How You Get Shot in the Back: A Systematical Study about Cryptojacking in the Real World. - Geng Hong; Zhemin Yang; Sen Yang; Lei Zhang 096; Yuhong Nan; Zhibo Zhang 006; Min Yang 002; Yuan Zhang 009; Zhiyun Qian; Hai-Xin Duan (CCS, 2018)

TextExerciser: Feedback-driven Text Input Exercising for Android Applications. - Yuyu He; Lei Zhang 096; Zhemin Yang; Yinzhi Cao; Keke Lian; Shuai Li 006; Wei Yang 013; Zhibo Zhang 006; Min Yang 002; Yuan Zhang 009; Haixin Duan (SP, 2020)

Exploit the Last Straw That Breaks Android Systems. - Lei Zhang 096; Keke Lian; Haoyu Xiao; Zhibo Zhang 006; Peng Liu 005; Yuan Zhang 009; Min Yang 002; Haixin Duan (SP, 2022)

Identity Confusion in WebView-based Mobile App-in-app Ecosystems. - Lei Zhang 096; Zhibo Zhang 006; Ancong Liu; Yinzhi Cao; Xiaohan Zhang 001; Yanjun Chen; Yuan Zhang 009; Guangliang Yang 001; Min Yang 002 (USENIX Security Symposium, 2022)

TrustedDomain Compromise Attack in App-in-app Ecosystems. - Zhibo Zhang 006; Zhangyue Zhang; Keke Lian; Guangliang Yang 001; Lei Zhang 096; Yuan Zhang 009; Min Yang 002 (SaTS@CCS, 2023)

The Dark Forest: Understanding Security Risks of Cross-Party Delegated Resources in Mobile App-in-App Ecosystems. - Zhibo Zhang 006; Lei Zhang 096; Guangliang Yang 001; Yanjun Chen; Jiahao Xu; Min Yang 002 (IEEE Trans. Inf. Forensics Secur., 2024)

Misdirection of Trust: Demystifying the Abuse of Dedicated URL Shortening Service. - Zhibo Zhang 006; Lei Zhang 096; Zhangyue Zhang; Geng Hong; Yuan Zhang 009; Min Yang 002 (NDSS, 2025)