Understanding Privacy Over-collection in WeChat Sub-app Ecosystem. - Xiaohan Zhang 001; Yang Wang 167; Xin Zhang 146; Ziqi Huang; Lei Zhang 096; Min Yang 002 (CoRR, 2023)

Slowing Down the Aging of Learning-Based Malware Detectors With API Knowledge. - Xiaohan Zhang 001; Mi Zhang 001; Yuan Zhang 009; Ming Zhong 011; Xin Zhang 146; Yinzhi Cao; Min Yang 002 (IEEE Trans. Dependable Secur. Comput., 2023)

An Empirical Study on Fingerprint API Misuse with Lifecycle Analysis in Real-world Android Apps. - Xin Zhang 146; Xiaohan Zhang 001; Zhichen Liu; Bo Zhao; Zhemin Yang; Min Yang 002 (NDSS, 2025)

Demystifying the (In)Security of QR Code-based Login in Real-world Deployments. - Xin Zhang 146; Xiaohan Zhang 001; Bo Zhao; Yuhong Nan; Zhichen Liu; Jianzhou Chen; Huijun Zhou; Min Yang 002 (USENIX Security Symposium, 2025)

Anchors of Trust: A Usability Study on User Awareness, Consent, and Control in Cross-Device Authentication. - Xin Zhang 146; Xiaohan Zhang 001; Huijun Zhou; Bo Zhao (NDSS, 2026)