Yuan Zhang

According to our database, Yuan Zhang authored at least 67 papers between 2012 and 2025.

Collaborative distances:

• Dijkstra number of four.
• Erdős number of four.

2025

Shell or Nothing: Real-World Benchmarks and Memory-Activated Agents for Automated Penetration Testing.

Wuyuao Mai, Geng Hong, Qi Liu, Jinsong Chen, Jiarun Dai, Xudong Pan, Yuan Zhang, Min Yang

CoRR, September, 2025

PHPJoy Artifact.

Youkun Shi, Yuan Zhang, Tianhan Luo, Guangliang Yang, Shengke Ye, Chengyu Yang, Fengyu Liu, Xiapu Luo, Min Yang

Dataset, September, 2025

XSSky: Detecting XSS Vulnerabilities through Local Path-Persistent Fuzzing.

Youkun Shi, Yuan Zhang, Tianhao Bai, Feng Xue, Jiarun Dai, Fengyu Liu, Lei Zhang, Xiapu Luo, Min Yang

Dataset, June, 2025

Locating Security Patch Variants With Two-Dimensional Code Commit Features.

Lin Wang, Yuan Zhang, Xiaoting Chen, Min Yang

IEEE Trans. Inf. Forensics Secur., 2025

Facilitating Access Control Vulnerability Detection in Modern Java Web Applications With Accurate Permission Check Identification.

Youkun Shi, Fengyu Liu, Guangliang Yang, Yuan Zhang, Yinzhi Cao, Enhao Li, Xin Tan, Xiapu Luo, Min Yang, Siyi Chen

IEEE Trans. Inf. Forensics Secur., 2025

CXXCrafter: An LLM-Based Agent for Automated C/C++ Open Source Software Building.

Zhengmin Yu, Yuan Zhang, Ming Wen, Yinan Nie, Wenhui Zhang, Min Yang

Proc. ACM Softw. Eng., 2025

You Can't Eat Your Cake and Have It Too: The Performance Degradation of LLMs with Jailbreak Defense.

Wuyuao Mai, Geng Hong, Pei Chen, Xudong Pan, Baojun Liu, Yuan Zhang, Haixin Duan, Min Yang

Proceedings of the ACM on Web Conference 2025, 2025

Pig in a Poke: Automatically Detecting and Exploiting Link Following Vulnerabilities in Windows File Operations.

Bocheng Xiang, Yuan Zhang, Fengyu Liu, Hao Huang, Zihan Lin, Min Yang

Proceedings of the 34th USENIX Security Symposium, 2025

XSSky: Detecting XSS Vulnerabilities through Local Path-Persistent Fuzzing.

Youkun Shi, Yuan Zhang, Tianhao Bai, Feng Xue, Jiarun Dai, Fengyu Liu, Lei Zhang, Xiapu Luo, Min Yang

Proceedings of the 34th USENIX Security Symposium, 2025

Make Agent Defeat Agent: Automatic Detection of Taint-Style Vulnerabilities in LLM-based Agents.

Fengyu Liu, Yuan Zhang, Jiaqi Luo, Jiarun Dai, Tian Chen, Letian Yuan, Zhengmin Yu, Youkun Shi, Ke Li, Chengyuan Zhou, Hao Chen, Min Yang

Proceedings of the 34th USENIX Security Symposium, 2025

Effective Directed Fuzzing with Hierarchical Scheduling for Web Vulnerability Detection.

Zihan Lin, Yuan Zhang, Jiarun Dai, Xinyou Huang, Bocheng Xiang, Guangliang Yang, Letian Yuan, Lei Zhang, Tian Chen, Min Yang

Proceedings of the 34th USENIX Security Symposium, 2025

Careless Retention and Management: Understanding and Detecting Data Retention Denial-of-Service Vulnerabilities in Java Web Containers.

Keke Lian, Lei Zhang, Haoran Zhao, Yinzhi Cao, Yongheng Liu, Fute Sun, Yuan Zhang, Min Yang

Proceedings of the 34th USENIX Security Symposium, 2025

Towards Automatic Detection and Exploitation of Java Web Application Vulnerabilities via Concolic Execution guided by Cross-thread Object Manipulation.

Xinyou Huang, Lei Zhang, Yongheng Liu, Peng Deng, Yinzhi Cao, Yuan Zhang, Min Yang

Proceedings of the 34th USENIX Security Symposium, 2025

ChainFuzz: Exploiting Upstream Vulnerabilities in Open-Source Supply Chains.

Peng Deng, Lei Zhang, Yuchuan Meng, Zhemin Yang, Yuan Zhang, Zhemin Yang

Proceedings of the 34th USENIX Security Symposium, 2025

MOCGuard: Automatically Detecting Missing-Owner-Check Vulnerabilities in Java Web Applications.

Fengyu Liu, Youkun Shi, Yuan Zhang, Guangliang Yang, Enhao Li, Min Yang

Proceedings of the IEEE Symposium on Security and Privacy, 2025

Detecting Taint-Style Vulnerabilities in Microservice-Structured Web Applications.

Fengyu Liu, Yuan Zhang, Tian Chen, Youkun Shi, Guangliang Yang, Zihan Lin, Min Yang, Junyao He, Qi Li

Proceedings of the IEEE Symposium on Security and Privacy, 2025

Misdirection of Trust: Demystifying the Abuse of Dedicated URL Shortening Service.

Zhibo Zhang, Lei Zhang, Zhangyue Zhang, Geng Hong, Yuan Zhang, Min Yang

Proceedings of the 32nd Annual Network and Distributed System Security Symposium, 2025

Be Aware of What You Let Pass: Demystifying URL-based Authentication Bypass Vulnerability in Java Web Applications.

Qiyi Zhang, Fengyu Liu, Zihan Lin, Yuan Zhang

Proceedings of the 2025 ACM SIGSAC Conference on Computer and Communications Security, 2025

BACScan: Automatic Black-Box Detection of Broken-Access-Control Vulnerabilities in Web Applications.

Fengyu Liu, Yuan Zhang, Enhao Li, Wei Meng, Youkun Shi, Qianheng Wang, Chenlin Wang, Zihan Lin, Min Yang

Proceedings of the 2025 ACM SIGSAC Conference on Computer and Communications Security, 2025

2024

Component Security Ten Years Later: An Empirical Study of Cross-Layer Threats in Real-World Mobile Applications.

Keke Lian, Lei Zhang, Guangliang Yang, Shuo Mao, Xinjie Wang, Yuan Zhang, Min Yang

Proc. ACM Softw. Eng., 2024

Interface Illusions: Uncovering the Rise of Visual Scams in Cryptocurrency Wallets.

Guoyi Ye, Geng Hong, Yuan Zhang, Min Yang

Proceedings of the ACM on Web Conference 2024, 2024

RecurScan: Detecting Recurring Vulnerabilities in PHP Web Applications.

Youkun Shi, Yuan Zhang, Tianhao Bai, Lei Zhang, Xin Tan, Min Yang

Proceedings of the ACM on Web Conference 2024, 2024

Efficient Detection of Java Deserialization Gadget Chains via Bottom-up Gadget Search and Dataflow-aided Payload Construction.

Bofei Chen, Lei Zhang, Xinyou Huang, Yinzhi Cao, Keke Lian, Yuan Zhang, Min Yang

Proceedings of the IEEE Symposium on Security and Privacy, 2024

How Well Industry-Level Cause Bisection Works in Real-World: A Study on Linux Kernel.

Kangzheng Gu, Yuan Zhang, Jiajun Cao, Xin Tan, Min Yang

Proceedings of the Companion Proceedings of the 32nd ACM International Conference on the Foundations of Software Engineering, 2024

Applying Fuzz Driver Generation to Native C/C++ Libraries of OEM Android Framework: Obstacles and Solutions.

Shiyan Peng, Yuan Zhang, Jiarun Dai, Yue Gu, Zhuoxiang Shen, Jingcheng Liu, Lin Wang, Yong Chen, Yu Qin, Lei Ai, Xianfeng Lu, Min Yang

Proceedings of the 39th IEEE/ACM International Conference on Automated Software Engineering, 2024

VioHawk: Detecting Traffic Violations of Autonomous Driving Systems through Criticality-Guided Simulation Testing.

Zhongrui Li, Jiarun Dai, Zongan Huang, Nianhao You, Yuan Zhang, Min Yang

Proceedings of the 33rd ACM SIGSOFT International Symposium on Software Testing and Analysis, 2024

Samba: Detecting SSL/TLS API Misuses in IoT Binary Applications.

Kaizheng Liu, Ming Yang, Zhen Ling, Yuan Zhang, Chongqing Lei, Lan Luo, Xinwen Fu

Proceedings of the IEEE INFOCOM 2024, 2024

New PHP Language Features Make Your Static Code Analysis Tools Miss Vulnerabilities.

Lin Wang, Yuan Zhang, Xin Tan, Shengke Ye, Min Yang

Proceedings of the IEEE International Conference on Software Maintenance and Evolution, 2024

SCTrans: Constructing a Large Public Scenario Dataset for Simulation Testing of Autonomous Driving Systems.

Jiarun Dai, Bufan Gao, Mingyuan Luo, Zongan Huang, Zhongrui Li, Yuan Zhang, Min Yang

Proceedings of the 46th IEEE/ACM International Conference on Software Engineering, 2024

Accurate and Efficient Recurring Vulnerability Detection for IoT Firmware.

Haoyu Xiao, Yuan Zhang, Minghang Shen, Chaoyang Lin, Can Zhang, Shengli Liu, Min Yang

Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security, 2024

2023

Slowing Down the Aging of Learning-Based Malware Detectors With API Knowledge.

Xiaohan Zhang, Mi Zhang, Yuan Zhang, Ming Zhong, Xin Zhang, Yinzhi Cao, Min Yang

IEEE Trans. Dependable Secur. Comput., 2023

Remote Code Execution from SSTI in the Sandbox: Automatically Detecting and Exploiting Template Escape Bugs.

Yudi Zhao, Yuan Zhang, Min Yang

Proceedings of the 32nd USENIX Security Symposium, 2023

Understanding the (In)Security of Cross-side Face Verification Systems in Mobile Apps: A System Perspective.

Xiaohan Zhang, Haoqi Ye, Ziqi Huang, Xiao Ye, Yinzhi Cao, Yuan Zhang, Min Yang

Proceedings of the 44th IEEE Symposium on Security and Privacy, 2023

AEM: Facilitating Cross-Version Exploitability Assessment of Linux Kernel Vulnerabilities.

Zheyue Jiang, Yuan Zhang, Jun Xu, Xinqian Sun, Zhuang Liu, Min Yang

Proceedings of the 44th IEEE Symposium on Security and Privacy, 2023

TrustedDomain Compromise Attack in App-in-app Ecosystems.

Zhibo Zhang, Zhangyue Zhang, Keke Lian, Guangliang Yang, Lei Zhang, Yuan Zhang, Min Yang

Proceedings of the 2023 ACM Workshop on Secure and Trustworthy Superapps, 2023

SyzDirect: Directed Greybox Fuzzing for Linux Kernel.

Xin Tan, Yuan Zhang, Jiadong Lu, Xin Xiong, Zhuang Liu, Min Yang

Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security, 2023

NestFuzz: Enhancing Fuzzing with Comprehensive Understanding of Input Processing Logic.

Peng Deng, Zhemin Yang, Lei Zhang, Guangliang Yang, Wenzheng Hong, Yuan Zhang, Min Yang

Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security, 2023

2022

Preface to Special Issue on System Software Security.

Min Yang, Chao Zhang, Fu Song, Yuan Zhang

Int. J. Softw. Informatics, 2022

Refcount Field Identification for Linux Kernel Based on Deep Learning.

Xin Tan, Xiyu Yang, Jiajun Cao, Yuan Zhang

Int. J. Softw. Informatics, 2022

Understanding the Practice of Security Patch Management across Multiple Branches in OSS Projects.

Xin Tan, Yuan Zhang, Jiajun Cao, Kun Sun, Mi Zhang, Min Yang

Proceedings of the WWW '22: The ACM Web Conference 2022, Virtual Event, Lyon, France, April 25, 2022

Backporting Security Patches of Web Applications: A Prototype Design and Implementation on Injection Vulnerability Patches.

Youkun Shi, Yuan Zhang, Tianhan Luo, Xiangyu Mao, Yinzhi Cao, Ziwen Wang, Yudi Zhao, Zongan Huang, Min Yang

Proceedings of the 31st USENIX Security Symposium, 2022

Identity Confusion in WebView-based Mobile App-in-app Ecosystems.

Lei Zhang, Zhibo Zhang, Ancong Liu, Yinzhi Cao, Xiaohan Zhang, Yanjun Chen, Yuan Zhang, Guangliang Yang, Min Yang

Proceedings of the 31st USENIX Security Symposium, 2022

Exploit the Last Straw That Breaks Android Systems.

Lei Zhang, Keke Lian, Haoyu Xiao, Zhibo Zhang, Peng Liu, Yuan Zhang, Min Yang, Haixin Duan

Proceedings of the 43rd IEEE Symposium on Security and Privacy, 2022

Precise (Un)Affected Version Analysis for Web Vulnerabilities.

Youkun Shi, Yuan Zhang, Tianhan Luo, Xiangyu Mao, Min Yang

Proceedings of the 37th IEEE/ACM International Conference on Automated Software Engineering, 2022

2021

Detecting Kernel Refcount Bugs with Two-Dimensional Consistency Checking.

Xin Tan, Yuan Zhang, Xiyu Yang, Kangjie Lu, Min Yang

Proceedings of the 30th USENIX Security Symposium, 2021

Locating the Security Patches for Disclosed OSS Vulnerabilities with Vulnerability-Commit Correlation Ranking.

Xin Tan, Yuan Zhang, Chenyuan Mi, Jiajun Cao, Kun Sun, Yifan Lin, Min Yang

Proceedings of the CCS '21: 2021 ACM SIGSAC Conference on Computer and Communications Security, Virtual Event, Republic of Korea, November 15, 2021

Facilitating Vulnerability Assessment through PoC Migration.

Jiarun Dai, Yuan Zhang, Hailong Xu, Haiming Lyu, Zicheng Wu, Xinyu Xing, Min Yang

Proceedings of the CCS '21: 2021 ACM SIGSAC Conference on Computer and Communications Security, Virtual Event, Republic of Korea, November 15, 2021

2020

Hybrid malware detection approach with feedback-directed machine learning.

Zhetao Li, Wenlin Li, Fuyuan Lin, Yi Sun, Min Yang, Yuan Zhang, Zhibo Wang

Sci. China Inf. Sci., 2020

An Ever-evolving Game: Evaluation of Real-world Attacks and Defenses in Ethereum Ecosystem.

Shunfan Zhou, Zhemin Yang, Jie Xiang, Yinzhi Cao, Min Yang, Yuan Zhang

Proceedings of the 29th USENIX Security Symposium, 2020

BScout: Direct Whole Patch Presence Test for Java Executables.

Jiarun Dai, Yuan Zhang, Zheyue Jiang, Yingtian Zhou, Junyan Chen, Xinyu Xing, Xiaohan Zhang, Xin Tan, Min Yang, Zhemin Yang

Proceedings of the 29th USENIX Security Symposium, 2020

TextExerciser: Feedback-driven Text Input Exercising for Android Applications.

Yuyu He, Lei Zhang, Zhemin Yang, Yinzhi Cao, Keke Lian, Shuai Li, Wei Yang, Zhibo Zhang, Min Yang, Yuan Zhang, Haixin Duan

Proceedings of the 2020 IEEE Symposium on Security and Privacy, 2020

How Android developers handle evolution-induced API compatibility issues: a large-scale study.

Hao Xia, Yuan Zhang, Yingtian Zhou, Xiaoting Chen, Yang Wang, Xiangyu Zhang, Shuaishuai Cui, Geng Hong, Xiaohan Zhang, Min Yang, Zhemin Yang

Proceedings of the ICSE '20: 42nd International Conference on Software Engineering, Seoul, South Korea, 27 June, 2020

Enhancing State-of-the-art Classifiers with API Semantics to Detect Evolved Android Malware.

Xiaohan Zhang, Yuan Zhang, Ming Zhong, Daizong Ding, Yinzhi Cao, Yukun Zhang, Mi Zhang, Min Yang

Proceedings of the CCS '20: 2020 ACM SIGSAC Conference on Computer and Communications Security, 2020

PDiff: Semantic-based Patch Presence Testing for Downstream Kernels.

Zheyue Jiang, Yuan Zhang, Jun Xu, Qi Wen, Zhenghe Wang, Xiaohan Zhang, Xinyu Xing, Min Yang, Zhemin Yang

Proceedings of the CCS '20: 2020 ACM SIGSAC Conference on Computer and Communications Security, 2020

2019

App in the Middle: Demystify Application Virtualization in Android and its Security Threats.

Lei Zhang, Zhemin Yang, Yuyu He, Mingqi Li, Sen Yang, Min Yang, Yuan Zhang, Zhiyun Qian

Proceedings of the Abstracts of the 2019 SIGMETRICS/Performance Joint International Conference on Measurement and Modeling of Computer Systems, 2019

2018

Detecting third-party libraries in Android applications with high precision and recall.

Yuan Zhang, Jiarun Dai, Xiaohan Zhang, Sirong Huang, Zhemin Yang, Min Yang, Hao Chen

Proceedings of the 25th International Conference on Software Analysis, 2018

An Empirical Study of Web Resource Manipulation in Real-world Mobile Applications.

Xiaohan Zhang, Yuan Zhang, Qianqian Mo, Hao Xia, Zhemin Yang, Min Yang, Xiaofeng Wang, Long Lu, Hai-Xin Duan

Proceedings of the 27th USENIX Security Symposium, 2018

Finding Clues for Your Secrets: Semantics-Driven, Learning-Based Privacy Discovery in Mobile Apps.

Yuhong Nan, Zhemin Yang, Xiaofeng Wang, Yuan Zhang, Donglai Zhu, Min Yang

Proceedings of the 25th Annual Network and Distributed System Security Symposium, 2018

Invetter: Locating Insecure Input Validations in Android Services.

Lei Zhang, Zhemin Yang, Yuyu He, Zhenyu Zhang, Zhiyun Qian, Geng Hong, Yuan Zhang, Min Yang

Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security, 2018

How You Get Shot in the Back: A Systematical Study about Cryptojacking in the Real World.

Geng Hong, Zhemin Yang, Sen Yang, Lei Zhang, Yuhong Nan, Zhibo Zhang, Min Yang, Yuan Zhang, Zhiyun Qian, Hai-Xin Duan

Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security, 2018

2017

Identifying User-Input Privacy in Mobile Applications at a Large Scale.

Yuhong Nan, Zhemin Yang, Min Yang, Shunfan Zhou, Yuan Zhang, Guofei Gu, Xiaofeng Wang, Limin Sun

IEEE Trans. Inf. Forensics Secur., 2017

2016

Rethinking Permission Enforcement Mechanism on Mobile Systems.

Yuan Zhang, Min Yang, Guofei Gu, Hao Chen

IEEE Trans. Inf. Forensics Secur., 2016

2015

FineDroid: Enforcing Permissions with System-Wide Application Execution Context.

Yuan Zhang, Min Yang, Guofei Gu, Hao Chen

Proceedings of the Security and Privacy in Communication Networks, 2015

2014

Permission Use Analysis for Vetting Undesirable Behaviors in Android Apps.

Yuan Zhang, Min Yang, Zhemin Yang, Guofei Gu, Peng Ning, Binyu Zang

IEEE Trans. Inf. Forensics Secur., 2014

2013

Vetting undesirable behaviors in android apps with permission use analysis.

Yuan Zhang, Min Yang, Bingquan Xu, Zhemin Yang, Guofei Gu, Peng Ning, Xiaoyang Sean Wang, Binyu Zang

Proceedings of the 2013 ACM SIGSAC Conference on Computer and Communications Security, 2013

AppIntent: analyzing sensitive data transmission in android for privacy leakage detection.

Zhemin Yang, Min Yang, Yuan Zhang, Guofei Gu, Peng Ning, Xiaoyang Sean Wang

Proceedings of the 2013 ACM SIGSAC Conference on Computer and Communications Security, 2013

2012

Swift: a register-based JIT compiler for embedded JVMs.

Yuan Zhang, Min Yang, Bo Zhou, Zhemin Yang, Weihua Zhang, Binyu Zang

Proceedings of the 8th International Conference on Virtual Execution Environments, 2012