Daredevil: Rescue Your Flash Storage from Inflexible Kernel Storage Stack
Published in In the Proceedings of the Twentieth European Conference on Computer Systems (EuroSys 25), 2025
Publications
You can also find my articles on my Google Scholar profile.
Conference Papers
Automatic Library Fuzzing through API Relation Evolvement
Published in In the proceedings of The 32nd Network and Distributed System Security Symposium (NDSS 25), 2025
Invisibility Cloak: Proactive Defense Against Visual Game Cheating
Published in In the proceedings of 33rd USENIX Security Symposium (SEC 24), 2024
Beyond the Surface: Uncovering the Unprotected Components of Android Against Overlay Attack
Published in In the proceedings of The 31st Network and Distributed System Security Symposium (NDSS 24), 2024
Revisiting Automotive Attack Surfaces: a Practitioners’ Perspective
Published in In the proceedings of 2024 IEEE Symposium on Security and Privacy (SP 24), 2024
CydiOS: A Model-Based Testing Framework for iOS Apps
Published in In the proceedings of Proceedings of the 32nd ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA 23), 2023
DeView: Confining Progressive Web Applications by Debloating Web APIs
Published in In the proceedings of Proceedings of the 38th Annual Computer Security Applications Conference (ACSAC 22), 2022
Slimium: Debloating the Chromium Browser with Feature Subsetting
Published in In the proceedings of Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security (CCS 20), 2020
RAZOR: a framework for post-deployment software debloating
Published in In the proceedings of Proceedings of the 28th USENIX Conference on Security Symposium (SEC 19), 2019
Enforcing Unique Code Target Property for Control-Flow Integrity
Published in In the proceedings of Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security (CCS 18), 2018
Precise and Scalable Detection of Double-Fetch Bugs in OS Kernels
Published in In the proceedings of 2018 IEEE Symposium on Security and Privacy (SP 18), 2018
Rampart: Protecting Web Applications from CPU-Exhaustion Denial-of-Service Attacks
Published in In the proceedings of 27th USENIX Security Symposium (SEC 18), 2018
Cloak and Dagger: From Two Permissions to Complete Control of the UI Feedback Loop
Published in In the proceedings of 2017 IEEE Symposium on Security and Privacy (SP 17), 2017
Efficient Protection of Path-Sensitive Control Security
Published in In the proceedings of 26th USENIX Security Symposium (SEC 17), 2017
Revisiting the Description-to-Behavior Fidelity in Android Applications
Published in In the proceedings of 2016 IEEE 23rd International Conference on Software Analysis, Evolution, and Reengineering (SANER), 2016
AndroidPerf: A cross-layer profiling system for Android applications
Published in In the proceedings of 2015 IEEE 23rd International Symposium on Quality of Service (IWQoS), 2015
Towards a scalable resource-driven approach for detecting repackaged Android applications
Published in In the proceedings of Proceedings of the 30th Annual Computer Security Applications Conference (ACSAC 14), 2014
On Measuring One-Way Path Metrics from a Web Server
Published in In the proceedings of 2014 IEEE 22nd International Conference on Network Protocols, 2014
On Tracking Information Flows through JNI in Android Applications
Published in In the proceedings of 2014 44th Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN 14), 2014
Journal Articles
Unearthing Gas-Wasting Code Smells in Smart Contracts with Large Language Models
Published in IEEE Transactions on Software Engineering (TOSE 24), 2024
NDroid: Toward Tracking Information Flows Across Multiple Android Contexts
Published in IEEE Transactions on Information Forensics and Security (TIFS 19), 2019
Enhancing the Description-to-Behavior Fidelity in Android Apps with Privacy Policy
Published in IEEE Transactions on Software Engineering (TOSE 18), 2018
Toward Engineering a Secure Android Ecosystem: A Survey of Existing Techniques
Published in ACM Comput. Surv., 2016
VulHunter: Toward Discovering Vulnerabilities in Android Applications
Published in IEEE Micro, 2015
RootGuard: Protecting Rooted Android Phones
Published in Computer, 2014