WormTerminator: an effective containment of unknown and polymorphic fast spreading worms. - Songqing Chen; Xinyuan Wang 005; Lei Liu 021; Xinwen Zhang (ANCS, 2006)

BotTracer: Execution-Based Bot-Like Malware Detection. - Lei Liu 021; Songqing Chen; Guanhua Yan; Zhao Zhang 010 (ISC, 2008)

Malyzer: Defeating Anti-detection for Application-Level Malware Analysis. - Lei Liu 021; Songqing Chen (ACNS, 2009)

Exploitation and threat analysis of open mobile devices. - Lei Liu 021; Xinwen Zhang; Guanhua Yan; Songqing Chen (ANCS, 2009)

VirusMeter: Preventing Your Cellphone from Spies. - Lei Liu 021; Guanhua Yan; Xinwen Zhang; Songqing Chen (RAID, 2009)

Multi-level Sandboxing Techniques for Execution-based Stealthy Malware Detection. - Lei Liu 021 (2010)

Botnet with Browser Extensions. - Lei Liu 021; Xinwen Zhang; Songqing Chen (SocialCom/PASSAT, 2011)

Chrome Extensions: Threat Analysis and Countermeasures. - Lei Liu 021; Xinwen Zhang; Guanhua Yan; Songqing Chen (NDSS, 2012)

A Host-Based Approach for Unknown Fast-Spreading Worm Detection and Containment. - Songqing Chen; Lei Liu 021; Xinyuan Wang 005; Xinwen Zhang; Zhao Zhang 010 (ACM Trans. Auton. Adapt. Syst., 2014)