Breaking and Fixing Mobile App Authentication with OAuth2.0-based Protocols. - Ronghai Yang; Wing Cheong Lau; Shangcheng Shi (ACNS, 2017)

MoSSOT: An Automated Blackbox Tester for Single Sign-On Vulnerabilities in Mobile Applications. - Shangcheng Shi; Xianbo Wang; Wing Cheong Lau (AsiaCCS, 2019)

Breaking and Fixing Third-Party Payment Service for Mobile Apps. - Shangcheng Shi; Xianbo Wang; Wing Cheong Lau (ACNS (2), 2021)

An Empirical Study on Mobile Payment Credential Leaks and Their Exploits. - Shangcheng Shi; Xianbo Wang; Kyle Zeng; Ronghai Yang; Wing Cheong Lau (SecureComm (2), 2021)

PHYjacking: Physical Input Hijacking for Zero-Permission Authorization Attacks on Android. - Xianbo Wang; Shangcheng Shi; Yikang Chen; Wing Cheong Lau (NDSS, 2022)

Towards a Better Super-App Architecture from a Browser Security Perspective. - Yue Wang 134; Yao Yao; Shangcheng Shi; Weiting Chen; Lin Huang (SaTS@CCS, 2023)

Owfuzz: Discovering Wi-Fi Flaws in Modern Devices through Over-The-Air Fuzzing. - Hongjian Cao; Lin Huang; Shuwei Hu; Shangcheng Shi; Yujia Liu (WISEC, 2023)