UIPicker: User-Input Privacy Identification in Mobile Applications. - Yuhong Nan; Min Yang 002; Zhemin Yang; Shunfan Zhou; Guofei Gu; Xiaofeng Wang 006 (USENIX Security Symposium, 2015)

Identifying User-Input Privacy in Mobile Applications at a Large Scale. - Yuhong Nan; Zhemin Yang; Min Yang 002; Shunfan Zhou; Yuan Zhang 009; Guofei Gu; Xiaofeng Wang 006; Limin Sun 001 (IEEE Trans. Inf. Forensics Secur., 2017)

How You Get Shot in the Back: A Systematical Study about Cryptojacking in the Real World. - Geng Hong; Zhemin Yang; Sen Yang; Lei Zhang 096; Yuhong Nan; Zhibo Zhang; Min Yang 002; Yuan Zhang 009; Zhiyun Qian; Hai-Xin Duan (CCS, 2018)

Finding Clues for Your Secrets: Semantics-Driven, Learning-Based Privacy Discovery in Mobile Apps. - Yuhong Nan; Zhemin Yang; Xiaofeng Wang 006; Yuan Zhang 009; Donglai Zhu; Min Yang 002 (NDSS, 2018)

BlueShield: Detecting Spoofing Attacks in Bluetooth Low Energy Networks. - Jianliang Wu 002; Yuhong Nan; Vireshwar Kumar; Mathias Payer; Dongyan Xu (RAID, 2020)

BLESA: Spoofing Attacks against Reconnections in Bluetooth Low Energy. - Jianliang Wu 002; Yuhong Nan; Vireshwar Kumar; Dave (Jing) Tian; Antonio Bianchi; Mathias Payer; Dongyan Xu (WOOT @ USENIX Security Symposium, 2020)

On the Insecurity of SMS One-Time Password Messages against Local Attackers in Modern Mobile Devices. - Zeyu Lei; Yuhong Nan; Yanick Fratantonio; Antonio Bianchi (NDSS, 2021)

ATLAS: A Sequence-based Learning Approach for Attack Investigation. - Abdulellah Alsaheel; Yuhong Nan; Shiqing Ma; Le Yu; Gregory Walkup; Z. Berkay Celik; Xiangyu Zhang 001; Dongyan Xu (USENIX Security Symposium, 2021)

Understanding Malicious Cross-library Data Harvesting on Android. - Jice Wang; Yue Xiao 007; Xueqiang Wang; Yuhong Nan; Luyi Xing; Xiaojing Liao; Jinwei Dong; Nicolás Serrano; Haoran Lu; XiaoFeng Wang 001; Yuqing Zhang 001 (USENIX Security Symposium, 2021)

SIMulation: Demystifying (Insecure) Cellular Network based One-Tap Authentication Services. - Ziyi Zhou; Xing Han; Zeyuan Chen; Yuhong Nan; Juanru Li; Dawu Gu (DSN, 2022)

SmartDagger: a bytecode-based static analysis approach for detecting cross-contract vulnerability. - Zeqin Liao; Zibin Zheng; Xiao Chen; Yuhong Nan (ISSTA, 2022)

Hazard Integrated: Understanding Security Risks in App Extensions to Team Chat Systems. - Mingming Zha 001; Jice Wang; Yuhong Nan; Xiaofeng Wang 006; Yuqing Zhang 001; Zelin Yang (NDSS, 2022)

Security Evaluation of Smart Contracts based on Code and Transaction - A Survey. - Jianzhong Su; Jiyi Liu; Yuhong Nan; Yin Li (ICSS, 2022)

ProFactory: Improving IoT Security via Formalized Protocol Customization. - Fei Wang 046; Jianliang Wu 002; Yuhong Nan; Yousra Aafer; Xiangyu Zhang 001; Dongyan Xu; Mathias Payer (USENIX Security Symposium, 2022)

DARPA: Combating Asymmetric Dark UI Patterns on Android with Run-time View Decorator. - Zhaoxin Cai; Yuhong Nan; Xueqiang Wang; Mengyi Long; Qihua Ou; Min Yang 002; Zibin Zheng (DSN, 2023)

SmartState: Detecting State-Reverting Vulnerabilities in Smart Contracts via Fine-Grained State-Dependency Analysis. - Zeqin Liao; Sicheng Hao 001; Yuhong Nan; Zibin Zheng (ISSTA, 2023)

Detecting State Inconsistency Bugs in DApps via On-Chain Transaction Replay and Fuzzing. - Mingxi Ye; Yuhong Nan; Zibin Zheng; Dongpeng Wu; Huizhong Li (ISSTA, 2023)

SmartCoCo: Checking Comment-Code Inconsistency in Smart Contracts via Constraint Propagation and Binding. - Sicheng Hao 001; Yuhong Nan; Zibin Zheng; Xiaohui Liu (ASE, 2023)

Understanding Dark UI Patterns in the Mobile Ecosystem: A Case Study of Apps in China. - Mengyi Long; Yue Xu; Jiangrong Wu; Qihua Ou; Yuhong Nan (SaTS@CCS, 2023)

AIRTAG: Towards Automated Attack Investigation by Unsupervised Learning with Log Texts. - Hailun Ding; Juan Zhai; Yuhong Nan; Shiqing Ma (USENIX Security Symposium, 2023)

Are You Spying on Me? Large-Scale Analysis on IoT Data Exposure through Companion Apps. - Yuhong Nan; Xueqiang Wang; Luyi Xing; Xiaojing Liao; Ruoyu Wu; Jianliang Wu 002; Yifan Zhang 010; XiaoFeng Wang 001 (USENIX Security Symposium, 2023)

Are We Getting Well-informed? An In-depth Study of Runtime Privacy Notice Practice in Mobile Apps. - Shuai Li 006; Zhemin Yang; Yuhong Nan; Shutian Yu; Qirui Zhu; Min Yang 002 (CCS, 2024)

Understanding Cross-Platform Referral Traffic for Illicit Drug Promotion. - Mingming Zha 001; Zilong Lin 001; Siyuan Tang; Xiaojing Liao; Yuhong Nan; XiaoFeng Wang 001 (CCS, 2024)

PrettySmart: Detecting Permission Re-delegation Vulnerability for Token Behaviors in Smart Contracts. - Zhijie Zhong; Zibin Zheng; Hong-Ning Dai; Qing Xue; Junjia Chen; Yuhong Nan (ICSE, 2024)

Midas: Mining Profitable Exploits in On-Chain Smart Contracts via Feedback-Driven Fuzzing and Differential Analysis. - Mingxi Ye; Xingwei Lin; Yuhong Nan; Jiajing Wu; Zibin Zheng (ISSTA, 2024)

Leaking the Privacy of Groups and More: Understanding Privacy Risks of Cross-App Content Sharing in Mobile Ecosystem. - Jiangrong Wu; Yuhong Nan; Luyi Xing; Jiatao Cheng; Zimin Lin; Zibin Zheng; Min Yang 002 (NDSS, 2024)

Navigating the Privacy Compliance Maze: Understanding Risks with Privacy-Configurable Mobile SDKs. - Yifan Zhang 010; Zhaojie Hu; Xueqiang Wang; Yuhui Hong; Yuhong Nan; XiaoFeng Wang 001; Jiatao Cheng; Luyi Xing (USENIX Security Symposium, 2024)

MAGIC: Detecting Advanced Persistent Threats via Masked Graph Representation Learning. - Zian Jia; Yun Xiong; Yuhong Nan; Yao Zhang 009; Jinjing Zhao; Mi Wen (USENIX Security Symposium, 2024)

CONNECTOR: Enhancing the Traceability of Decentralized Bridge Applications via Automatic Cross-chain Transaction Association. - Dan Lin 007; Jiajing Wu; Yuxin Su 001; Ziye Zheng; Yuhong Nan; Zibin Zheng (CoRR, 2024)

SmartAxe: Detecting Cross-Chain Vulnerabilities in Bridge Smart Contracts via Fine-Grained Static Analysis. - Zeqin Liao; Yuhong Nan; Henglong Liang; Sicheng Hao 001; Juan Zhai; Jiajing Wu; Zibin Zheng (Proc. ACM Softw. Eng., 2024)

FunFuzz: A Function-Oriented Fuzzer for Smart Contract Vulnerability Detection with High Effectiveness and Efficiency. - Mingxi Ye; Yuhong Nan; Hong-Ning Dai; Shuo Yang; Xiapu Luo; Zibin Zheng (ACM Trans. Softw. Eng. Methodol., 2024)

Understanding Privacy Risks of Intelligent Connected Vehicles Through Their Companion Mobile Apps. - Peifu Yang; Yuhong Nan; Lei Xue 001; Yuliang Zhang; Juan Zhai; Zibin Zheng (IEEE Internet Things J., 2024)

Smartreco: Detecting Read-Only Reentrancy via Fine-Grained Cross-DApp Analysis. - Jingwen Zhang; Zibin Zheng; Yuhong Nan; Mingxi Ye; Kaiwen Ning; Yu Zhang 036; Weizhe Zhang (ICSE, 2025)

Connector: Enhancing the Traceability of Decentralized Bridge Applications via Automatic Cross-Chain Transaction Association. - Dan Lin 007; Jiajing Wu; Yuxin Su 001; Ziye Zheng; Yuhong Nan; Qinnan Zhang; Bowen Song; Zibin Zheng (IEEE Trans. Inf. Forensics Secur., 2025)

Augmenting Smart Contract Decompiler Output through Fine-grained Dependency Analysis and LLM-facilitated Semantic Recovery. - Zeqin Liao; Yuhong Nan; Zixu Gao; Henglong Liang; Sicheng Hao 001; Peifan Reng; Zibin Zheng (CoRR, 2025)

An Empirical Study of High-Risk Vulnerabilities in IoT Systems. - Xiang Chen; Changlin Yang; Yuhong Nan; Zibin Zheng (IEEE Internet Things J., 2025)

Understanding the Sneaky Patterns of Pop-up Windows in the Mobile Ecosystem. - Dongpeng Wu; Yuhong Nan; Shaojiang Wang; Jiawei Wang; Luwa Li; Xueqiang Wang (CoRR, 2025)

Control at Stake: Evaluating the Security Landscape of LLM-Driven Email Agents. - Jiangrong Wu; Yuhong Nan; Jianliang Wu; Zitong Yao; Zibin Zheng (CoRR, 2025)

An Empirical Study on Embodied Artificial Intelligence Robot (EAIR) Software Bugs. - Zeqin Liao; Zibin Zheng; Peifan Reng; Henglong Liang; Zixu Gao; Zhixiang Chen 016; Wei Li 121; Yuhong Nan (CoRR, 2025)