Abusing Hidden Properties to Attack the Node.js Ecosystem. - Feng Xiao; Jianwei Huang; Yichang Xiong; Guangliang Yang 001; Hong Hu 004; Guofei Gu; Wenke Lee (USENIX Security Symposium, 2021)

VPVet: Vetting Privacy Policies of Virtual Reality Apps. - Yuxia Zhan; Yan Meng 001; Lu Zhou; Yichang Xiong; Xiaokuan Zhang; Lichuan Ma; Guoxing Chen; Qingqi Pei; Haojin Zhu (CCS, 2024)