ACM CCS 2026
Learning Less While Asking More: How LLM-Based Assistance Shapes Vulnerability Learning
PDF & BibTeX coming soon
SePAL
Publications
Peer-reviewed research from the lab and its members, organized by year.
2026
ACM CHI 2026
I Can SE Clearly Now: Investigating the Effectiveness of GUI-based Symbolic Execution for Software Vulnerability Discovery
IEEE/ACM IWQoS 2026
The Imitation Game: Using Large Language Models to Disrupt Chinese Chat-Based Cybercrime
2025
USENIX Security 2025
Easy As Child’s Play: An Empirical Study on Age Verification of Adult-Oriented Android Apps
Vehicular Communications 2025
MIEC: A Magnetism-Inspired Framework for MS Deployment and Joint Task Offloading and Resource Allocation Optimization in LMREC
Computer Networks 2025
AntidoteFL: Enhancing Defense Against Poisoning Attacks in Federated Learning
2024
RAID 2024
From Victims to Defenders: An Exploration of the Phishing Attack Reporting Ecosystem
ACM CODASPY 2024
Nothing Personal: Understanding the Theft, Spread, and Use of Personally Identifiable Information in the Financial Ecosystem
USENIX Security 2024
A Friend’s Eye is A Good Mirror: Synthesizing MCU Peripheral Models from Peripheral Drivers
IEEE ISPA 2024
Privacy-Enhanced Federated Learning Through Homomorphic Encryption With Cloud Federation
High-Confidence Computing 2024
A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Ugly
2023
ACM CCS 2023
Uncovering and Exploiting Hidden APIs in Mobile Super Apps
ACM CCS 2023
Don’t Leak Your Keys: Understanding, Measuring, and Exploiting the AppSecret Leaks in Mini-Programs
USENIX Security 2023
One Size Does Not Fit All: Uncovering and Exploiting Cross Platform Discrepant APIs in WeChat
NDSS 2023
Do Not Give a Dog Bread Every Time He Wags His Tail: Stealing Passwords through Content Queries (CONQUER) Attacks
NDSS 2023
Extrapolating Formal Analysis to Uncover Attacks in Bluetooth Passkey Entry Pairing
NDSS 2023
Fusion: Efficient and Secure Inference Resilient to Malicious Servers
2022
ACM CCS 2022
I’m Spartacus, No, I’m Spartacus: Proactively Protecting Users from Phishing by Intentionally Triggering Cloaking Behavior
ACM CCS 2022
When Good Becomes Evil: Tracking Bluetooth Low Energy Devices via Allowlist-based Side Channel and Its Countermeasure
ACM CCS 2022
Cross Miniapp Request Forgery: Root Causes, Attacks, and Vulnerability Detection
IEEE S&P Magazine 2022
CrawlPhish: Large-Scale Analysis of Client-Side Cloaking Techniques in Phishing
IEEE Access 2022
RTIDS: A Robust Transformer-Based Approach for Intrusion Detection System
2021
USENIX Security 2021
Having Your Cake and Eating It: An Analysis of Concession-Abuse-as-a-Service
IEEE S&P 2021 Best Student Paper Award
CrawlPhish: Large-scale Analysis of Client-side Cloaking Techniques in Phishing
2020
APWG eCrime 2020
Scam Pandemic: How Attackers Exploit Public Fear through Phishing
USENIX Security 2020