Attack Grammar: A New Approach to Modeling and Analyzing Network Attack Sequences. - Yinqian Zhang; Xun Fan; Yijun Wang; Zhi Xue (ACSAC, 2008)

An Easy-to-Deploy Penetration Testing Platform. - Bing Duan; Yinqian Zhang; Dawu Gu (ICYCS, 2008)

Two Stochastic Models for Security Evaluation Based on Attack Graph. - Yinqian Zhang; Xun Fan; Zhi Xue; Hao Xu (ICYCS, 2008)

The security of modern password expiration: an algorithmic framework and empirical analysis. - Yinqian Zhang; Fabian Monrose; Michael K. Reiter (CCS, 2010)

Weight in Competitive K-Means Algorithm. - Tingting Cui; XinBin Zhao; Zhe Wang 017; Yinqian Zhang (ICFCE, 2011)

HomeAlone: Co-residency Detection in the Cloud via Side-Channel Analysis. - Yinqian Zhang; Ari Juels; Alina Oprea; Michael K. Reiter (IEEE Symposium on Security and Privacy, 2011)

Cross-VM side channels and their use to extract private keys. - Yinqian Zhang; Ari Juels; Michael K. Reiter; Thomas Ristenpart (CCS, 2012)

Düppel: retrofitting commodity operating systems to mitigate cache side channels in the cloud. - Yinqian Zhang; Michael K. Reiter (CCS, 2013)

Cross-Tenant Side-Channel Attacks in PaaS Clouds. - Yinqian Zhang; Ari Juels; Michael K. Reiter; Thomas Ristenpart (CCS, 2014)

Cache-based Side-Channel Attacks in Multi-Tenant Public Clouds and Their Countermeasures. - Yinqian Zhang (2014)

Mitigating Storage Side Channels Using Statistical Privacy Mechanisms. - Qiuyu Xiao; Michael K. Reiter; Yinqian Zhang (CCS, 2015)

A Placement Vulnerability Study in Multi-Tenant Public Clouds. - Venkatanathan Varadarajan; Yinqian Zhang; Thomas Ristenpart; Michael M. Swift (USENIX Security Symposium, 2015)

Return-Oriented Flush-Reload Side Channels on ARM and Their Implications for Android Devices. - Xiaokuan Zhang; Yuan Xiao 001; Yinqian Zhang (CCS, 2016)

A Software Approach to Defeating Side Channels in Last-Level Caches. - Ziqiao Zhou; Michael K. Reiter; Yinqian Zhang (CCS, 2016)

CloudRadar: A Real-Time Side-Channel Attack Detection System in Clouds. - Tianwei Zhang 004; Yinqian Zhang; Ruby B. Lee (RAID, 2016)

One Bit Flips, One Cloud Flops: Cross-VM Row Hammer Attacks and Privilege Escalation. - Yuan Xiao 001; Xiaokuan Zhang; Yinqian Zhang; Radu Teodorescu (USENIX Security Symposium, 2016)

Memory DoS Attacks in Multi-tenant Clouds: Severity and Mitigation. - Tianwei Zhang 004; Yinqian Zhang; Ruby B. Lee (CoRR, 2016)

Detecting Privileged Side-Channel Attacks in Shielded Execution with Déjà Vu. - Sanchuan Chen; Xiaokuan Zhang; Michael K. Reiter; Yinqian Zhang (AsiaCCS, 2017)

Leaky Cauldron on the Dark Land: Understanding Memory Side-Channel Hazards in SGX. - Wenhao Wang 001; Guoxing Chen; Xiaorui Pan; Yinqian Zhang; XiaoFeng Wang 001; Vincent Bindschaedler; Haixu Tang; Carl A. Gunter (CCS, 2017)

STACCO: Differentially Analyzing Side-Channel Traces for Detecting SSL/TLS Vulnerabilities in Secure Enclaves. - Yuan Xiao 001; Mengyuan Li 004; Sanchuan Chen; Yinqian Zhang (CCS, 2017)

Cache Side Channels: State of the Art and Research Opportunities. - Yinqian Zhang (CCS, 2017)

DoS Attacks on Your Memory in Cloud. - Tianwei Zhang 004; Yinqian Zhang; Ruby B. Lee (AsiaCCS, 2017)

PT-CFI: Transparent Backward-Edge Control Flow Violation Detection Using Intel Processor Trace. - Yufei Gu; Qingchuan Zhao; Yinqian Zhang; Zhiqiang Lin 001 (CODASPY, 2017)

Personalized Pseudonyms for Servers in the Cloud. - Qiuyu Xiao; Michael K. Reiter; Yinqian Zhang (Proc. Priv. Enhancing Technol., 2017)

A Measurement Study of Authentication Rate-Limiting Mechanisms of Modern Websites. - Bo Lu; Xiaokuan Zhang; Ziman Ling; Yinqian Zhang; Zhiqiang Lin 001 (ACSAC, 2018)

Analyzing Cache Side Channels Using Deep Neural Networks. - Tianwei Zhang 004; Yinqian Zhang; Ruby B. Lee (ACSAC, 2018)

Leveraging Hardware Transactional Memory for Cache Side-Channel Defenses. - Sanchuan Chen; Fangfei Liu; Zeyu Mi; Yinqian Zhang; Ruby B. Lee; Haibo Chen 001; XiaoFeng Wang 001 (AsiaCCS, 2018)

HoMonit: Monitoring Smart Home Apps from Encrypted Traffic. - Wei Zhang 001; Yan Meng 001; Yugeng Liu; Xiaokuan Zhang; Yinqian Zhang; Haojin Zhu (CCS, 2018)

NVCool: When Non-Volatile Caches Meet Cold Boot Attacks. - Xiang Pan; Anys Bacha; Spencer Rudolph; Li Zhou 012; Yinqian Zhang; Radu Teodorescu (ICCD, 2018)

Differentially Private Access Patterns for Searchable Symmetric Encryption. - Guoxing Chen; Ten-Hwang Lai; Michael K. Reiter; Yinqian Zhang (INFOCOM, 2018)

Face Flashing: a Secure Liveness Detection Protocol based on Light Reflections. - Di Tang 001; Zhe Zhou 001; Yinqian Zhang; Kehuan Zhang (NDSS, 2018)

OS-level Side Channels without Procfs: Exploring Cross-App Information Leakage on iOS. - Xiaokuan Zhang; Xueqiang Wang; Xiaolong Bai; Yinqian Zhang; XiaoFeng Wang 001 (NDSS, 2018)

Racing in Hyperspace: Closing Hyper-Threading Side Channels on SGX with Contrived Data Races. - Guoxing Chen; Wenhao Wang 001; Tianyu Chen; Sanchuan Chen; Yinqian Zhang; XiaoFeng Wang 001; Ten-Hwang Lai; Dongdai Lin (IEEE Symposium on Security and Privacy, 2018)

Static Evaluation of Noninterference Using Approximate Model Counting. - Ziqiao Zhou; Zhiyun Qian; Michael K. Reiter; Yinqian Zhang (IEEE Symposium on Security and Privacy, 2018)

Peeking Behind the Curtains of Serverless Platforms. - Liang Wang 023; Mengyuan Li 004; Yinqian Zhang; Thomas Ristenpart; Michael M. Swift (USENIX ATC, 2018)

SgxPectre Attacks: Leaking Enclave Secrets via Speculative Execution. - Guoxing Chen; Sanchuan Chen; Yuan Xiao 001; Yinqian Zhang; Zhiqiang Lin 001; Ten-Hwang Lai (CoRR, 2018)

SpecShield: Shielding Speculative Data from Microarchitectural Covert Channels. - Kristin Barber; Anys Bacha; Li Zhou 012; Yinqian Zhang; Radu Teodorescu (PACT, 2019)

OPERA: Open Remote Attestation for Intel's Secure Enclaves. - Guoxing Chen; Yinqian Zhang; Ten-Hwang Lai (CCS, 2019)

Running Language Interpreters Inside SGX: A Lightweight, Legacy-Compatible Script Code Hardening Approach. - Huibo Wang; Erick Bauman; Vishal Karande; Zhiqiang Lin 001; Yueqiang Cheng; Yinqian Zhang (AsiaCCS, 2019)

Speculative Execution Attacks and Cloud Security. - Yinqian Zhang; Radu Sion (CCSW, 2019)

Automatic Fingerprinting of Vulnerable BLE IoT Devices with Static UUIDs from Mobile Apps. - Chaoshun Zuo; Haohuang Wen; Zhiqiang Lin 001; Yinqian Zhang (CCS, 2019)

Defeating Speculative-Execution Attacks on SGX with HyperRace. - Guoxing Chen; Mengyuan Li 004; Fengwei Zhang; Yinqian Zhang (DSC, 2019)

Your IoTs Are (Not) Mine: On the Remote Binding Between IoT Devices and Users. - Jiongyi Chen; Chaoshun Zuo; Wenrui Diao; Shuaike Dong; Qingchuan Zhao; Menghan Sun; Zhiqiang Lin 001; Yinqian Zhang; Kehuan Zhang (DSN, 2019)

OBFUSCURO: A Commodity Obfuscation Engine on Intel SGX. - Adil Ahmad; Byunggill Joe; Yuan Xiao 001; Yinqian Zhang; Insik Shin; Byoungyoung Lee (NDSS, 2019)

Statistical Privacy for Streaming Traffic. - Xiaokuan Zhang; Jihun Hamm; Michael K. Reiter; Yinqian Zhang (NDSS, 2019)

Time and Order: Towards Automatically Identifying Side-Channel Vulnerabilities in Enclave Binaries. - Wubing Wang; Yinqian Zhang; Zhiqiang Lin 001 (RAID, 2019)

Why Does Your Data Leak? Uncovering the Data Leakage in Cloud from Mobile Apps. - Chaoshun Zuo; Zhiqiang Lin 001; Yinqian Zhang (IEEE Symposium on Security and Privacy, 2019)

Exploiting Unprotected I/O Operations in AMD's Secure Encrypted Virtualization. - Mengyuan Li 004; Yinqian Zhang; Zhiqiang Lin 001; Yan Solihin (USENIX Security Symposium, 2019)

SafeHidden: An Efficient and Secure Information Hiding Technique Using Re-randomization. - Zhe Wang 017; Chenggang Wu 002; Yinqian Zhang; Bowen Tang 001; Pen-Chung Yew; Mengyao Xie; Yuanming Lai; Yan Kang 002; Yueqiang Cheng; Zhiping Shi 002 (USENIX Security Symposium, 2019)

Isolating Speculative Data to Prevent Transient Execution Attacks. - Kristin Barber; Anys Bacha; Li Zhou 012; Yinqian Zhang; Radu Teodorescu (IEEE Comput. Archit. Lett., 2019)

SvTPM: A Secure and Efficient vTPM in the Cloud. - Juan Wang 006; Chengyang Fan; Jie Wang 006; Yueqiang Cheng; Yinqian Zhang; Wenhui Zhang; Peng Liu 005; Hongxin Hu (CoRR, 2019)

Revisiting and Evaluating Software Side-channel Vulnerabilities and Countermeasures in Cryptographic Applications. - Tianwei Zhang 004; Jun Jiang; Yinqian Zhang (CoRR, 2019)

CCSW'20: 2020 Cloud Computing Security Workshop. - Radu Sion; Yinqian Zhang (CCS, 2020)

FirmXRay: Detecting Bluetooth Link Layer Vulnerabilities From Bare-Metal Firmware. - Haohuang Wen; Zhiqiang Lin 001; Yinqian Zhang (CCS, 2020)

SPEECHMINER: A Framework for Investigating and Measuring Speculative Execution Vulnerabilities. - Yuan Xiao 001; Yinqian Zhang; Radu Teodorescu (NDSS, 2020)

SEIMI: Efficient and Secure SMAP-Enabled Intra-process Memory Isolation. - Zhe Wang 017; Chenggang Wu 002; Mengyao Xie; Yinqian Zhang; Kangjie Lu; Xiaofeng Zhang; Yuanming Lai; Yan Kang 002; Min Yang 002 (SP, 2020)

TXSPECTOR: Uncovering Attacks in Ethereum from Transactions. - Mengya Zhang; Xiaokuan Zhang; Yinqian Zhang; Zhiqiang Lin 001 (USENIX Security Symposium, 2020)

GhostKnight: Breaching Data Integrity via Speculative Execution. - Zhi Zhang 001; Yueqiang Cheng; Yinqian Zhang; Surya Nepal (CoRR, 2020)

SgxPectre: Stealing Intel Secrets From SGX Enclaves via Speculative Execution. - Guoxing Chen; Sanchuan Chen; Yuan Xiao 001; Yinqian Zhang; Zhiqiang Lin 001; Ten-Hwang Lai (IEEE Secur. Priv., 2020)

CPU Elasticity to Mitigate Cross-VM Runtime Monitoring. - Zeyu Mi; Haibo Chen 001; Yinqian Zhang; ShuangHe Peng; Xiaofeng Wang 006; Michael K. Reiter (IEEE Trans. Dependable Secur. Comput., 2020)

TLB Poisoning Attacks on AMD Secure Encrypted Virtualization. - Mengyuan Li 004; Yinqian Zhang; Huibo Wang; Kang Li; Yueqiang Cheng (ACSAC, 2021)

See through Walls: Detecting Malware in SGX Enclaves with SGX-Bouncer. - Zeyu Zhang; Xiaoli Zhang 003; Qi Li 002; Kun Sun 001; Yinqian Zhang; Songsong Liu; Yukun Liu; Xiaoning Li (AsiaCCS, 2021)

CrossLine: Breaking "Security-by-Crash" based Memory Isolation in AMD SEV. - Mengyuan Li 004; Yinqian Zhang; Zhiqiang Lin 001 (CCS, 2021)

Specularizer : Detecting Speculative Execution Attacks via Performance Tracing. - Wubing Wang; Guoxing Chen; Yueqiang Cheng; Yinqian Zhang; Zhiqiang Lin 001 (DIMVA, 2021)

INTROSPECTRE: A Pre-Silicon Framework for Discovery and Analysis of Transient Execution Vulnerabilities. - Moein Ghaniyoun; Kristin Barber; Yinqian Zhang; Radu Teodorescu (ISCA, 2021)

SelectiveTaint: Efficient Data Flow Tracking With Static Binary Rewriting. - Sanchuan Chen; Zhiqiang Lin 001; Yinqian Zhang (USENIX Security Symposium, 2021)

Towards Formal Verification of State Continuity for Enclave Programs. - Mohit Kumar Jangid; Guoxing Chen; Yinqian Zhang; Zhiqiang Lin 001 (USENIX Security Symposium, 2021)

CIPHERLEAKS: Breaking Constant-time Cryptography on AMD SEV via the Ciphertext Side Channel. - Mengyuan Li 004; Yinqian Zhang; Huibo Wang; Kang Li; Yueqiang Cheng (USENIX Security Symposium, 2021)

When NAS Meets Watermarking: Ownership Verification of DNN Models via Cache Side Channels. - Xiaoxuan Lou; Shangwei Guo; Tianwei Zhang 004; Yinqian Zhang; Yang Liu 003 (CoRR, 2021)

Cape: compiler-aided program transformation for HTM-based cache side-channel defense. - Rui Zhang; Michael D. Bond; Yinqian Zhang (CC, 2022)

ENGRAFT: Enclave-guarded Raft on Byzantine Faulty Nodes. - Weili Wang 005; Sen Deng; Jianyu Niu; Michael K. Reiter; Yinqian Zhang (CCS, 2022)

NARRATOR: Secure and Practical State Continuity for Trusted Execution in the Cloud. - Jianyu Niu; Wei Peng; Xiaokuan Zhang; Yinqian Zhang (CCS, 2022)

CETIS: Retrofitting Intel CET for Generic and Efficient Intra-process Memory Isolation. - Mengyao Xie; Chenggang Wu 002; Yinqian Zhang; Jiali Xu; Yuanming Lai; Yan Kang 002; Wei Wang 385; Zhe Wang 017 (CCS, 2022)

Multi-Certificate Attacks against Proof-of-Elapsed-Time and Their Countermeasures. - Huibo Wang; Guoxing Chen; Yinqian Zhang; Zhiqiang Lin 001 (NDSS, 2022)

ENCLYZER: Automated Analysis of Transient Data Leaks on Intel SGX. - Jiuqin Zhou; Yuan Xiao 001; Radu Teodorescu; Yinqian Zhang (SEED, 2022)

A Systematic Look at Ciphertext Side Channels on AMD SEV-SNP. - Mengyuan Li 004; Luca Wilke; Jan Wichelmann; Thomas Eisenbarth 001; Radu Teodorescu; Yinqian Zhang (SP, 2022)

vSGX: Virtualizing SGX Enclaves on AMD SEV. - Shixuan Zhao 002; Mengyuan Li 004; Yinqian Zhang; Zhiqiang Lin 001 (SP, 2022)

MAGE: Mutual Attestation for a Group of Enclaves without Trusted Third Parties. - Guoxing Chen; Yinqian Zhang (USENIX Security Symposium, 2022)

A Pre-Silicon Approach to Discovering Microarchitectural Vulnerabilities in Security Critical Applications. - Kristin Barber; Moein Ghaniyoun; Yinqian Zhang; Radu Teodorescu (IEEE Comput. Archit. Lett., 2022)

An Empirical Study on Ethereum Private Transactions and the Security Implications. - Xingyu Lyu; Mengya Zhang; Xiaokuan Zhang; Jianyu Niu; Yinqian Zhang; Zhiqiang Lin 001 (CoRR, 2022)

A Survey of Microarchitectural Side-channel Vulnerabilities, Attacks, and Defenses in Cryptography. - Xiaoxuan Lou; Tianwei Zhang 004; Jun Jiang; Yinqian Zhang (ACM Comput. Surv., 2022)

Cloud Computing Security: Foundations and Research Directions. - Anrin Chakraborti; Reza Curtmola; Jonathan Katz; Jason Nieh; Ahmad-Reza Sadeghi; Radu Sion; Yinqian Zhang (Found. Trends Priv. Secur., 2022)

Defeating traffic analysis via differential privacy: a case study on streaming traffic. - Xiaokuan Zhang; Jihun Hamm; Michael K. Reiter; Yinqian Zhang (Int. J. Inf. Sec., 2022)

Making Information Hiding Effective Again. - Zhe Wang 017; Chenggang Wu 002; Yinqian Zhang; Bowen Tang 001; Pen-Chung Yew; Mengyao Xie; Yuanming Lai; Yan Kang 002; Yueqiang Cheng; Zhiping Shi 002 (IEEE Trans. Dependable Secur. Comput., 2022)

PANIC: PAN-assisted Intra-process Memory Isolation on ARM. - Jiali Xu; Mengyao Xie; Chenggang Wu 002; Yinqian Zhang; Qijing Li; Xuan Huang; Yuanming Lai; Yan Kang 002; Wei Wang 385; Qiang Wei; Zhe Wang 017 (CCS, 2023)

PwrLeak: Exploiting Power Reporting Interface for Side-Channel Attacks on AMD SEV. - Wubing Wang; Mengyuan Li 004; Yinqian Zhang; Zhiqiang Lin 001 (DIMVA, 2023)

TEESec: Pre-Silicon Vulnerability Discovery for Trusted Execution Environments. - Moein Ghaniyoun; Kristin Barber; Yuan Xiao 001; Yinqian Zhang; Radu Teodorescu (ISCA, 2023)

Reusable Enclaves for Confidential Serverless Computing. - Shixuan Zhao 002; Pinshen Xu; Guoxing Chen; Mengya Zhang; Yinqian Zhang; Zhiqiang Lin 001 (USENIX Security Symposium, 2023)

Controlled Data Races in Enclaves: Attacks and Detection. - Sanchuan Chen; Zhiqiang Lin 001; Yinqian Zhang (USENIX Security Symposium, 2023)

CipherH: Automated Detection of Ciphertext Side-channel Vulnerabilities in Cryptographic Implementations. - Sen Deng; Mengyuan Li 004; Yining Tang; Shuai Wang 011; Shoumeng Yan; Yinqian Zhang (USENIX Security Symposium, 2023)

Panda: Security Analysis of Algorand Smart Contracts. - Zhiyuan Sun; Xiapu Luo; Yinqian Zhang (USENIX Security Symposium, 2023)

SoK: Security of Cross-chain Bridges: Attack Surfaces, Defenses, and Open Problems. - Mengya Zhang; Xiaokuan Zhang; Josh Barbee; Yinqian Zhang; Zhiqiang Lin 001 (CoRR, 2023)

SvTPM: SGX-Based Virtual Trusted Platform Modules for Cloud Computing. - Juan Wang 006; Jie Wang 006; Chengyang Fan; Fei Yan 008; Yueqiang Cheng; Yinqian Zhang; Wenhui Zhang; Mengda Yang; Hongxin Hu (IEEE Trans. Cloud Comput., 2023)

Securing TEEs With Verifiable Execution Contracts. - Guoxing Chen; Yinqian Zhang (IEEE Trans. Dependable Secur. Comput., 2023)

Crystal: Enhancing Blockchain Mining Transparency With Quorum Certificate. - Jianyu Niu; Fangyu Gai; Runchao Han; Ren Zhang 003; Yinqian Zhang; Chen Feng 001 (IEEE Trans. Dependable Secur. Comput., 2023)

SpecBox: A Label-Based Transparent Speculation Scheme Against Transient Execution Attacks. - Bowen Tang 001; Chenggang Wu 002; Zhe Wang 017; Lichen Jia; Pen-Chung Yew; Yueqiang Cheng; Yinqian Zhang; Chenxi Wang; Guoqing Harry Xu (IEEE Trans. Dependable Secur. Comput., 2023)

Dancing With Wolves: An Intra-Process Isolation Technique With Privileged Hardware. - Chenggang Wu 002; Mengyao Xie; Zhe Wang 017; Yinqian Zhang; Kangjie Lu; Xiaofeng Zhang; Yuanming Lai; Yan Kang 002; Min Yang 002; Tao Li 022 (IEEE Trans. Dependable Secur. Comput., 2023)

SpecWands: An Efficient Priority-Based Scheduler Against Speculation Contention Attacks. - Bowen Tang 001; Chenggang Wu 002; Pen-Chung Yew; Yinqian Zhang; Mengyao Xie; Yuanming Lai; Yan Kang 002; Wei Wang 385; Qiang Wei; Zhe Wang 017 (IEEE Trans. Comput. Aided Des. Integr. Circuits Syst., 2023)

Breaking the Privacy Barrier: On the Feasibility of Reorganization Attacks on Ethereum Private Transactions. - Mengya Zhang; Xingyu Lyu; Jianyu Niu; Xiaokuan Zhang; Yinqian Zhang; Zhiqiang Lin 001 (ACSAC, 2024)

Framekernel: A Safe and Efficient Kernel Architecture via Rust-based Intra-kernel Privilege Separation. - Yuke Peng; Hongliang Tian; Jinyi Xian; Shuai Zhou; Shoumeng Yan; Yinqian Zhang (APSys, 2024)

SoK: Understanding Design Choices and Pitfalls of Trusted Execution Environments. - Mengyuan Li 004; Yuheng Yang; Guoxing Chen; Mengjia Yan 001; Yinqian Zhang (AsiaCCS, 2024)

DoubleUp Roll: Double-spending in Arbitrum by Rolling It Back. - Zhiyuan Sun; Zihao Li 001; Xinghao Peng; Xiapu Luo; Muhui Jiang; Hao Zhou 009; Yinqian Zhang (CCS, 2024)

HyperTheft: Thieving Model Weights from TEE-Shielded Neural Networks via Ciphertext Side Channels. - Yuanyuan Yuan; Zhibo Liu; Sen Deng; Yanzuo Chen; Shuai Wang 011; Yinqian Zhang; Zhendong Su 001 (CCS, 2024)

ReminISCence: Trusted Monitoring Against Privileged Preemption Side-Channel Attacks. - Weijie Chen; Yu Zhao; Yinqian Zhang; Weizhong Qiang; Deqing Zou; Hai Jin 001 (ESORICS (4), 2024)

SAEG: Stateful Automatic Exploit Generation. - Yifan Wu; Yinshuai Li; Hong Zhu; Yinqian Zhang (ESORICS (4), 2024)

Formally Verifying a Rollback-Prevention Protocol for TEEs. - Weili Wang 005; Jianyu Niu; Michael K. Reiter; Yinqian Zhang (FORTE, 2024)

Uncovering and Exploiting AMD Speculative Memory Access Predictors for Fun and Profit. - Chang Liu 117; Dongsheng Wang 002; Yongqiang Lyu 001; Pengfei Qiu; Yu Jin; Zhuoyuan Lu; Yinqian Zhang; Gang Qu 001 (HPCA, 2024)

Security of Cross-chain Bridges: Attack Surfaces, Defenses, and Open Problems. - Mengya Zhang; Xiaokuan Zhang; Yinqian Zhang; Zhiqiang Lin 001 (RAID, 2024)

SoK: Opportunities for Accelerating Multi - Party Computation via Trusted Hardware. - Tong Liu; Zhen Huang; Jiaao Li; Jianyu Niu; Guoxing Chen; Yinqian Zhang (SEED, 2024)

HIVE: A Hardware-assisted Isolated Execution Environment for eBPF on AArch64. - Peihua Zhang; Chenggang Wu 002; Xiangyu Meng; Yinqian Zhang; Mingfan Peng; Shiyang Zhang; Bing Hu; Mengyao Xie; Yuanming Lai; Yan Kang 002; Zhe Wang 017 (USENIX Security Symposium, 2024)

pi-Jack: Physical-World Adversarial Attack on Monocular Depth Estimation with Perspective Hijacking. - Tianyue Zheng; Jingzhi Hu; Rui Tan; Yinqian Zhang; Ying He 001; Jun Luo 001 (USENIX Security Symposium, 2024)

Ladon: High-Performance Multi-BFT Consensus via Dynamic Global Ordering (Extended Version). - Hanzheng Lyu; Shaokang Xie; Jianyu Niu; Chen Feng 001; Yinqian Zhang; Ivan Beschastnikh (CoRR, 2024)

MECURY: Practical Cross-Chain Exchange via Trusted Hardware. - Xiaoqing Wen; Quanbi Feng; Jianyu Niu; Yinqian Zhang; Chen Feng 001 (CoRR, 2024)

TeeRollup: Efficient Rollup Design Using Heterogeneous TEE. - Xiaoqing Wen; Quanbi Feng; Jianyu Niu; Yinqian Zhang; Chen Feng 001 (CoRR, 2024)

Ensuring State Continuity for Confidential Computing: A Blockchain-Based Approach. - Wei Peng; Xiang Li; Jianyu Niu; Xiaokuan Zhang; Yinqian Zhang (IEEE Trans. Dependable Secur. Comput., 2024)

VeriTrain: Validating MLaaS Training Efforts via Anomaly Detection. - Xiaokuan Zhang; Yang Zhang 016; Yinqian Zhang (IEEE Trans. Dependable Secur. Comput., 2024)

MicroSampler: A Framework for Microarchitecture-Level Leakage Detection in Constant Time Execution. - Moein Ghaniyoun; Kristin Barber; Yinqian Zhang; Radu Teodorescu (DSN, 2025)

Ladon: High-Performance Multi-BFT Consensus via Dynamic Global Ordering. - Hanzheng Lyu; Shaokang Xie; Jianyu Niu; Chen Feng 001; Yinqian Zhang; Ivan Beschastnikh (EuroSys, 2025)

Achilles: Efficient TEE-Assisted BFT Consensus via Rollback Resilient Recovery. - Jianyu Niu; Xiaoqing Wen; Guanlong Wu; Shengqi Liu; Jiangshan Yu; Yinqian Zhang (EuroSys, 2025)

Orthrus: Accelerating Multi-BFT Consensus Through Concurrent Partial Ordering of Transactions. - Hanzheng Lyu; Shaokang Xie; Jianyu Niu; Ivan Beschastnikh; Yinqian Zhang; Mohammad Sadeghi; Chen Feng 001 (ICDE, 2025)

WAVEN: WebAssembly Memory Virtualization for Enclaves. - Weili Wang 005; Honghan Ji; Peixuan He; Yao Zhang; Ye Wu; Yinqian Zhang (NDSS, 2025)

I Know What You Asked: Prompt Leakage via KV-Cache Sharing in Multi-Tenant LLM Serving. - Guanlong Wu; Zheng Zhang; Yao Zhang; Weili Wang 005; Jianyu Niu; Ye Wu; Yinqian Zhang (NDSS, 2025)

CipherSteal: Stealing Input Data from TEE-Shielded Neural Networks with Ciphertext Side Channels. - Yuanyuan Yuan; Zhibo Liu; Sen Deng; Yanzuo Chen; Shuai Wang 011; Yinqian Zhang; Zhendong Su 001 (SP, 2025)

ASTERINAS: A Linux ABI-Compatible, Rust-Based Framekernel OS with a Small and Sound TCB. - Yuke Peng; Hongliang Tian; Junyang Zhang; Ruihan Li; Chengjun Chen; Jianfeng Jiang; Jinyi Xian; Xiaolin Wang; Chenren Xu; Diyu Zhou; Yingwei Luo; Shoumeng Yan; et al. (USENIX ATC, 2025)

Detecting Smart Contract State-Inconsistency Bugs via Flow Divergence and Multiplex Symbolic Execution. - Yinxi Liu; Wei Meng 001; Yinqian Zhang (Proc. ACM Softw. Eng., 2025)

CAPE: Commitment-Based Privacy-Preserving Payment Channel Scheme in Blockchain. - Keke Gai; Yunwei Guo; Jing Yu 007; Weilin Chan; Liehuang Zhu; Yinqian Zhang; Weizhi Meng 001 (IEEE Trans. Dependable Secur. Comput., 2025)

Chained HotStuff Under Performance Attack. - Minjie Wang; Jianyu Niu; Fangyu Gai; Mohammad M. Jalalzai; Yinqian Zhang; Chen Feng 001 (IEEE Trans. Dependable Secur. Comput., 2025)

Leader Rotation Is Not Enough: Scrutinizing Leadership Democracy of Chained BFT Consensus. - Yining Tang; Runchao Han; Jianyu Niu; Chen Feng 001; Yinqian Zhang (CoRR, 2025)

Unraveling Responsiveness of Chained BFT Consensus with Network Delay. - Yining Tang; Qihang Luo; Runchao Han; Jianyu Niu; Chen Feng 001; Yinqian Zhang (CoRR, 2025)

Orthrus: Accelerating Multi-BFT Consensus through Concurrent Partial Ordering of Transactions. - Hanzheng Lyu; Shaokang Xie; Jianyu Niu; Ivan Beschastnikh; Yinqian Zhang; Mohammad Sadoghi; Chen Feng 001 (CoRR, 2025)

CipherGuard: Compiler-aided Mitigation against Ciphertext Side-channel Attacks. - Ke Jiang; Sen Deng; Yinshuai Li; Shuai Wang 011; Tianwei Zhang 004; Yinqian Zhang (CoRR, 2025)

Demystifying Private Transactions and Their Impact in PoW and PoS Ethereum. - Xingyu Lyu; Mengya Zhang; Xiaokuan Zhang; Jianyu Niu; Yinqian Zhang; Zhiqiang Lin 001 (CoRR, 2025)

DejaVuzz: Disclosing Transient Execution Bugs with Dynamic Swappable Memory and Differential Information Flow Tracking assisted Processor Fuzzing. - Jinyan Xu; Yangye Zhou; Xingzhi Zhang; Yinshuai Li; Qinhan Tan; Yinqian Zhang; Yajin Zhou; Rui Chang; Wenbo Shen (CoRR, 2025)