Host of Troubles: Multiple Host Ambiguities in HTTP Implementations. - Jianjun Chen 005; Jian Jiang 002; Hai-Xin Duan; Nicholas Weaver; Tao Wan 004; Vern Paxson (CCS, 2016)

Forwarding-Loop Attacks in Content Delivery Networks. - Jianjun Chen 005; Xiaofeng Zheng; Hai-Xin Duan; Jinjin Liang; Jian Jiang 002; Kang Li 001; Tao Wan 004; Vern Paxson (NDSS, 2016)

Seeking Nonsense, Looking for Trouble: Efficient Promotional-Infection Detection through Semantic Inconsistency Search. - Xiaojing Liao; Kan Yuan; XiaoFeng Wang 001; Zhongyu Pei; Hao Yang; Jianjun Chen 005; Hai-Xin Duan; Kun Du; Eihal Alowaisheq; Sumayah A. Alrwais; Luyi Xing; Raheem A. Beyah (IEEE Symposium on Security and Privacy, 2016)

Path Leaks of HTTPS Side-Channel by Cookie Injection. - Fuqing Chen; Hai-Xin Duan; Xiaofeng Zheng; Jian Jiang 002; Jianjun Chen 005 (COSADE, 2018)

Abusing CDNs for Fun and Profit: Security Issues in CDNs' Origin Validation. - Run Guo; Jianjun Chen 005; Baojun Liu; Jia Zhang 004; Chao Zhang 008; Hai-Xin Duan; Tao Wan 004; Jian Jiang 002; Shuang Hao 001; Yaoqi Jia (SRDS, 2018)

We Still Don't Have Secure Cross-Domain Requests: an Empirical Study of CORS. - Jianjun Chen 005; Jian Jiang 002; Hai-Xin Duan; Tao Wan 004; Shuo Chen 001; Vern Paxson; Min Yang 002 (USENIX Security Symposium, 2018)

CDN Judo: Breaking the CDN DoS Protection with Itself. - Run Guo; Weizhong Li; Baojun Liu; Shuang Hao 001; Jia Zhang 004; Haixin Duan; Kaiwen Sheng; Jianjun Chen 005; Ying Liu 024 (NDSS, 2020)

Composition Kills: A Case Study of Email Sender Authentication. - Jianjun Chen 005; Vern Paxson; Jian Jiang 002 (USENIX Security Symposium, 2020)

HDiff: A Semi-automatic Framework for Discovering Semantic Gap Attack in HTTP Implementations. - Kaiwen Shen; Jianyu Lu; Yaru Yang; Jianjun Chen 005; Mingming Zhang; Haixin Duan; Jia Zhang 004; Xiaofeng Zheng (DSN, 2022)

A Large-scale and Longitudinal Measurement Study of DKIM Deployment. - Chuhan Wang; Kaiwen Shen; Minglei Guo; Yuxuan Zhao; Mingming Zhang; Jianjun Chen 005; Baojun Liu; Xiaofeng Zheng; Haixin Duan; Yanzhong Lin; Qingfeng Pan (USENIX Security Symposium, 2022)

TsuKing: Coordinating DNS Resolvers and Queries into Potent DoS Amplifiers. - Wei Xu; Xiang Li 108; Chaoyi Lu; Baojun Liu; Haixin Duan; Jia Zhang 004; Jianjun Chen 005; Tao Wan 004 (CCS, 2023)

Under the Dark: A Systematical Study of Stealthy Mining Pools (Ab)use in the Wild. - Zhenrui Zhang; Geng Hong; Xiang Li 108; Zhuoqun Fu; Jia Zhang 004; Mingxuan Liu; Chuhan Wang; Jianjun Chen 005; Baojun Liu; Haixin Duan; Chao Zhang 008; Min Yang 002 (CCS, 2023)

Silence is not Golden: Disrupting the Load Balancing of Authoritative DNS Servers. - Fenglu Zhang; Baojun Liu; Eihal Alowaisheq; Jianjun Chen 005; Chaoyi Lu; Linjian Song; Yong Ma; Ying Liu 024; Haixin Duan; Min Yang 002 (CCS, 2023)

1dFuzz: Reproduce 1-Day Vulnerabilities with Directed Differential Fuzzing. - Songtao Yang; Yubo He; Kaixiang Chen; Zheyu Ma; Xiapu Luo; Yong Xie; Jianjun Chen 005; Chao Zhang 008 (ISSTA, 2023)

A Security Study about Electron Applications and a Programming Methodology to Tame DOM Functionalities. - Zihao Jin; Shuo Chen 001; Yang Chen; Haixin Duan; Jianjun Chen 005; Jianping Wu (NDSS, 2023)

Callee: Recovering Call Graphs for Binaries with Transfer and Contrastive Learning. - Wenyu Zhu; Zhiyao Feng; Zihan Zhang; Jianjun Chen 005; Zhijian Ou; Min Yang 002; Chao Zhang 008 (SP, 2023)

Temporal CDN-Convex Lens: A CDN-Assisted Practical Pulsing DDoS Attack. - Run Guo; Jianjun Chen 005; Yihang Wang; Keran Mu; Baojun Liu; Xiang Li 108; Chao Zhang 008; Haixin Duan; Jianping Wu (USENIX Security Symposium, 2023)

Detecting and Measuring Security Risks of Hosting-Based Dangling Domains. - Mingming Zhang; Xiang Li 108; Baojun Liu; Jianyu Lu; Yiming Zhang 009; Jianjun Chen 005; Haixin Duan; Shuang Hao 001; Xiaofeng Zheng (Proc. ACM Meas. Anal. Comput. Syst., 2023)

Internet's Invisible Enemy: Detecting and Measuring Web Cache Poisoning in the Wild. - Yuejia Liang; Jianjun Chen 005; Run Guo; Kaiwen Shen; Hui Jiang; Man Hou; Yue Yu; Haixin Duan (CCS, 2024)

Inbox Invasion: Exploiting MIME Ambiguities to Evade Email Attachment Detectors. - Jiahe Zhang; Jianjun Chen 005; Qi Wang 094; Hangyu Zhang; Chuhan Wang; Jianwei Zhuge; Haixin Duan (CCS, 2024)

Bounce in the Wild: A Deep Dive into Email Delivery Failures from a Large Email Service Provider. - Ruixuan Li 008; Shaodong Xiao; Baojun Liu; Yanzhong Lin; Haixin Duan; Qingfeng Pan; Jianjun Chen 005; Jia Zhang 004; Ximeng Liu; Xiuqi Lu; Jun Shao 001 (IMC, 2024)

Faster and Better: Detecting Vulnerabilities in Linux-based IoT Firmware with Optimized Reaching Definition Analysis. - Zicong Gao; Chao Zhang 008; Hangtian Liu; Wenhou Sun; Zhizhuo Tang; Liehui Jiang; Jianjun Chen 005; Yong Xie (NDSS, 2024)

BreakSPF: How Shared Infrastructures Magnify SPF Vulnerabilities Across the Internet. - Chuhan Wang; Yasuhiro Kuranaga; Yihang Wang; Mingming Zhang; Linkai Zheng; Xiang Li 108; Jianjun Chen 005; Haixin Duan; Yanzhong Lin; Qingfeng Pan (NDSS, 2024)

ReqsMiner: Automated Discovery of CDN Forwarding Request Inconsistencies and DoS Attacks with Grammar-based Fuzzing. - Linkai Zheng; Xiang Li 108; Chuhan Wang; Run Guo; Haixin Duan; Jianjun Chen 005; Chao Zhang 008; Kaiwen Shen (NDSS, 2024)

TuDoor Attack: Systematically Exploring and Exploiting Logic Vulnerabilities in DNS Response Pre-processing with Malformed Packets. - Xiang Li 108; Wei Xu; Baojun Liu; Mingming Zhang; Zhou Li 001; Jia Zhang 004; Deliang Chang; Xiaofeng Zheng; Chuhan Wang; Jianjun Chen 005; Haixin Duan; Qi Li 002 (SP, 2024)

Break the Wall from Bottom: Automated Discovery of Protocol-Level Evasion Vulnerabilities in Web Application Firewalls. - Qi Wang 094; Jianjun Chen 005; Zheyu Jiang; Run Guo; Ximeng Liu; Chao Zhang 008; Haixin Duan (SP, 2024)

Where URLs Become Weapons: Automated Discovery of SSRF Vulnerabilities in Web Applications. - Enze Wang; Jianjun Chen 005; Wei Xie 007; Chuhan Wang; Yifei Gao; Zhenhua Wang; Haixin Duan; Yang Liu 003; Baosheng Wang (SP, 2024)

Demystifying the Security Implications in IoT Device Rental Services. - Yi He; Yunchao Guan; Ruoyu Lun; Shangru Song; Zhihao Guo; Jianwei Zhuge; Jianjun Chen 005; Qiang Wei; Zehui Wu; Miao Yu; Hetian Shi; Qi Li 002 (USENIX Security Symposium, 2024)

CDN Cannon: Exploiting CDN Back-to-Origin Strategies for Amplification Attacks. - Ziyu Lin; Zhiwei Lin; Ximeng Liu; Jianjun Chen 005; Run Guo; Cheng Chen; Shaodong Xiao (USENIX Security Symposium, 2024)

Uncovering Security Vulnerabilities in Real-world Implementation and Deployment of 5G Messaging Services. - Yaru Yang; Yiming Zhang 009; Tao Wan 004; Chuhan Wang; Haixin Duan; Jianjun Chen 005; Yishen Li (WISEC, 2024)

Detecting and Measuring Security Implications of Entangled Domain Verification in CDN. - Ziyu Lin; Zhiwei Lin; Run Guo; Jianjun Chen 005; Mingming Zhang; Ximeng Liu; Tianhao Yang; Zhuoran Cao; Robert H. Deng (CoRR, 2024)

The Danger of Packet Length Leakage: Off-path TCP/IP Hijacking Attacks Against Wireless and Mobile Networks. - Guancheng Li; Minghao Zhang; Jianjun Chen 005; Ge Dai; Pinji Chen; Huiming Liu; Yang Yu; Haixin Duan; Zhiyun Qian (EuroS&P, 2025)

Cross-Origin Web Attacks via HTTP/2 Server Push and Signed HTTP Exchange. - Pinji Chen; Jianjun Chen 005; Mingming Zhang; Qi Wang 094; Yiming Zhang 009; Mingwei Xu; Haixin Duan (NDSS, 2025)

Invade the Walled Garden: Evaluating GTP Security in Cellular Networks. - Yiming Zhang 009; Tao Wan 004; Yaru Yang; Haixin Duan; Yichen Wang; Jianjun Chen 005; Zixiang Wei; Xiang Li 108 (SP, 2025)