A Client-Based and Server-Enhanced Defense Mechanism for Cross-Site Request Forgery. - Luyi Xing; Yuqing Zhang; Shenlong Chen (RAID, 2010)

Unauthorized origin crossing on mobile platforms: threats and mitigation. - Rui Wang 010; Luyi Xing; XiaoFeng Wang 001; Shuo Chen 001 (CCS, 2013)

InteGuard: Toward Automatic Protection of Third-Party Web Service Integrations. - Luyi Xing; Yangyi Chen; XiaoFeng Wang 001; Shuo Chen 001 (NDSS, 2013)

Mayhem in the Push Clouds: Understanding and Mitigating Security Hazards in Mobile Push-Messaging Services. - Tongxin Li; Xiao-yong Zhou; Luyi Xing; Yeonjoon Lee; Muhammad Naveed 001; XiaoFeng Wang 001; Xinhui Han (CCS, 2014)

Upgrading Your Android, Elevating My Malware: Privilege Escalation through Mobile OS Updating. - Luyi Xing; Xiaorui Pan; Rui Wang 010; Kan Yuan; XiaoFeng Wang 001 (IEEE Symposium on Security and Privacy, 2014)

Cracking App Isolation on Apple: Unauthorized Cross-App Resource Access on MAC OS X and iOS. - Luyi Xing; Xiaolong Bai; Tongxin Li; XiaoFeng Wang 001; Kai Chen 012; Xiaojing Liao; Shi-Min Hu 001; Xinhui Han (CCS, 2015)

Unauthorized Cross-App Resource Access on MAC OS X and iOS. - Luyi Xing; Xiaolong Bai; Tongxin Li; XiaoFeng Wang 001; Kai Chen 012; Xiaojing Liao; Shi-Min Hu 001; Xinhui Han (CoRR, 2015)

Lurking Malice in the Cloud: Understanding and Detecting Cloud Repository as a Malicious Service. - Xiaojing Liao; Sumayah A. Alrwais; Kan Yuan; Luyi Xing; XiaoFeng Wang 001; Shuang Hao 001; Raheem A. Beyah (CCS, 2016)

Acing the IOC Game: Toward Automatic Discovery and Analysis of Open-Source Cyber Threat Intelligence. - Xiaojing Liao; Kan Yuan; XiaoFeng Wang 001; Zhou Li 001; Luyi Xing; Raheem A. Beyah (CCS, 2016)

Staying Secure and Unprepared: Understanding and Mitigating the Security Risks of Apple ZeroConf. - Xiaolong Bai; Luyi Xing; Nan Zhang 018; XiaoFeng Wang 001; Xiaojing Liao; Tongxin Li; Shi-Min Hu 001 (IEEE Symposium on Security and Privacy, 2016)

Seeking Nonsense, Looking for Trouble: Efficient Promotional-Infection Detection through Semantic Inconsistency Search. - Xiaojing Liao; Kan Yuan; XiaoFeng Wang 001; Zhongyu Pei; Hao Yang; Jianjun Chen 005; Hai-Xin Duan; Kun Du; Eihal Alowaisheq; Sumayah A. Alrwais; Luyi Xing; Raheem A. Beyah (IEEE Symposium on Security and Privacy, 2016)

Unleashing the Walking Dead: Understanding Cross-App Remote Infections on Mobile WebViews. - Tongxin Li; Xueqiang Wang; Mingming Zha 001; Kai Chen 012; XiaoFeng Wang 001; Luyi Xing; Xiaolong Bai; Nan Zhang 018; Xinhui Han (CCS, 2017)

Apple ZeroConf Holes: How Hackers Can Steal iPhone Photos. - Xiaolong Bai; Luyi Xing; Nan Zhang 018; XiaoFeng Wang 001; Xiaojing Liao; Tongxin Li; Shi-Min Hu 001 (IEEE Secur. Priv., 2017)

Cloud repository as a malicious service: challenge, identification and implication. - Xiaojing Liao; Sumayah A. Alrwais; Kan Yuan; Luyi Xing; XiaoFeng Wang 001; Shuang Hao 001; Raheem Beyah (Cybersecur., 2018)

Devils in the Guidance: Predicting Logic Vulnerabilities in Payment Syndication Services through Automated Documentation Analysis. - Yi Chen 024; Luyi Xing; Yue Qin; Xiaojing Liao; XiaoFeng Wang 001; Kai Chen 012; Wei Zou (USENIX Security Symposium, 2019)

iDEA: Static Analysis on the Security of Apple Kernel Drivers. - Xiaolong Bai; Luyi Xing; Min Zheng; Fuping Qu (CCS, 2020)

Demystifying Resource Management Risks in Emerging Mobile App-in-App Ecosystems. - Haoran Lu; Luyi Xing; Yue Xiao 007; Yifan Zhang 010; Xiaojing Liao; XiaoFeng Wang 001; Xueqiang Wang (CCS, 2020)

RTFM! Automatic Assumption Discovery and Verification Derivation from Library Document for API Misuse Detection. - Tao Lv; Ruishi Li; Yi Yang 100; Kai Chen 012; Xiaojing Liao; XiaoFeng Wang 001; Peiwei Hu; Luyi Xing (CCS, 2020)

Burglars' IoT Paradise: Understanding and Mitigating Security Risks of General Messaging Protocols on IoT Clouds. - Yan Jia; Luyi Xing; Yuhang Mao; Dongfang Zhao 010; XiaoFeng Wang 001; Shangru Zhao; Yuqing Zhang 001 (SP, 2020)

Shattered Chain of Trust: Understanding Security Risks in Cross-Cloud IoT Access Delegation. - Bin Yuan; Yan Jia; Luyi Xing; Dongfang Zhao 010; XiaoFeng Wang 001; Deqing Zou; Hai Jin 001; Yuqing Zhang 001 (USENIX Security Symposium, 2020)

Confidential Attestation: Efficient in-Enclave Verification of Privacy Policy Compliance. - Weijie Liu 004; Wenhao Wang 001; XiaoFeng Wang 001; Xiaozhu Meng; Yaosong Lu; Hongbo Chen; Xinyu Wang; Qingtao Shen; Kai Chen 012; Haixu Tang; Yi Chen 024; Luyi Xing (CoRR, 2020)

Who's In Control? On Security Risks of Disjointed IoT Device Management Channels. - Yan Jia; Bin Yuan; Luyi Xing; Dongfang Zhao 010; Yifan Zhang 010; XiaoFeng Wang 001; Yijing Liu; Kaimin Zheng; Peyton Crnjak; Yuqing Zhang 001; Deqing Zou; Hai Jin 001 (CCS, 2021)

Evil Under the Sun: Understanding and Discovering Attacks on Ethereum Decentralized Applications. - Liya Su; Xinyue Shen 001; Xiangyu Du; Xiaojing Liao; XiaoFeng Wang 001; Luyi Xing; Baoxu Liu (USENIX Security Symposium, 2021)

Understanding Malicious Cross-library Data Harvesting on Android. - Jice Wang; Yue Xiao 007; Xueqiang Wang; Yuhong Nan; Luyi Xing; Xiaojing Liao; Jinwei Dong; Nicolás Serrano; Haoran Lu; XiaoFeng Wang 001; Yuqing Zhang 001 (USENIX Security Symposium, 2021)

P-Verifier: Understanding and Mitigating Security Risks in Cloud-based IoT Access Policies. - Ze Jin; Luyi Xing; Yiwei Fang; Yan Jia; Bin Yuan; Qixu Liu (CCS, 2022)

Perils and Mitigation of Security Risks of Cooperation in Mobile-as-a-Gateway IoT. - Xin'an Zhou; Jiale Guan; Luyi Xing; Zhiyun Qian (CCS, 2022)

Robbery on DevOps: Understanding and Mitigating Illicit Cryptomining on Continuous Integration Service Platforms. - Zhi Li 048; Weijie Liu 004; Hongbo Chen; XiaoFeng Wang 001; Xiaojing Liao; Luyi Xing; Mingming Zha 001; Hai Jin 001; Deqing Zou (SP, 2022)

How Are Your Zombie Accounts? Understanding Users' Practices and Expectations on Mobile App Account Deletion. - Yijing Liu; Yan Jia; Qingyin Tan; Zheli Liu; Luyi Xing (USENIX Security Symposium, 2022)

Lalaine: Measuring and Characterizing Non-Compliance of Apple Privacy Labels at Scale. - Yue Xiao 007; Zhengyi Li; Yue Qin; Xiaolong Bai; Jiale Guan; Xiaojing Liao; Luyi Xing (CoRR, 2022)

The Danger of Minimum Exposures: Understanding Cross-App Information Leaks on iOS through Multi-Side-Channel Learning. - Zihao Wang; Jiale Guan; XiaoFeng Wang 001; Wenhao Wang 001; Luyi Xing; Fares Fahad S. Alharbi (CCS, 2023)

Are You Spying on Me? Large-Scale Analysis on IoT Data Exposure through Companion Apps. - Yuhong Nan; Xueqiang Wang; Luyi Xing; Xiaojing Liao; Ruoyu Wu; Jianliang Wu 002; Yifan Zhang 010; XiaoFeng Wang 001 (USENIX Security Symposium, 2023)

Union under Duress: Understanding Hazards of Duplicate Resource Mismediation in Android Software Supply Chain. - Xueqiang Wang; Yifan Zhang 010; XiaoFeng Wang 001; Yan Jia; Luyi Xing (USENIX Security Symposium, 2023)

Lalaine: Measuring and Characterizing Non-Compliance of Apple Privacy Labels. - Yue Xiao 007; Zhengyi Li; Yue Qin; Xiaolong Bai; Jiale Guan; Xiaojing Liao; Luyi Xing (USENIX Security Symposium, 2023)

SmartPatch: Verifying the Authenticity of the Trigger-Event in the IoT Platform. - Bin Yuan; Yuhan Wu; Maogen Yang; Luyi Xing; Xuchang Wang; Deqing Zou; Hai Jin 001 (IEEE Trans. Dependable Secur. Comput., 2023)

SaTS '24: The 2nd ACM Workshop on Secure and Trustworthy Superapps. - Zhiqiang Lin 001; Luyi Xing (CCS, 2024)

Measuring Compliance Implications of Third-party Libraries' Privacy Label Disclosure Guidelines. - Yue Xiao 007; Chaoqi Zhang 006; Yue Qin; Fares Fahad S. Alharbi; Luyi Xing; Xiaojing Liao (CCS, 2024)

Leaking the Privacy of Groups and More: Understanding Privacy Risks of Cross-App Content Sharing in Mobile Ecosystem. - Jiangrong Wu; Yuhong Nan; Luyi Xing; Jiatao Cheng; Zimin Lin; Zibin Zheng; Min Yang 002 (NDSS, 2024)

Resurfacing Vulnerabilities: An Empirical Study on the Reemergence of Previously Patched Security Issues in App-in-App Ecosystems. - Yifan Zhang 010; Yuhui Hong; Luyi Xing (SaTS@CCS, 2024)

MQTTactic: Security Analysis and Verification for Logic Flaws in MQTT Implementations. - Bin Yuan; Zhanxiang Song; Yan Jia; Zhenyu Lu; Deqing Zou; Hai Jin 001; Luyi Xing (SP, 2024)

Navigating the Privacy Compliance Maze: Understanding Risks with Privacy-Configurable Mobile SDKs. - Yifan Zhang 010; Zhaojie Hu; Xueqiang Wang; Yuhui Hong; Yuhong Nan; XiaoFeng Wang 001; Jiatao Cheng; Luyi Xing (USENIX Security Symposium, 2024)

iHunter: Hunting Privacy Violations at Scale in the Software Supply Chain on iOS. - Dexin Liu; Yue Xiao 007; Chaoqi Zhang 006; Kaitao Xie; Xiaolong Bai; Shikun Zhang; Luyi Xing (USENIX Security Symposium, 2024)

Towards Privacy-Preserving Social-Media SDKs on Android. - Haoran Lu; Yichen Liu; Xiaojing Liao; Luyi Xing (USENIX Security Symposium, 2024)

WitheredLeaf: Finding Entity-Inconsistency Bugs with LLMs. - Hongbo Chen; Yifan Zhang 010; Xing Han; Huanyao Rong; Yuheng Zhang; Tianhao Mao; Hang Zhang; XiaoFeng Wang 001; Luyi Xing; Xun Chen (CoRR, 2024)

JBomAudit: Assessing the Landscape, Compliance, and Security Implications of Java SBOMs. - Yue Xiao 007; Dhilung Kirat; Douglas Lee Schales; Jiyong Jang; Luyi Xing; Xiaojing Liao (NDSS, 2025)

Hidden and Lost Control: on Security Design Risks in IoT User-Facing Matter Controller. - Haoqiang Wang; Yiwei Fang; Yichen Liu; Ze Jin; Emma Delph; Xiaojiang Du; Qixu Liu; Luyi Xing (NDSS, 2025)

SKILLPoV: Towards Accessible and Effective Privacy Notice for Amazon Alexa Skills. - Jingwen Yan; Song Liao; Mohammed Aldeen; Luyi Xing; Danfeng Yao; Long Cheng 005 (NDSS, 2025)

Les Dissonances: Cross-Tool Harvesting and Polluting in Multi-Tool Empowered LLM Agents. - Zichuan Li; Jian Cui; Xiaojing Liao; Luyi Xing (CoRR, 2025)

Safeguard-by-Development: A Privacy-Enhanced Development Paradigm for Multi-Agent Collaboration Systems. - Jian Cui; Zichuan Li; Luyi Xing; Xiaojing Liao (CoRR, 2025)