Understanding Security Behavior of Real Users: Analysis of a Phishing Study. - Mingqing Kang; Matthew Shonman; Anshul Subramanya; Haoruo Zhang; Xiangyang Li; Anton Dahbura (HICSS, 2021)

Detecting Node.js prototype pollution vulnerabilities via object lookup analysis. - Song Li 006; Mingqing Kang; Jianwei Hou; Yinzhi Cao (ESEC/SIGSOFT FSE, 2021)

Mining Node.js Vulnerabilities via Object Dependence Graph and Query. - Song Li 006; Mingqing Kang; Jianwei Hou; Yinzhi Cao (USENIX Security Symposium, 2022)

CHKPLUG: Checking GDPR Compliance of WordPress Plugins via Cross-language Code Property Graph. - Faysal Hossain Shezan; Zihao Su; Mingqing Kang; Nicholas Phair; Patrick William Thomas; Michelangelo van Dam; Yinzhi Cao; Yuan Tian 001 (NDSS, 2023)

Scaling JavaScript Abstract Interpretation to Detect and Exploit Node.js Taint-style Vulnerability. - Mingqing Kang; Yichao Xu; Song Li 006; Rigel Gjomemo; Jianwei Hou; V. N. Venkatakrishnan; Yinzhi Cao (SP, 2023)

ReactAppScan: Mining React Application Vulnerabilities via Component Graph. - Zhiyong Guo; Mingqing Kang; V. N. Venkatakrishnan; Rigel Gjomemo; Yinzhi Cao (CCS, 2024)

RogueOne: Detecting Rogue Updates via Differential Data-flow Analysis Using Trust Domains. - Raphael J. Sofaer; Yaniv David; Mingqing Kang; Jianjia Yu; Yinzhi Cao; Junfeng Yang; Jason Nieh (ICSE, 2024)