Virtual browser: a web-level sandbox to secure third-party JavaScript without sacrificing functionality. - Yinzhi Cao; Zhichun Li; Vaibhav Rastogi; Yan Chen 004 (CCS, 2010)

Poster: a path-cutting approach to blocking XSS worms in social web networks. - Yinzhi Cao; Vinod Yegneswaran; Phillip A. Porras; Yan Chen 004 (CCS, 2011)

WebShield: Enabling Various Web Defense Techniques without Client Side Modifications. - Zhichun Li; Yi Tang 002; Yinzhi Cao; Vaibhav Rastogi; Yan Chen 004; Bin Liu 001; Clint Sbisa (NDSS, 2011)

Virtual browser: a virtualized browser to sandbox third-party JavaScripts with enhanced security. - Yinzhi Cao; Zhichun Li; Vaibhav Rastogi; Yan Chen 004; Xitao Wen (AsiaCCS, 2012)

PathCutter: Severing the Self-Propagation Path of XSS JavaScript Worms in Social Web Networks. - Yinzhi Cao; Vinod Yegneswaran; Phillip A. Porras; Yan Chen 004 (NDSS, 2012)

Redefining web browser principals with a Configurable Origin Policy. - Yinzhi Cao; Vaibhav Rastogi; Zhichun Li; Yan Chen 004; Alexander Moshchuk (DSN, 2013)

De-obfuscation and Detection of Malicious PDF Files with High Accuracy. - Xun Lu; Jianwei Zhuge; Ruoyu Wang 001; Yinzhi Cao; Yan Chen 004 (HICSS, 2013)

Rake: Semantics Assisted Network-Based Tracing Framework. - Yao Zhao 003; Yinzhi Cao; Yan Chen 004; Ming Zhang 005; Anup Goyal (IEEE Trans. Netw. Serv. Manag., 2013)

JShield: towards real-time and vulnerability-based detection of polluted drive-by download attacks. - Yinzhi Cao; Xiang Pan; Yan Chen 004; Jianwei Zhuge (ACSAC, 2014)

Protecting Web-Based Single Sign-on Protocols against Relying Party Impersonation Attacks through a Dedicated Bi-directional Authenticated Secure Channel. - Yinzhi Cao; Yan Shoshitaishvili; Kevin Borgolte; Christopher Krügel; Giovanni Vigna; Yan Chen 004 (RAID, 2014)

Abusing Browser Address Bar for Fun and Profit - An Empirical Investigation of Add-On Cross Site Scripting Attacks. - Yinzhi Cao; Chao Yang 022; Vaibhav Rastogi; Yan Chen 004; Guofei Gu (SecureComm (1), 2014)

SafePay: Protecting against credit card forgery with existing magnetic card readers. - Yinzhi Cao; Xiang Pan; Yan Chen 004 (CNS, 2015)

EdgeMiner: Automatically Detecting Implicit Control Flow Transitions through the Android Framework. - Yinzhi Cao; Yanick Fratantonio; Antonio Bianchi; Manuel Egele; Christopher Kruegel; Giovanni Vigna; Yan Chen 004 (NDSS, 2015)

I Do Not Know What You Visited Last Summer: Protecting users from stateful third-party web tracking with TrackingFree browser. - Xiang Pan; Yinzhi Cao; Yan Chen 004 (NDSS, 2015)

Uranine: Real-time Privacy Leakage Monitoring without System Modification for Android. - Vaibhav Rastogi; Zhengyang Qu; Jedidiah McClurg; Yinzhi Cao; Yan Chen 004 (SecureComm, 2015)

Towards Making Systems Forget with Machine Unlearning. - Yinzhi Cao; Junfeng Yang (IEEE Symposium on Security and Privacy, 2015)

Vetting SSL Usage in Applications with SSLINT. - Boyuan He; Vaibhav Rastogi; Yinzhi Cao; Yan Chen 004; V. N. Venkatakrishnan; Runqing Yang; Zhenrui Zhang (IEEE Symposium on Security and Privacy, 2015)

CSPAutoGen: Black-box Enforcement of Content Security Policy upon Real-world Websites. - Xiang Pan; Yinzhi Cao; Shuangping Liu; Yu Zhou; Yan Chen 004; Tingzhe Zhou (CCS, 2016)

Deterministic Browser. - Yinzhi Cao; Zhanhao Chen; Song Li 006; Shujiang Wu (CCS, 2017)

(Cross-)Browser Fingerprinting via OS and Hardware Level Features. - Yinzhi Cao; Song Li 006; Erik Wijmans (NDSS, 2017)

Towards Practical Verification of Machine Learning: The Case of Computer Vision Systems. - Kexin Pei; Yinzhi Cao; Junfeng Yang; Suman Jana (CoRR, 2017)

Efficient Repair of Polluted Machine Learning Systems via Causal Unlearning. - Yinzhi Cao; Alexander Fangxiao Yu; Andrew Aday; Eric Stahl; Jon Merwine; Junfeng Yang (AsiaCCS, 2018)

Towards a Secure Zero-rating Framework with Three Parties. - Zhiheng Liu; Zhen Zhang; Yinzhi Cao; Zhaohan Xi; Shihao Jing; Humberto J. La Roche (USENIX Security Symposium, 2018)

FlowCog: Context-aware Semantics Extraction and Analysis of Information Flow Leaks in Android Apps. - Xiang Pan; Yinzhi Cao; Xuechao Du; Boyuan He; Gan Fang; Rui Shao 003; Yan Chen 004 (USENIX Security Symposium, 2018)

Rendered Private: Making GLSL Execution Uniform to Prevent WebGL-based Browser Fingerprinting. - Shujiang Wu; Song Li 006; Yinzhi Cao; Ningfei Wang (USENIX Security Symposium, 2019)

DeepXplore: automated whitebox testing of deep learning systems. - Kexin Pei; Yinzhi Cao; Junfeng Yang; Suman Jana (Commun. ACM, 2019)

Bringing Engineering Rigor to Deep Learning. - Kexin Pei; Shiqi Wang 002; Yuchi Tian; Justin Whitehouse; Carl Vondrick; Yinzhi Cao; Baishakhi Ray; Suman Jana; Junfeng Yang (ACM SIGOPS Oper. Syst. Rev., 2019)

Enhancing State-of-the-art Classifiers with API Semantics to Detect Evolved Android Malware. - Xiaohan Zhang 001; Yuan Zhang 009; Ming Zhong 011; Daizong Ding; Yinzhi Cao; Yukun Zhang; Mi Zhang 001; Min Yang 002 (CCS, 2020)

JSKernel: Fortifying JavaScript against Web Concurrency Attacks via a Kernel-Like Structure. - Zhanhao Chen; Yinzhi Cao (DSN, 2020)

PatchAttack: A Black-Box Texture-Based Attack with Reinforcement Learning. - Chenglin Yang; Adam Kortylewski; Cihang Xie; Yinzhi Cao; Alan L. Yuille (ECCV (26), 2020)

Who Touched My Browser Fingerprint?: A Large-scale Measurement Study and Classification of Fingerprint Dynamics. - Song Li 006; Yinzhi Cao (Internet Measurement Conference, 2020)

TKPERM: Cross-platform Permission Knowledge Transfer to Detect Overprivileged Third-party Applications. - Faysal Hossain Shezan; Kaiming Cheng; Zhen Zhang; Yinzhi Cao; Yuan Tian 001 (NDSS, 2020)

TextExerciser: Feedback-driven Text Input Exercising for Android Applications. - Yuyu He; Lei Zhang 096; Zhemin Yang; Yinzhi Cao; Keke Lian; Shuai Li 006; Wei Yang 013; Zhibo Zhang; Min Yang 002; Yuan Zhang 009; Haixin Duan (SP, 2020)

An Ever-evolving Game: Evaluation of Real-world Attacks and Defenses in Ethereum Ecosystem. - Shunfan Zhou; Zhemin Yang; Jie Xiang; Yinzhi Cao; Min Yang 002; Yuan Zhang 009 (USENIX Security Symposium, 2020)

Defending Medical Image Diagnostics Against Privacy Attacks Using Generative Methods: Application to Retinal Diagnostics. - William Paul; Yinzhi Cao; Miaomiao Zhang; Philippe Burlina (CLIP/DCL/LL-COVID19/PPML@MICCAI, 2021)

Practical Blind Membership Inference Attack via Differential Comparisons. - Bo Hui 002; Yuchen Yang 001; Haolin Yuan; Philippe Burlina; Neil Zhenqiang Gong; Yinzhi Cao (NDSS, 2021)

Detecting Node.js prototype pollution vulnerabilities via object lookup analysis. - Song Li 006; Mingqing Kang; Jianwei Hou; Yinzhi Cao (ESEC/SIGSOFT FSE, 2021)

Runtime Recovery of Web Applications under Zero-Day ReDoS Attacks. - Zhihao Bai; Ke Wang 040; Hang Zhu; Yinzhi Cao; Xin Jin 008 (SP, 2021)

Defending Medical Image Diagnostics against Privacy Attacks using Generative Methods. - William Paul; Yinzhi Cao; Miaomiao Zhang; Philippe Burlina (CoRR, 2021)

Squint Hard Enough: Evaluating Perceptual Hashing with Machine Learning. - Jonathan Prokos; Tushar M. Jois; Neil Fendley; Roei Schuster; Matthew Green 001; Eran Tromer; Yinzhi Cao (IACR Cryptol. ePrint Arch., 2021)

GraphTrack: A Graph-based Cross-Device Tracking Framework. - Binghui Wang; Tianchen Zhou; Song Li 006; Yinzhi Cao; Neil Zhenqiang Gong (AsiaCCS, 2022)

Addressing Heterogeneity in Federated Learning via Distributional Transformation. - Haolin Yuan; Bo Hui 002; Yuchen Yang 001; Philippe Burlina; Neil Zhenqiang Gong; Yinzhi Cao (ECCV (38), 2022)

Probe the Proto: Measuring Client-Side Prototype Pollution Vulnerabilities of One Million Real-world Websites. - Zifeng Kang; Song Li 006; Yinzhi Cao (NDSS, 2022)

Identity Confusion in WebView-based Mobile App-in-app Ecosystems. - Lei Zhang 096; Zhibo Zhang; Ancong Liu; Yinzhi Cao; Xiaohan Zhang 001; Yanjun Chen; Yuan Zhang 009; Guangliang Yang 001; Min Yang 002 (USENIX Security Symposium, 2022)

Mining Node.js Vulnerabilities via Object Dependence Graph and Query. - Song Li 006; Mingqing Kang; Jianwei Hou; Yinzhi Cao (USENIX Security Symposium, 2022)

Backporting Security Patches of Web Applications: A Prototype Design and Implementation on Injection Vulnerability Patches. - Youkun Shi; Yuan Zhang 009; Tianhan Luo; Xiangyu Mao; Yinzhi Cao; Ziwen Wang; Yudi Zhao; Zongan Huang; Min Yang 002 (USENIX Security Symposium, 2022)

Rendering Contention Channel Made Practical in Web Browsers. - Shujiang Wu; Jianjia Yu; Min Yang 002; Yinzhi Cao (USENIX Security Symposium, 2022)

EdgeMixup: Improving Fairness for Skin Disease Classification and Segmentation. - Haolin Yuan; Armin Hadzic; William Paul; Daniella Villegas de Flores; Philip Mathew; John N. Aucott; Yinzhi Cao; Philippe Burlina (CoRR, 2022)

CoCo: Efficient Browser Extension Vulnerability Detection via Coverage-guided, Concurrent Abstract Interpretation. - Jianjia Yu; Song Li 006; Junmin Zhu; Yinzhi Cao (CCS, 2023)

Fortifying Federated Learning against Membership Inference Attacks via Client-level Input Perturbation. - Yuchen Yang 001; Haolin Yuan; Bo Hui 002; Neil Zhenqiang Gong; Neil Fendley; Philippe Burlina; Yinzhi Cao (DSN, 2023)

EdgeMixup: Embarrassingly Simple Data Alteration to Improve Lyme Disease Lesion Segmentation and Diagnosis Fairness. - Haolin Yuan; John N. Aucott; Armin Hadzic; William Paul; Marcia Villegas de Flores; Philip Mathew; Philippe Burlina; Yinzhi Cao (MICCAI (4), 2023)

CHKPLUG: Checking GDPR Compliance of WordPress Plugins via Cross-language Code Property Graph. - Faysal Hossain Shezan; Zihao Su; Mingqing Kang; Nicholas Phair; Patrick William Thomas; Michelangelo van Dam; Yinzhi Cao; Yuan Tian 001 (NDSS, 2023)

Him of Many Faces: Characterizing Billion-scale Adversarial and Benign Browser Fingerprints on Commercial Websites. - Shujiang Wu; Pengfei Sun; Yao Zhao; Yinzhi Cao (NDSS, 2023)

MiniTaintDev: Unveiling Mini-App Vulnerabilities through Dynamic Taint Analysis. - Jianjia Yu; Zifeng Kang; Yinzhi Cao (SaTS@CCS, 2023)

Scaling JavaScript Abstract Interpretation to Detect and Exploit Node.js Taint-style Vulnerability. - Mingqing Kang; Yichao Xu; Song Li 006; Rigel Gjomemo; Jianwei Hou; V. N. Venkatakrishnan; Yinzhi Cao (SP, 2023)

Understanding the (In)Security of Cross-side Face Verification Systems in Mobile Apps: A System Perspective. - Xiaohan Zhang 001; Haoqi Ye; Ziqi Huang; Xiao Ye; Yinzhi Cao; Yuan Zhang 009; Min Yang 002 (SP, 2023)

Squint Hard Enough: Attacking Perceptual Hashing with Adversarial Machine Learning. - Jonathan Prokos; Neil Fendley; Matthew Green 001; Roei Schuster; Eran Tromer; Tushar M. Jois; Yinzhi Cao (USENIX Security Symposium, 2023)

PrivateFL: Accurate, Differentially Private Federated Learning via Personalized Data Transformation. - Yuchen Yang 001; Bo Hui 002; Haolin Yuan; Neil Zhenqiang Gong; Yinzhi Cao (USENIX Security Symposium, 2023)

McFIL: Model Counting Functionality-Inherent Leakage. - Maximilian Zinkus; Yinzhi Cao; Matthew D. Green (USENIX Security Symposium, 2023)

SneakyPrompt: Evaluating Robustness of Text-to-image Generative Models' Safety Filters. - Yuchen Yang 001; Bo Hui 002; Haolin Yuan; Neil Zhenqiang Gong; Yinzhi Cao (CoRR, 2023)

ExGen: Cross-platform, Automated Exploit Generation for Smart Contract Vulnerabilities. - Ling Jin; Yinzhi Cao; Yan Chen 004; Di Zhang; Simone Campanoni (IEEE Trans. Dependable Secur. Comput., 2023)

Slowing Down the Aging of Learning-Based Malware Detectors With API Knowledge. - Xiaohan Zhang 001; Mi Zhang 001; Yuan Zhang 009; Ming Zhong 011; Xin Zhang; Yinzhi Cao; Min Yang 002 (IEEE Trans. Dependable Secur. Comput., 2023)

FlowCog: Context-Aware Semantic Extraction and Analysis of Information Flow Leaks in Android Apps. - Xuechao Du; Xiang Pan; Yinzhi Cao; Boyuan He; Gan Fang; Yan Chen 004; Daigang Xu (IEEE Trans. Mob. Comput., 2023)

PLeak: Prompt Leaking Attacks against Large Language Model Applications. - Bo Hui 002; Haolin Yuan; Neil Gong 001; Philippe Burlina; Yinzhi Cao (CCS, 2024)

ReactAppScan: Mining React Application Vulnerabilities via Component Graph. - Zhiyong Guo; Mingqing Kang; V. N. Venkatakrishnan; Rigel Gjomemo; Yinzhi Cao (CCS, 2024)

Follow the Rules: Reasoning for Video Anomaly Detection with Large Language Models. - Yuchen Yang; Kwonjoon Lee; Behzad Dariush; Yinzhi Cao; Shao-Yuan Lo (ECCV (81), 2024)

PFEDEDIT: Personalized Federated Learning via Automated Model Editing. - Haolin Yuan; William Paul; John N. Aucott; Philippe Burlina; Yinzhi Cao (ECCV (79), 2024)

RippleCOT: Amplifying Ripple Effect of Knowledge Editing in Language Models via Chain-of-Thought In-Context Learning. - Zihao Zhao; Yuchen Yang; Yijiang Li; Yinzhi Cao (EMNLP (Findings), 2024)

Position: TrustLLM: Trustworthiness in Large Language Models. - Yue Huang; Lichao Sun 001; Haoran Wang 005; Siyuan Wu 001; Qihui Zhang; Yuan Li; Chujie Gao; Yixin Huang; Wenhan Lyu; Yixuan Zhang; Xiner Li; Hanchi Sun; et al. (ICML, 2024)

RogueOne: Detecting Rogue Updates via Differential Data-flow Analysis Using Trust Domains. - Raphael J. Sofaer; Yaniv David; Mingqing Kang; Jianjia Yu; Yinzhi Cao; Junfeng Yang; Jason Nieh (ICSE, 2024)

Showcasing the Threat of Scalable Generative AI Disinformation through Social Media Simulation. - David Na; Samuel Nathanson; Yungjun Yoo; Yinzhi Cao; Lanier Watkins (INFOCOM (Workshops), 2024)

A Step Towards Modern Disinformation Detection: Novel Methods for Detecting LLM-Generated Text. - Samuel Nathanson; Yungjun Yoo; David Na; Yinzhi Cao; Lanier Watkins (MILCOM, 2024)

Disinformation at Scale: Detecting AI-Human Composite Images via Convolution Ensembles. - Yungjun Yoo; David Na; Samuel Nathanson; Yinzhi Cao; Lanier Watkins (MILCOM, 2024)

Efficient Detection of Java Deserialization Gadget Chains via Bottom-up Gadget Search and Dataflow-aided Payload Construction. - Bofei Chen; Lei Zhang 096; Xinyou Huang; Yinzhi Cao; Keke Lian; Yuan Zhang 009; Min Yang 002 (SP, 2024)

Withdrawing is believing? Detecting Inconsistencies between Withdrawal Choices and Third-party Data Collections in Mobile Apps. - Xiaolin Du; Zhemin Yang; Jiapeng Lin; Yinzhi Cao; Min Yang 002 (SP, 2024)

Undefined-oriented Programming: Detecting and Chaining Prototype Pollution Gadgets in Node.js Template Engines for Malicious Consequences. - Zhengyu Liu; Kecheng An; Yinzhi Cao (SP, 2024)

SneakyPrompt: Jailbreaking Text-to-image Generative Models. - Yuchen Yang 001; Bo Hui 002; Haolin Yuan; Neil Gong 001; Yinzhi Cao (SP, 2024)

TrustLLM: Trustworthiness in Large Language Models. - Lichao Sun 001; Yue Huang 001; Haoran Wang 005; Siyuan Wu 001; Qihui Zhang; Chujie Gao; Yixin Huang; Wenhan Lyu; Yixuan Zhang 001; Xiner Li; Zhengliang Liu; Yixin Liu 002; et al. (CoRR, 2024)

Assessing Cybersecurity Vulnerabilities in Code Large Language Models. - Md. Imran Hossen; Jianyi Zhang; Yinzhi Cao; Xiali Hei 001 (CoRR, 2024)

AuthNet: Neural Network with Integrated Authentication Logic. - Yuling Cai; Fan Xiang; Guozhu Meng; Yinzhi Cao; Kai Chen 012 (CoRR, 2024)

Identified-and-Targeted: The First Early Evidence of the Privacy-Invasive Use of Browser Fingerprinting for Online Tracking. - Zengrui Liu; Jimmy Dani; Shujiang Wu; Yinzhi Cao; Nitesh Saxena (CoRR, 2024)

Pseudo-Probability Unlearning: Towards Efficient and Privacy-Preserving Machine Unlearning. - Zihao Zhao; Yijiang Li; Yuchen Yang; Wenqing Zhang; Nuno Vasconcelos; Yinzhi Cao (CoRR, 2024)

Data Lineage Inference: Uncovering Privacy Vulnerabilities of Dataset Pruning. - Qi Li; Cheng-Long Wang 003; Yinzhi Cao; Di Wang 015 (CoRR, 2024)

Follow My Flow: Unveiling Client-Side Prototype Pollution Gadgets from One Million Real-World Websites. - Zifeng Kang; Muxi Lyu; Zhengyu Liu; Jianjia Yu; Runqi Fan; Song Li; Yinzhi Cao (SP, 2025)

The First Early Evidence of the Use of Browser Fingerprinting for Online Tracking. - Zengrui Liu; Jimmy Dani; Yinzhi Cao; Shujiang Wu; Nitesh Saxena (WWW, 2025)

Jailbreaking Safeguarded Text-to-Image Models via Large Language Models. - Zhengyuan Jiang; Yuepeng Hu; Yuchen Yang 001; Yinzhi Cao; Neil Zhenqiang Gong (CoRR, 2025)

Automated Static Vulnerability Detection via a Holistic Neuro-symbolic Approach. - Penghui Li; Songchen Yao; Josef Sarfati Korich; Changhua Luo; Jianjia Yu; Yinzhi Cao; Junfeng Yang (CoRR, 2025)

Mirror Mirror on the Wall, Have I Forgotten it All? A New Framework for Evaluating Machine Unlearning. - Brennon Brimhall; Philip Mathew; Neil Fendley; Yinzhi Cao; Matthew Green 001 (CoRR, 2025)

Robust and Efficient AI-Based Attack Recovery in Autonomous Drones. - Diego Ortiz Barbosa; Luis Burbano; Siwei Yang; Zijun Wang; Alvaro A. Cárdenas; Cihang Xie; Yinzhi Cao (CoRR, 2025)

Towards Lifecycle Unlearning Commitment Management: Measuring Sample-level Unlearning Completeness. - Cheng-Long Wang 003; Qi Li; Zihang Xiang; Yinzhi Cao; Di Wang 015 (CoRR, 2025)