Bureaucratic protocols for secure two-party sorting, selection, and permuting. - Guan Wang; Tongbo Luo; Michael T. Goodrich; Wenliang Du; Zutao Zhu (AsiaCCS, 2010)

Attacks on WebView in the Android system. - Tongbo Luo; Hao Hao; Wenliang Du; Yifei Wang; Heng Yin 001 (ACSAC, 2011)

Re-designing the Web's Access Control System - (Extended Abstract). - Wenliang Du; Xi Tan; Tongbo Luo; Karthick Jayaraman; Zutao Zhu (DBSec, 2011)

Position paper: why are there so many vulnerabilities in web applications? - Wenliang Du; Karthick Jayaraman; Xi Tan; Tongbo Luo; Steve J. Chapin (NSPW, 2011)

Contego: Capability-Based Access Control for Web Browsers - (Short Paper). - Tongbo Luo; Wenliang Du (TRUST, 2011)

Touchjacking Attacks on Web in Android, iOS, and Windows Phone. - Tongbo Luo; Xing Jin; Ajai Ananthanarayanan; Wenliang Du (FPS, 2012)

SCUTA: a server-side access control system for web applications. - Xi Tan; Wenliang Du; Tongbo Luo; Karthick Duraisamy Soundararaj (SACMAT, 2012)

Mediums: visual integrity preserving framework. - Tongbo Luo; Xing Jin; Wenliang Du (CODASPY, 2013)

Fine-Grained Access Control for HTML5-Based Mobile Applications in Android. - Xing Jin; Lusha Wang; Tongbo Luo; Wenliang Du (ISC, 2013)

Code Injection Attacks on HTML5-based Mobile Apps. - Xing Jin; Tongbo Luo; Derek G. Tsui; Wenliang Du (CoRR, 2014)

T2Pair: Secure and Usable Pairing for Heterogeneous IoT Devices. - Xiaopeng Li 001; Qiang Zeng 001; Lannan Luo; Tongbo Luo (CCS, 2020)

FARE: Enabling Fine-grained Attack Categorization under Low-quality Labeled Data. - Junjie Liang; Wenbo Guo 002; Tongbo Luo; Vasant G. Honavar; Gang Wang 011; Xinyu Xing 001 (NDSS, 2021)