A Quantitative Evaluation of Privilege Separation in Web Browser Designs. - Xinshu Dong; Hong Hu 004; Prateek Saxena; Zhenkai Liang (ESORICS, 2013)

DroidVault: A Trusted Data Vault for Android Devices. - Xiaolei Li; Hong Hu 004; Guangdong Bai; Yaoqi Jia; Zhenkai Liang; Prateek Saxena (ICECCS, 2014)

Practical Analysis Framework for Software-Based Attestation Scheme. - Li Li 044; Hong Hu 004; Jun Sun 001; Yang Liu 003; Jin Song Dong (ICFEM, 2014)

Identifying Arbitrary Memory Access Vulnerabilities in Privilege-Separated Software. - Hong Hu 004; Zheng Leong Chua; Zhenkai Liang; Prateek Saxena (ESORICS (2), 2015)

Automatic Generation of Data-Oriented Exploits. - Hong Hu 004; Zheng Leong Chua; Sendroiu Adrian; Prateek Saxena; Zhenkai Liang (USENIX Security Symposium, 2015)

"The Web/Local" Boundary Is Fuzzy: A Security Study of Chrome's Process-based Sandboxing. - Yaoqi Jia; Zheng Leong Chua; Hong Hu 004; Shuo Chen 001; Prateek Saxena; Zhenkai Liang (CCS, 2016)

Data-Oriented Programming: On the Expressiveness of Non-control Data Attacks. - Hong Hu 004; Shweta Shinde; Sendroiu Adrian; Zheng Leong Chua; Prateek Saxena; Zhenkai Liang (IEEE Symposium on Security and Privacy, 2016)

Automatically assessing crashes from heap overflows. - Liang He 011; Yan Cai 001; Hong Hu 004; Purui Su; Zhenkai Liang; Yi Yang 040; Huafeng Huang; Jia Yan; Xiangkun Jia; Dengguo Feng (ASE, 2017)

Enforcing Unique Code Target Property for Control-Flow Integrity. - Hong Hu 004; Chenxiong Qian; Carter Yagemann; Simon Pak Ho Chung; William R. Harris; Taesoo Kim; Wenke Lee (CCS, 2018)

Where Does It Go?: Refining Indirect-Call Targets with Multi-Layer Type Analysis. - Kangjie Lu; Hong Hu 004 (CCS, 2019)

Fuzzification: Anti-Fuzzing Techniques. - Jinho Jung 001; Hong Hu 004; David Solodukhin; Daniel Pagan; Kyu Hyung Lee; Taesoo Kim (USENIX Security Symposium, 2019)

RAZOR: A Framework for Post-deployment Software Debloating. - Chenxiong Qian; Hong Hu 004; Mansour Alharthi; Simon Pak Ho Chung; Taesoo Kim; Wenke Lee (USENIX Security Symposium, 2019)

APOLLO: Automatic Detection and Diagnosis of Performance Regressions in Database Systems. - Jinho Jung 001; Hong Hu 004; Joy Arulraj; Taesoo Kim; Woon-Hak Kang (Proc. VLDB Endow., 2019)

SQUIRREL: Testing Database Management Systems with Language Validity and Coverage Feedback. - Rui Zhong; Yongheng Chen; Hong Hu 004; Hangfan Zhang; Wenke Lee; Dinghao Wu (CCS, 2020)

DESENSITIZATION: Privacy-Aware and Attack-Preserving Crash Report. - Ren Ding 001; Hong Hu 004; Wen Xu 002; Taesoo Kim (NDSS, 2020)

Identifying Behavior Dispatchers for Malware Analysis. - Kyuhong Park; Burak Sahin; Yongheng Chen; Jisheng Zhao; Evan Downing; Hong Hu 004; Wenke Lee (AsiaCCS, 2021)

WINNIE : Fuzzing Windows Applications with Harness Synthesis and Fast Cloning. - Jinho Jung 001; Stephen Tong; Hong Hu 004; Jungwon Lim; Yonghwi Jin; Taesoo Kim (NDSS, 2021)

One Engine to Fuzz 'em All: Generic Language Processor Testing with Semantic Validation. - Yongheng Chen; Rui Zhong; Hong Hu 004; Hangfan Zhang; Yupeng Yang; Dinghao Wu; Wenke Lee (SP, 2021)

Sharing More and Checking Less: Leveraging Common Input Keywords to Detect Bugs in Embedded Systems. - Libo Chen 001; Yanhao Wang; Quanpu Cai; Yunfan Zhan; Hong Hu 004; Jiaqi Linghu; Qinsheng Hou; Chao Zhang 008; Haixin Duan; Zhi Xue (USENIX Security Symposium, 2021)

Preventing Use-After-Free Attacks with Fast Forward Allocation. - Brian Wickman; Hong Hu 004; Insu Yun; Daehee Jang; Jungwon Lim; Sanidhya Kashyap; Taesoo Kim (USENIX Security Symposium, 2021)

Abusing Hidden Properties to Attack the Node.js Ecosystem. - Feng Xiao; Jianwei Huang; Yichang Xiong; Guangliang Yang 001; Hong Hu 004; Guofei Gu; Wenke Lee (USENIX Security Symposium, 2021)

Identifying Non-Control Security-Critical Data in Program Binaries with a Deep Neural Model. - Zhilong Wang; Haizhou Wang; Hong Hu 004; Peng Liu (CoRR, 2021)

Who goes first? detecting go concurrency bugs via message reordering. - Ziheng Liu; Shihao Xia; Yu Liang 002; Linhai Song; Hong Hu 004 (ASPLOS, 2022)

SFuzz: Slice-based Fuzzing for Real-Time Operating Systems. - Libo Chen 001; Quanpu Cai; Zhenbang Ma; Yanhao Wang; Hong Hu 004; Minghang Shen; Yue Liu; Shanqing Guo; Haixin Duan; Kaida Jiang; Zhi Xue (CCS, 2022)

COOPER: Testing the Binding Code of Scripting Languages with Cooperative Mutation. - Peng Xu; Yanhao Wang; Hong Hu 004; Purui Su (NDSS, 2022)

FreeWill: Automatically Diagnosing Use-after-free Bugs via Reference Miscounting Detection on Binaries. - Liang He 011; Hong Hu 004; Purui Su; Yan Cai 001; Zhenkai Liang (USENIX Security Symposium, 2022)

Detecting Logical Bugs of DBMS with Coverage-based Guidance. - Yu Liang 002; Song Liu; Hong Hu 004 (USENIX Security Symposium, 2022)

µFUZZ: Redesign of Parallel Fuzzing using Microservice Architecture. - Yongheng Chen; Rui Zhong; Yupeng Yang; Hong Hu 004; Dinghao Wu; Wenke Lee (USENIX Security Symposium, 2023)

VIPER: Spotting Syscall-Guard Variables for Data-Only Attacks. - Hengkai Ye; Song Liu; Zhechang Zhang; Hong Hu 004 (USENIX Security Symposium, 2023)

CountDown: Refcount-guided Fuzzing for Exposing Temporal Memory Errors in Linux Kernel. - Shuangpeng Bai; Zhechang Zhang; Hong Hu 004 (CCS, 2024)

MalwareTotal: Multi-Faceted and Sequence-Aware Bypass Tactics against Static Malware Detection. - Shuai He; Cai Fu; Hong Hu 004; Jiahe Chen; Jianqiang Lv; Shuai Jiang (ICSE, 2024)

DEEPTYPE: Refining Indirect Call Targets with Strong Multi-layer Type Analysis. - Tianrou Xia; Hong Hu 004; Dinghao Wu (USENIX Security Symposium, 2024)

BinCola: Diversity-Sensitive Contrastive Learning for Binary Code Similarity Detection. - Shuai Jiang; Cai Fu; Shuai He; Jianqiang Lv; Lansheng Han; Hong Hu 004 (IEEE Trans. Software Eng., 2024)

Too Subtle to Notice: Investigating Executable Stack Issues in Linux Systems. - Hengkai Ye; Hong Hu 004 (NDSS, 2025)