Mingming Zhang; Baojun Liu; Zhan Liu; Jia Zhang 004; Haixin Duan; Min Zhang 054; Fan Shi; Chengxi Xu (USENIX Security Symposium, 2024)

Uncovering Security Vulnerabilities in Real-world Implementation and Deployment of 5G Messaging Services. - Yaru Yang; Yiming Zhang 009; Tao Wan 004; Chuhan Wang; Haixin Duan; Jianjun Chen 005; Yishen Li (WISEC, 2024)

A Worldwide View on the Reachability of Encrypted DNS Services. - Ruixuan Li 008; Baojun Liu; Chaoyi Lu; Haixin Duan; Jun Shao 001 (WWW, 2024)

From Promises to Practice: Evaluating the Private Browsing Modes of Android Browser Apps. - Xiaoyin Liu; Wenzhi Li; Qinsheng Hou; Shishuai Yang; Lingyun Ying; Wenrui Diao; Yanan Li; Shanqing Guo; Haixin Duan (WWW, 2024)

An Empirical Study of Open Edge Computing Platforms: Ecosystem, Usage, and Security Risks. - Yu Bi; Mingshuo Yang; Yong Fang; Xianghang Mi; Shanqing Guo; Shujun Tang; Haixin Duan (CoRR, 2024)

Underground Application Collection Method Based on Spiking Traffic Analysis. - Pei Chen; Geng Hong; Mengying Wu; Jinsong Chen; Haixin Duan; Min Yang 002 (Int. J. Softw. Informatics, 2024)

Investigating Deployment Issues of DNS Root Server Instances From a China-Wide View. - Fenglu Zhang; Baojun Liu; Chaoyi Lu; Yunpeng Xing; Haixin Duan; Ying Liu 024; Liyuan Chang (IEEE Trans. Dependable Secur. Comput., 2024)

Decoding DNS Centralization: Measuring and Identifying NS Domains Across Hosting Providers. - Qihang Peng; Mingming Zhang; Deliang Chang; Jia Zhang 004; Baojun Liu; Haixin Duan (DSN, 2025)

The Danger of Packet Length Leakage: Off-path TCP/IP Hijacking Attacks Against Wireless and Mobile Networks. - Guancheng Li; Minghao Zhang; Jianjun Chen 005; Ge Dai; Pinji Chen; Huiming Liu; Yang Yu; Haixin Duan; Zhiyun Qian (EuroS&P, 2025)

Exposing the Hidden Layer: Software Repositories in the Service of Seo Manipulation. - Mengying Wu; Geng Hong; Wuyuao Mai; Xinyi Wu; Lei Zhang 096; Yingyuan Pu; Huajun Chai; Lingyun Ying; Haixin Duan; Min Yang 002 (ICSE, 2025)

HADES Attack: Understanding and Evaluating Manipulation Risks of Email Blocklists. - Ruixuan Li 008; Chaoyi Lu; Baojun Liu; Yunyi Zhang; Geng Hong; Haixin Duan; Yanzhong Lin; Qingfeng Pan; Min Yang 002; Jun Shao 001 (NDSS, 2025)

Cross-Origin Web Attacks via HTTP/2 Server Push and Signed HTTP Exchange. - Pinji Chen; Jianjun Chen 005; Mingming Zhang; Qi Wang 094; Yiming Zhang 009; Mingwei Xu; Haixin Duan (NDSS, 2025)

Automatic Insecurity: Exploring Email Auto-configuration in the Wild. - Shushang Wen; Yiming Zhang 009; Yuxiang Shen; Bingyu Li; Haixin Duan; Jingqiang Lin 001 (NDSS, 2025)

Revealing the Black Box of Device Search Engine: Scanning Assets, Strategies, and Ethical Consideration. - Mengying Wu; Geng Hong; Jinsong Chen; Qi Liu; Shujun Tang; Youhao Li; Baojun Liu; Haixin Duan; Min Yang 002 (NDSS, 2025)

Invade the Walled Garden: Evaluating GTP Security in Cellular Networks. - Yiming Zhang 009; Tao Wan 004; Yaru Yang; Haixin Duan; Yichen Wang; Jianjun Chen 005; Zixiang Wei; Xiang Li 108 (SP, 2025)

Hey, Your Secrets Leaked! Detecting and Characterizing Secret Leakage in the Wild. - Jiawei Zhou; Zidong Zhang; Lingyun Ying; Huajun Chai; Jiuxin Cao; Haixin Duan (SP, 2025)

You Can't Eat Your Cake and Have It Too: The Performance Degradation of LLMs with Jailbreak Defense. - Wuyuao Mai; Geng Hong; Pei Chen; Xudong Pan; Baojun Liu; Yuan Zhang 009; Haixin Duan; Min Yang 002 (WWW, 2025)

Dr. Docker: A Large-Scale Security Measurement of Docker Image Ecosystem. - Hequan Shi; Lingyun Ying; Libo Chen 001; Haixin Duan; Ming Liu; Zhi Xue (WWW, 2025)