Level by level: making flow- and context-sensitive pointer analysis scalable for millions of lines of code. - Hongtao Yu; Jingling Xue; Wei Huo 005; Xiaobing Feng 002; Zhaoqing Zhang (CGO, 2010)

Parallelizing a machine translation decoder for multicore computer. - Long Chen; Wei Huo 005; Haitao Mi; Zhaoqing Zhang; Xiaobing Feng 002; Zhiyuan Li 001 (ICNC, 2011)

Making it practical and effective: fast and precise may-happen-in-parallel analysis. - Congming Chen; Wei Huo 005; Xiaobing Feng 002 (PACT, 2012)

Can We Make It Faster? Efficient May-Happen-in-Parallel Analysis Revisited. - Congming Chen; Wei Huo 005; Lung Li; Xiaobing Feng 002; Kai Xing (PDCAT, 2012)

Effective fault localization based on minimum debugging frontier set. - Feng Li 045; Wei Huo 005; Congming Chen; Lujie Zhong; Xiaobing Feng 002; Zhiyuan Li 001 (CGO, 2013)

Locating Software Faults Based on Minimum Debugging Frontier Set. - Feng Li 045; Zhiyuan Li 001; Wei Huo 005; Xiaobing Feng 002 (IEEE Trans. Software Eng., 2017)

A Light-Weight and Accurate Method of Static Integer-Overflow-to-Buffer-Overflow Vulnerability Detection. - Mingjie Xu; Shengnan Li; Lili Xu; Feng Li 045; Wei Huo 005; Jing Ma; Xinhua Li; Qingjia Huang (Inscrypt, 2018)

αDiff: cross-version binary code similarity detection with DNN. - Bingchang Liu; Wei Huo 005; Chao Zhang 008; Wenchao Li; Feng Li 045; Aihua Piao; Wei Zou (ASE, 2018)

RARE: An Efficient Static Fault Detection Framework for Definition-Use Faults in Large Programs. - Lujie Zhong; Pen-Chung Yew; Wei Huo 005; Feng Li 045; Xiaobing Feng 002; Zhaoqing Zhang (IEEE Access, 2018)

SRFuzzer: an automatic fuzzing framework for physical SOHO router devices to discover multi-type vulnerabilities. - Yu Zhang; Wei Huo 005; Kunpeng Jian; Ji Shi 002; Haoliang Lu; Longquan Liu; Chen Wang; Dandan Sun; Chao Zhang 008; Baoxu Liu (ACSAC, 2019)

1dVul: Discovering 1-Day Vulnerabilities through Binary Patches. - Jiaqi Peng; Feng Li 045; Bingchang Liu; Lili Xu; Binghong Liu; Kai Chen; Wei Huo 005 (DSN, 2019)

B2SFinder: Detecting Open-Source Software Reuse in COTS Software. - Muyue Feng; Zimu Yuan; Feng Li 045; Gu Ban; Shiyang Wang; Qian Tang; He Su; Chendong Yu; Jiahuan Xu; Aihua Piao; Jingling Xue; Wei Huo 005 (ASE, 2019)

Open-Source License Violations of Binary Software at Large Scale. - Muyue Feng; Weixuan Mao; Zimu Yuan; Yang Xiao 011; Gu Ban; Wei Wang; Shiyang Wang; Qian Tang; Jiahuan Xu; He Su; Binghong Liu; Wei Huo 005 (SANER, 2019)

A large-scale empirical study on vulnerability distribution within projects and the lessons learned. - Bingchang Liu; Guozhu Meng; Wei Zou; Qi Gong; Feng Li 045; Min Lin; Dandan Sun; Wei Huo 005; Chao Zhang 008 (ICSE, 2020)

Exploiting the Trust Between Boundaries: Discovering Memory Corruptions in Printers via Driver-Assisted Testing. - Xiaoyu He; Erick Bauman; Feng Li 045; Lei Yu; Linyu Li 004; Bingchang Liu; Aihua Piao; Kevin W. Hamlen; Wei Huo 005; Wei Zou (LCTES, 2020)

MVP: Detecting Vulnerabilities using Patch-Enhanced Vulnerability Signatures. - Yang Xiao 011; Bihuan Chen 001; Chendong Yu; Zhengzi Xu; Zimu Yuan; Feng Li 045; Binghong Liu; Yang Liu 003; Wei Huo 005; Wei Zou; Wenchang Shi (USENIX Security Symposium, 2020)

ELAID: detecting integer-Overflow-to-Buffer-Overflow vulnerabilities by light-weight and accurate static analysis. - Lili Xu; Mingjie Xu; Feng Li 045; Wei Huo 005 (Cybersecur., 2020)

SoFi: Reflection-Augmented Fuzzing for JavaScript Engines. - Xiaoyu He; Xiaofei Xie; Yuekang Li; Jianwen Sun; Feng Li 045; Wei Zou; Yang Liu 003; Lei Yu; Jianhua Zhou; Wenchang Shi; Wei Huo 005 (CCS, 2021)

VIVA: Binary Level Vulnerability Identification via Partial Signature. - Yang Xiao 011; Zhengzi Xu; Weiwei Zhang; Chendong Yu; Longquan Liu; Wei Zou; Zimu Yuan; Yang Liu 003; Aihua Piao; Wei Huo 005 (SANER, 2021)

B2SMatcher: fine-Grained version identification of open-Source software in binary files. - Gu Ban; Lili Xu; Yang Xiao 011; Xinhua Li; Zimu Yuan; Wei Huo 005 (Cybersecur., 2021)

ESRFuzzer: an enhanced fuzzing framework for physical SOHO router devices to discover multi-Type vulnerabilities. - Yu Zhang; Wei Huo 005; Kunpeng Jian; Ji Shi 002; Longquan Liu; Yanyan Zou 002; Chao Zhang 008; Baoxu Liu (Cybersecur., 2021)

VERJava: Vulnerable Version Identification for Java OSS with a Two-Stage Analysis. - Qing Sun; Lili Xu; Yang Xiao 011; Feng Li 045; He Su; Yiming Liu; Hongyun Huang; Wei Huo 005 (ICSME, 2022)

A Sanitizer-centric Analysis to Detect Cross-Site Scripting in PHP Programs. - He Su; Lili Xu; Huina Chao; Feng Li 045; Zimu Yuan; Jianhua Zhou; Wei Huo 005 (ISSRE, 2022)

Finding SMM Privilege-Escalation Vulnerabilities in UEFI Firmware with Protocol-Centric Static Analysis. - Jiawei Yin; Menghao Li; Wei Wu; Dandan Sun; Jianhua Zhou; Wei Huo 005; Jingling Xue (SP, 2022)

RIBDetector: an RFC-guided Inconsistency Bug Detecting Approach for Protocol Implementations. - Jingting Chen; Feng Li 045; Mingjie Xu; Jianhua Zhou; Wei Huo 005 (SANER, 2022)

CAMFuzz: Explainable Fuzzing with Local Interpretation. - Ji Shi 002; Wei Zou; Chao Zhang 008; Lingxiao Tan; Yanyan Zou 002; Yue Peng; Wei Huo 005 (Cybersecur., 2022)

NDFuzz: a non-intrusive coverage-guided fuzzing framework for virtualized network devices. - Yu Zhang; Nanyu Zhong; Wei You 001; Yanyan Zou 002; Kunpeng Jian; Jiahuan Xu; Jian Sun; Baoxu Liu; Wei Huo 005 (Cybersecur., 2022)

pAFL: Adaptive Energy Allocation with Upper Confidence Bound. - Rui Ma 004; Xvhong Zhou; Xiajing Wang; Zheng Zhang; Jinman Jiang; Wei Huo 005 (ICCNS, 2023)

ACETest: Automated Constraint Extraction for Testing Deep Learning Operators. - Jingyi Shi; Yang Xiao 011; Yuekang Li; Yeting Li; Dongsong Yu; Chendong Yu; Hui Su; Yufeng Chen; Wei Huo 005 (ISSTA, 2023)

Splendor: Static Detection of Stored XSS in Modern Web Applications. - He Su; Feng Li 045; Lili Xu; Wenbo Hu; Yujie Sun; Qing Sun; Huina Chao; Wei Huo 005 (ISSTA, 2023)

EBugDec: Detecting Inconsistency Bugs caused by RFC Evolution in Protocol Implementations. - Jingting Chen; Feng Li 045; Qingfang Chen; Ping Li 065; Lili Xu; Wei Huo 005 (RAID, 2023)

Decompilation Based Deep Binary-Source Function Matching. - Xiaowei Wang; Zimu Yuan; Yang Xiao 011; Liyan Wang; Yican Yao; Haiming Chen 001; Wei Huo 005 (SciSec, 2023)

Effective ReDoS Detection by Principled Vulnerability Modeling and Exploit Generation. - Xinyi Wang 013; Cen Zhang; Yeting Li; Zhiwu Xu 001; Shuailin Huang; Yi Liu 069; Yican Yao; Yang Xiao 011; Yanyan Zou 002; Yang Liu 003; Wei Huo 005 (SP, 2023)

RSFuzzer: Discovering Deep SMI Handler Vulnerabilities in UEFI Firmware with Hybrid Fuzzing. - Jiawei Yin; Menghao Li; Yuekang Li; Yong Yu; Boru Lin; Yanyan Zou 002; Yang Liu 003; Wei Huo 005; Jingling Xue (SP, 2023)

PosFuzz: augmenting greybox fuzzing with effective position distribution. - Yanyan Zou 002; Wei Zou; JiaCheng Zhao; Nanyu Zhong; Yu Zhang; Ji Shi 002; Wei Huo 005 (Cybersecur., 2023)

TGRop: Top Gun of Return-Oriented Programming Automation. - Nanyu Zhong; Yueqi Chen 001; Yanyan Zou 002; Xinyu Xing 001; Jinwei Dong; Bingcheng Xian; Jiaxu Zhao 004; Menghao Li; Binghong Liu; Wei Huo 005 (ESORICS (3), 2024)

Semantic-Enhanced Static Vulnerability Detection in Baseband Firmware. - Yiming Liu; Cen Zhang; Feng Li 045; Yeting Li; Jianhua Zhou; Jian Wang 067; Lanlan Zhan; Yang Liu 003; Wei Huo 005 (ICSE, 2024)

File Hijacking Vulnerability: The Elephant in the Room. - Chendong Yu; Yang Xiao 011; Jie Lu 009; Yuekang Li; Yeting Li; Lian Li 002; Yifan Dong; Jian Wang 067; Jingyi Shi; Defang Bo; Wei Huo 005 (NDSS, 2024)

Fuzzing for Stateful Protocol Implementations: Are We There Yet? - Kunpeng Jian; Yanyan Zou 002; Yeting Li; Jialun Cao; Menghao Li; Jian Sun; Jingyi Shi; Wei Huo 005 (TASE, 2024)

Leveraging Semantic Relations in Code and Data to Enhance Taint Analysis of Embedded Systems. - Jiaxu Zhao 004; Yuekang Li; Yanyan Zou 002; Zhaohui Liang; Yang Xiao 011; Yeting Li; Bingwei Peng; Nanyu Zhong; Xinyi Wang 013; Wei Wang; Wei Huo 005 (USENIX Security Symposium, 2024)

SYNTONY: Potential-aware fuzzing with particle swarm optimization. - Xiajing Wang; Rui Ma 004; Wei Huo 005; Zheng Zhang; Jinyuan He; Chaonan Zhang; Donghai Tian (J. Syst. Softw., 2024)

RRCFuzzer: A 3GPP-Guided Fuzzing Method for Radio Resource Control Protocol. - Binghong Liu; Wei Wang; Ning Li; Yiming Zhang; Xiu Zhang; Yang Xiao 011; Yanyan Zou 002; Yuejin Du; Wei Huo 005 (ICT, 2025)

A Coverage-Guided Fuzzing Method for Non-Access Stratum Protocol. - Binghong Liu; Wei Wang; Yiming Zhang; Xingyu Huang; Xiu Zhang; Yang Xiao 011; Yanyan Zou 002; Yuejin Du; Wei Huo 005 (ICT, 2025)

Fuzzing for Stateful Protocol Programs Based on Constraints between States and Message Types. - Kunpeng Jian; Yanyan Zou 002; Menghao Li; Wei Huo 005 (Internetware, 2025)

Understanding Resource Injection Vulnerabilities in Kubernetes Ecosystems. - Defang Bo; Jie Lu 009; Feng Li 045; Jingting Chen; Jinchen Wang; Chendong Yu; Yeting Li; Wei Huo 005 (ASE, 2025)

Vulnerability-Affected Versions Identification: How Far Are We? - Xingchu Chen; Chengwei Liu; Jialun Cao; Yang Xiao 011; Xinyue Cai; Yeting Li; Jingyi Shi; Tianqi Sun; Haiming Chen 001; Wei Huo 005 (ASE, 2025)

A Large Scale Study of AI-based Binary Function Similarity Detection Techniques for Security Researchers and Practitioners. - Jingyi Shi; Yufeng Chen; Yang Xiao 011; Yuekang Li; Zhengzi Xu; Sihao Qiu; Chi Zhang; Keyu Qi; Yeting Li; Xingchu Chen; Yanyan Zou 002; Yang Liu 003; et al. (ASE, 2025)

State Significance-Guided Fuzzing for Stateful Protocol Program. - Kunpeng Jian; Yanyan Zou 002; Chen Wang; Ning Li; Menghao Li; Wei Huo 005 (TASE, 2025)

From Constraints to Cracks: Constraint Semantic Inconsistencies as Vulnerability Beacons for Embedded Systems. - Jiaxu Zhao 004; Yuekang Li; Yanyan Zou 002; Yang Xiao 011; Naijia Jiang; Yeting Li; Nanyu Zhong; Bingwei Peng; Kunpeng Jian; Wei Huo 005 (USENIX Security Symposium, 2025)

VULCANBOOST: Boosting ReDoS Fixes through Symbolic Representation and Feature Normalization. - Yeting Li; Yecheng Sun; Zhiwu Xu 001; Haiming Chen 001; Xinyi Wang 013; Hengyu Yang; Huina Chao; Cen Zhang; Yang Xiao 011; Yanyan Zou 002; Feng Li 045; Wei Huo 005 (USENIX Security Symposium, 2025)

ZIPPER: Static Taint Analysis for PHP Applications with Precision and Efficiency. - Xinyi Wang 013; Yeting Li; Jie Lu 009; Shizhe Cui; Chenghang Shi; Qin Mai; Yunpei Zhang; Yang Xiao 011; Feng Li 045; Wei Huo 005 (USENIX Security Symposium, 2025)

Artifact for "ZIPPER: Static Taint Analysis for PHP Applications with Precision and Efficiency". - Xinyi Wang 013; Yeting Li; Jie Lu 009; Shizhe Cui; Chenghang Shi; Qin Mai; Yunpei Zhang; Yang Xiao 011; Feng Li 045; Wei Huo 005 (Zenodo, 2025)

Artifact for "ZIPPER: Static Taint Analysis for PHP Applications with Precision and Efficiency". - Xinyi Wang 013; Yeting Li; Jie Lu 009; Shizhe Cui; Chenghang Shi; Qin Mai; Yunpei Zhang; Yang Xiao 011; Feng Li 045; Wei Huo 005 (Zenodo, 2025)

Artifact for "ZIPPER: Static Taint Analysis for PHP Applications with Precision and Efficiency". - Xinyi Wang 001; Yeting Li; Jie Lu 009; Shizhe Cui; Chenghang Shi; Qin Mai; Yunpei Zhang; Yang Xiao 011; Feng Li 045; Wei Huo 005 (Zenodo, 2025)

LifeFuzz: Lifecycle-Guided Fuzzing for Windows Driver Cross-Handler Vulnerabilities. - Chendong Yu; Yuekang Li; Yang Xiao 011; Jie Lu 009; Yeting Li; Defang Bo; Wei Huo 005 (EuroSys, 2026)

Through the Authentication Maze: Detecting Authentication Bypass Vulnerabilities in Firmware Binaries. - Nanyu Zhong; Yuekang Li; Yanyan Zou 002; Jiaxu Zhao 004; Jinwei Dong; Yang Xiao 011; Bingwei Peng; Yeting Li; Wei Wang; Wei Huo 005 (NDSS, 2026)