A Novel Two-Timer-Based Broadcast Routing Algorithm for Vehicular Ad-Hoc Networks. - Song Fang 001; Tao Luo (GreenCom/iThings/CPScom, 2013)

Where are you from?: confusing location distinction using virtual multipath camouflage. - Song Fang 001; Yao Liu 007; Wenbo Shen; Haojin Zhu (MobiCom, 2014)

Wireless Communications under Broadband Reactive Jamming Attacks. - Song Fang 001; Yao Liu 007; Peng Ning (IEEE Trans. Dependable Secur. Comput., 2016)

Mimicry Attacks Against Wireless Link Signature and New Defense Using Time-Synched Link Signature. - Song Fang 001; Yao Liu 007; Peng Ning (IEEE Trans. Inf. Forensics Secur., 2016)

Manipulatable wireless key establishment. - Song Fang 001; Ian D. Markwood; Yao Liu 007 (CNS, 2017)

Virtual Multipath Attack and Defense for Location Distinction in Wireless Networks. - Song Fang 001; Yao Liu 007; Wenbo Shen; Haojin Zhu; Tao Wang 026 (IEEE Trans. Mob. Comput., 2017)

No Training Hurdles: Fast Training-Agnostic Attacks to Infer Your Typing. - Song Fang 001; Ian D. Markwood; Yao Liu 007; Shangqing Zhao; Zhuo Lu; Haojin Zhu (CCS, 2018)

Signal Entanglement Based Pinpoint Waveforming for Location-Restricted Service Access Control. - Tao Wang 026; Yao Liu 007; Tao Hou 001; Qingqi Pei; Song Fang 001 (IEEE Trans. Dependable Secur. Comput., 2018)

Channel Camouflage and Manipulation Techniques in Wireless Networks. - Song Fang 001 (2018)

Entrapment for Wireless Eavesdroppers. - Song Fang 001; Tao Wang 026; Yao Liu 007; Shangqing Zhao; Zhuo Lu (INFOCOM, 2019)

Virtual Step PIN Pad: Towards Foot-input Authentication Using Geophones. - Yan He; Hanyan Zhang; Edwin Yang; Song Fang 001 (MASS, 2020)

CommanderGabble: A Universal Attack Against ASR Systems Leveraging Fast Speech. - Zhaohe John Zhang; Edwin Yang; Song Fang 001 (ACSAC, 2021)

MotionCompass: pinpointing wireless camera via motion-activated traffic. - Yan He; Qiuye He; Song Fang 001; Yao Liu 007 (MobiSys, 2021)

Wireless-Assisted Key Establishment Leveraging Channel Manipulation. - Song Fang 001; Ian D. Markwood; Yao Liu 007 (IEEE Trans. Mob. Comput., 2021)

WINK: Wireless Inference of Numerical Keystrokes via Zero-Training Spatiotemporal Analysis. - Edwin Yang; Qiuye He; Song Fang 001 (CCS, 2022)

DASK: Driving-Assisted Secret Key Establishment. - Edwin Yang; Song Fang 001; Dakun Shen (CNS, 2022)

HoneyBreath: An Ambush Tactic Against Wireless Breath Inference. - Qiuye He; Edwin Yang; Song Fang 001; Shangqing Zhao (MobiQuitous, 2022)

Wireless Training-Free Keystroke Inference Attack and Defense. - Edwin Yang; Song Fang 001; Ian D. Markwood; Yao Liu 007; Shangqing Zhao; Zhuo Lu; Haojin Zhu (IEEE/ACM Trans. Netw., 2022)

When Free Tier Becomes Free to Enter: A Non-Intrusive Way to Identify Security Cameras with no Cloud Subscription. - Yan He; Qiuye He; Song Fang 001; Yao Liu 007 (CCS, 2023)

Poster: Noninvasive Respirator Fit Factor Inference by Semi-Supervised Learning. - Jinmiao Chen; Zhaohe John Zhang; Shangqing Zhao; Song Fang 001; Thomas M. Peters; Evan L. Floyd; Changjie Cai (CHASE, 2023)

Phantom-CSI Attacks against Wireless Liveness Detection. - Qiuye He; Song Fang 001 (RAID, 2023)

Proactive Anti-Eavesdropping With Trap Deployment in Wireless Networks. - Qiuye He; Song Fang 001; Tao Wang 026; Yao Liu 007; Shangqing Zhao; Zhuo Lu (IEEE Trans. Dependable Secur. Comput., 2023)

A Survey on Human Profile Information Inference via Wireless Signals. - Qiuye He; Edwin Yang; Song Fang 001 (IEEE Commun. Surv. Tutorials, 2024)

Precise Wireless Camera Localization Leveraging Traffic-Aided Spatial Analysis. - Yan He; Qiuye He; Song Fang 001; Yao Liu 007 (IEEE Trans. Mob. Comput., 2024)

Revisiting Wireless Breath and Crowd Inference Attacks With Defensive Deception. - Qiuye He; Edwin Yang; Song Fang 001; Shangqing Zhao (IEEE/ACM Trans. Netw., 2024)