StateDiver: Testing Deep Packet Inspection Systems with State-Discrepancy Guidance. - Zhechang Zhang; Bin Yuan; Kehan Yang; Deqing Zou; Hai Jin 001 (ACSAC, 2022)

VIPER: Spotting Syscall-Guard Variables for Data-Only Attacks. - Hengkai Ye; Song Liu; Zhechang Zhang; Hong Hu 004 (USENIX Security Symposium, 2023)

CountDown: Refcount-guided Fuzzing for Exposing Temporal Memory Errors in Linux Kernel. - Shuangpeng Bai; Zhechang Zhang; Hong Hu 004 (CCS, 2024)