An effective defense against email spam laundering. - Mengjun Xie; Heng Yin 001; Haining Wang 001 (CCS, 2006)

Polyglot: automatic extraction of protocol message format using dynamic binary analysis. - Juan Caballero; Heng Yin 001; Zhenkai Liang; Dawn Xiaodong Song (CCS, 2007)

Panorama: capturing system-wide information flow for malware detection and analysis. - Heng Yin 001; Dawn Xiaodong Song; Manuel Egele; Christopher Kruegel; Engin Kirda (CCS, 2007)

Securing BGP through Keychain-based Signatures. - Heng Yin 001; Bo Sheng; Haining Wang 001; Jianping Pan 001 (IWQoS, 2007)

Dynamic Spyware Analysis. - Manuel Egele; Christopher Kruegel; Engin Kirda; Heng Yin 001; Dawn Xiaodong Song (USENIX ATC, 2007)

Building an application-aware IPsec policy system. - Heng Yin 001; Haining Wang 001 (IEEE/ACM Trans. Netw., 2007)

BitBlaze: A New Approach to Computer Security via Binary Analysis. - Dawn Xiaodong Song; David Brumley; Heng Yin 001; Juan Caballero; Ivan Jager; Min Gyung Kang; Zhenkai Liang; James Newsome; Pongsin Poosankam; Prateek Saxena (ICISS, 2008)

HookFinder: Identifying and Understanding Malware Hooking Behaviors. - Heng Yin 001; Zhenkai Liang; Dawn Song (NDSS, 2008)

Thwarting E-mail Spam Laundering. - Mengjun Xie; Heng Yin 001; Haining Wang 001 (ACM Trans. Inf. Syst. Secur., 2008)

Automatically Identifying Trigger-based Behavior in Malware. - David Brumley; Cody Hartwig; Zhenkai Liang; James Newsome; Dawn Xiaodong Song; Heng Yin 001 (Botnet Detection, 2008)

Emulating emulation-resistant malware. - Min Gyung Kang; Heng Yin 001; Steve Hanna; Stephen McCamant; Dawn Song (VMSec@CCS, 2009)

HookScout: Proactive Binary-Centric Hook Detection. - Heng Yin 001; Pongsin Poosankam; Steve Hanna; Dawn Xiaodong Song (DIMVA, 2010)

Keychain-Based Signatures for Securing BGP. - Heng Yin 001; Bo Sheng; Haining Wang 001; Jianping Pan 001 (IEEE J. Sel. Areas Commun., 2010)

Attacks on WebView in the Android system. - Tongbo Luo; Hao Hao; Wenliang Du; Yifei Wang; Heng Yin 001 (ACSAC, 2011)

OS-Sommelier: memory-only operating system fingerprinting in the cloud. - Yufei Gu; Yangchun Fu; Aravind Prakash; Zhiqiang Lin 001; Heng Yin 001 (SoCC, 2012)

Hubble: Transparent and Extensible Malware Analysis by Combining Hardware Virtualization and Software Emulation. - Lok-Kwong Yan; Manjukumar Jayachandra; Mu Zhang 001; Heng Yin 001 (NDSS, 2012)

Identifying and Analyzing Pointer Misuses for Sophisticated Memory-corruption Exploit Diagnosis. - Mingwei Zhang; Aravind Prakash; Xiaolei Li; Zhenkai Liang; Heng Yin 001 (NDSS, 2012)

DroidScope: Seamlessly Reconstructing the OS and Dalvik Semantic Views for Dynamic Android Malware Analysis. - Lok-Kwong Yan; Heng Yin 001 (USENIX Security Symposium, 2012)

V2E: combining hardware virtualization and softwareemulation for transparent and extensible malware analysis. - Lok-Kwong Yan; Manjukumar Jayachandra; Mu Zhang 001; Heng Yin 001 (VEE, 2012)

Enforcing system-wide control flow integrity for exploit detection and diagnosis. - Aravind Prakash; Heng Yin 001; Zhenkai Liang (AsiaCCS, 2013)

Manipulating semantic values in kernel data structures: Attack assessments and implications. - Aravind Prakash; Eknath Venkataramani; Heng Yin 001; Zhiqiang Lin 001 (DSN, 2013)

A Software Environment for Confining Malicious Android Applications via Resource Virtualization. - Xiaolei Li; Guangdong Bai; Zhenkai Liang; Heng Yin 001 (ICECCS, 2013)

TransBlocker: Transforming and Taming Privacy-Breaching Android Applications. - Mu Zhang 001; Heng Yin 001 (NDSS, 2013)

DroidAPIMiner: Mining API-Level Features for Robust Malware Detection in Android. - Yousra Aafer; Wenliang Du; Heng Yin 001 (SecureComm, 2013)

Automatic Malware Analysis - An Emulator Based Approach. - Heng Yin 001; Dawn Song (Springer, 2013)

MACE: high-coverage and robust memory analysis for commodity operating systems. - Qian Feng; Aravind Prakash; Heng Yin 001; Zhiqiang Lin 001 (ACSAC, 2014)

Code Injection Attacks on HTML5-based Mobile Apps: Characterization, Detection and Mitigation. - Xing Jin; Xunchao Hu; Kailiang Ying; Wenliang Du; Heng Yin 001; Gautam Nagesh Peri (CCS, 2014)

Semantics-Aware Android Malware Classification Using Weighted Contextual API Dependency Graphs. - Mu Zhang 001; Yue Duan; Heng Yin 001; Zhiruo Zhao (CCS, 2014)

Efficient, context-aware privacy leakage confinement for android applications without firmware modding. - Mu Zhang 001; Heng Yin 001 (AsiaCCS, 2014)

Make it work, make it right, make it fast: building a platform-neutral whole-system dynamic binary analysis platform. - Andrew Henderson; Aravind Prakash; Lok-Kwong Yan; Xunchao Hu; Xujiewen Wang; Rundong Zhou; Heng Yin 001 (ISSTA, 2014)

AppSealer: Automatic Generation of Vulnerability-Specific Patches for Preventing Component Hijacking Attacks in Android Applications. - Mu Zhang 001; Heng Yin 001 (NDSS, 2014)

A Light-Weight Software Environment for Confining Android Malware. - Xiaolei Li; Guangdong Bai; Benjamin Thian; Zhenkai Liang; Heng Yin 001 (SERE (Companion), 2014)

Multi-Aspect, Robust, and Memory Exclusive Guest OS Fingerprinting. - Yufei Gu; Yangchun Fu; Aravind Prakash; Zhiqiang Lin 001; Heng Yin 001 (IEEE Trans. Cloud Comput., 2014)

Defeating ROP Through Denial of Stack Pivot. - Aravind Prakash; Heng Yin 001 (ACSAC, 2015)

Binary Code Continent: Finer-Grained Control Flow Integrity for Stripped Binaries. - Minghua Wang; Heng Yin 001; Abhishek Vasisht Bhaskar; Purui Su; Dengguo Feng (ACSAC, 2015)

Towards Automatic Generation of Security-Centric Descriptions for Android Apps. - Mu Zhang 001; Yue Duan; Qian Feng; Heng Yin 001 (CCS, 2015)

Privacy-Preserving Offloading of Mobile App to the Public Cloud. - Yue Duan; Mu Zhang 001; Heng Yin 001; Yuzhe Tang (HotCloud, 2015)

vfGuard: Strict Protection for Virtual Function Calls in COTS C++ Binaries. - Aravind Prakash; Xunchao Hu; Heng Yin 001 (NDSS, 2015)

On the Trustworthiness of Memory Analysis - An Empirical Study from the Perspective of Binary Execution. - Aravind Prakash; Eknath Venkataramani; Heng Yin 001; Zhiqiang Lin 001 (IEEE Trans. Dependable Secur. Comput., 2015)

ORIGEN: Automatic Extraction of Offset-Revealing Instructions for Cross-Version Memory Analysis. - Qian Feng; Aravind Prakash; Minghua Wang; Curtis Carmony; Heng Yin 001 (AsiaCCS, 2016)

Scalable Graph-based Bug Search for Firmware Images. - Qian Feng; Rundong Zhou; Chengcheng Xu; Yao Cheng; Brian Testa; Heng Yin 001 (CCS, 2016)

Extract Me If You Can: Abusing PDF Parsers in Malware Detectors. - Curtis Carmony; Xunchao Hu; Heng Yin 001; Abhishek Vasisht Bhaskar; Mu Zhang 001 (NDSS, 2016)

Semantics-Preserving Dissection of JavaScript Exploits via Dynamic JS-Binary Analysis. - Xunchao Hu; Aravind Prakash; Jinghan Wang; Rundong Zhou; Yao Cheng; Heng Yin 001 (RAID, 2016)

Android Application Security - A Semantics and Context-Aware Approach - Mu Zhang 001; Heng Yin 001 (Springer, 2016)

Extracting Conditional Formulas for Cross-Platform Bug Search. - Qian Feng; Minghua Wang; Mu Zhang 001; Rundong Zhou; Andrew Henderson; Heng Yin 001 (AsiaCCS, 2017)

Capturing Malware Propagations with Code Injections and Code-Reuse Attacks. - David Korczynski; Heng Yin 001 (CCS, 2017)

Neural Network-based Graph Embedding for Cross-Platform Binary Code Similarity Detection. - Xiaojun Xu; Chang Liu 021; Qian Feng; Heng Yin 001; Le Song; Dawn Song (CCS, 2017)

Dark Hazard: Learning-based, Large-Scale Discovery of Hidden Sensitive Operations in Android Apps. - Xiaorui Pan; Xueqiang Wang; Yue Duan; XiaoFeng Wang 001; Heng Yin 001 (NDSS, 2017)

VDF: Targeted Evolutionary Fuzz Testing of Virtual Devices. - Andrew Henderson; Heng Yin 001; Guang Jin; Hao Han; Hongmei Deng 001 (RAID, 2017)

JSForce: A Forced Execution Engine for Malicious JavaScript Detection. - Xunchao Hu; Yao Cheng; Yue Duan; Andrew Henderson; Heng Yin 001 (SecureComm, 2017)

A Framework for Developing Cyber-Physical Systems. - Xudong He; Zhijiang Dong; Heng Yin 001; Yujian Fu (Int. J. Softw. Eng. Knowl. Eng., 2017)

DECAF: A Platform-Neutral Whole-System Dynamic Binary Analysis Platform. - Andrew Henderson; Lok-Kwong Yan; Xunchao Hu; Aravind Prakash; Heng Yin 001; Stephen McCamant (IEEE Trans. Software Eng., 2017)

DeepMem: Learning Graph Neural Network Models for Fast and Robust Memory Forensic Analysis. - Wei Song; Heng Yin 001; Chang Liu 021; Dawn Song (CCS, 2018)

Things You May Not Know About Android (Un)Packers: A Systematic Study based on Whole-System Emulation. - Yue Duan; Mu Zhang 001; Abhishek Vasisht Bhaskar; Heng Yin 001; Xiaorui Pan; Tongxin Li; Xueqiang Wang; XiaoFeng Wang 001 (NDSS, 2018)

Measuring and Disrupting Anti-Adblockers Using Differential Execution Analysis. - Shitong Zhu; Xunchao Hu; Zhiyun Qian; Zubair Shafiq; Heng Yin 001 (NDSS, 2018)

RARE: A Systematic Augmented Router Emulation for Malware Analysis. - Ahmad Darki; Chun-Yu Chuang; Michalis Faloutsos; Zhiyun Qian; Heng Yin 001 (PAM, 2018)

Send Hardest Problems My Way: Probabilistic Path Prioritization for Hybrid Fuzzing. - Lei Zhao 012; Yue Duan; Heng Yin 001; Jifeng Xuan (NDSS, 2019)

DECAF++: Elastic Whole-System Dynamic Taint Analysis. - Ali Davanian; Zhenxiao Qi; Yu Qu; Heng Yin 001 (RAID, 2019)

Automatic Generation of Non-intrusive Updates for Third-Party Libraries in Android Applications. - Yue Duan; Lian Gao; Jie Hu; Heng Yin 001 (RAID, 2019)

Be Sensitive and Collaborative: Analyzing Impact of Coverage Metrics in Greybox Fuzzing. - Jinghan Wang; Yue Duan; Wei Song; Heng Yin 001; Chengyu Song (RAID, 2019)

ChaffyScript: Vulnerability-Agnostic Defense of JavaScript Exploits via Memory Perturbation. - Xunchao Hu; Brian Testa; Heng Yin 001 (SecureComm (1), 2019)

FIRM-AFL: High-Throughput Greybox Fuzzing of IoT Firmware via Augmented Process Emulation. - Yaowen Zheng; Ali Davanian; Heng Yin 001; Chengyu Song; Hongsong Zhu; Limin Sun 001 (USENIX Security Symposium, 2019)

Klotski: Efficient Obfuscated Execution against Controlled-Channel Attacks. - Pan Zhang; Chengyu Song; Heng Yin 001; Deqing Zou; Elaine Shi; Hai Jin 001 (ASPLOS, 2020)

PatchScope: Memory Object Centric Patch Diffing. - Lei Zhao 012; Yuncong Zhu; Jiang Ming 002; Yichen Zhang; Haotian Zhang; Heng Yin 001 (CCS, 2020)

Chaser: An Enhanced Fault Injection Tool for Tracing Soft Errors in MPI Applications. - Qiang Guan; Xunchao Hu; Terence Grove; Bo Fang 002; Hailong Jiang; Heng Yin 001; Nathan DeBardeleben (DSN, 2020)

DeepBinDiff: Learning Program-Wide Code Representations for Binary Diffing. - Yue Duan; Xuezixiang Li; Jinghan Wang; Heng Yin 001 (NDSS, 2020)

Parallel Space Traveling: A Security Analysis of App-Level Virtualization in Android. - Deshun Dai; Ruixuan Li 001; Junwei Tang; Ali Davanian; Heng Yin 001 (SACMAT, 2020)

AOMDroid: Detecting Obfuscation Variants of Android Malware Using Transfer Learning. - Yu Jiang; Ruixuan Li 001; Junwei Tang; Ali Davanian; Heng Yin 001 (SecureComm (2), 2020)

Automatic Generation of Adversarial Examples for Interpreting Malware Classifiers. - Wei Song; Xuezixiang Li; Sadia Afroz 001; Deepali Garg; Dmitry Kuznetsov; Heng Yin 001 (CoRR, 2020)

PalmTree: Learning an Assembly Language Model for Instruction Embedding. - Xuezixiang Li; Yu Qu; Heng Yin 001 (CCS, 2021)

SpecTaint: Speculative Taint Analysis for Discovering Spectre Gadgets. - Zhenxiao Qi; Qian Feng; Yueqiang Cheng; Mengjia Yan 001; Peng Li; Heng Yin 001; Tao Wei 002 (NDSS, 2021)

Reinforcement Learning-based Hierarchical Seed Scheduling for Greybox Fuzzing. - Jinghan Wang; Chengyu Song; Heng Yin 001 (NDSS, 2021)

Android SmartTVs Vulnerability Discovery via Log-Guided Fuzzing. - Yousra Aafer; Wei You 001; Yi Sun 004; Yu Shi; Xiangyu Zhang 001; Heng Yin 001 (USENIX Security Symposium, 2021)

PalmTree: Learning an Assembly Language Model for Instruction Embedding. - Xuezixiang Li; Qu Yu; Heng Yin 001 (CoRR, 2021)

Evaluating network embedding techniques' performances in software bug prediction. - Yu Qu; Heng Yin 001 (Empir. Softw. Eng., 2021)

Leveraging developer information for efficient effort-aware bug prediction. - Yu Qu; Jianlei Chi; Heng Yin 001 (Inf. Softw. Technol., 2021)

Alphuzz: Monte Carlo Search on Seed-Mutation Tree for Coverage-Guided Fuzzing. - Yiru Zhao; Xiaoke Wang; Lei Zhao 012; Yueqiang Cheng; Heng Yin 001 (ACSAC, 2022)

MAB-Malware: A Reinforcement Learning Framework for Blackbox Generation of Adversarial Malware. - Wei Song; Xuezixiang Li; Sadia Afroz 001; Deepali Garg; Dmitry Kuznetsov; Heng Yin 001 (AsiaCCS, 2022)

SymFusion: Hybrid Instrumentation for Concolic Execution. - Emilio Coppa; Heng Yin 001; Camil Demetrescu (ASE, 2022)

LogicMEM: Automatic Profile Generation for Binary-Only Memory Forensics via Logic Inference. - Zhenxiao Qi; Yu Qu; Heng Yin 001 (NDSS, 2022)

JIGSAW: Efficient and Scalable Path Constraints Fuzzing. - Ju Chen; Jinghan Wang; Chengyu Song; Heng Yin 001 (SP, 2022)

SYMSAN: Time and Space Efficient Concolic Execution via Dynamic Data-flow Analysis. - Ju Chen; Wookhyun Han; Mingjun Yin; Haochen Zeng; Chengyu Song; Byoungyoung Lee; Heng Yin 001; Insik Shin (USENIX Security Symposium, 2022)

DeepDi: Learning a Relational Graph Convolutional Network Model on Instructions for Fast and Accurate Disassembly. - Sheng Yu; Yu Qu; Xunchao Hu; Heng Yin 001 (USENIX Security Symposium, 2022)

Probabilistic Path Prioritization for Hybrid Fuzzing. - Lei Zhao 012; Pengcheng Cao; Yue Duan; Heng Yin 001; Jifeng Xuan (IEEE Trans. Dependable Secur. Comput., 2022)

Codee: A Tensor Embedding Scheme for Binary Code Search. - Jia Yang; Cai Fu; Xiao-Yang Liu; Heng Yin 001; Pan Zhou 001 (IEEE Trans. Software Eng., 2022)

R-Fuzz at SBFT'2023. - Ju Chen; Chengyu Song; Heng Yin 001 (SBFT, 2023)

Augmenting Greybox Fuzzing with Generative AI. - Jie Hu; Qian Zhang 020; Heng Yin 001 (CoRR, 2023)

SeqTrans: Automatic Vulnerability Fix Via Sequence to Sequence Learning. - Jianlei Chi; Yu Qu; Ting Liu 002; Qinghua Zheng; Heng Yin 001 (IEEE Trans. Software Eng., 2023)

Marco: A Stochastic Asynchronous Concolic Explorer (Source Code). - Jie Hu; Yue Duan; Heng Yin 001 (Zenodo, 2023)

On the Correctness of Metadata-Based SBOM Generation: A Differential Analysis Approach. - Sheng Yu; Wei Song; Xunchao Hu; Heng Yin 001 (DSN, 2024)

Marco: A Stochastic Asynchronous Concolic Explorer. - Jie Hu; Yue Duan; Heng Yin 001 (ICSE, 2024)

Calico: Automated Knowledge Calibration and Diagnosis for Elevating AI Mastery in Code Tasks. - Yuxin Qiu; Jie Hu; Qian Zhang 020; Heng Yin 001 (ISSTA, 2024)

SigmaDiff: Semantics-Aware Deep Graph Matching for Pseudocode Diffing. - Lian Gao; Yu Qu; Sheng Yu; Yue Duan; Heng Yin 001 (NDSS, 2024)

SymFit: Making the Common (Concrete) Case Fast for Binary-Code Concolic Execution. - Zhenxiao Qi; Jie Hu; Zhaoqi Xiao; Heng Yin 001 (USENIX Security Symposium, 2024)

BinDSA: Efficient, Precise Binary-Level Pointer Analysis with Context-Sensitive Heap Reconstruction. - Lian Gao; Heng Yin 001 (Proc. ACM Softw. Eng., 2025)

ALMOND: Learning an Assembly Language Model for 0-Shot Code Obfuscation Detection. - Xuezixiang Li; Sheng Yu; Heng Yin 001 (Proc. ACM Softw. Eng., 2025)