A survey of privacy protection techniques for mobile devices. - Lei Zhang 096; Donglai Zhu; Zhemin Yang; Limin Sun 001; Min Yang 002 (J. Commun. Inf. Networks, 2016)

How You Get Shot in the Back: A Systematical Study about Cryptojacking in the Real World. - Geng Hong; Zhemin Yang; Sen Yang; Lei Zhang 096; Yuhong Nan; Zhibo Zhang; Min Yang 002; Yuan Zhang 009; Zhiyun Qian; Hai-Xin Duan (CCS, 2018)

Invetter: Locating Insecure Input Validations in Android Services. - Lei Zhang 096; Zhemin Yang; Yuyu He; Zhenyu Zhang; Zhiyun Qian; Geng Hong; Yuan Zhang 009; Min Yang 002 (CCS, 2018)

UR: A User-Based Collaborative Filtering Recommendation System Based on Trust Mechanism and Time Weighting. - Lei Zhang 096; Zhijun Zhang; Jufang He; Zhenyu Zhang (ICPADS, 2019)

App in the Middle: Demystify Application Virtualization in Android and its Security Threats. - Lei Zhang 096; Zhemin Yang; Yuyu He; Mingqi Li; Sen Yang; Min Yang 002; Yuan Zhang 009; Zhiyun Qian (Proc. ACM Meas. Anal. Comput. Syst., 2019)

TextExerciser: Feedback-driven Text Input Exercising for Android Applications. - Yuyu He; Lei Zhang 096; Zhemin Yang; Yinzhi Cao; Keke Lian; Shuai Li 006; Wei Yang 013; Zhibo Zhang; Min Yang 002; Yuan Zhang 009; Haixin Duan (SP, 2020)

Exploit the Last Straw That Breaks Android Systems. - Lei Zhang 096; Keke Lian; Haoyu Xiao; Zhibo Zhang; Peng Liu 005; Yuan Zhang 009; Min Yang 002; Haixin Duan (SP, 2022)

Identity Confusion in WebView-based Mobile App-in-app Ecosystems. - Lei Zhang 096; Zhibo Zhang; Ancong Liu; Yinzhi Cao; Xiaohan Zhang 001; Yanjun Chen; Yuan Zhang 009; Guangliang Yang 001; Min Yang 002 (USENIX Security Symposium, 2022)

NestFuzz: Enhancing Fuzzing with Comprehensive Understanding of Input Processing Logic. - Peng Deng; Zhemin Yang; Lei Zhang 096; Guangliang Yang 001; Wenzheng Hong; Yuan Zhang 009; Min Yang 002 (CCS, 2023)

TrustedDomain Compromise Attack in App-in-app Ecosystems. - Zhibo Zhang; Zhangyue Zhang; Keke Lian; Guangliang Yang 001; Lei Zhang 096; Yuan Zhang 009; Min Yang 002 (SaTS@CCS, 2023)

Understanding Privacy Over-collection in WeChat Sub-app Ecosystem. - Xiaohan Zhang 001; Yang Wang 167; Xin Zhang; Ziqi Huang; Lei Zhang 096; Min Yang 002 (CoRR, 2023)

Efficient Detection of Java Deserialization Gadget Chains via Bottom-up Gadget Search and Dataflow-aided Payload Construction. - Bofei Chen; Lei Zhang 096; Xinyou Huang; Yinzhi Cao; Keke Lian; Yuan Zhang 009; Min Yang 002 (SP, 2024)

RecurScan: Detecting Recurring Vulnerabilities in PHP Web Applications. - Youkun Shi; Yuan Zhang 009; Tianhao Bai; Lei Zhang 096; Xin Tan; Min Yang 002 (WWW, 2024)

Component Security Ten Years Later: An Empirical Study of Cross-Layer Threats in Real-World Mobile Applications. - Keke Lian; Lei Zhang 096; Guangliang Yang 001; Shuo Mao; Xinjie Wang; Yuan Zhang 009; Min Yang 002 (Proc. ACM Softw. Eng., 2024)

The Dark Forest: Understanding Security Risks of Cross-Party Delegated Resources in Mobile App-in-App Ecosystems. - Zhibo Zhang; Lei Zhang 096; Guangliang Yang 001; Yanjun Chen; Jiahao Xu; Min Yang 002 (IEEE Trans. Inf. Forensics Secur., 2024)

Exposing the Hidden Layer: Software Repositories in the Service of Seo Manipulation. - Mengying Wu; Geng Hong; Wuyuao Mai; Xinyi Wu; Lei Zhang 096; Yingyuan Pu; Huajun Chai; Lingyun Ying; Haixin Duan; Min Yang 002 (ICSE, 2025)

Misdirection of Trust: Demystifying the Abuse of Dedicated URL Shortening Service. - Zhibo Zhang; Lei Zhang 096; Zhangyue Zhang; Geng Hong; Yuan Zhang 009; Min Yang 002 (NDSS, 2025)