Protecting Outsourced Data Privacy with Lifelong Policy Carrying. - Xiaoguang Wang 003; Qi Yong; Yue-hua Dai; Jianbao Ren; Hang Zhang 012 (HPCC/EUC, 2013)

Android Root and its Providers: A Double-Edged Sword. - Hang Zhang 012; Dongdong She; Zhiyun Qian (CCS, 2015)

Android ION Hazard: the Curse of Customizable Memory Management System. - Hang Zhang 012; Dongdong She; Zhiyun Qian (CCS, 2016)

Where Is the Weakest Link? A Study on Security Discrepancies Between Android Apps and Their Website Counterparts. - Arash Alavi 001; Alan Quach; Hang Zhang 012; Bryan Marsh; Farhan Ul Haq; Zhiyun Qian; Long Lu; Rajiv Gupta 001 (PAM, 2017)

Charm: Facilitating Dynamic Analysis of Device Drivers of Mobile Systems. - Seyed Mohammadjavad Seyed Talebi; Hamid Tavakoli; Hang Zhang 012; Zheng Zhang; Ardalan Amiri Sani; Zhiyun Qian (USENIX Security Symposium, 2018)

Precise and Accurate Patch Presence Test for Binaries. - Hang Zhang 012; Zhiyun Qian (USENIX Security Symposium, 2018)

UBITect: a precise and scalable method to detect use-before-initialization bugs in Linux kernel. - Yizhuo Zhai; Yu Hao 006; Hang Zhang 012; Daimeng Wang; Chengyu Song; Zhiyun Qian; Mohsen Lesani; Srikanth V. Krishnamurthy; Paul L. Yu (ESEC/SIGSOFT FSE, 2020)

From Design to Deployment: Identification and Analysis of OS Kernel Security Problems Throughout its Development Cycle - Hang Zhang 012 (2020)

Statically Discovering High-Order Taint Style Vulnerabilities in OS Kernels. - Hang Zhang 012; Weiteng Chen; Yu Hao 006; Guoren Li; Yizhuo Zhai; Xiaochen Zou; Zhiyun Qian (CCS, 2021)

SyzVegas: Beating Kernel Fuzzing Odds with Reinforcement Learning. - Daimeng Wang; Zheng Zhang; Hang Zhang 012; Zhiyun Qian; Srikanth V. Krishnamurthy; Nael B. Abu-Ghazaleh (USENIX Security Symposium, 2021)

An Investigation of the Android Kernel Patch Ecosystem. - Zheng Zhang; Hang Zhang 012; Zhiyun Qian; Billy Lau (USENIX Security Symposium, 2021)

Demystifying the Dependency Challenge in Kernel Fuzzing. - Yu Hao 006; Hang Zhang 012; Guoren Li; Xingyun Du; Zhiyun Qian; Ardalan Amiri Sani (ICSE, 2022)

Annotating, Tracking, and Protecting Cryptographic Secrets with CryptoMPK. - Xuancheng Jin; Xuangan Xiao; Songlin Jia; Wang Gao; Dawu Gu; Hang Zhang 012; Siqi Ma; Zhiyun Qian; Juanru Li (SP, 2022)

SyzScope: Revealing High-Risk Security Impacts of Fuzzer-Exposed Bugs in Linux kernel. - Xiaochen Zou; Guoren Li; Weiteng Chen; Hang Zhang 012; Zhiyun Qian (USENIX Security Symposium, 2022)

Who Moves My App Promotion Investment? A Systematic Study About App Distribution Fraud. - Shaoyong Du; Minrui Zhao; Jingyu Hua; Hang Zhang 012; Xiaoyu Chen; Zhiyun Qian; Sheng Zhong 002 (IEEE Trans. Dependable Secur. Comput., 2022)

DynaCut: A Framework for Dynamic and Adaptive Program Customization. - Abhijit Mahurkar; Xiaoguang Wang 003; Hang Zhang 012; Binoy Ravindran (Middleware, 2023)

A Hybrid Alias Analysis and Its Application to Global Variable Protection in the Linux Kernel. - Guoren Li; Hang Zhang 012; Jinmeng Zhou; Wenbo Shen; Yulei Sui; Zhiyun Qian (USENIX Security Symposium, 2023)

DynaCut: Dynamic and Adaptive Code Customization with Process Rewriting. - Abhijit Mahurkar; Xiaoguang Wang 003; Hang Zhang 012; Binoy Ravindran (Zenodo, 2023)

BluePrint: Automatic Malware Signature Generation for Internet Scanning. - Kevin Stevens; Mert Erdemir; Hang Zhang 012; Taesoo Kim; Paul Pearce (RAID, 2024)

Statically Discover Cross-Entry Use-After-Free Vulnerabilities in the Linux Kernel. - Hang Zhang 012; Jangha Kim; Chuhong Yuan; Zhiyun Qian; Taesoo Kim (NDSS, 2025)

The Hitchhiker's Guide to Program Analysis, Part II: Deep Thoughts by LLMs. - Haonan Li; Hang Zhang 012; Kexin Pei; Zhiyun Qian (CoRR, 2025)