AdvDoor: adversarial backdoor attack of deep learning system. - Quan Zhang 003; Yifeng Ding; Yongqiang Tian 001; Jianmin Guo; Min Yuan; Yu Jiang 001 (ISSTA, 2021)

Minerva: browser API fuzzing with dynamic mod-ref analysis. - Chijin Zhou; Quan Zhang 003; Mingzhe Wang; Lihua Guo; Jie Liang 006; Zhe Liu 001; Mathias Payer; Yu Jiang 001 (ESEC/SIGSOFT FSE, 2022)

RNN-Test: Towards Adversarial Testing for Recurrent Neural Network Systems. - Jianmin Guo; Quan Zhang 003; Yue Zhao 040; Heyuan Shi; Yu Jiang 001; Jia-Guang Sun 001 (IEEE Trans. Software Eng., 2022)

CoopHance: Cooperative Enhancement for Robustness of Deep Learning Systems. - Quan Zhang 003; Yongqiang Tian 001; Yifeng Ding; Shanshan Li 001; Chengnian Sun; Yu Jiang 001; Jiaguang Sun 001 (ISSTA, 2023)

Limits of I/O Based Ransomware Detection: An Imitation Based Attack. - Chijin Zhou; Lihua Guo; Yiwei Hou; Zhenya Ma; Quan Zhang 003; Mingzhe Wang; Zhe Liu 001; Yu Jiang 001 (SP, 2023)

HyperAttack: Multi-Gradient-Guided White-box Adversarial Structure Attack of Hypergraph Neural Networks. - Chao Hu; Ruishi Yu; Binqi Zeng; Yu Zhan; Ying Fu; Quan Zhang 003; Rongkai Liu; Heyuan Shi (CoRR, 2023)

Building Dynamic System Call Sandbox with Partial Order Analysis. - Quan Zhang 003; Chijin Zhou; Yiwen Xu; Zijing Yin; Mingzhe Wang; Zhuo Su 005; Chengnian Sun; Yu Jiang 001; Jia-Guang Sun 001 (Proc. ACM Program. Lang., 2023)

Towards Better Semantics Exploration for Browser Fuzzing. - Chijin Zhou; Quan Zhang 003; Lihua Guo; Mingzhe Wang; Yu Jiang 001; Qing Liao 001; Zhiyong Wu 010; Shanshan Li 001; Bin Gu 006 (Proc. ACM Program. Lang., 2023)

Towards More Complete Constraints for Deep Learning Library Testing via Complementary Set Guided Refinement. - Gwihwan Go; Chijin Zhou; Quan Zhang 003; Xiazijian Zou; Heyuan Shi; Yu Jiang 001 (ISSTA, 2024)

Imperceptible Content Poisoning in LLM-Powered Applications. - Quan Zhang 003; Chijin Zhou; Gwihwan Go; Binqi Zeng; Heyuan Shi; Zichen Xu 001; Yu Jiang 001 (ASE, 2024)

Automatic Policy Synthesis and Enforcement for Protecting Untrusted Deserialization. - Quan Zhang 003; Yiwen Xu; Zijing Yin; Chijin Zhou; Yu Jiang 001 (NDSS, 2024)

When Fuzzing Meets LLMs: Challenges and Opportunities. - Yu Jiang 001; Jie Liang 006; Fuchen Ma; Yuanliang Chen; Chijin Zhou; Yuheng Shen; Zhiyong Wu 010; Jingzhou Fu; Mingzhe Wang; Shanshan Li 001; Quan Zhang 003 (SIGSOFT FSE Companion, 2024)

Human-Imperceptible Retrieval Poisoning Attacks in LLM-Powered Applications. - Quan Zhang 003; Binqi Zeng; Chijin Zhou; Gwihwan Go; Heyuan Shi; Yu Jiang 001 (SIGSOFT FSE Companion, 2024)

PolyJuice: Detecting Mis-compilation Bugs in Tensor Compilers with Equality Saturation Based Rewriting. - Chijin Zhou; Bingzhou Qian; Gwihwan Go; Quan Zhang 003; Shanshan Li 001; Yu Jiang 001 (Proc. ACM Program. Lang., 2024)

Imperceptible Content Poisoning in LLM-Powered Applications. - Quan Zhang 003 (Zenodo, 2024)

Imperceptible Content Poisoning in LLM-Powered Applications. - Quan Zhang 003 (Zenodo, 2024)

Imperceptible Content Poisoning in LLM-Powered Applications. - Quan Zhang 003 (Zenodo, 2024)

Imperceptible Content Poisoning in LLM-Powered Applications. - Quan Zhang 003 (Zenodo, 2024)

Janus: Detecting Rendering Bugs in Web Browsers via Visual Delta Consistency. - Chijin Zhou; Quan Zhang 003; Bingzhou Qian; Yu Jiang 001 (ICSE, 2025)

LSPAI: An IDE Plugin for LLM-Powered Multi-Language Unit Test Generation with Language Server Protocol. - Gwihwan Go; Chijin Zhou; Quan Zhang 003; Yu Jiang 001; Zhao Wei (SIGSOFT FSE Companion, 2025)

Ransomware Detection through Temporal Correlation between Encryption and I/O Behavior. - Lihua Guo; Yiwei Hou; Chijin Zhou; Quan Zhang 003; Yu Jiang 001 (Proc. ACM Softw. Eng., 2025)

Preventing Disruption of System Backup against Ransomware Attacks. - Yiwei Hou; Lihua Guo; Chijin Zhou; Quan Zhang 003; Wenhuan Liu; Chengnian Sun; Yu Jiang 001 (Proc. ACM Softw. Eng., 2025)

Inducing Vulnerable Code Generation in LLM Coding Assistants. - Binqi Zeng; Quan Zhang 003; Chijin Zhou; Gwihwan Go; Yu Jiang 001; Heyuan Shi (CoRR, 2025)

LSPRAG: LSP-Guided RAG for Language-Agnostic Real-Time Unit Test Generation. - Gwihwan Go; Quan Zhang 003; Chijin Zhou; Zhao Wei; Yu Jiang 001 (CoRR, 2025)

A Fine-Tuning Data Recovery Attack on Generative Language Models via Backdooring. - Zhenya Ma; Yongheng Deng; Ziqing Qiao; Quan Zhang 003; Chijin Zhou; Fan Wu 014; Yaoxue Zhang; Ju Ren 001 (IEEE Trans. Inf. Forensics Secur., 2026)

Evaluating Privilege Usage of Agents on Real-World Tools. - Quan Zhang 003; Lianhang Fu; Lvsi Lian; Gwihwan Go; Yujue Wang; Chijin Zhou; Yu Jiang 001; Geguang Pu (CoRR, 2026)