Finding Cracks in Shields: On the Security of Control Flow Integrity Mechanisms. - Yuan Li 061; Mingzhe Wang; Chao Zhang 008; Xingman Chen; Songtao Yang 001; Ying Liu 024 (CCS, 2020)

ROLoad: Securing Sensitive Operations with Pointee Integrity. - Wende Tan; Yuan Li 061; Chao Zhang 008; Xingman Chen; Songtao Yang 001; Ying Liu 024; Jianping Wu (DAC, 2021)

PACMem: Enforcing Spatial and Temporal Memory Safety via ARM Pointer Authentication. - Yuan Li 061; Wende Tan; Zhizheng Lv; Songtao Yang 001; Mathias Payer; Ying Liu 024; Chao Zhang 008 (CCS, 2022)

PACSan: Enforcing Memory Safety Based on ARM PA. - Yuan Li 061; Wende Tan; Zhizheng Lv; Songtao Yang 001; Mathias Payer; Ying Liu 024; Chao Zhang 008 (CoRR, 2022)

Exploit-oriented Automated Information Leakage. - Songtao Yang 001; Kaixiang Chen; Zhun Wang; Chao Zhang 008 (Int. J. Softw. Informatics, 2022)

1dFuzz: Reproduce 1-Day Vulnerabilities with Directed Differential Fuzzing. - Songtao Yang 001; Yubo He; Kaixiang Chen; Zheyu Ma; Xiapu Luo; Yong Xie; Jianjun Chen 005; Chao Zhang 008 (ISSTA, 2023)

TAICHI: Transform Your Secret Exploits Into Mine From a Victim's Perspective. - Zhongyu Pei; Xingman Chen; Songtao Yang 001; Haixin Duan; Chao Zhang 008 (IEEE Trans. Dependable Secur. Comput., 2023)

VulShield: Protecting Vulnerable Code Before Deploying Patches. - Yuan Li 061; Chao Zhang 008; Jinhao Zhu; Penghui Li 001; Chenyang Li; Songtao Yang 001; Wende Tan (NDSS, 2025)

CCTAG: Configurable and Combinable Tagged Architecture. - Zhanpeng Liu; Yi Rong; Chenyang Li; Wende Tan; Yuan Li 061; Xinhui Han; Songtao Yang 001; Chao Zhang 008 (NDSS, 2025)