Publications (116)
Under-Optimized Smart Contracts Devour Your Money
Ting Chen, Xiaoqi Li, Xiapu Luo +1
$Ï$Hammer: Reviving RowHammer Attacks on New Architectures via Prefetching
Weijie Chen, Shan Tang, Yulin Tang +3
Towards Generalized and Stealthy Watermarking for Generative Code Models
Haoxuan Li, Jiale Zhang, Xiaobing Sun +1
MalModel: Hiding Malicious Payload in Mobile Deep Learning Models with Black-box Backdoor Attack
Jiayi Hua, Kailong Wang, Meizhen Wang +3
On the Security Risks of Knowledge Graph Reasoning
Zhaohan Xi, Tianyu Du, Changjiang Li +6
Tracking Counterfeit Cryptocurrency End-to-end
Bingyu Gao, Haoyu Wang, Pengcheng Xia +4
Demystifying the DAO Governance Process
Junjie Ma, Muhui Jiang, Jinan Jiang +5
Security Defense For Smart Contracts: A Comprehensive Survey
Nikolay Ivanov, Chenning Li, Qiben Yan +3
An Adaptive Gas Cost Mechanism for Ethereum to Defend Against Under-Priced DoS Attacks
Ting Chen, Xiaoqi Li, Ying Wang +5
Belobog: Move Language Fuzzing Framework For Real-World Smart Contracts
Ziqiao Kong, Wanxu Xia, Zhengwei Li +6
LLM-CompDroid: Repairing Configuration Compatibility Bugs in Android Apps with Pre-trained Large Language Models
Zhijie Liu, Yutian Tang, Meiyun Li +4
ChatGPT vs SBST: A Comparative Assessment of Unit Test Suite Generation
Yutian Tang, Zhijie Liu, Zhichao Zhou +1
CLUE: Towards Discovering Locked Cryptocurrencies in Ethereum
Xiaoqi Li, Ting Chen, Xiapu Luo +1
CHAMP: Characterizing Undesired App Behaviors from User Comments based on Market Policies
Yangyu Hu, Haoyu Wang, Tiantong Ji +4
Analyzing Use of High Privileges on Android: An Empirical Case Study of Screenshot and Screen Recording Applications
Mark Huasong Meng, Guangdong Bai, Joseph K. Liu +2
FDI: Attack Neural Code Generation Systems through User Feedback Channel
Zhensu Sun, Xiaoning Du, Xiapu Luo +3
On the Security Risks of AutoML
Ren Pang, Zhaohan Xi, Shouling Ji +2
A Sink-driven Approach to Detecting Exposed Component Vulnerabilities in Android Apps
Daoyuan Wu, Xiapu Luo, Rocky K. C. Chang
A Survey of LLM-Driven Penetration Testing: Taxonomy, Co-Evolution, and Open Challenges
Zheyuan He, Jiaxun Dong, Zihao Li +6
Automatically Locating ARM Instructions Deviation between Real Devices and CPU Emulators
Muhui Jiang, Tianyi Xu, Yajin Zhou +5
TrojanZoo: Towards Unified, Holistic, and Practical Evaluation of Neural Backdoors
Ren Pang, Zheng Zhang, Xiangshan Gao +5
Large Language Models for Software Engineering: A Systematic Literature Review
Xinyi Hou, Yanjie Zhao, Yue Liu +7
Software Engineering for OpenHarmony: A Research Roadmap
Li Li, Xiang Gao, Hailong Sun +12
Blockchain Transaction Simulation Phishing
Xiaocan Wang, Shixuan Guan, Tong Yang +3
RISKTAGGER: Evidence-Guided LLM Agent for Post-Incident Forensic Analysis of Money Laundering in Web3
Dan Lin, Yanli Ding, Weipeng Zou +5
Don't Fish in Troubled Waters! Characterizing Coronavirus-themed Cryptocurrency Scams
Pengcheng Xia, Haoyu Wang, Xiapu Luo +6
Characterizing Erasable Accounts in Ethereum
Xiaoqi Li, Ting Chen, Xiapu Luo +1
Towards a First Step to Understand the Cryptocurrency Stealing Attack on Ethereum
Zhen Cheng, Xinrui Hou, Runhuai Li +4
Trade or Trick? Detecting and Characterizing Scam Tokens on Uniswap Decentralized Exchange
Pengcheng Xia, Haoyu wang, Bingyu Gao +6
An Empirical Evaluation of GDPR Compliance Violations in Android mHealth Apps
Ming Fan, Le Yu, Sen Chen +6
SecBench: A Comprehensive Multi-Dimensional Benchmarking Dataset for LLMs in Cybersecurity
Pengfei Jing, Mengyun Tang, Xiaorong Shi +5
Model-Reuse Attacks on Deep Learning Systems
Yujie Ji, Xinyang Zhang, Shouling Ji +2
Ethereum Name Service: the Good, the Bad, and the Ugly
Pengcheng Xia, Haoyu Wang, Zhou Yu +3
iBatch: Saving Ethereum Fees via Secure and Cost-Effective Batching of Smart-Contract Invocations
Yibo Wang, Kai Li, Yuzhe Tang +4
iLibScope: Reliable Third-Party Library Detection for iOS Mobile Apps
Jingyi Guo, Min Zheng, Yajin Zhou +4
STAN: Towards Describing Bytecodes of Smart Contract
Xiaoqi Li, Ting Chen, Xiapu Luo +3
Detect Llama -- Finding Vulnerabilities in Smart Contracts using Large Language Models
Peter Ince, Xiapu Luo, Jiangshan Yu +2
Synthetic Voices, Real Threats: Evaluating Large Text-to-Speech Models in Generating Harmful Audio
Guangke Chen, Yuhui Wang, Shouling Ji +2
A Measurement Study on the (In)security of End-of-Life (EoL) Embedded Devices
Dingding Wang, Muhui Jiang, Rui Chang +5
Towards Secrecy-Aware Attacks Against Trust Prediction in Signed Social Networks
Yulin Zhu, Tomasz Michalak, Xiapu Luo +2
Beyond the Virus: A First Look at Coronavirus-themed Mobile Malware
Liu Wang, Ren He, Haoyu Wang +8
Fixturize: Bridging the Fixture Gap in Test Generation
Chengyi Wang, Pengyu Xue, Zhen Yang +8
A Systematical Study on Application Performance Management Libraries for Apps
Yutian Tang, Haoyu Wang, Xian Zhan +6
Interpretable Deep Learning under Fire
Xinyang Zhang, Ningfei Wang, Hua Shen +3
DEFECTCHECKER: Automated Smart Contract Defect Detection by Analyzing EVM Bytecode
Jiachi Chen, Xin Xia, David Lo +3
Characterizing Cryptocurrency Exchange Scams
Pengcheng Xia, Bowen Zhang, Ru Ji +5
Understanding the Evolution of Blockchain Ecosystems: A Longitudinal Measurement Study of Bitcoin, Ethereum, and EOSIO
Ningyu He, Weihang Su, Zhou Yu +7
Nurgle: Exacerbating Resource Consumption in Blockchain State Storage via MPT Manipulation
Zheyuan He, Zihao Li, Ao Qiao +6
No Need to Lift a Finger Anymore? Assessing the Quality of Code Generation by ChatGPT
Zhijie Liu, Yutian Tang, Xiapu Luo +2
Exploring Unconfirmed Transactions for Effective Bitcoin Address Clustering
Kai Wang, Maike Tong, Changhao Wu +4
AdvMind: Inferring Adversary Intent of Black-Box Attacks
Ren Pang, Xinyang Zhang, Shouling Ji +2
Towards Automated Smart Contract Generation: Evaluation, Benchmarking, and Retrieval-Augmented Repair
Zaoyu Chen, Haoran Qin, Nuo Chen +4
Vehicular Intrusion Detection System for Controller Area Network: A Comprehensive Survey and Evaluation
Yangyang Liu, Lei Xue, Sishan Wang +6
Security Analysis of EOSIO Smart Contracts
Ningyu He, Ruiyi Zhang, Lei Wu +5
Feature Location Benchmark for Decomposing and Reusing Android Apps
Yutian Tang, Hao Zhou, Zhou Xu +3
SigRec: Automatic Recovery of Function Signatures in Smart Contracts
Ting Chen, Zihao Li, Xiapu Luo +9
Time-Travel Investigation: Towards Building A Scalable Attack Detection Framework on Ethereum
Lei Wu, Siwei Wu, Yajin Zhou +5
Coverage Goal Selector for Combining Multiple Criteria in Search-Based Unit Test Generation
Zhichao Zhou, Yuming Zhou, Chunrong Fang +4
Aper: Evolution-Aware Runtime Permission Misuse Detection for Android Apps
Sinan Wang, Yibo Wang, Xian Zhan +4
Research on Third-Party Libraries in AndroidApps: A Taxonomy and Systematic LiteratureReview
Xian Zhan, Tianming Liu, Lingling Fan +4
From Bi-Level to One-Level: A Framework for Structural Attacks to Graph Anomaly Detection
Yulin Zhu, Yuni Lai, Kaifa Zhao +5
Demystifying Privacy Policy of Third-Party Libraries in Mobile Apps
Kaifa Zhao, Xian Zhan, Le Yu +5
Rethinking Mesh Watermark: Towards Highly Robust and Adaptable Deep 3D Mesh Watermarking
Xingyu Zhu, Guanhui Ye, Xiapu Luo +1
MadDroid: Characterising and Detecting Devious Ad Content for Android Apps
Tianming Liu, Haoyu Wang, Li Li +6
All Your Tokens are Belong to Us: Demystifying Address Verification Vulnerabilities in Solidity Smart Contracts
Tianle Sun, Ningyu He, Jiang Xiao +3
Abusing the Ethereum Smart Contract Verification Services for Fun and Profit
Pengxiang Ma, Ningyu He, Yuhua Huang +2
Fine-tuning is Not Fine: Mitigating Backdoor Attacks in GNNs with Limited Clean Data
Jiale Zhang, Bosen Rao, Chengcheng Zhu +6
Towards Robust Reasoning over Knowledge Graphs
Zhaohan Xi, Ren Pang, Changjiang Li +4
"It Warned Me Just at the Right Moment": Exploring LLM-based Real-time Detection of Phone Scams
Zitong Shen, Sineng Yan, Youqian Zhang +3
Graph Anomaly Detection at Group Level: A Topology Pattern Enhanced Unsupervised Approach
Xing Ai, Jialong Zhou, Yulin Zhu +4
A Tale of Evil Twins: Adversarial Inputs versus Poisoned Models
Ren Pang, Hua Shen, Xinyang Zhang +5
ROSF: Leveraging Information Retrieval and Supervised Learning for Recommending Code Snippets
He Jiang, Liming Nie, Zeyi Sun +4
Boros: Secure Cross-Channel Transfers via Channel Hub
YongJie Ye, Jingjing Zhang, Weigang Wu +2
Mesh Watermark Removal Attack and Mitigation: A Novel Perspective of Function Space
Xingyu Zhu, Guanhui Ye, Chengdong Dong +3
Characterizing and Detecting WebAssembly Runtime Bugs
Yixuan Zhang, Shangtong Cao, Haoyu Wang +6
Do Pre-trained Language Models Indeed Understand Software Engineering Tasks?
Yao Li, Tao Zhang, Xiapu Luo +3
Efficient and DoS-resistant Consensus for Permissioned Blockchains
Xusheng Chen, Shixiong Zhao, Ji Qi +10
Demystifying DeFi MEV Activities in Flashbots Bundle
Zihao Li, Jianfeng Li, Zheyuan He +6
ATVHunter: Reliable Version Detection of Third-Party Libraries for Vulnerability Identification in Android Applications
Xian Zhan, Lingling Fan, Sen Chen +4
Are We There Yet? Unraveling the State-of-the-Art Smart Contract Fuzzers
Shuohan Wu, Zihao Li, Luyi Yan +5
SolidityCheck : Quickly Detecting Smart Contract Problems Through Regular Expressions
Pengcheng Zhang, Feng Xiao, Xiapu Luo
SelfAPR: Self-supervised Program Repair with Test Execution Diagnostics
He Ye, Matias Martinez, Xiapu Luo +2
Phantom Events: Demystifying the Issues of Log Forgery in Blockchain
Yixuan Liu, Yuxin Dong, Ye Liu +2
SliceLocator: Locating Vulnerable Statements with Graph-based Detectors
Baijun Cheng, Kailong Wang, Cuiyun Gao +5
fAmulet: Finding Finalization Failure Bugs in Polygon zkRollup
Zihao Li, Xinghao Peng, Zheyuan He +2
FocusedCleaner: Sanitizing Poisoned Graphs for Robust GNN-based Node Classification
Yulin Zhu, Liang Tong, Gaolei Li +2
A Simulation Framework for Electromagnetic Signal Injection Attacks on Image Sensors
Youqian Zhang, MK Michael Cheung, Chunxi Yang +6
Tracing the Shadows: Automatic Tracking and Analysis of Crypto Money Laundering via Transaction Semantic Analysis
Hao Wu, Haijun Wang, Shangwang Li +4
STor: Social Network based Anonymous Communication in Tor
Peng Zhou, Xiapu Luo, Ang Chen +1
Programmable In-Network Security for Context-aware BYOD Policies
Qiao Kang, Lei Xue, Adam Morrison +3
A Framework and DataSet for Bugs in Ethereum Smart Contracts
Pengcheng Zhang, Feng Xiao, Xiapu Luo
TransLibEval: Demystify Large Language Models' Capability in Third-party Library-targeted Code Translation
Pengyu Xue, Kunwu Zheng, Zhen Yang +11
One Size Fits All? A Modular Adaptive Sanitization Kit (MASK) for Customizable Privacy-Preserving Phone Scam Detection
Kangzhong Wang, Zitong Shen, Youqian Zhang +4
VGX: Large-Scale Sample Generation for Boosting Learning-Based Software Vulnerability Analyses
Yu Nong, Richard Fang, Guangbei Yi +4
AxeChain: A Secure and Decentralized blockchain for solving Easily-Verifiable problems
Weilin Zheng, Xu Chen, Zibin Zheng +2
The Dark Side of NFTs: A Large-Scale Empirical Study of Wash Trading
Shijian Chen, Jiachi Chen, Jiangshan Yu +2
The Age of DDoScovery: An Empirical Comparison of Industry and Academic DDoS Assessments
Raphael Hiesgen, Marcin Nawrocki, Marinho Barcellos +14
An Empirical Study on Oculus Virtual Reality Applications: Security and Privacy Perspectives
Hanyang Guo, Hong-Ning Dai, Xiapu Luo +3
Smart Contract Security: a Practitioners' Perspective
Zhiyuan Wan, Xin Xia, David Lo +3
A Fine-grained Chinese Software Privacy Policy Dataset for Sequence Labeling and Regulation Compliant Identification
Kaifa Zhao, Le Yu, Shiyao Zhou +4