Charm: Facilitating Dynamic Analysis of Device Drivers of Mobile Systems. - Seyed Mohammadjavad Seyed Talebi; Hamid Tavakoli; Hang Zhang 012; Zheng Zhang 058; Ardalan Amiri Sani; Zhiyun Qian (USENIX Security Symposium, 2018)

Eluding ML-based Adblockers With Actionable Adversarial Examples. - Shitong Zhu; Zhongjie Wang 002; Xun Chen; Shasha Li 001; Keyu Man; Umar Iqbal 002; Zhiyun Qian; Kevin S. Chan; Srikanth V. Krishnamurthy; Zubair Shafiq; Yu Hao 006; Guoren Li; et al. (ACSAC, 2021)

SyzGen: Automated Generation of Syscall Specification of Closed-Source macOS Drivers. - Weiteng Chen; Yu Wang; Zheng Zhang 058; Zhiyun Qian (CCS, 2021)

SyzVegas: Beating Kernel Fuzzing Odds with Reinforcement Learning. - Daimeng Wang; Zheng Zhang 058; Hang Zhang 012; Zhiyun Qian; Srikanth V. Krishnamurthy; Nael B. Abu-Ghazaleh (USENIX Security Symposium, 2021)

An Investigation of the Android Kernel Patch Ecosystem. - Zheng Zhang 058; Hang Zhang 012; Zhiyun Qian; Billy Lau (USENIX Security Symposium, 2021)

Progressive Scrutiny: Incremental Detection of UBI bugs in the Linux Kernel. - Yizhuo Zhai; Yu Hao 006; Zheng Zhang 058; Weiteng Chen; Guoren Li; Zhiyun Qian; Chengyu Song; Manu Sridharan; Srikanth V. Krishnamurthy; Trent Jaeger; Paul L. Yu (NDSS, 2022)

An Investigation of Patch Porting Practices of the Linux Kernel Ecosystem. - Xingyu Li; Zheng Zhang 058; Zhiyun Qian; Trent Jaeger; Chengyu Song (MSR, 2024)

SyzBridge: Bridging the Gap in Exploitability Assessment of Linux Kernel Bugs in the Linux Ecosystem. - Xiaochen Zou; Yu Hao 006; Zheng Zhang 058; Juefei Pu; Weiteng Chen; Zhiyun Qian (NDSS, 2024)

SyzGen++: Dependency Inference for Augmenting Kernel Driver Fuzzing. - Weiteng Chen; Yu Hao 006; Zheng Zhang 058; Xiaochen Zou; Dhilung Kirat; Shachee Mishra; Douglas Lee Schales; Jiyong Jang; Zhiyun Qian (SP, 2024)

SymBisect: Accurate Bisection for Fuzzer-Exposed Vulnerabilities. - Zheng Zhang 058; Yu Hao 006; Weiteng Chen; Xiaochen Zou; Xingyu Li; Haonan Li 009; Yizhuo Zhai; Zhiyun Qian; Billy Lau (USENIX Security Symposium, 2024)

What Do They Fix? LLM-Aided Categorization of Security Patches for Critical Memory Bugs. - Xingyu Li; Juefei Pu; Yifan Wu; Xiaochen Zou; Shitong Zhu; Qiushi Wu; Zheng Zhang 058; Joshua Hsu; Yue Dong; Zhiyun Qian; Kangjie Lu; Trent Jaeger; et al. (NDSS, 2026)

LLMBisect: Breaking Barriers in Bug Bisection with A Comparative Analysis Pipeline. - Zheng Zhang 058; Haonan Li 009; Xingyu Li; Hang Zhang 012; Zhiyun Qian (NDSS, 2026)