115 citations · 281 across the 27 of their papers we have counts for
30 papers
One Is Not Enough: The Untold Story of Multiple Security Patches for One Vulnerability
Fangyuan Zhang, Lyuye Zhang, Lingling Fan +6
Security patches (SPs) are the main mechanism for fixing software vulnerabilities, yet a single vulnerability is not always resolved by a single patch: fixes may be completed incre…
Open Source, Hidden Costs: A Systematic Literature Review on OSS License Management
Boyuan Li, Chengwei Liu, Lingling Fan +3
Integrating third-party software components is a common practice in modern software development, offering significant advantages in terms of efficiency and innovation. However, thi…
A Comprehensive Study on Static Application Security Testing (SAST) Tools for Android
Jingyun Zhu, Kaixuan Li, Sen Chen +3
To identify security vulnerabilities in Android applications, numerous static application security testing (SAST) tools have been proposed. However, it poses significant challenges…
Does the Vulnerability Threaten Our Projects? Automated Vulnerable API Detection for Third-Party Libraries
Fangyuan Zhang, Lingling Fan, Sen Chen +3
Developers usually use TPLs to facilitate the development of the projects to avoid reinventing the wheels, however, the vulnerable TPLs indeed cause severe security threats. The ma…
Scene-Driven Exploration and GUI Modeling for Android Apps
Xiangyu Zhang, Lingling Fan, Sen Chen +2
Due to the competitive environment, mobile apps are usually produced under pressure with lots of complicated functionality and UI pages. Therefore, it is challenging for various ro…
Automated and Context-Aware Repair of Color-Related Accessibility Issues for Android Apps
Yuxin Zhang, Sen Chen, Lingling Fan +2
Approximately 15% of the world's population is suffering from various disabilities or impairments. However, many mobile UX designers and developers disregard the significance of ac…
Mitigating Persistence of Open-Source Vulnerabilities in Maven Ecosystem
Lyuye Zhang, Chengwei Liu, Sen Chen +5
Vulnerabilities from third-party libraries (TPLs) have been unveiled to threaten the Maven ecosystem. Despite patches being released promptly after vulnerabilities are disclosed, t…
A Comprehensive Empirical Study of Bugs in Open-Source Federated Learning Frameworks
Weijie Shao, Yuyang Gao, Fu Song +3
Federated learning (FL) is a distributed machine learning (ML) paradigm, allowing multiple clients to collaboratively train shared machine learning (ML) models without exposing cli…
Compatible Remediation on Vulnerabilities from Third-Party Libraries for Java Projects
Lyuye Zhang, Chengwei Liu, Zhengzi Xu +5
With the increasing disclosure of vulnerabilities in open-source software, software composition analysis (SCA) has been widely applied to reveal third-party libraries and the assoc…
Has My Release Disobeyed Semantic Versioning? Static Detection Based on Semantic Differencing
Lyuye Zhang, Chengwei Liu, Zhengzi Xu +4
To enhance the compatibility in the version control of Java Third-party Libraries (TPLs), Maven adopts Semantic Versioning (SemVer) to standardize the underlying meaning of version…
Towards Understanding and Mitigating Audio Adversarial Examples for Speaker Recognition
Guangke Chen, Zhe Zhao, Fu Song +4
Speaker recognition systems (SRSs) have recently been shown to be vulnerable to adversarial attacks, raising significant security concerns. In this work, we systematically investig…
AS2T: Arbitrary Source-To-Target Adversarial Attack on Speaker Recognition Systems
Guangke Chen, Zhe Zhao, Fu Song +3
Recent work has illuminated the vulnerability of speaker recognition systems (SRSs) against adversarial attacks, raising significant security concerns in deploying SRSs. However, t…
LiDetector: License Incompatibility Detection for Open Source Software
Sihan Xu, Ya Gao, Lingling Fan +3
Open-source software (OSS) licenses dictate the conditions which should be followed to reuse, distribute, and modify the software. Apart from widely-used licenses such as the MIT L…
Accessible or Not? An Empirical Investigation of Android App Accessibility
Sen Chen, Chunyang Chen, Lingling Fan +3
Mobile apps provide new opportunities to people with disabilities to act independently in the world. Motivated by this trend, researchers have conducted empirical studies by using…
Automatically Distilling Storyboard with Rich Features for Android Apps
Sen Chen, Lingling Fan, Chunyang Chen +1
Before developing a new mobile app, the development team usually endeavors painstaking efforts to review many existing apps with similar purposes. The review process is crucial in…
Demystifying the Vulnerability Propagation and Its Evolution via Dependency Trees in the NPM Ecosystem
Chengwei Liu, Sen Chen, Lingling Fan +3
Third-party libraries with rich functionalities facilitate the fast development of Node.js software, but also bring new security threats that vulnerabilities could be introduced th…
SEC4SR: A Security Analysis Platform for Speaker Recognition
Guangke Chen, Zhe Zhao, Fu Song +3
Adversarial attacks have been expanded to speaker recognition (SR). However, existing attacks are often assessed using different SR models, recognition tasks and datasets, and only…
Research on Third-Party Libraries in AndroidApps: A Taxonomy and Systematic LiteratureReview
Xian Zhan, Tianming Liu, Lingling Fan +4
Third-party libraries (TPLs) have been widely used in mobile apps, which play an essential part in the entire Android ecosystem. However, TPL is a double-edged sword. On the one ha…
ATVHunter: Reliable Version Detection of Third-Party Libraries for Vulnerability Identification in Android Applications
Xian Zhan, Lingling Fan, Sen Chen +4
We propose a system, named ATVHunter, which can pinpoint the precise vulnerable in-app TPL versions and provide detailed information about the vulnerabilities and TPLs. We propose…
Advanced Evasion Attacks and Mitigations on Practical ML-Based Phishing Website Classifiers
Yusi Lei, Sen Chen, Lingling Fan +2
Machine learning (ML) based approaches have been the mainstream solution for anti-phishing detection. When they are deployed on the client-side, ML-based classifiers are vulnerable…
Why an Android App is Classified as Malware? Towards Malware Classification Interpretation
Bozhi Wu, Sen Chen, Cuiyun Gao +4
Machine learning (ML) based approach is considered as one of the most promising techniques for Android malware detection and has achieved high accuracy by leveraging commonly-used…
CORE: Automating Review Recommendation for Code Changes
JingKai Siow, Cuiyun Gao, Lingling Fan +2
Code review is a common process that is used by developers, in which a reviewer provides useful comments or points out defects in the submitted source code changes via pull request…
Who is Real Bob? Adversarial Attacks on Speaker Recognition Systems
Guangke Chen, Sen Chen, Lingling Fan +4
Speaker recognition (SR) is widely used in our daily life as a biometric authentication or identification mechanism. The popularity of SR brings in serious security concerns, as de…
StoryDroid: Automated Generation of Storyboard for Android Apps
Sen Chen, Lingling Fan, Chunyang Chen +4
Mobile apps are now ubiquitous. Before developing a new app, the development team usually endeavors painstaking efforts to review many existing apps with similar purposes. The revi…