All your browser-saved passwords could belong to us: a security analysis and a cloud-based new design. - Rui Zhao 005; Chuan Yue (CODASPY, 2013)

A Security Analysis of Two Commercial Browser and Cloud Based Password Managers. - Rui Zhao 005; Chuan Yue; Kun Sun (SocialCom, 2013)

Toward a secure and usable cloud-based password manager for web browsers. - Rui Zhao 005; Chuan Yue (Comput. Secur., 2014)

SafeSky: A Secure Cloud Storage Middleware for End-User Applications. - Rui Zhao 005; Chuan Yue; Byung-Chul Tak; Chunqiang Tang (SRDS, 2015)

Automatic Detection of Information Leakage Vulnerabilities in Browser Extensions. - Rui Zhao 005; Chuan Yue; Qing Yi (WWW, 2015)

The Highly Insidious Extreme Phishing Attacks. - Rui Zhao 005; Samantha John; Stacy Karas; Cara Bussell; Jennifer Roberts; Daniel Six; Brandon Gavett; Chuan Yue (ICCCN, 2016)

Cross-site Input Inference Attacks on Mobile Web Users. - Rui Zhao 005; Chuan Yue; Qi Han 001 (SecureComm, 2017)

Design and evaluation of the highly insidious extreme phishing attacks. - Rui Zhao 005; Samantha John; Stacy Karas; Cara Bussell; Jennifer Roberts; Daniel Six; Brandon Gavett; Chuan Yue (Comput. Secur., 2017)

Effective Mobile Web User Fingerprinting via Motion Sensors. - Zhiju Yang; Rui Zhao 005; Chuan Yue (TrustCom/BigDataSE, 2018)

FireBugs: finding and repairing bugs with security patterns. - Larry Singleton; Rui Zhao 005; Myoungkyu Song; Harvey P. Siy (MOBILESoft@ICSE, 2019)

Traffic-Based Automatic Detection of Browser Fingerprinting. - Rui Zhao 005; Edward Chow; Chunchun Li (SecureComm (1), 2019)

Sensor-Based Mobile Web Cross-Site Input Inference Attacks and Defenses. - Rui Zhao 005; Chuan Yue; Qi Han 001 (IEEE Trans. Inf. Forensics Secur., 2019)

A machine-learning based framework for detection of fake political speech. - Chinguun Purevdagva; Rui Zhao 005; Pei-Chi Huang; William Mahoney (BigDataSE, 2020)

CryptoTutor: Teaching Secure Coding Practices through Misuse Pattern Detection. - Larry Singleton; Rui Zhao 005; Myoungkyu Song; Harvey P. Siy (SIGITE, 2020)

FireBugs: Finding and Repairing Cryptography API Misuses in Mobile Applications. - Larry Singleton; Rui Zhao 005; Harvey P. Siy; Myoungkyu Song (COMPSAC, 2021)

A Feasibility Study of Using Code Clone Detection for Secure Programming Education. - Michael Menard; Tommy Nelson; Milan Shahi; Hugh Morton; Adam DeTavernier; Harvey P. Siy; Rui Zhao 005; Myoungkyu Song (COMPSAC, 2022)

An Intelligent Tutoring System for API Misuse Correction by Instant Quality Feedback. - Rui Zhao 005; Harvey P. Siy; Chulwoo Pack; Leen-Kiat Soh; Myoungkyu Song (COMPSAC, 2022)

Securing Zero Trust Networks: the Decentralized Host-to-Host Authentication Policy Enforcement. - Adam Spanier; Rui Zhao 005; Pei-Chi Huang (TrustCom, 2023)

The Chameleon on the Web: an Empirical Study of the Insidious Proactive Web Defacements. - Rui Zhao 005 (WWW, 2023)

SSDTutor: A feedback-driven intelligent tutoring system for secure software development. - Dip Kiran Pradhan Newar; Rui Zhao 005; Harvey P. Siy; Leen-Kiat Soh; Myoungkyu Song (Sci. Comput. Program., 2023)

Toward the flow-centric detection of browser fingerprinting. - Rui Zhao 005 (Comput. Secur., 2024)

Beast in the Cage: A Fine-grained and Object-oriented Permission System to Confine JavaScript Operations on the Web. - Rui Zhao 005 (WWW, 2025)