Publications

Chenxin Sun, Kai Ye, Liangcai Su, Jiayi Zhang, and Chenxiong Qian. Invisibility Cloak: Proactive Defense Against Visual Game Cheating. (USENIX Security 2024, to appear)

Hao Zhou, Shuohan Wu, Chenxiong Qian, Xiapu Luo, Haipeng Cai, and Chao Zhang. Beyond the Surface: Uncovering the Unprotected Components of Android Against Overlay Attack. (NDSS 2024).

Pengfei Jing, Zhiqiang Cai, Yingjie Cao, Le Yu, Yuefeng Du, Wenkai Zhang, Chenxiong Qian, Xiapu Luo, Sen Nie, and Shi Wu. Revisiting Automotive Attack Surfaces: a Practitioners’ Perspective (S&P 2024).

Shuohan Wu, Jianfeng Li, Hao Zhou, Yongsheng Fang, Kaifa Zhao, Haoyu Wang, Chenxiong Qian, and Xiapu Luo. CydiOS: a model-based testing framework for iOS apps. ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA 2023).

ChangSeok Oh, Sangho Lee, Chenxiong Qian, Hyungjoon Koo and Wenke Lee. DeView: Confining Progressive Web Applications by Debloating Web APIs. Annual Computer Security Applications Conference (ACSAC 22).

Chenxiong Qian, Hyungjoon Koo, ChangSeok Oh, Taesoo Kim, Wenke Lee. Slimium: Debloating the Chromium Browser with Feature Subsetting. Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security (CCS 2020).

Chenxiong Qian, Hong Hu, Mansour Alharthi, Pak Ho Chung, Taesoo Kim, Wenke Lee. RAZOR: A Framework for Post-deployment Software Debloating. 28th USENIX Security Symposium (USENIX Security 19).

Lei Xue, Chenxiong Qian, Hao Zhou, Xiapu Luo, Yajin Zhou, Yuru Shao, Alvin T.S. Chan. NDroid: Toward Tracking Information Flows Across Multiple Android Contexts. IEEE Transactions on Information Forensics and Security (TIFS 2019).

Wei Meng, Chenxiong Qian, Shuang Hao, Kevin Borgolte, Giovanni Vigna, Christopher Kruegel, Wenke Lee. Rampart: Protecting Web Applications from CPU-Exhaustion Denial-of-Service Attacks. 27th USENIX Security Symposium (USENIX Security 2018).

Meng Xu, Chenxiong Qian, Kangjie Lu, Michael Backes, Taesoo Kim. Precise and Scalable Detection of Double-Fetch Bugs in OS Kernels. 2018 IEEE Symposium on Security and Privacy (S&P 2018).

Le Yu, Xiapu Luo, Chenxiong Qian, Shuai Wang, Hareton K. N. Leung. Enhancing the Description-to-Behavior Fidelity in Android Apps with Privacy Policy. IEEE Transactions on Software Engineering (TOSE 2018).

Hong Hu, Chenxiong Qian, Carter Yagemann, Simon Pak Ho Chung, William R. Harris, Taesoo Kim, Wenke Lee. Enforcing Unique Code Target Property for Control-Flow Integrity. Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security (CCS 2018).

Ren Ding, Chenxiong Qian, Chengyu Song, Bill Harris, Taesoo Kim, Wenke Lee. Efficient Protection of Path-Sensitive Control Security. 26th USENIX Security Symposium (USENIX Security 17).

Yanick Fratantonio, Chenxiong Qian, Simon P. Chung, Wenke Lee. Cloak and Dagger: From Two Permissions to Complete Control of the UI Feedback Loop. 2017 IEEE Symposium on Security and Privacy (S&P 2017).

Meng Xu, Chengyu Song, Yang Ji, Ming-Wei Shih, Kangjie Lu, Cong Zheng, Ruian Duan, Yeongjin Jang, Byoungyoung Lee, Chenxiong Qian, Sangho Lee, Taesoo Kim (2016). Toward Engineering a Secure Android Ecosystem: A Survey of Existing Techniques. ACM Comput. Surv..

Le Yu, Xiapu Luo, Chenxiong Qian, Shuai Wang. Revisiting the Description-to-Behavior Fidelity in Android Applications. 2016 IEEE 23rd International Conference on Software Analysis, Evolution, and Reengineering (SANER 2016).

Chenxiong Qian, Xiapu Luo, Yu Le, Guofei Gu. VulHunter: Toward Discovering Vulnerabilities in Android Applications. IEEE Micro 2015.

Lei Xue, Chenxiong Qian, Xiapu Luo. AndroidPerf: A cross-layer profiling system for Android applications. 2015 IEEE 23rd International Symposium on Quality of Service (IWQoS 2015).

Yuru Shao, Xiapu Luo, Chenxiong Qian, Pengfei Zhu, Lei Zhang. Towards a Scalable Resource-Driven Approach for Detecting Repackaged Android Applications. Proceedings of the 30th Annual Computer Security Applications Conference (ACSAC 2014).

Yuru Shao, Xiapu Luo, Chenxiong Qian (2014). RootGuard: Protecting Rooted Android Phones. Computer.

Chenxiong Qian, Xiapu Luo, Yuru Shao, Alvin T.S. Chan. On Tracking Information Flows through JNI in Android Applications. 2014 44th Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN 2014).

Xiapu Luo, Lei Xue, Cong Shi, Yuru Shao, Chenxiong Qian, Edmond W.W. Chan (2014). On Measuring One-Way Path Metrics from a Web Server. 2014 IEEE 22nd International Conference on Network Protocols.