Precise (Un)Affected Version Analysis for Web Vulnerabilities. - Youkun Shi; Yuan Zhang 009; Tianhan Luo; Xiangyu Mao; Min Yang 002 (ASE, 2022)

Backporting Security Patches of Web Applications: A Prototype Design and Implementation on Injection Vulnerability Patches. - Youkun Shi; Yuan Zhang 009; Tianhan Luo; Xiangyu Mao; Yinzhi Cao; Ziwen Wang; Yudi Zhao; Zongan Huang; Min Yang 002 (USENIX Security Symposium, 2022)

RecurScan: Detecting Recurring Vulnerabilities in PHP Web Applications. - Youkun Shi; Yuan Zhang 009; Tianhao Bai; Lei Zhang 096; Xin Tan; Min Yang 002 (WWW, 2024)

Detecting Taint-Style Vulnerabilities in Microservice-Structured Web Applications. - Fengyu Liu; Yuan Zhang 009; Tian Chen; Youkun Shi; Guangliang Yang 001; Zihan Lin; Min Yang 002; Junyao He; Qi Li (SP, 2025)

MOCGuard: Automatically Detecting Missing-Owner-Check Vulnerabilities in Java Web Applications. - Fengyu Liu; Youkun Shi; Yuan Zhang 009; Guangliang Yang 001; Enhao Li; Min Yang 002 (SP, 2025)