Swift: a register-based JIT compiler for embedded JVMs. - Yuan Zhang 009; Min Yang 002; Bo Zhou; Zhemin Yang; Weihua Zhang; Binyu Zang (VEE, 2012)

AppIntent: analyzing sensitive data transmission in android for privacy leakage detection. - Zhemin Yang; Min Yang 002; Yuan Zhang 009; Guofei Gu; Peng Ning; Xiaoyang Sean Wang (CCS, 2013)

Vetting undesirable behaviors in android apps with permission use analysis. - Yuan Zhang 009; Min Yang 002; Bingquan Xu; Zhemin Yang; Guofei Gu; Peng Ning; Xiaoyang Sean Wang; Binyu Zang (CCS, 2013)

Permission Use Analysis for Vetting Undesirable Behaviors in Android Apps. - Yuan Zhang 009; Min Yang 002; Zhemin Yang; Guofei Gu; Peng Ning; Binyu Zang (IEEE Trans. Inf. Forensics Secur., 2014)

FineDroid: Enforcing Permissions with System-Wide Application Execution Context. - Yuan Zhang 009; Min Yang 002; Guofei Gu; Hao Chen 003 (SecureComm, 2015)

Rethinking Permission Enforcement Mechanism on Mobile Systems. - Yuan Zhang 009; Min Yang 002; Guofei Gu; Hao Chen 003 (IEEE Trans. Inf. Forensics Secur., 2016)

Identifying User-Input Privacy in Mobile Applications at a Large Scale. - Yuhong Nan; Zhemin Yang; Min Yang 002; Shunfan Zhou; Yuan Zhang 009; Guofei Gu; Xiaofeng Wang 006; Limin Sun 001 (IEEE Trans. Inf. Forensics Secur., 2017)

How You Get Shot in the Back: A Systematical Study about Cryptojacking in the Real World. - Geng Hong; Zhemin Yang; Sen Yang; Lei Zhang 096; Yuhong Nan; Zhibo Zhang; Min Yang 002; Yuan Zhang 009; Zhiyun Qian; Hai-Xin Duan (CCS, 2018)

Invetter: Locating Insecure Input Validations in Android Services. - Lei Zhang 096; Zhemin Yang; Yuyu He; Zhenyu Zhang; Zhiyun Qian; Geng Hong; Yuan Zhang 009; Min Yang 002 (CCS, 2018)

Finding Clues for Your Secrets: Semantics-Driven, Learning-Based Privacy Discovery in Mobile Apps. - Yuhong Nan; Zhemin Yang; Xiaofeng Wang 006; Yuan Zhang 009; Donglai Zhu; Min Yang 002 (NDSS, 2018)

An Empirical Study of Web Resource Manipulation in Real-world Mobile Applications. - Xiaohan Zhang 001; Yuan Zhang 009; Qianqian Mo; Hao Xia; Zhemin Yang; Min Yang 002; Xiaofeng Wang 006; Long Lu; Hai-Xin Duan (USENIX Security Symposium, 2018)

Detecting third-party libraries in Android applications with high precision and recall. - Yuan Zhang 009; Jiarun Dai; Xiaohan Zhang 001; Sirong Huang; Zhemin Yang; Min Yang 002; Hao Chen 003 (SANER, 2018)

App in the Middle: Demystify Application Virtualization in Android and its Security Threats. - Lei Zhang 096; Zhemin Yang; Yuyu He; Mingqi Li; Sen Yang; Min Yang 002; Yuan Zhang 009; Zhiyun Qian (Proc. ACM Meas. Anal. Comput. Syst., 2019)

PDiff: Semantic-based Patch Presence Testing for Downstream Kernels. - Zheyue Jiang; Yuan Zhang 009; Jun Xu 024; Qi Wen; Zhenghe Wang; Xiaohan Zhang 001; Xinyu Xing 001; Min Yang 002; Zhemin Yang (CCS, 2020)

Enhancing State-of-the-art Classifiers with API Semantics to Detect Evolved Android Malware. - Xiaohan Zhang 001; Yuan Zhang 009; Ming Zhong 011; Daizong Ding; Yinzhi Cao; Yukun Zhang; Mi Zhang 001; Min Yang 002 (CCS, 2020)

How Android developers handle evolution-induced API compatibility issues: a large-scale study. - Hao Xia; Yuan Zhang 009; Yingtian Zhou; Xiaoting Chen; Yang Wang 167; Xiangyu Zhang 001; Shuaishuai Cui; Geng Hong; Xiaohan Zhang 001; Min Yang 002; Zhemin Yang (ICSE, 2020)

TextExerciser: Feedback-driven Text Input Exercising for Android Applications. - Yuyu He; Lei Zhang 096; Zhemin Yang; Yinzhi Cao; Keke Lian; Shuai Li 006; Wei Yang 013; Zhibo Zhang; Min Yang 002; Yuan Zhang 009; Haixin Duan (SP, 2020)

BScout: Direct Whole Patch Presence Test for Java Executables. - Jiarun Dai; Yuan Zhang 009; Zheyue Jiang; Yingtian Zhou; Junyan Chen; Xinyu Xing 001; Xiaohan Zhang 001; Xin Tan; Min Yang 002; Zhemin Yang (USENIX Security Symposium, 2020)

An Ever-evolving Game: Evaluation of Real-world Attacks and Defenses in Ethereum Ecosystem. - Shunfan Zhou; Zhemin Yang; Jie Xiang; Yinzhi Cao; Min Yang 002; Yuan Zhang 009 (USENIX Security Symposium, 2020)

Hybrid malware detection approach with feedback-directed machine learning. - Zhetao Li; Wenlin Li; Fuyuan Lin; Yi Sun 004; Min Yang 002; Yuan Zhang 009; Zhibo Wang 001 (Sci. China Inf. Sci., 2020)

Facilitating Vulnerability Assessment through PoC Migration. - Jiarun Dai; Yuan Zhang 009; Hailong Xu; Haiming Lyu; Zicheng Wu; Xinyu Xing 001; Min Yang 002 (CCS, 2021)

Locating the Security Patches for Disclosed OSS Vulnerabilities with Vulnerability-Commit Correlation Ranking. - Xin Tan; Yuan Zhang 009; Chenyuan Mi; Jiajun Cao; Kun Sun 001; Yifan Lin; Min Yang 002 (CCS, 2021)

Detecting Kernel Refcount Bugs with Two-Dimensional Consistency Checking. - Xin Tan; Yuan Zhang 009; Xiyu Yang; Kangjie Lu; Min Yang 002 (USENIX Security Symposium, 2021)

Precise (Un)Affected Version Analysis for Web Vulnerabilities. - Youkun Shi; Yuan Zhang 009; Tianhan Luo; Xiangyu Mao; Min Yang 002 (ASE, 2022)

Exploit the Last Straw That Breaks Android Systems. - Lei Zhang 096; Keke Lian; Haoyu Xiao; Zhibo Zhang; Peng Liu 005; Yuan Zhang 009; Min Yang 002; Haixin Duan (SP, 2022)

Identity Confusion in WebView-based Mobile App-in-app Ecosystems. - Lei Zhang 096; Zhibo Zhang; Ancong Liu; Yinzhi Cao; Xiaohan Zhang 001; Yanjun Chen; Yuan Zhang 009; Guangliang Yang 001; Min Yang 002 (USENIX Security Symposium, 2022)

Backporting Security Patches of Web Applications: A Prototype Design and Implementation on Injection Vulnerability Patches. - Youkun Shi; Yuan Zhang 009; Tianhan Luo; Xiangyu Mao; Yinzhi Cao; Ziwen Wang; Yudi Zhao; Zongan Huang; Min Yang 002 (USENIX Security Symposium, 2022)

Understanding the Practice of Security Patch Management across Multiple Branches in OSS Projects. - Xin Tan; Yuan Zhang 009; Jiajun Cao; Kun Sun 001; Mi Zhang 001; Min Yang 002 (WWW, 2022)

Refcount Field Identification for Linux Kernel Based on Deep Learning. - Xin Tan; Xiyu Yang; Jiajun Cao; Yuan Zhang 009 (Int. J. Softw. Informatics, 2022)

Preface to Special Issue on System Software Security. - Min Yang 002; Chao Zhang 008; Fu Song; Yuan Zhang 009 (Int. J. Softw. Informatics, 2022)

NestFuzz: Enhancing Fuzzing with Comprehensive Understanding of Input Processing Logic. - Peng Deng; Zhemin Yang; Lei Zhang 096; Guangliang Yang 001; Wenzheng Hong; Yuan Zhang 009; Min Yang 002 (CCS, 2023)

SyzDirect: Directed Greybox Fuzzing for Linux Kernel. - Xin Tan; Yuan Zhang 009; Jiadong Lu; Xin Xiong; Zhuang Liu; Min Yang 002 (CCS, 2023)

TrustedDomain Compromise Attack in App-in-app Ecosystems. - Zhibo Zhang; Zhangyue Zhang; Keke Lian; Guangliang Yang 001; Lei Zhang 096; Yuan Zhang 009; Min Yang 002 (SaTS@CCS, 2023)

AEM: Facilitating Cross-Version Exploitability Assessment of Linux Kernel Vulnerabilities. - Zheyue Jiang; Yuan Zhang 009; Jun Xu 024; Xinqian Sun; Zhuang Liu; Min Yang 002 (SP, 2023)

Understanding the (In)Security of Cross-side Face Verification Systems in Mobile Apps: A System Perspective. - Xiaohan Zhang 001; Haoqi Ye; Ziqi Huang; Xiao Ye; Yinzhi Cao; Yuan Zhang 009; Min Yang 002 (SP, 2023)

Remote Code Execution from SSTI in the Sandbox: Automatically Detecting and Exploiting Template Escape Bugs. - Yudi Zhao; Yuan Zhang 009; Min Yang 002 (USENIX Security Symposium, 2023)

Slowing Down the Aging of Learning-Based Malware Detectors With API Knowledge. - Xiaohan Zhang 001; Mi Zhang 001; Yuan Zhang 009; Ming Zhong 011; Xin Zhang; Yinzhi Cao; Min Yang 002 (IEEE Trans. Dependable Secur. Comput., 2023)

Accurate and Efficient Recurring Vulnerability Detection for IoT Firmware. - Haoyu Xiao; Yuan Zhang 009; Minghang Shen; Chaoyang Lin; Can Zhang; Shengli Liu 003; Min Yang 002 (CCS, 2024)

SCTrans: Constructing a Large Public Scenario Dataset for Simulation Testing of Autonomous Driving Systems. - Jiarun Dai; Bufan Gao; Mingyuan Luo; Zongan Huang; Zhongrui Li; Yuan Zhang 009; Min Yang 002 (ICSE, 2024)

New PHP Language Features Make Your Static Code Analysis Tools Miss Vulnerabilities. - Lin Wang 042; Yuan Zhang 009; Xin Tan; Shengke Ye; Min Yang 002 (ICSME, 2024)

Samba: Detecting SSL/TLS API Misuses in IoT Binary Applications. - Kaizheng Liu; Ming Yang 001; Zhen Ling 001; Yuan Zhang 009; Chongqing Lei; Lan Luo; Xinwen Fu (INFOCOM, 2024)

VioHawk: Detecting Traffic Violations of Autonomous Driving Systems through Criticality-Guided Simulation Testing. - Zhongrui Li; Jiarun Dai; Zongan Huang; Nianhao You; Yuan Zhang 009; Min Yang 002 (ISSTA, 2024)

Applying Fuzz Driver Generation to Native C/C++ Libraries of OEM Android Framework: Obstacles and Solutions. - Shiyan Peng; Yuan Zhang 009; Jiarun Dai; Yue Gu; Zhuoxiang Shen; Jingcheng Liu; Lin Wang 042; Yong Chen; Yu Qin; Lei Ai; Xianfeng Lu; Min Yang 002 (ASE, 2024)

How Well Industry-Level Cause Bisection Works in Real-World: A Study on Linux Kernel. - Kangzheng Gu; Yuan Zhang 009; Jiajun Cao; Xin Tan; Min Yang 002 (SIGSOFT FSE Companion, 2024)

Efficient Detection of Java Deserialization Gadget Chains via Bottom-up Gadget Search and Dataflow-aided Payload Construction. - Bofei Chen; Lei Zhang 096; Xinyou Huang; Yinzhi Cao; Keke Lian; Yuan Zhang 009; Min Yang 002 (SP, 2024)

RecurScan: Detecting Recurring Vulnerabilities in PHP Web Applications. - Youkun Shi; Yuan Zhang 009; Tianhao Bai; Lei Zhang 096; Xin Tan; Min Yang 002 (WWW, 2024)

Interface Illusions: Uncovering the Rise of Visual Scams in Cryptocurrency Wallets. - Guoyi Ye; Geng Hong; Yuan Zhang 009; Min Yang 002 (WWW, 2024)

Component Security Ten Years Later: An Empirical Study of Cross-Layer Threats in Real-World Mobile Applications. - Keke Lian; Lei Zhang 096; Guangliang Yang 001; Shuo Mao; Xinjie Wang; Yuan Zhang 009; Min Yang 002 (Proc. ACM Softw. Eng., 2024)

Misdirection of Trust: Demystifying the Abuse of Dedicated URL Shortening Service. - Zhibo Zhang; Lei Zhang 096; Zhangyue Zhang; Geng Hong; Yuan Zhang 009; Min Yang 002 (NDSS, 2025)

Detecting Taint-Style Vulnerabilities in Microservice-Structured Web Applications. - Fengyu Liu; Yuan Zhang 009; Tian Chen; Youkun Shi; Guangliang Yang 001; Zihan Lin; Min Yang 002; Junyao He; Qi Li (SP, 2025)

MOCGuard: Automatically Detecting Missing-Owner-Check Vulnerabilities in Java Web Applications. - Fengyu Liu; Youkun Shi; Yuan Zhang 009; Guangliang Yang 001; Enhao Li; Min Yang 002 (SP, 2025)

You Can't Eat Your Cake and Have It Too: The Performance Degradation of LLMs with Jailbreak Defense. - Wuyuao Mai; Geng Hong; Pei Chen; Xudong Pan; Baojun Liu; Yuan Zhang 009; Haixin Duan; Min Yang 002 (WWW, 2025)

CXXCrafter: An LLM-Based Agent for Automated C/C++ Open Source Software Building. - Zhengmin Yu; Yuan Zhang 009; Ming Wen 001; Yinan Nie; Wenhui Zhang; Min Yang 002 (Proc. ACM Softw. Eng., 2025)

Locating Security Patch Variants With Two-Dimensional Code Commit Features. - Lin Wang 042; Yuan Zhang 009; Xiaoting Chen; Min Yang 002 (IEEE Trans. Inf. Forensics Secur., 2025)