Deterministic Browser. - Yinzhi Cao; Zhanhao Chen; Song Li 006; Shujiang Wu (CCS, 2017)

(Cross-)Browser Fingerprinting via OS and Hardware Level Features. - Yinzhi Cao; Song Li 006; Erik Wijmans (NDSS, 2017)

Rendered Private: Making GLSL Execution Uniform to Prevent WebGL-based Browser Fingerprinting. - Shujiang Wu; Song Li 006; Yinzhi Cao; Ningfei Wang (USENIX Security Symposium, 2019)

Who Touched My Browser Fingerprint?: A Large-scale Measurement Study and Classification of Fingerprint Dynamics. - Song Li 006; Yinzhi Cao (Internet Measurement Conference, 2020)

Detecting Node.js prototype pollution vulnerabilities via object lookup analysis. - Song Li 006; Mingqing Kang; Jianwei Hou; Yinzhi Cao (ESEC/SIGSOFT FSE, 2021)

GraphTrack: A Graph-based Cross-Device Tracking Framework. - Binghui Wang; Tianchen Zhou; Song Li 006; Yinzhi Cao; Neil Zhenqiang Gong (AsiaCCS, 2022)

Probe the Proto: Measuring Client-Side Prototype Pollution Vulnerabilities of One Million Real-world Websites. - Zifeng Kang; Song Li 006; Yinzhi Cao (NDSS, 2022)

Mining Node.js Vulnerabilities via Object Dependence Graph and Query. - Song Li 006; Mingqing Kang; Jianwei Hou; Yinzhi Cao (USENIX Security Symposium, 2022)

CoCo: Efficient Browser Extension Vulnerability Detection via Coverage-guided, Concurrent Abstract Interpretation. - Jianjia Yu; Song Li 006; Junmin Zhu; Yinzhi Cao (CCS, 2023)

Scaling JavaScript Abstract Interpretation to Detect and Exploit Node.js Taint-style Vulnerability. - Mingqing Kang; Yichao Xu; Song Li 006; Rigel Gjomemo; Jianwei Hou; V. N. Venkatakrishnan; Yinzhi Cao (SP, 2023)

SQLStateGuard: Statement-Level SQL Injection Defense Based on Learning-Driven Middleware. - Xin Liu 050; Yuanyuan Huang; Tianyi Wang; Song Li 006; Weina Niu; Jun Shen 001; Qingguo Zhou; Xiaokang Zhou (SoCC, 2024)

Ghost-in-Wave: How Speaker-Irrelative Features Interfere DeepFake Voice Detectors. - Xuan Hai; Xin Liu 050; Zhaorun Chen; Yuan Tan 003; Song Li 006; Weina Niu; Gang Liu; Rui Zhou 005; Qingguo Zhou (ICME, 2024)

LiScopeLens: An Open-Source License Incompatibility Analysis Tool Based on Scope Representation of License Terms. - Ziang Liu 006; Xin Liu 050; Yingli Zhang; Zihao Zhang; Song Li 006; Weina Niu; Qingguo Zhou; Rui Zhou 005; Xiaokang Zhou (ISSRE, 2024)

What's the Real: A Novel Design Philosophy for Robust AI-Synthesized Voice Detection. - Xuan Hai; Xin Liu 050; Yuan Tan 003; Gang Liu; Song Li 006; Weina Niu; Rui Zhou 005; Xiaokang Zhou (ACM Multimedia, 2024)

GraphTunnel: Robust DNS Tunnel Detection Based on DNS Recursive Resolution Graph. - Guangyuan Gao; Weina Niu; Jiacheng Gong; Dujuan Gu; Song Li 006; Mingxue Zhang 001; Xiaosong Zhang 001 (IEEE Trans. Inf. Forensics Secur., 2024)

Sensitive Behavioral Chain-Focused Android Malware Detection Fused With AST Semantics. - Jiacheng Gong; Weina Niu; Song Li 006; Mingxue Zhang 001; Xiaosong Zhang 001 (IEEE Trans. Inf. Forensics Secur., 2024)

SigScope: Detecting and Understanding Off-Chain Message Signing-related Vulnerabilities in Decentralized Applications. - Sajad Meisami; Hugo Dabadie; Song Li 006; Yuzhe Tang; Yue Duan (WWW, 2025)

Understanding Industry Perspectives of Static Application Security Testing (SAST) Evaluation. - Yuan Li; Peisen Yao; Kan Yu; Chengpeng Wang 001; Yaoyang Ye; Song Li 006; Meng Luo 002; Yepang Liu 001; Kui Ren 001 (Proc. ACM Softw. Eng., 2025)

BPFDex: Enabling Robust Android Apps Unpacking via Android Kernel. - Mingyang Li; Weina Niu; Jiacheng Gong; Song Li 006; Mingxue Zhang 001; Xiaosong Zhang 001 (IEEE Trans. Inf. Forensics Secur., 2025)

SmartGuard: Leveraging Large Language Models for Network Attack Detection through Audit Log Analysis and Summarization. - Hao Zhang; Shuo Shao 002; Song Li 006; Zhenyu Zhong; Yan Liu 069; Zhan Qin; Kui Ren 001 (CoRR, 2025)