93 citations · 441 across the 30 of their papers we have counts for
30 papers
Software Engineering for OpenHarmony: A Research Roadmap
Li Li, Xiang Gao, Hailong Sun +12
Mobile software engineering has been a hot research topic for decades. Our fellow researchers have proposed various approaches (with over 7,000 publications for Android alone) in t…
Are we there yet? An Industrial Viewpoint on Provenance-based Endpoint Detection and Response Tools
Feng Dong, Shaofei Li, Peng Jiang +8
Provenance-Based Endpoint Detection and Response (P-EDR) systems are deemed crucial for future APT defenses. Despite the fact that numerous new techniques to improve P-EDR systems…
Abusing the Ethereum Smart Contract Verification Services for Fun and Profit
Pengxiang Ma, Ningyu He, Yuhua Huang +2
Smart contracts play a vital role in the Ethereum ecosystem. Due to the prevalence of kinds of security issues in smart contracts, the smart contract verification is urgently neede…
A General Static Binary Rewriting Framework for WebAssembly
Shangtong Cao, Ningyu He, Yao Guo +1
Binary rewriting is a widely adopted technique in software analysis. WebAssembly (Wasm), as an emerging bytecode format, has attracted great attention from our community. Unfortuna…
Eunomia: Enabling User-specified Fine-Grained Search in Symbolically Executing WebAssembly Binaries
Ningyu He, Zhehao Zhao, Jikai Wang +7
Although existing techniques have proposed automated approaches to alleviate the path explosion problem of symbolic execution, users still need to optimize symbolic execution by ap…
A Survey on EOSIO Systems Security: Vulnerability, Attack, and Mitigation
Ningyu He, Haoyu Wang, Lei Wu +3
EOSIO, as one of the most representative blockchain 3.0 platforms, involves lots of new features, e.g., delegated proof of stake consensus algorithm and updatable smart contracts,…
iLibScope: Reliable Third-Party Library Detection for iOS Mobile Apps
Jingyi Guo, Min Zheng, Yajin Zhou +4
Vetting security impacts introduced by third-party libraries in iOS apps requires a reliable library detection technique. Especially when a new vulnerability (or a privacy-invasive…
Understanding the Evolution of Blockchain Ecosystems: A Longitudinal Measurement Study of Bitcoin, Ethereum, and EOSIO
Ningyu He, Weihang Su, Zhou Yu +7
The continuing expansion of the blockchain ecosystems has attracted much attention from the research community. However, although a large number of research studies have been propo…
Trade or Trick? Detecting and Characterizing Scam Tokens on Uniswap Decentralized Exchange
Pengcheng Xia, Haoyu wang, Bingyu Gao +6
The prosperity of the cryptocurrency ecosystem drives the need for digital asset trading platforms. Beyond centralized exchanges (CEXs), decentralized exchanges (DEXs) are introduc…
Ethereum Name Service: the Good, the Bad, and the Ugly
Pengcheng Xia, Haoyu Wang, Zhou Yu +3
DNS has always been criticized for its inherent design flaws, making the system vulnerable to kinds of attacks. Besides, DNS domain names are not fully controlled by the users, whi…
A Systematical Study on Application Performance Management Libraries for Apps
Yutian Tang, Haoyu Wang, Xian Zhan +6
Being able to automatically detect the performance issues in apps can significantly improve apps' quality as well as having a positive influence on user satisfaction. Application P…
CHAMP: Characterizing Undesired App Behaviors from User Comments based on Market Policies
Yangyu Hu, Haoyu Wang, Tiantong Ji +4
Millions of mobile apps have been available through various app markets. Although most app markets have enforced a number of automated or even manual mechanisms to vet each app bef…
DeepPayload: Black-box Backdoor Attack on Deep Learning Models through Neural Payload Injection
Yuanchun Li, Jiayi Hua, Haoyu Wang +2
Deep learning models are increasingly used in mobile applications as critical components. Unlike the program bytecode whose vulnerabilities and threats have been widely-discussed,…
Tracking Counterfeit Cryptocurrency End-to-end
Bingyu Gao, Haoyu Wang, Pengcheng Xia +4
The production of counterfeit money has a long history. It refers to the creation of imitation currency that is produced without the legal sanction of government. With the growth o…
Towards Understanding and Demystifying Bitcoin Mixing Services
Lei Wu, Yufeng Hu, Yajin Zhou +5
One reason for the popularity of Bitcoin is due to its anonymity. Although several heuristics have been used to break the anonymity, new approaches are proposed to enhance its anon…
Towards A First Step to Understand Flash Loan and Its Applications in DeFi Ecosystem
Dabao Wang, Siwei Wu, Ziling Lin +5
Flash Loan, as an emerging service in the decentralized finance ecosystem, allows users to request a non-collateral loan. While providing convenience, it also enables attackers to…
Don't Fish in Troubled Waters! Characterizing Coronavirus-themed Cryptocurrency Scams
Pengcheng Xia, Haoyu Wang, Xiapu Luo +6
As COVID-19 has been spreading across the world since early 2020, a growing number of malicious campaigns are capitalizing the topic of COVID-19. COVID-19 themed cryptocurrency sca…
DEPOSafe: Demystifying the Fake Deposit Vulnerability in Ethereum Smart Contracts
Ru Ji, Ningyu He, Lei Wu +3
Cryptocurrency has seen an explosive growth in recent years, thanks to the evolvement of blockchain technology and its economic ecosystem. Besides Bitcoin, thousands of cryptocurre…
Beyond the Virus: A First Look at Coronavirus-themed Mobile Malware
Liu Wang, Ren He, Haoyu Wang +8
As the COVID-19 pandemic emerged in early 2020, a number of malicious actors have started capitalizing the topic. Although a few media reports mentioned the existence of coronaviru…
Characterizing Cryptocurrency Exchange Scams
Pengcheng Xia, Bowen Zhang, Ru Ji +5
As the indispensable trading platforms of the ecosystem, hundreds of cryptocurrency exchanges are emerging to facilitate the trading of digital assets. While, it also attracts the…
Security Analysis of EOSIO Smart Contracts
Ningyu He, Ruiyi Zhang, Lei Wu +5
The EOSIO blockchain, one of the representative Delegated Proof-of-Stake (DPoS) blockchain platforms, has grown rapidly recently. Meanwhile, a number of vulnerabilities and high-pr…
Characterizing EOSIO Blockchain
Yuheng Huang, Haoyu Wang, Lei Wu +6
EOSIO has become one of the most popular blockchain platforms since its mainnet launch in June 2018. In contrast to the traditional PoW-based systems (e.g., Bitcoin and Ethereum),…
MadDroid: Characterising and Detecting Devious Ad Content for Android Apps
Tianming Liu, Haoyu Wang, Li Li +6
Advertisement drives the economy of the mobile app ecosystem. As a key component in the mobile ad business model, mobile ad content has been overlooked by the research community, w…
HyperService: Interoperability and Programmability Across Heterogeneous Blockchains
Zhuotao Liu, Yangxi Xiang, Jian Shi +5
Blockchain interoperability, which allows state transitions across different blockchain networks, is critical functionality to facilitate major blockchain adoption. Existing intero…