Lei Zhang

According to our database, Lei Zhang authored at least 24 papers between 2016 and 2025.

Collaborative distances:

• Dijkstra number of four.
• Erdős number of four.

2025

XSSky: Detecting XSS Vulnerabilities through Local Path-Persistent Fuzzing.

Youkun Shi, Yuan Zhang, Tianhao Bai, Feng Xue, Jiarun Dai, Fengyu Liu, Lei Zhang, Xiapu Luo, Min Yang

Dataset, June, 2025

XSSky: Detecting XSS Vulnerabilities through Local Path-Persistent Fuzzing.

Youkun Shi, Yuan Zhang, Tianhao Bai, Feng Xue, Jiarun Dai, Fengyu Liu, Lei Zhang, Xiapu Luo, Min Yang

Proceedings of the 34th USENIX Security Symposium, 2025

Effective Directed Fuzzing with Hierarchical Scheduling for Web Vulnerability Detection.

Zihan Lin, Yuan Zhang, Jiarun Dai, Xinyou Huang, Bocheng Xiang, Guangliang Yang, Letian Yuan, Lei Zhang, Tian Chen, Min Yang

Proceedings of the 34th USENIX Security Symposium, 2025

Careless Retention and Management: Understanding and Detecting Data Retention Denial-of-Service Vulnerabilities in Java Web Containers.

Keke Lian, Lei Zhang, Haoran Zhao, Yinzhi Cao, Yongheng Liu, Fute Sun, Yuan Zhang, Min Yang

Proceedings of the 34th USENIX Security Symposium, 2025

Towards Automatic Detection and Exploitation of Java Web Application Vulnerabilities via Concolic Execution guided by Cross-thread Object Manipulation.

Xinyou Huang, Lei Zhang, Yongheng Liu, Peng Deng, Yinzhi Cao, Yuan Zhang, Min Yang

Proceedings of the 34th USENIX Security Symposium, 2025

ChainFuzz: Exploiting Upstream Vulnerabilities in Open-Source Supply Chains.

Peng Deng, Lei Zhang, Yuchuan Meng, Zhemin Yang, Yuan Zhang, Zhemin Yang

Proceedings of the 34th USENIX Security Symposium, 2025

Beyond Exploit Scanning: A Functional Change-Driven Approach to Remote Software Version Identification.

Jinsong Chen, Mengying Wu, Geng Hong, Baichao An, Mingxuan Liu, Lei Zhang, Baojun Liu, Haixin Duan, Min Yang

Proceedings of the 34th USENIX Security Symposium, 2025

Misdirection of Trust: Demystifying the Abuse of Dedicated URL Shortening Service.

Zhibo Zhang, Lei Zhang, Zhangyue Zhang, Geng Hong, Yuan Zhang, Min Yang

Proceedings of the 32nd Annual Network and Distributed System Security Symposium, 2025

Exposing the Hidden Layer: Software Repositories in the Service of Seo Manipulation.

Mengying Wu, Geng Hong, Wuyuao Mai, Xinyi Wu, Lei Zhang, Yingyuan Pu, Huajun Chai, Lingyun Ying, Haixin Duan, Min Yang

Proceedings of the 47th IEEE/ACM International Conference on Software Engineering, 2025

2024

The Dark Forest: Understanding Security Risks of Cross-Party Delegated Resources in Mobile App-in-App Ecosystems.

Zhibo Zhang, Lei Zhang, Guangliang Yang, Yanjun Chen, Jiahao Xu, Min Yang

IEEE Trans. Inf. Forensics Secur., 2024

Component Security Ten Years Later: An Empirical Study of Cross-Layer Threats in Real-World Mobile Applications.

Keke Lian, Lei Zhang, Guangliang Yang, Shuo Mao, Xinjie Wang, Yuan Zhang, Min Yang

Proc. ACM Softw. Eng., 2024

RecurScan: Detecting Recurring Vulnerabilities in PHP Web Applications.

Youkun Shi, Yuan Zhang, Tianhao Bai, Lei Zhang, Xin Tan, Min Yang

Proceedings of the ACM on Web Conference 2024, 2024

Efficient Detection of Java Deserialization Gadget Chains via Bottom-up Gadget Search and Dataflow-aided Payload Construction.

Bofei Chen, Lei Zhang, Xinyou Huang, Yinzhi Cao, Keke Lian, Yuan Zhang, Min Yang

Proceedings of the IEEE Symposium on Security and Privacy, 2024

2023

Understanding Privacy Over-collection in WeChat Sub-app Ecosystem.

Xiaohan Zhang, Yang Wang, Xin Zhang, Ziqi Huang, Lei Zhang, Min Yang

CoRR, 2023

TrustedDomain Compromise Attack in App-in-app Ecosystems.

Zhibo Zhang, Zhangyue Zhang, Keke Lian, Guangliang Yang, Lei Zhang, Yuan Zhang, Min Yang

Proceedings of the 2023 ACM Workshop on Secure and Trustworthy Superapps, 2023

NestFuzz: Enhancing Fuzzing with Comprehensive Understanding of Input Processing Logic.

Peng Deng, Zhemin Yang, Lei Zhang, Guangliang Yang, Wenzheng Hong, Yuan Zhang, Min Yang

Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security, 2023

2022

Identity Confusion in WebView-based Mobile App-in-app Ecosystems.

Lei Zhang, Zhibo Zhang, Ancong Liu, Yinzhi Cao, Xiaohan Zhang, Yanjun Chen, Yuan Zhang, Guangliang Yang, Min Yang

Proceedings of the 31st USENIX Security Symposium, 2022

Exploit the Last Straw That Breaks Android Systems.

Lei Zhang, Keke Lian, Haoyu Xiao, Zhibo Zhang, Peng Liu, Yuan Zhang, Min Yang, Haixin Duan

Proceedings of the 43rd IEEE Symposium on Security and Privacy, 2022

2020

TextExerciser: Feedback-driven Text Input Exercising for Android Applications.

Yuyu He, Lei Zhang, Zhemin Yang, Yinzhi Cao, Keke Lian, Shuai Li, Wei Yang, Zhibo Zhang, Min Yang, Yuan Zhang, Haixin Duan

Proceedings of the 2020 IEEE Symposium on Security and Privacy, 2020

2019

App in the Middle: Demystify Application Virtualization in Android and its Security Threats.

Lei Zhang, Zhemin Yang, Yuyu He, Mingqi Li, Sen Yang, Min Yang, Yuan Zhang, Zhiyun Qian

Proceedings of the Abstracts of the 2019 SIGMETRICS/Performance Joint International Conference on Measurement and Modeling of Computer Systems, 2019

UR: A User-Based Collaborative Filtering Recommendation System Based on Trust Mechanism and Time Weighting.

Lei Zhang, Zhijun Zhang, Jufang He, Zhenyu Zhang

Proceedings of the 25th IEEE International Conference on Parallel and Distributed Systems, 2019

2018

Invetter: Locating Insecure Input Validations in Android Services.

Lei Zhang, Zhemin Yang, Yuyu He, Zhenyu Zhang, Zhiyun Qian, Geng Hong, Yuan Zhang, Min Yang

Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security, 2018

How You Get Shot in the Back: A Systematical Study about Cryptojacking in the Real World.

Geng Hong, Zhemin Yang, Sen Yang, Lei Zhang, Yuhong Nan, Zhibo Zhang, Min Yang, Yuan Zhang, Zhiyun Qian, Hai-Xin Duan

Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security, 2018

2016

A survey of privacy protection techniques for mobile devices.

Lei Zhang, Donglai Zhu, Zhemin Yang, Limin Sun, Min Yang

J. Commun. Inf. Networks, 2016