Phantom Device Attack: Uncovering the Security Implications of the Interactions among Devices, IoT Cloud, and Mobile Apps. - Wei Zhou 026; Yan Jia 009; Yao Yao; Lipeng Zhu 003; Le Guan; Yuhang Mao; Peng Liu 005; Yuqing Zhang 001 (CoRR, 2018)

Identifying Privilege Separation Vulnerabilities in IoT Firmware with Symbolic Execution. - Yao Yao; Wei Zhou 026; Yan Jia 009; Lipeng Zhu 003; Peng Liu 005; Yuqing Zhang 001 (ESORICS (1), 2019)

Security Analysis of Smart Home Based on Life Cycle. - Yuhang Mao; Xuejun Li 007; Yan Jia 009; Shangru Zhao; Yuqing Zhang 001 (SmartWorld/SCALCOM/UIC/ATC/CBDCom/IOP/SCI, 2019)

Discovering and Understanding the Security Hazards in the Interactions between IoT Devices, Mobile Apps, and Clouds on Smart Home Platforms. - Wei Zhou 026; Yan Jia 009; Yao Yao; Lipeng Zhu 003; Le Guan; Yuhang Mao; Peng Liu 005; Yuqing Zhang 001 (USENIX Security Symposium, 2019)

The Effect of IoT New Features on Security and Privacy: New Threats, Existing Solutions, and Challenges Yet to Be Solved. - Wei Zhou 026; Yan Jia 009; Anni Peng; Yuqing Zhang 001; Peng Liu 005 (IEEE Internet Things J., 2019)

Burglars' IoT Paradise: Understanding and Mitigating Security Risks of General Messaging Protocols on IoT Clouds. - Yan Jia 009; Luyi Xing; Yuhang Mao; Dongfang Zhao 010; XiaoFeng Wang 001; Shangru Zhao; Yuqing Zhang 001 (SP, 2020)

Shattered Chain of Trust: Understanding Security Risks in Cross-Cloud IoT Access Delegation. - Bin Yuan; Yan Jia 009; Luyi Xing; Dongfang Zhao 010; XiaoFeng Wang 001; Deqing Zou; Hai Jin 001; Yuqing Zhang 001 (USENIX Security Symposium, 2020)

Who's In Control? On Security Risks of Disjointed IoT Device Management Channels. - Yan Jia 009; Bin Yuan; Luyi Xing; Dongfang Zhao 010; Yifan Zhang 010; XiaoFeng Wang 001; Yijing Liu 007; Kaimin Zheng; Peyton Crnjak; Yuqing Zhang 001; Deqing Zou; Hai Jin 001 (CCS, 2021)

Reviewing IoT Security via Logic Bugs in IoT Platforms and Systems. - Wei Zhou 026; Chen Cao 004; Dongdong Huo; Kai Cheng; Lan Zhang 008; Le Guan; Tao Liu; Yan Jia 009; Yaowen Zheng; Yuqing Zhang 001; Limin Sun 001; Yazhe Wang; et al. (IEEE Internet Things J., 2021)

P-Verifier: Understanding and Mitigating Security Risks in Cloud-based IoT Access Policies. - Ze Jin; Luyi Xing; Yiwei Fang; Yan Jia 009; Bin Yuan; Qixu Liu (CCS, 2022)

Birds of a Feather Flock Together: How Set Bias Helps to Deanonymize You via Revealed Intersection Sizes. - Xiaojie Guo 004; Ye Han; Zheli Liu; Ding Wang 002; Yan Jia 009; Jin Li 002 (USENIX Security Symposium, 2022)

How Are Your Zombie Accounts? Understanding Users' Practices and Expectations on Mobile App Account Deletion. - Yijing Liu 007; Yan Jia 009; Qingyin Tan; Zheli Liu; Luyi Xing (USENIX Security Symposium, 2022)

An incentive mechanism in expert-decision-based crowdsensing networks. - Bing Jia; Hao Gong; Zhaopeng Zong; Tao Zhou; Thar Baker; Ahmed Al-Shamma'a; Yan Jia 009 (Appl. Soft Comput., 2022)

Towards Comprehensively Understanding the Run-time Security of Programmable Logic Controllers: A 3-year Empirical Study. - Rongkuan Ma; Qiang Wei; Jingyi Wang 004; Shunkai Zhu; Shouling Ji; Peng Cheng 001; Yan Jia 009; Qingxian Wang (CoRR, 2022)

Fuzzing Drone Control System Configurations Based on Quality-Diversity Enhanced Genetic Algorithm. - Zhiwei Chang; Hanfeng Zhang; Yue Yang; Yan Jia 009; Sihan Xu; Tong Li 011; Zheli Liu (AIS&P (1), 2023)

Union under Duress: Understanding Hazards of Duplicate Resource Mismediation in Android Software Supply Chain. - Xueqiang Wang; Yifan Zhang 010; XiaoFeng Wang 001; Yan Jia 009; Luyi Xing (USENIX Security Symposium, 2023)

Multi-Misconfiguration Diagnosis via Identifying Correlated Configuration Parameters. - Yingnan Zhou; Xue Hu; Sihan Xu; Yan Jia 009; Yuhao Liu 007; Junyong Wang; Guangquan Xu; Wei Wang 012; Shaoying Liu; Thar Baker (IEEE Trans. Software Eng., 2023)

Maginot Line: Assessing a New Cross-app Threat to PII-as-Factor Authentication in Chinese Mobile Apps. - Fannv He; Yan Jia 009; Jiayu Zhao; Yue Fang; Jice Wang; Mengyue Feng; Peng Liu 005; Yuqing Zhang 001 (NDSS, 2024)

MQTTactic: Security Analysis and Verification for Logic Flaws in MQTT Implementations. - Bin Yuan; Zhanxiang Song; Yan Jia 009; Zhenyu Lu; Deqing Zou; Hai Jin 001; Luyi Xing (SP, 2024)

Low-cost fuzzing drone control system for configuration errors threatening flight safety in edge terminals. - Zhiwei Chang; Hanfeng Zhang; Yan Jia 009; Sihan Xu; Tong Li 011; Zheli Liu (Comput. Commun., 2024)

A Survey on Consumer IoT Traffic: Security and Privacy. - Yan Jia 009; Yuxin Song; Zihou Liu; Qingyin Tan; Fangming Wang; Yu Zhang; Zheli Liu (CoRR, 2024)

Simple But Not Secure: An Empirical Security Analysis of Two-factor Authentication Systems. - Zhi Wang; Xin Yang; Du Chen; Han Gao; Meiqi Tian; Yan Jia 009; Wanpeng Li (CoRR, 2024)

Rethinking Software Misconfigurations in the Real World: An Empirical Study and Literature Analysis. - Yuhao Liu 007; Yingnan Zhou; Hanfeng Zhang; Zhiwei Chang; Sihan Xu; Yan Jia 009; Wei Wang 012; Zheli Liu (CoRR, 2024)

Security and privacy measurement on Chinese consumer IoT traffic based on device lifecycle. - Chenghua Jin; Yuxin Song; Yan Jia 009; Qingyin Tan; Rui Yang; Zheli Liu (Sci. China Inf. Sci., 2026)

DMCGuard: risky perils and fine-grained control on IoT multiple device management channels. - Bin Yuan; Kaimin Zheng; Yan Jia 009; Jiajun Ren; Kunming Wang 003; Shengjiu Shi; Deqing Zou; Hai Jin 001 (Frontiers Comput. Sci., 2026)

Analyzing consumer IoT traffic from security and privacy perspectives: a comprehensive survey. - Yan Jia 009; Yuxin Song; Zihou Liu; Qingyin Tan; Yang Song; Yu Zhang; Zheli Liu (Frontiers Comput. Sci., 2026)

Rethinking software misconfigurations in the real world: an empirical study and literature analysis. - Yuhao Liu 007; Yingnan Zhou; Hanfeng Zhang; Zhiwei Chang; Sihan Xu; Yan Jia 009; Wei Wang 012; Juncheng Hu; Zheli Liu (Empir. Softw. Eng., 2026)