Your Voice Assistant is Mine: How to Abuse Speakers to Steal Information and Control Your Phone. - Wenrui Diao; Xiangyu Liu; Zhe Zhou 001; Kehuan Zhang (SPSM@CCS, 2014)

Acoustic Fingerprinting Revisited: Generate Stable Device ID Stealthily with Inaudible Sound. - Zhe Zhou 001; Wenrui Diao; Xiangyu Liu; Kehuan Zhang (CCS, 2014)

Gateless Treasure: How to Get Sensitive Information from Unprotected External Storage on Android Phones. - Xiangyu Liu; Wenrui Diao; Zhe Zhou 001; Zhou Li 001; Kehuan Zhang (CoRR, 2014)

Acoustic Fingerprinting Revisited: Generate Stable Device ID Stealthy with Inaudible Sound. - Zhe Zhou 001; Wenrui Diao; Xiangyu Liu; Kehuan Zhang (CoRR, 2014)

When Good Becomes Evil: Keystroke Inference with Smartwatch. - Xiangyu Liu; Zhe Zhou 001; Wenrui Diao; Zhou Li 001; Kehuan Zhang (CCS, 2015)

Mind-Reading: Privacy Attacks Exploiting Cross-App KeyEvent Injections. - Wenrui Diao; Xiangyu Liu; Zhe Zhou 001; Kehuan Zhang; Zhou Li 001 (ESORICS (2), 2015)

An Empirical Study on Android for Saving Non-shared Data on Public Storage. - Xiangyu Liu; Zhe Zhou 001; Wenrui Diao; Zhou Li 001; Kehuan Zhang (SEC, 2015)

No Pardon for the Interruption: New Inference Attacks on Android Through Interrupt Timing Analysis. - Wenrui Diao; Xiangyu Liu; Zhou Li 001; Kehuan Zhang (IEEE Symposium on Security and Privacy, 2016)

Evading Android Runtime Analysis Through Detecting Programmed Interactions. - Wenrui Diao; Xiangyu Liu; Zhou Li 001; Kehuan Zhang (WISEC, 2016)

Understanding IoT Security Through the Data Crystal Ball: Where We Are Now and Where We Are Going to Be. - Nan Zhang 018; Soteris Demetriou; Xianghang Mi; Wenrui Diao; Kan Yuan; Peiyuan Zong; Feng Qian 001; XiaoFeng Wang 001; Kai Chen 012; Yuan Tian 001; Carl A. Gunter; Kehuan Zhang; et al. (CoRR, 2017)

Vulnerable GPU Memory Management: Towards Recovering Raw Data from GPU. - Zhe Zhou 001; Wenrui Diao; Xiangyu Liu; Zhou Li 001; Kehuan Zhang; Rui Liu 002 (Proc. Priv. Enhancing Technol., 2017)

FragDroid: Automated User Interface Interaction with Activity and Fragment Analysis in Android Applications. - Jia Chen; Ge Han; Shanqing Guo; Wenrui Diao (DSN, 2018)

DRLgencert: Deep Learning-Based Automated Testing of Certificate Verification in SSL/TLS Implementations. - Chao Chen; Wenrui Diao; Yingpei Zeng; Shanqing Guo; Chengyu Hu (ICSME, 2018)

IoTFuzzer: Discovering Memory Corruptions in IoT Through App-based Fuzzing. - Jiongyi Chen; Wenrui Diao; Qingchuan Zhao; Chaoshun Zuo; Zhiqiang Lin 001; XiaoFeng Wang 001; Wing Cheong Lau; Menghan Sun; Ronghai Yang; Kehuan Zhang (NDSS, 2018)

Understanding Android Obfuscation Techniques: A Large-Scale Investigation in the Wild. - Shuaike Dong; Menghao Li; Wenrui Diao; Xiangyu Liu; Jian Liu 008; Zhou Li 001; Fenghao Xu; Kai Chen 012; Xiaofeng Wang 006; Kehuan Zhang (SecureComm (1), 2018)

Accessing mobile user's privacy based on IME personalization: Understanding and practical attacks. - Wenrui Diao; Rui Liu 002; Xiangyu Liu; Zhe Zhou 001; Zhou Li 001; Kehuan Zhang (J. Comput. Secur., 2018)

Your IoTs Are (Not) Mine: On the Remote Binding Between IoT Devices and Users. - Jiongyi Chen; Chaoshun Zuo; Wenrui Diao; Shuaike Dong; Qingchuan Zhao; Menghan Sun; Zhiqiang Lin 001; Yinqian Zhang; Kehuan Zhang (DSN, 2019)

BadBluetooth: Breaking Android Security Mechanisms via Malicious Bluetooth Peripherals. - Fenghao Xu; Wenrui Diao; Zhou Li 001; Jiongyi Chen; Kehuan Zhang (NDSS, 2019)

Kindness is a Risky Business: On the Usage of the Accessibility APIs in Android. - Wenrui Diao; Yue Zhang 025; Li Zhang; Zhou Li 001; Fenghao Xu; Xiaorui Pan; Xiangyu Liu; Jian Weng 001; Kehuan Zhang; XiaoFeng Wang 001 (RAID, 2019)

CryptoREX: Large-scale Analysis of Cryptographic Misuse in IoT Devices. - Li Zhang; Jiongyi Chen; Wenrui Diao; Shanqing Guo; Jian Weng 001; Kehuan Zhang (RAID, 2019)

An empirical study of potentially malicious third-party libraries in Android apps. - Zicheng Zhang; Wenrui Diao; Chengyu Hu; Shanqing Guo; Chaoshun Zuo; Li Li 044 (WISEC, 2020)

Android on PC: On the Security of End-user Android Emulators. - Fenghao Xu; Siyu Shen; Wenrui Diao; Zhou Li 001; Yi Chen 024; Rui Li 102; Kehuan Zhang (CCS, 2021)

ShadowDroid: Practical Black-box Attack against ML-based Android Malware Detection. - Jin Zhang; Chennan Zhang; Xiangyu Liu; Yuncheng Wang; Wenrui Diao; Shanqing Guo (ICPADS, 2021)

Android Custom Permissions Demystified: From Privilege Escalation to Design Shortcomings. - Rui Li 102; Wenrui Diao; Zhou Li 001; Jianqi Du; Shanqing Guo (SP, 2021)

Large-scale Security Measurements on the Android Firmware Ecosystem. - Qinsheng Hou; Wenrui Diao; Yanhao Wang; Xiaofeng Liu 013; Song Liu; Lingyun Ying; Shanqing Guo; Yuanzhi Li; Meining Nie; Haixin Duan (ICSE, 2022)

Demystifying Android Non-SDK APls: Measurement and Understanding. - Shishuai Yang; Rui Li 102; Jiongyi Chen; Wenrui Diao; Shanqing Guo (ICSE, 2022)

Default: Mutual Information-based Crash Triage for Massive Crashes. - Xing Zhang; Jiongyi Chen; Chao Feng 002; Ruilin Li 002; Wenrui Diao; Kehuan Zhang; Jing Lei 001; Chaojing Tang (ICSE, 2022)

Cast Away: On the Security of DLNA Deployments in the SmartTV Ecosystem. - Guangwei Tian; Jiongyi Chen; Kailun Yan; Shishuai Yang; Wenrui Diao (QRS, 2022)

Identifying the BLE Misconfigurations of IoT Devices through Companion Mobile Apps. - Jianqi Du; Fenghao Xu; Chennan Zhang; Zidong Zhang; Xiaoyin Liu; Pengcheng Ren; Wenrui Diao; Shanqing Guo; Kehuan Zhang (SECON, 2022)

PITracker: Detecting Android PendingIntent Vulnerabilities through Intent Flow Analysis. - Chennan Zhang; Shuang Li; Wenrui Diao; Shanqing Guo (WISEC, 2022)

Android Custom Permissions Demystified: A Comprehensive Security Evaluation. - Rui Li 102; Wenrui Diao; Zhou Li 001; Shishuai Yang; Shuang Li; Shanqing Guo (IEEE Trans. Software Eng., 2022)

Do App Developers Follow the Android Official Data Security Guidelines? An Empirical Measurement on App Data Security. - Shishuai Yang; Qinsheng Hou; Shuang Li; Wenrui Diao (APSEC, 2023)

Living in the Past: Analyzing BLE IoT Devices Based on Mobile Companion Apps in Old Versions. - Jianqi Du; Zidong Zhang; Fenghao Xu; Wenrui Diao (MSN, 2023)

Lost in Conversion: Exploit Data Structure Conversion with Attribute Loss to Break Android Systems. - Rui Li 102; Wenrui Diao; Shishuai Yang; Xiangyu Liu; Shanqing Guo; Kehuan Zhang (USENIX Security Symposium, 2023)

Bad Apples: Understanding the Centralized Security Risks in Decentralized Ecosystems. - Kailun Yan; Jilian Zhang; Xiangyu Liu; Wenrui Diao; Shanqing Guo (WWW, 2023)

Can We Trust the Phone Vendors? Comprehensive Security Measurements on the Android Firmware Ecosystem. - Qinsheng Hou; Wenrui Diao; Yanhao Wang; Chenglin Mao; Lingyun Ying; Song Liu; Xiaofeng Liu 013; Yuanzhi Li; Shanqing Guo; Meining Nie; Haixin Duan (IEEE Trans. Software Eng., 2023)

Stealing Trust: Unraveling Blind Message Attacks in Web3 Authentication. - Kailun Yan; Xiaokuan Zhang; Wenrui Diao (CCS, 2024)

MiniCAT: Understanding and Detecting Cross-Page Request Forgery Vulnerabilities in Mini-Programs. - Zidong Zhang; Qinsheng Hou; Lingyun Ying; Wenrui Diao; Yacong Gu; Rui Li 102; Shanqing Guo; Haixin Duan (CCS, 2024)

DEMISTIFY: Identifying On-device Machine Learning Models Stealing and Reuse Vulnerabilities in Mobile Apps. - Pengcheng Ren; Chaoshun Zuo; Xiaofeng Liu 013; Wenrui Diao; Qingchuan Zhao; Shanqing Guo (ICSE, 2024)

Android's Cat-and-Mouse Game: Understanding Evasion Techniques against Dynamic Analysis. - Shuang Li; Rui Li 102; Shishuai Yang; Wenrui Diao (ISSRE, 2024)

Beyond the Horizon: Exploring Cross-Market Security Discrepancies in Parallel Android Apps. - Shishuai Yang; Guangdong Bai; Ruoyan Lin; Jialong Guo; Wenrui Diao (ISSRE, 2024)

CrypTody: Cryptographic Misuse Analysis of IoT Firmware via Data-flow Reasoning. - Jianing Wang; Shanqing Guo; Wenrui Diao; Yue Liu; Haixin Duan; Yichen Liu; Zhenkai Liang (RAID, 2024)

MiniBLE: Exploring Insecure BLE API Usages in Mini-Programs. - Zidong Zhang; Jianqi Du; Wenrui Diao; Jianliang Wu 002 (SaTS@CCS, 2024)

Custom Permission Misconfigurations in Android: A Large-Scale Security Analysis. - Rui Li 102; Wenrui Diao; Debin Gao (TrustCom, 2024)

Security Assessment of Customizations in Android Smartwatch Firmware. - Yifan Yu; Ruoyan Lin; Shuang Li; Qinsheng Hou; Peng Tang; Wenrui Diao (TrustCom, 2024)

Understanding Android OS Forward Compatibility Support for Legacy Apps: A Data-Driven Analysis. - Shuang Li; Rui Li 102; Yifan Yu; Kailun Yan; Shishuai Yang; Wenrui Diao (SANER, 2024)

From Promises to Practice: Evaluating the Private Browsing Modes of Android Browser Apps. - Xiaoyin Liu; Wenzhi Li; Qinsheng Hou; Shishuai Yang; Lingyun Ying; Wenrui Diao; Yanan Li; Shanqing Guo; Haixin Duan (WWW, 2024)

Stealing Trust: Unveiling Vulnerabilities in Web3 Authentication. - Kailun Yan; Xiaokuan Zhang; Wenrui Diao (CoRR, 2024)

From guidelines to practice: assessing Android app developer compliance with google's security recommendations. - Shishuai Yang; Qinsheng Hou; Shuang Li; Fenghao Xu; Wenrui Diao (Empir. Softw. Eng., 2025)