Publications

Chao Wang, Yue Zhang, Zhiqiang Lin (2023). Uncovering and Exploiting Hidden APIs in Mobile Super Apps. In CCS.

Yue Zhang, Yuqing Yang, Zhiqiang Lin (2023). Don’t Leak Your Keys: Understanding, Measuring, and Exploiting the AppSecret Leaks in Mini-Programs. In CCS.

Chao Wang, Yue Zhang, Zhiqiang Lin (2023). One Size Does Not Fit All: Uncovering and Exploiting Cross Platform Discrepant APIs in WeChat. In USENIX Security.

Caiqin Dong, Jian Weng, Jia-Nan Liu, Yue Zhang, Yao Tong, Anjia Yang, Yudan Cheng, Shun Hu (2023). Fusion: Efficient and Secure Inference Resilient to Malicious Servers. In NDSS.

Mohit K. Jangid, Yue Zhang, Zhiqiang Lin (2023). Extrapolating Formal Analysis to Uncover Attacks in Bluetooth Passkey Entry Pairing. In NDSS.

Chongqing Lei, Zhen Ling, Yue Zhang, Kai Dong, Kaizheng Liu, Junzhou Luo, Xinwen Fu (2023). Do Not Give a Dog Bread Every Time He Wags His Tail: Stealing Passwords through Content Queries (CONQUER) Attacks. In NDSS.

Yue Zhang, Zhiqiang Lin (2022). When Good Becomes Evil: Tracking Bluetooth Low Energy Devices via Allowlist-based Side Channel and Its Countermeasure. In CCS.

Yuqing Yang, Yue Zhang, Zhiqiang Lin (2022). Cross Miniapp Request Forgery: Root Causes, Attacks, and Vulnerability Detection. In CCS.

Penghui Zhang, Zhibo (Eric) Sun, Sukwha Kyung, Hans Walter Behrens, Zion Leonahenahe Basque, Haehyun Cho, Adam Oest, Ruoyu Wang, Tiffany Bao, Yan Shoshitaishvili, Adam Doupe, Gail-Joon Ahn (2022). I’m Spartacus, No, I’m Spartacus: Proactively Protecting Users from Phishing by Intentionally Triggering Cloaking Behavior. In CCS.

Zhibo (Eric) Sun, Adam Oest, Penghui Zhang, Carlos Rubio-Medrano, Tiffany Bao, Ruoyu Wang, Ziming Zhao, Yan Shoshitaishvili, Adam Doupe, Gail-Joon Ahn (2021). Having Your Cake and Eating It: An Analysis of Concession-Abuse-as-a-Service. In USENIX Security.

Penghui Zhang, Adam Oest, Haehyun Cho, Zhibo (Eric) Sun, RC Johnson, Brad Wardman, Shaown Sarker, Alexandros Kapravelos, Tiffany Bao, Ruoyu Wang, Yan Shoshitaishvili, Adam Doupe, Gail-Joon Ahn (2021). CrawlPhish: Large-scale Analysis of Client-side Cloaking Techniques in Phishing. In Oakland.

Yue Zhang, Jian Weng, Rajib Dey, Yier Jin, Zhiqiang Lin, Xinwen Fu (2020). Breaking Secure Pairing of Bluetooth Low Energy Using Downgrade Attacks. In USENIX Security.