A policy flexible architecture for secure operating system. - Zhiqiang Lin 001; Chao Wang 113; Bing Mao 001; Li Xie 001 (ACM SIGOPS Oper. Syst. Rev., 2005)

A Practical Framework for Dynamically Immunizing Software Security Vulnerabilities. - Zhiqiang Lin 001; Bing Mao 001; Li Xie 001 (ARES, 2006)

Transparent Run-Time Prevention of Format-String Attacks Via Dynamic Taint and Flexible Validation. - Zhiqiang Lin 001; Nai Xia; Guole Li; Bing Mao 001; Li Xie 001 (ISC, 2006)

Convicting exploitable software vulnerabilities: An efficient input provenance based approach. - Zhiqiang Lin 001; Xiangyu Zhang 001; Dongyan Xu (DSN, 2008)

Automatic Protocol Format Reverse Engineering through Context-Aware Monitored Execution. - Zhiqiang Lin 001; Xuxian Jiang; Dongyan Xu; Xiangyu Zhang 001 (NDSS, 2008)

Deriving input syntactic structure from execution. - Zhiqiang Lin 001; Xiangyu Zhang 001 (SIGSOFT FSE, 2008)

Polymorphing Software by Randomizing Data Structure Layout. - Zhiqiang Lin 001; Ryan D. Riley; Dongyan Xu (DIMVA, 2009)

IntScope: Automatically Detecting Integer Overflow Vulnerability in X86 Binary Using Symbolic Execution. - Tielei Wang; Tao Wei 002; Zhiqiang Lin 001; Wei Zou (NDSS, 2009)

Reuse-oriented camouflaging trojan: Vulnerability detection and attack construction. - Zhiqiang Lin 001; Xiangyu Zhang 001; Dongyan Xu (DSN, 2010)

Strict control dependence and its effect on dynamic information flow analyses. - Tao Bao; Yunhui Zheng; Zhiqiang Lin 001; Xiangyu Zhang 001; Dongyan Xu (ISSTA, 2010)

Automatic Reverse Engineering of Data Structures from Binary Execution. - Zhiqiang Lin 001; Xiangyu Zhang 001; Dongyan Xu (NDSS, 2010)

Reverse Engineering Input Syntactic Structure from Program Execution and Its Applications. - Zhiqiang Lin 001; Xiangyu Zhang 001; Dongyan Xu (IEEE Trans. Software Eng., 2010)

Characterizing kernel malware behavior with kernel data access patterns. - Junghwan Rhee; Zhiqiang Lin 001; Dongyan Xu (AsiaCCS, 2011)

SigGraph: Brute Force Scanning of Kernel Data Structure Instances Using Graph-based Signatures. - Zhiqiang Lin 001; Junghwan Rhee; Xiangyu Zhang 001; Dongyan Xu; Xuxian Jiang (NDSS, 2011)

Securing untrusted code via compiler-agnostic binary rewriting. - Richard Wartell; Vishwath Mohan; Kevin W. Hamlen; Zhiqiang Lin 001 (ACSAC, 2012)

Binary stirring: self-randomizing instruction addresses of legacy x86 binary code. - Richard Wartell; Vishwath Mohan; Kevin W. Hamlen; Zhiqiang Lin 001 (CCS, 2012)

Automatic generation of vaccines for malware immunization. - Zhaoyan Xu; Jialong Zhang 001; Guofei Gu; Zhiqiang Lin 001 (CCS, 2012)

OS-Sommelier: memory-only operating system fingerprinting in the cloud. - Yufei Gu; Yangchun Fu; Aravind Prakash; Zhiqiang Lin 001; Heng Yin 001 (SoCC, 2012)

Discovering Semantic Data of Interest from Un-mappable Memory with Confidence. - Zhiqiang Lin 001; Junghwan Rhee; Chao Wu; Xiangyu Zhang 001; Dongyan Xu (NDSS, 2012)

Space Traveling across VM: Automatically Bridging the Semantic Gap in Virtual Machine Introspection via Online Kernel Data Redirection. - Yangchun Fu; Zhiqiang Lin 001 (IEEE Symposium on Security and Privacy, 2012)

Bin-Carver: Automatic recovery of binary executable files. - Scott Hand; Zhiqiang Lin 001; Guofei Gu; Bhavani Thuraisingham (Digit. Investig., 2012)

Subverting system authentication with context-aware, reactive virtual machine introspection. - Yangchun Fu; Zhiqiang Lin 001; Kevin W. Hamlen (ACSAC, 2013)

Obfuscation resilient binary code reuse through trace-oriented programming. - Junyuan Zeng; Yangchun Fu; Kenneth A. Miller; Zhiqiang Lin 001; Xiangyu Zhang 001; Dongyan Xu (CCS, 2013)

Manipulating semantic values in kernel data structures: Attack assessments and implications. - Aravind Prakash; Eknath Venkataramani; Heng Yin 001; Zhiqiang Lin 001 (DSN, 2013)

AUTOVAC: Automatically Extracting System Resource Constraints and Generating Vaccines for Malware Immunization. - Zhaoyan Xu; Jialong Zhang 001; Guofei Gu; Zhiqiang Lin 001 (ICDCS, 2013)

CPU transparent protection of OS kernel and hypervisor integrity with programmable DRAM. - Ziyi Liu 002; Jong-Hyuk Lee; Junyuan Zeng; Yuanfeng Wen; Zhiqiang Lin 001; Weidong Shi (ISCA, 2013)

EXTERIOR: using a dual-VM based external shell for guest-OS introspection, configuration, and recovery. - Yangchun Fu; Zhiqiang Lin 001 (VEE, 2013)

Bridging the Semantic Gap in Virtual Machine Introspection via Online Kernel Data Redirection. - Yangchun Fu; Zhiqiang Lin 001 (ACM Trans. Inf. Syst. Secur., 2013)

MACE: high-coverage and robust memory analysis for commodity operating systems. - Qian Feng; Aravind Prakash; Heng Yin 001; Zhiqiang Lin 001 (ACSAC, 2014)

Programmable decoder and shadow threads: Tolerate remote code injection exploits with diversified redundancy. - Ziyi Liu 002; Weidong Shi; Shouhuai Xu; Zhiqiang Lin 001 (DATE, 2014)

SigPath: A Memory Graph Based Approach for Program Data Introspection and Modification. - David I. Urbina; Yufei Gu; Juan Caballero; Zhiqiang Lin 001 (ESORICS (2), 2014)

Hybrid-Bridge: Efficiently Bridging the Semantic-Gap in VMI via Decoupled Execution and Training Memoization. - Alireza Saberi; Yangchun Fu; Zhiqiang Lin 001 (NDSS, 2014)

SMV-Hunter: Large Scale, Automated Detection of SSL/TLS Man-in-the-Middle Vulnerabilities in Android Apps. - David Sounthiraraj; Justin Sahs; Garret Greenwood; Zhiqiang Lin 001; Latifur Khan (NDSS, 2014)

GoldenEye: Efficiently and Effectively Unveiling Malware's Targeted Environment. - Zhaoyan Xu; Jialong Zhang 001; Guofei Gu; Zhiqiang Lin 001 (RAID, 2014)

Towards a Systematic Study of the Covert Channel Attacks in Smartphones. - Swarup Chandra; Zhiqiang Lin 001; Ashish Kundu; Latifur Khan (SecureComm (1), 2014)

HYPERSHELL: A Practical Hypervisor Layer Guest OS Shell for Automated In-VM Management. - Yangchun Fu; Junyuan Zeng; Zhiqiang Lin 001 (USENIX ATC, 2014)

Preventing Cryptographic Key Leakage in Cloud Virtual Machines. - Erman Pattuk; Murat Kantarcioglu; Zhiqiang Lin 001; Huseyin Ulusoy (USENIX Security Symposium, 2014)

X-Force: Force-Executing Binary Programs for Security Applications. - Fei Peng; Zhui Deng; Xiangyu Zhang 001; Dongyan Xu; Zhiqiang Lin 001; Zhendong Su 001 (USENIX Security Symposium, 2014)

Multi-Aspect, Robust, and Memory Exclusive Guest OS Fingerprinting. - Yufei Gu; Yangchun Fu; Aravind Prakash; Zhiqiang Lin 001; Heng Yin 001 (IEEE Trans. Cloud Comput., 2014)

Data-Centric OS Kernel Malware Characterization. - Junghwan Rhee; Ryan D. Riley; Zhiqiang Lin 001; Xuxian Jiang; Dongyan Xu (IEEE Trans. Inf. Forensics Secur., 2014)

Enhancing Software Dependability and Security with Hardware Supported Instruction Address Space Randomization. - Seung-Hun Kim; Lei Xu 012; Ziyi Liu 002; Zhiqiang Lin 001; Won Woo Ro; Weidong Shi (DSN, 2015)

A Practical Approach for Adaptive Data Structure Layout Randomization. - Ping Chen 003; Jun Xu 024; Zhiqiang Lin 001; Dongyan Xu; Bing Mao 001; Peng Liu 005 (ESORICS (1), 2015)

Half a Century of Practice: Who Is Still Storing Plaintext Passwords? - Erick Bauman; Yafeng Lu; Zhiqiang Lin 001 (ISPEC, 2015)

Towards Automatic Inference of Kernel Object Semantics from Binary Code. - Junyuan Zeng; Zhiqiang Lin 001 (RAID, 2015)

Automatically deriving pointer reference expressions from binary code for memory dump analysis. - Yangchun Fu; Zhiqiang Lin 001; David Brumley (ESEC/SIGSOFT FSE, 2015)

You Shouldn't Collect My Secrets: Thwarting Sensitive Keystroke Leakage in Mobile IME Apps. - Jin Chen; Haibo Chen 001; Erick Bauman; Zhiqiang Lin 001; Binyu Zang; Haibing Guan (USENIX Security Symposium, 2015)

PEMU: A Pin Highly Compatible Out-of-VM Dynamic Binary Instrumentation Framework. - Junyuan Zeng; Yangchun Fu; Zhiqiang Lin 001 (VEE, 2015)

A Survey on Hypervisor-Based Monitoring: Approaches, Applications, and Evolutions. - Erick Bauman; Gbadebo Ayoade; Zhiqiang Lin 001 (ACM Comput. Surv., 2015)

On the Trustworthiness of Memory Analysis - An Empirical Study from the Perspective of Binary Execution. - Aravind Prakash; Eknath Venkataramani; Heng Yin 001; Zhiqiang Lin 001 (IEEE Trans. Dependable Secur. Comput., 2015)

Adaptive encrypted traffic fingerprinting with bi-directional dependence. - Khaled Al-Naami; Swarup Chandra; Ahmad Mustafa 001; Latifur Khan; Zhiqiang Lin 001; Kevin W. Hamlen; Bhavani Thuraisingham (ACSAC, 2016)

Derandomizing Kernel Address Space Layout for Memory Introspection and Forensics. - Yufei Gu; Zhiqiang Lin 001 (CODASPY, 2016)

A Case for Protecting Computer Games With SGX. - Erick Bauman; Zhiqiang Lin 001 (SysTEX@Middleware, 2016)

Automatic Forgery of Cryptographically Consistent Messages to Identify Security Vulnerabilities in Mobile Services. - Chaoshun Zuo; Wubing Wang; Zhiqiang Lin 001; Rui Wang (NDSS, 2016)

Detecting Stack Layout Corruptions with Robust Stack Unwinding. - Yangchun Fu; Junghwan Rhee; Zhiqiang Lin 001; Zhichun Li; Hui Zhang 002; Guofei Jiang (RAID, 2016)

Automatic Uncovering of Tap Points from Kernel Executions. - Junyuan Zeng; Yangchun Fu; Zhiqiang Lin 001 (RAID, 2016)

Type Inference on Executables. - Juan Caballero; Zhiqiang Lin 001 (ACM Comput. Surv., 2016)

Building a Security OS With Software Defined Infrastructure. - Guofei Gu; Hongxin Hu; Eric Keller; Zhiqiang Lin 001; Donald E. Porter (APSys, 2017)

SGX-Log: Securing System Logs With SGX. - Vishal Karande; Erick Bauman; Zhiqiang Lin 001; Latifur Khan (AsiaCCS, 2017)

CCS'17 Tutorial Abstract / SGX Security and Privacy. - Taesoo Kim; Zhiqiang Lin 001; Chia-Che Tsai (CCS, 2017)

SGX-BigMatrix: A Practical Encrypted Data Analytic Framework With Trusted Processors. - Fahad Shaon; Murat Kantarcioglu; Zhiqiang Lin 001; Latifur Khan (CCS, 2017)

FreeGuard: A Faster Secure Heap Allocator. - Sam Silvestro; Hongyu Liu 005; Corey Crosser; Zhiqiang Lin 001; Tongping Liu (CCS, 2017)

AUTHSCOPE: Towards Automatic Discovery of Vulnerable Authorizations in Online Services. - Chaoshun Zuo; Qingchuan Zhao; Zhiqiang Lin 001 (CCS, 2017)

PT-CFI: Transparent Backward-Edge Control Flow Violation Detection Using Intel Processor Trace. - Yufei Gu; Qingchuan Zhao; Yinqian Zhang; Zhiqiang Lin 001 (CODASPY, 2017)

Securing Data Analytics on SGX with Randomization. - Swarup Chandra; Vishal Karande; Zhiqiang Lin 001; Latifur Khan; Murat Kantarcioglu; Bhavani Thuraisingham (ESORICS (1), 2017)

Sgx-Lapd: Thwarting Controlled Side Channel Attacks via Enclave Verifiable Page Faults. - Yangchun Fu; Erick Bauman; Raul Quinonez; Zhiqiang Lin 001 (RAID, 2017)

SMARTGEN: Exposing Server URLs of Mobile Apps With Selective Symbolic Execution. - Chaoshun Zuo; Zhiqiang Lin 001 (WWW, 2017)

A Measurement Study of Authentication Rate-Limiting Mechanisms of Modern Websites. - Bo Lu; Xiaokuan Zhang; Ziman Ling; Yinqian Zhang; Zhiqiang Lin 001 (ACSAC, 2018)

BCD: Decomposing Binary Code Into Components Using Graph-Based Clustering. - Vishal Karande; Swarup Chandra; Zhiqiang Lin 001; Juan Caballero; Latifur Khan; Kevin W. Hamlen (AsiaCCS, 2018)

K-Hunt: Pinpointing Insecure Cryptographic Keys from Execution Traces. - Juanru Li; Zhiqiang Lin 001; Juan Caballero; Yuanyuan Zhang 002; Dawu Gu (CCS, 2018)

SGXElide: enabling enclave code secrecy via self-modification. - Erick Bauman; Huibo Wang; Mingwei Zhang 005; Zhiqiang Lin 001 (CGO, 2018)

Towards Interface-Driven COTS Binary Hardening. - Xiaoyang Xu 002; Wenhao Wang; Kevin W. Hamlen; Zhiqiang Lin 001 (FEAST@CCS, 2018)

Superset Disassembly: Statically Rewriting x86 Binaries Without Heuristics. - Erick Bauman; Zhiqiang Lin 001; Kevin W. Hamlen (NDSS, 2018)

IoTFuzzer: Discovering Memory Corruptions in IoT Through App-based Fuzzing. - Jiongyi Chen; Wenrui Diao; Qingchuan Zhao; Chaoshun Zuo; Zhiqiang Lin 001; XiaoFeng Wang 001; Wing Cheong Lau; Menghan Sun; Ronghai Yang; Kehuan Zhang (NDSS, 2018)

τCFI: Type-Assisted Control Flow Integrity for x86-64 Binaries. - Paul Muntean 001; Matthias Fischer; Gang Tan; Zhiqiang Lin 001; Jens Grossklags; Claudia Eckert 001 (RAID, 2018)

Using Virtual Machine Introspection for Operating Systems Security Education. - Manish Bhatt; Irfan Ahmed 001; Zhiqiang Lin 001 (SIGCSE, 2018)

Guarder: A Tunable Secure Allocator. - Sam Silvestro; Hongyu Liu 005; Tianyi Liu; Zhiqiang Lin 001; Tongping Liu (USENIX Security Symposium, 2018)

Injected and Delivered: Fabricating Implicit Control over Actuation Systems by Spoofing Inertial Sensors. - Yazhou Tu; Zhiqiang Lin 001; Insup Lee 001; Xiali Hei 001 (USENIX Security Symposium, 2018)

SgxPectre Attacks: Leaking Enclave Secrets via Speculative Execution. - Guoxing Chen; Sanchuan Chen; Yuan Xiao 001; Yinqian Zhang; Zhiqiang Lin 001; Ten-Hwang Lai (CoRR, 2018)

Analyzing control flow integrity with LLVM-CFI. - Paul Muntean 001; Matthias Neumayer; Zhiqiang Lin 001; Gang Tan; Jens Grossklags; Claudia Eckert 001 (ACSAC, 2019)

Running Language Interpreters Inside SGX: A Lightweight, Legacy-Compatible Script Code Hardening Approach. - Huibo Wang; Erick Bauman; Vishal Karande; Zhiqiang Lin 001; Yueqiang Cheng; Yinqian Zhang (AsiaCCS, 2019)

Towards Memory Safe Enclave Programming with Rust-SGX. - Huibo Wang; Pei Wang 007; Yu Ding; Mingshen Sun; Yiming Jing; Ran Duan; Long Li; Yulong Zhang; Tao Wei 002; Zhiqiang Lin 001 (CCS, 2019)

Automatic Fingerprinting of Vulnerable BLE IoT Devices with Static UUIDs from Mobile Apps. - Chaoshun Zuo; Haohuang Wen; Zhiqiang Lin 001; Yinqian Zhang (CCS, 2019)

Your IoTs Are (Not) Mine: On the Remote Binding Between IoT Devices and Users. - Jiongyi Chen; Chaoshun Zuo; Wenrui Diao; Shuaike Dong; Qingchuan Zhao; Menghan Sun; Zhiqiang Lin 001; Yinqian Zhang; Kehuan Zhang (DSN, 2019)

Probabilistic disassembly. - Kenneth A. Miller; Yonghwi Kwon 001; Yi Sun 004; Zhuo Zhang 002; Xiangyu Zhang 001; Zhiqiang Lin 001 (ICSE, 2019)

Geo-locating Drivers: A Study of Sensitive Data Leakage in Ride-Hailing Services. - Qingchuan Zhao; Chaoshun Zuo; Giancarlo Pellegrino; Zhiqiang Lin 001 (NDSS, 2019)

Time and Order: Towards Automatically Identifying Side-Channel Vulnerabilities in Enclave Binaries. - Wubing Wang; Yinqian Zhang; Zhiqiang Lin 001 (RAID, 2019)

Towards Automated Inter-Service Authorization for Microservice Applications. - Xing Li; Yan Chen; Zhiqiang Lin 001 (SIGCOMM Posters and Demos, 2019)

Why Does Your Data Leak? Uncovering the Data Leakage in Cloud from Mobile Apps. - Chaoshun Zuo; Zhiqiang Lin 001; Yinqian Zhang (IEEE Symposium on Security and Privacy, 2019)

The Betrayal At Cloud City: An Empirical Analysis Of Cloud-Based Mobile Backends. - Omar Alrawi; Chaoshun Zuo; Ruian Duan; Ranjita Pai Kasturi; Zhiqiang Lin 001; Brendan Saltaformaggio (USENIX Security Symposium, 2019)

Exploiting Unprotected I/O Operations in AMD's Secure Encrypted Virtualization. - Mengyuan Li 004; Yinqian Zhang; Zhiqiang Lin 001; Yan Solihin (USENIX Security Symposium, 2019)

CONFIRM: Evaluating Compatibility and Relevance of Control-flow Integrity Protections for Modern Software. - Xiaoyang Xu 002; Masoud Ghaffarinia; Wenhao Wang; Kevin W. Hamlen; Zhiqiang Lin 001 (USENIX Security Symposium, 2019)

On the (In)security of Bluetooth Low Energy One-Way Secure Connections Only Mode. - Yue Zhang 025; Jian Weng 001; Rajib Dey; Yier Jin; Zhiqiang Lin 001; Xinwen Fu (CoRR, 2019)

ρFEM: Efficient Backward-edge Protection Using Reversed Forward-edge Mappings. - Paul Muntean 001; Matthias Neumayer; Zhiqiang Lin 001; Gang Tan; Jens Grossklags; Claudia Eckert 001 (ACSAC, 2020)

FirmXRay: Detecting Bluetooth Link Layer Vulnerabilities From Bare-Metal Firmware. - Haohuang Wen; Zhiqiang Lin 001; Yinqian Zhang (CCS, 2020)

Automated Cross-Platform Reverse Engineering of CAN Bus Commands From Mobile Apps. - Haohuang Wen; Qingchuan Zhao; Qi Alfred Chen; Zhiqiang Lin 001 (NDSS, 2020)

On the Effectiveness of Behavior-Based Ransomware Detection. - Jaehyun Han; Zhiqiang Lin 001; Donald E. Porter (SecureComm (2), 2020)

A Study of the Privacy of COVID-19 Contact Tracing Apps. - Haohuang Wen; Qingchuan Zhao; Zhiqiang Lin 001; Dong Xuan; Ness B. Shroff (SecureComm (1), 2020)

On the Accuracy of Measured Proximity of Bluetooth-Based Contact Tracing Apps. - Qingchuan Zhao; Haohuang Wen; Zhiqiang Lin 001; Dong Xuan; Ness B. Shroff (SecureComm (1), 2020)

Automatic Uncovering of Hidden Behaviors From Input Validation in Mobile Apps. - Qingchuan Zhao; Chaoshun Zuo; Brendan Dolan-Gavitt; Giancarlo Pellegrino; Zhiqiang Lin 001 (SP, 2020)

Energy Attacks on Mobile Devices. - Ashish Kundu; Zhiqiang Lin 001; Joshua Hammond (TPS-ISA, 2020)

Breaking Secure Pairing of Bluetooth Low Energy Using Downgrade Attacks. - Yue Zhang 025; Jian Weng 001; Rajib Dey; Yier Jin; Zhiqiang Lin 001; Xinwen Fu (USENIX Security Symposium, 2020)

FIRMSCOPE: Automatic Uncovering of Privilege-Escalation Vulnerabilities in Pre-Installed Apps in Android Firmware. - Mohamed Elsabagh; Ryan Johnson 002; Angelos Stavrou; Chaoshun Zuo; Qingchuan Zhao; Zhiqiang Lin 001 (USENIX Security Symposium, 2020)

SAVIOR: Securing Autonomous Vehicles with Robust Physical Invariants. - Raul Quinonez; Jairo Giraldo; Luis E. Salazar; Erick Bauman; Alvaro A. Cárdenas; Zhiqiang Lin 001 (USENIX Security Symposium, 2020)

Plug-N-Pwned: Comprehensive Vulnerability Analysis of OBD-II Dongles as A New Over-the-Air Attack Surface in Automotive IoT. - Haohuang Wen; Qi Alfred Chen; Zhiqiang Lin 001 (USENIX Security Symposium, 2020)

TXSPECTOR: Uncovering Attacks in Ethereum from Transactions. - Mengya Zhang; Xiaokuan Zhang; Yinqian Zhang; Zhiqiang Lin 001 (USENIX Security Symposium, 2020)

ACOUSTIC-TURF: Acoustic-based Privacy-Preserving COVID-19 Contact Tracing. - Yuxiang Luo; Cheng Zhang 014; Yunqi Zhang; Chaoshun Zuo; Dong Xuan; Zhiqiang Lin 001; Adam C. Champion; Ness B. Shroff (CoRR, 2020)

SgxPectre: Stealing Intel Secrets From SGX Enclaves via Speculative Execution. - Guoxing Chen; Sanchuan Chen; Yuan Xiao 001; Yinqian Zhang; Zhiqiang Lin 001; Ten-Hwang Lai (IEEE Secur. Priv., 2020)

CrossLine: Breaking "Security-by-Crash" based Memory Isolation in AMD SEV. - Mengyuan Li 004; Yinqian Zhang; Zhiqiang Lin 001 (CCS, 2021)

Specularizer : Detecting Speculative Execution Attacks via Performance Tracing. - Wubing Wang; Guoxing Chen; Yueqiang Cheng; Yinqian Zhang; Zhiqiang Lin 001 (DIMVA, 2021)

Keynote: Uncovering Vulnerabilities in Bluetooth Devices with Automated Binary Analysis. - Zhiqiang Lin 001 (PerCom Workshops, 2021)

iTOP: Automating Counterfeit Object-Oriented Programming Attacks. - Paul Muntean 001; Richard Viehoever; Zhiqiang Lin 001; Gang Tan; Jens Grossklags; Claudia Eckert 001 (RAID, 2021)

SelectiveTaint: Efficient Data Flow Tracking With Static Binary Rewriting. - Sanchuan Chen; Zhiqiang Lin 001; Yinqian Zhang (USENIX Security Symposium, 2021)

Towards Formal Verification of State Continuity for Enclave Programs. - Mohit Kumar Jangid; Guoxing Chen; Yinqian Zhang; Zhiqiang Lin 001 (USENIX Security Symposium, 2021)

Automatic Policy Generation for Inter-Service Access Control of Microservices. - Xing Li; Yan Chen; Zhiqiang Lin 001; Xiao Wang; Jim Hao Chen (USENIX Security Symposium, 2021)

WLAN-Log-Based Superspreader Detection in the COVID-19 Pandemic. - Cheng Zhang 014; Yunze Pan; Yunqi Zhang; Adam C. Champion; Zhaohui Shen; Dong Xuan; Zhiqiang Lin 001; Ness B. Shroff (CoRR, 2021)

A Measurement Study of Wechat Mini-Apps. - Yue Zhang 025; Bayan Turkistani; Allen Yuqing Yang; Chaoshun Zuo; Zhiqiang Lin 001 (Proc. ACM Meas. Anal. Comput. Syst., 2021)

PeriScope: Comprehensive Vulnerability Analysis of Mobile App-defined Bluetooth Peripherals. - Qingchuan Zhao; Chaoshun Zuo; Jorge Blasco; Zhiqiang Lin 001 (AsiaCCS, 2022)

When Good Becomes Evil: Tracking Bluetooth Low Energy Devices via Allowlist-based Side Channel and Its Countermeasure. - Yue Zhang 025; Zhiqiang Lin 001 (CCS, 2022)

Understanding IoT Security from a Market-Scale Perspective. - Xin Jin; Sunil Manandhar; Kaushal Kafle; Zhiqiang Lin 001; Adwait Nadkarni (CCS, 2022)

SymLM: Predicting Function Names in Stripped Binaries via Context-Sensitive Execution-Aware Code Embeddings. - Xin Jin; Kexin Pei; Jun Yeon Won; Zhiqiang Lin 001 (CCS, 2022)

Cross Miniapp Request Forgery: Root Causes, Attacks, and Vulnerability Detection. - Yuqing Yang 003; Yue Zhang 025; Zhiqiang Lin 001 (CCS, 2022)

Detecting and Measuring Misconfigured Manifests in Android Apps. - Yuqing Yang 003; Mohamed Elsabagh; Chaoshun Zuo; Ryan Johnson 002; Angelos Stavrou; Zhiqiang Lin 001 (CCS, 2022)

Leveraging Synergies Between AI and Networking to Build Next Generation Edge Networks. - Sen Lin 001; Ming Shi 003; Anish Arora; Raef Bassily; Elisa Bertino; Constantine Caramanis; Kaushik R. Chowdhury; Eylem Ekici; Atilla Eryilmaz; Stratis Ioannidis; Nan Jiang 008; Gauri Joshi; et al. (CIC, 2022)

A fine-grained telemetry stream for security services in 5G open radio access networks. - Haohuang Wen; Phillip A. Porras; Vinod Yegneswaran; Zhiqiang Lin 001 (EmergingWireless@CoNEXT, 2022)

Multi-Certificate Attacks against Proof-of-Elapsed-Time and Their Countermeasures. - Huibo Wang; Guoxing Chen; Yinqian Zhang; Zhiqiang Lin 001 (NDSS, 2022)

What You See is Not What You Get: Revealing Hidden Memory Mapping for Peripheral Modeling. - Jun Yeon Won; Haohuang Wen; Zhiqiang Lin 001 (RAID, 2022)

vSGX: Virtualizing SGX Enclaves on AMD SEV. - Shixuan Zhao 002; Mengyuan Li 004; Yinqian Zhang; Zhiqiang Lin 001 (SP, 2022)

Playing Without Paying: Detecting Vulnerable Payment Verification in Native Binaries of Unity Mobile Games. - Chaoshun Zuo; Zhiqiang Lin 001 (USENIX Security Symposium, 2022)

An Empirical Study on Ethereum Private Transactions and the Security Implications. - Xingyu Lyu; Mengya Zhang; Xiaokuan Zhang; Jianyu Niu; Yinqian Zhang; Zhiqiang Lin 001 (CoRR, 2022)

Ultraverse: Efficient Retroactive Operation for Attack Recovery in Database Systems and Web Frameworks. - Ronny Ko; Chuan Xiao 001; Makoto Onizuka; Yihe Huang; Zhiqiang Lin 001 (CoRR, 2022)

Replay (Far) Away: Exploiting and Fixing Google/Apple Exposure Notification Contact Tracing. - Christopher Ellis; Haohuang Wen; Zhiqiang Lin 001; Anish Arora (Proc. Priv. Enhancing Technol., 2022)

vTrust: Remotely Executing Mobile Apps Transparently With Local Untrusted OS. - Yutao Tang; Zhengrui Qin; Zhiqiang Lin 001; Yue Li 002; Shanhe Yi; Fengyuan Xu; Qun Li 001 (IEEE Trans. Computers, 2022)

Uncovering Vulnerabilities of Bluetooth Low Energy IoT from Companion Mobile Apps with Ble-Guuide. - Pallavi Sivakumaran; Chaoshun Zuo; Zhiqiang Lin 001; Jorge Blasco (AsiaCCS, 2023)

FreePart: Hardening Data Processing Software via Framework-based Partitioning and Isolation. - Ali Ahad; Gang Wang 011; Chung Hwan Kim; Suman Jana; Zhiqiang Lin 001; Yonghwi Kwon 001 (ASPLOS (4), 2023)

SaTS'23: The 1st ACM Workshop on Secure and Trustworthy Superapps. - Zhiqiang Lin 001; Xiaojing Liao (CCS, 2023)

Uncovering and Exploiting Hidden APIs in Mobile Super Apps. - Chao Wang 113; Yue Zhang 025; Zhiqiang Lin 001 (CCS, 2023)

Don't Leak Your Keys: Understanding, Measuring, and Exploiting the AppSecret Leaks in Mini-Programs. - Yue Zhang 025; Yuqing Yang 003; Zhiqiang Lin 001 (CCS, 2023)

PwrLeak: Exploiting Power Reporting Interface for Side-Channel Attacks on AMD SEV. - Wubing Wang; Mengyuan Li 004; Yinqian Zhang; Zhiqiang Lin 001 (DIMVA, 2023)

Taintmini: Detecting Flow of Sensitive Data in Mini-Programs with Static Taint Analysis. - Chao Wang 113; Ronny Ko; Yue Zhang 025; Yuqing Yang 003; Zhiqiang Lin 001 (ICSE, 2023)

Demystifying Exploitable Bugs in Smart Contracts. - Zhuo Zhang 002; Brian Zhang; Wen Xu; Zhiqiang Lin 001 (ICSE, 2023)

Extrapolating Formal Analysis to Uncover Attacks in Bluetooth Passkey Entry Pairing. - Mohit Kumar Jangid; Yue Zhang 025; Zhiqiang Lin 001 (NDSS, 2023)

Thwarting Smartphone SMS Attacks at the Radio Interface Layer. - Haohuang Wen; Phillip A. Porras; Vinod Yegneswaran; Zhiqiang Lin 001 (NDSS, 2023)

Extracting Threat Intelligence From Cheat Binaries For Anti-Cheating. - Md Sakib Anwar; Chaoshun Zuo; Carter Yagemann; Zhiqiang Lin 001 (RAID, 2023)

Renewable Just-In-Time Control-Flow Integrity. - Erick Bauman; Jun Duan; Kevin W. Hamlen; Zhiqiang Lin 001 (RAID, 2023)

ADC-Bank: Detecting Acoustic Out-of-Band Signal Injection on Inertial Sensors. - Jianyi Zhang; Yuchen Wang; Yazhou Tu; Sara Rampazzi; Zhiqiang Lin 001; Insup Lee 001; Xiali Hei 001 (SmartSP, 2023)

Your Exploit is Mine: Instantly Synthesizing Counterattack Smart Contract. - Zhuo Zhang 002; Zhiqiang Lin 001; Marcelo Morales; Xiangyu Zhang 001; Kaiyuan Zhang 002 (USENIX Security Symposium, 2023)

Reusable Enclaves for Confidential Serverless Computing. - Shixuan Zhao 002; Pinshen Xu; Guoxing Chen; Mengya Zhang; Yinqian Zhang; Zhiqiang Lin 001 (USENIX Security Symposium, 2023)

Controlled Data Races in Enclaves: Attacks and Detection. - Sanchuan Chen; Zhiqiang Lin 001; Yinqian Zhang (USENIX Security Symposium, 2023)

One Size Does Not Fit All: Uncovering and Exploiting Cross Platform Discrepant APIs in WeChat. - Chao Wang 113; Yue Zhang 025; Zhiqiang Lin 001 (USENIX Security Symposium, 2023)

Egg Hunt in Tesla Infotainment: A First Look at Reverse Engineering of Qt Binaries. - Haohuang Wen; Zhiqiang Lin 001 (USENIX Security Symposium, 2023)

A Peek into the Metaverse: Detecting 3D Model Clones in Mobile Games. - Chaoshun Zuo; Chao Wang 113; Zhiqiang Lin 001 (USENIX Security Symposium, 2023)

SoK: Decoding the Super App Enigma: The Security Mechanisms, Threats, and Trade-offs in OS-alike Apps. - Yuqing Yang 003; Chao Wang 113; Yue Zhang 025; Zhiqiang Lin 001 (CoRR, 2023)

Cocoon: Static Information Flow Control in Rust. - Ada Barach; Maxwell Taylor; Vincent Beardsley; Jacob Bambeck; Michael D. Bond; Zhiqiang Lin 001 (CoRR, 2023)

Binary Code Summarization: Benchmarking ChatGPT/GPT-4 and Other Large Language Models. - Xin Jin; Jonathan Larson; Weiwei Yang; Zhiqiang Lin 001 (CoRR, 2023)

SoK: Security of Cross-chain Bridges: Attack Surfaces, Defenses, and Open Problems. - Mengya Zhang; Xiaokuan Zhang; Josh Barbee; Yinqian Zhang; Zhiqiang Lin 001 (CoRR, 2023)

Detecting and Measuring Aggressive Location Harvesting in Mobile Apps via Data-flow Path Embedding. - Haoran Lu; Qingchuan Zhao; Yongliang Chen; Xiaojing Liao; Zhiqiang Lin 001 (Proc. ACM Meas. Anal. Comput. Syst., 2023)

Breaking the Privacy Barrier: On the Feasibility of Reorganization Attacks on Ethereum Private Transactions. - Mengya Zhang; Xingyu Lyu; Jianyu Niu; Xiaokuan Zhang; Yinqian Zhang; Zhiqiang Lin 001 (ACSAC, 2024)

RootFree Attacks: Exploiting Mobile Platform's Super Apps From Desktop. - Chao Wang 113; Yue Zhang 025; Zhiqiang Lin 001 (AsiaCCS, 2024)

When Compiler Optimizations Meet Symbolic Execution: An Empirical Study. - Yue Zhang 025; Melih Sirlanci; Ruoyu Wang 001; Zhiqiang Lin 001 (CCS, 2024)

BaseMirror: Automatic Reverse Engineering of Baseband Commands from Android's Radio Interface Layer. - Wenqiang Li; Haohuang Wen; Zhiqiang Lin 001 (CCS, 2024)

SaTS '24: The 2nd ACM Workshop on Secure and Trustworthy Superapps. - Zhiqiang Lin 001; Luyi Xing (CCS, 2024)

6G-XSec: Explainable Edge Security for Emerging OpenRAN Architectures. - Haohuang Wen; Prakhar Sharma; Vinod Yegneswaran; Phillip A. Porras; Ashish Gehani; Zhiqiang Lin 001 (HotNets, 2024)

5G-Spector: An O-RAN Compliant Layer-3 Cellular Attack Detection Service. - Haohuang Wen; Phillip A. Porras; Vinod Yegneswaran; Ashish Gehani; Zhiqiang Lin 001 (NDSS, 2024)

Security of Cross-chain Bridges: Attack Surfaces, Defenses, and Open Problems. - Mengya Zhang; Xiaokuan Zhang; Yinqian Zhang; Zhiqiang Lin 001 (RAID, 2024)

From Virtual Touch to Tesla Command: Unlocking Unauthenticated Control Chains From Smart Glasses for Vehicle Takeover. - Xingli Zhang 004; Yazhou Tu; Yan Long 002; Liqun Shan; Mohamed A Elsaadani; Kevin Fu; Zhiqiang Lin 001; Xiali Hei 001 (SP, 2024)

SoK: Where's the "up"?! A Comprehensive (bottom-up) Study on the Security of Arm Cortex-M Systems. - Xi Tan 002; Zheyuan Ma; Sandro Pinto 001; Le Guan; Ning Zhang 017; Jun Xu 024; Zhiqiang Lin 001; Hongxin Hu; Ziming Zhao 001 (WOOT @ USENIX Security Symposium, 2024)

Where's the "up"?! A Comprehensive (bottom-up) Study on the Security of Arm Cortex-M Systems. - Xi Tan 002; Zheyuan Ma; Sandro Pinto 001; Le Guan; Ning Zhang 017; Jun Xu 024; Zhiqiang Lin 001; Hongxin Hu; Ziming Zhao 001 (CoRR, 2024)

Flashback: Enhancing Proposer-Builder Design with Future-Block Auctions in Proof-of-Stake Ethereum. - Yifan Mao; Mengya Zhang; Shaileshh Bojja Venkatakrishnan; Zhiqiang Lin 001 (CoRR, 2024)

Ditto: Elastic Confidential VMs with Secure and Dynamic CPU Scaling. - Shixuan Zhao 002; Mengyuan Li 004; Mengjia Yan 001; Zhiqiang Lin 001 (CoRR, 2024)

Cocoon: Static Information Flow Control in Rust. - Ada Lamba; Max Taylor; Vincent Beardsley; Jacob Bambeck; Michael D. Bond; Zhiqiang Lin 001 (Proc. ACM Program. Lang., 2024)

SimLLM: Calculating Semantic Similarity in Code Summaries using a Large Language Model-Based Approach. - Xin Jin; Zhiqiang Lin 001 (Proc. ACM Softw. Eng., 2024)

An Empirical Study of Proxy Contracts at the Ethereum Ecosystem Scale. - Mengya Zhang; Preksha Shukla; Wuqi Zhang; Zhuo Zhang 002; Pranav Agrawal 002; Zhiqiang Lin 001; Xiangyu Zhang 001; Xiaokuan Zhang (ICSE, 2025)

Understanding Miniapp Malware: Identification, Dissection, and Characterization. - Yuqing Yang 003; Yue Zhang 025; Zhiqiang Lin 001 (NDSS, 2025)

Deanonymizing Device Identities via Side-channel Attacks in Exclusive-use IoTs & Mitigation. - Christopher Ellis; Yue Zhang 025; Mohit Kumar Jangid; Shixuan Zhao 002; Zhiqiang Lin 001 (NDSS, 2025)

Beyond Classification: Inferring Function Names in Stripped Binaries via Domain Adapted LLMs. - Linxi Jiang; Xin Jin; Zhiqiang Lin 001 (NDSS, 2025)

Repurposing Neural Networks for Efficient Cryptographic Computation. - Xin Jin; Shiqing Ma; Zhiqiang Lin 001 (NDSS, 2025)

GoSonar: Detecting Logical Vulnerabilities in Memory Safe Language Using Inductive Constraint Reasoning. - Md Sakib Anwar; Carter Yagemann; Zhiqiang Lin 001 (SP, 2025)

Code Speaks Louder: Exploring Security and Privacy Relevant Regional Variations in Mobile Applications. - Jiawei Guo; Yu Nong; Zhiqiang Lin 001; Haipeng Cai (SP, 2025)

CarPlay at Risk: Unveiling Security Threats of Third-Party Infotainment Adapters. - Jun Yeon Won; Wenzhuo Wang; Keith A. Redmill; Zhiqiang Lin 001 (VehicleSec, 2025)

ARMOUR US: Android Runtime Zero-permission Sensor Usage Monitoring from User Space. - Yan Long 002; Jiancong Cui; Yuqing Yang 003; Tobias Alam; Zhiqiang Lin 001; Kevin Fu (WISEC, 2025)

Ultraverse: An Efficient What-if Analysis Framework for Software Applications Interacting with Database Systems. - Ronny Ko; Chuan Xiao 001; Makoto Onizuka; Zhiqiang Lin 001; Yihe Huang (Proc. ACM Manag. Data, 2025)

Demystifying Private Transactions and Their Impact in PoW and PoS Ethereum. - Xingyu Lyu; Mengya Zhang; Xiaokuan Zhang; Jianyu Niu; Yinqian Zhang; Zhiqiang Lin 001 (CoRR, 2025)

C2RUST-BENCH: A Minimized, Representative Dataset for C-to-Rust Transpilation Evaluation. - Melih Sirlanci; Carter Yagemann; Zhiqiang Lin 001 (CoRR, 2025)

ELFuzz: Efficient Input Generation via LLM-driven Synthesis Over Fuzzer Space. - Chuyang Chen; Brendan Dolan-Gavitt; Zhiqiang Lin 001 (CoRR, 2025)

AI Safety vs. AI Security: Demystifying the Distinction and Boundaries. - Zhiqiang Lin 001; Huan Sun; Ness B. Shroff (CoRR, 2025)