18 citations · 56 across the 12 of their papers we have counts for
12 papers
rCanary: Detecting Memory Leaks Across Semi-automated Memory Management Boundary in Rust
Mohan Cui, Hui Xu, Hongliang Tian +1
Rust is an effective system programming language that guarantees memory safety via compile-time verifications. It employs a novel ownership-based resource management model to facil…
STELLA: Sparse Taint Analysis for Enclave Leakage Detection
Yang Chen, Jianfeng Jiang, Shoumeng Yan +1
Intel SGX (Software Guard Extension) is a promising TEE (trusted execution environment) technique that can protect programs running in user space from being maliciously accessed by…
SafeDrop: Detecting Memory Deallocation Bugs of Rust Programs via Static Data-Flow Analysis
Mohan Cui, Chengjun Chen, Hui Xu +1
Rust is an emerging programming language that aims to prevent memory-safety bugs. However, the current design of Rust also brings side effects which may increase the risk of memory…
RULF: Rust Library Fuzzing via API Dependency Graph Traversal
Jianfeng Jiang, Hui Xu, Yangfan Zhou
Robustness is a key concern for Rust library development because Rust promises no risks of undefined behaviors if developers use safe APIs only. Fuzzing is a practical approach for…
Memory-Safety Challenge Considered Solved? An In-Depth Study with All Rust CVEs
Hui Xu, Zhuangbin Chen, Mingshen Sun +2
Rust is an emerging programing language that aims at preventing memory-safety bugs without sacrificing much efficiency. The claimed property is very attractive to developers, and m…
Detecting Deep Neural Network Defects with Data Flow Analysis
Jiazhen Gu, Huanlin Xu, Yangfan Zhou +3
Deep neural networks (DNNs) are shown to be promising solutions in many challenging artificial intelligence tasks. However, it is very hard to figure out whether the low precision…
DeepObfuscation: Securing the Structure of Convolutional Neural Networks via Knowledge Distillation
Hui Xu, Yuxin Su, Zirui Zhao +3
This paper investigates the piracy problem of deep learning models. Designing and training a well-performing model is generally expensive. However, when releasing them, attackers m…
On Benchmarking the Capability of Symbolic Execution Tools with Logic Bombs
Hui Xu, Zirui Zhao, Yangfan Zhou +1
Symbolic execution now becomes an indispensable technique for software testing and program analysis. There are several symbolic execution tools available off-the-shelf, and we need…
On Secure and Usable Program Obfuscation: A Survey
Hui Xu, Yangfan Zhou, Yu Kang +1
Program obfuscation is a widely employed approach for software intellectual property protection. However, general obfuscation methods (e.g., lexical obfuscation, control obfuscatio…
IntelliAd Understanding In-APP Ad Costs From Users Perspective
Cuiyun Gao, Hui Xu, Yichuan Man +2
Ads are an important revenue source for mobile app development, especially for free apps, whose expense can be compensated by ad revenue. The ad benefits also carry with costs. For…
PersisDroid: Android Performance Diagnosis via Anatomizing Asynchronous Executions
Yu Kang, Yangfan Zhou, Hui Xu +1
Android applications (apps) grow dramatically in recent years. Apps are user interface (UI) centric typically. Rapid UI responsiveness is key consideration to app developers. Howev…
N-Version Obfuscation: Impeding Software Tampering Replication with Program Diversity
Hui Xu, Yangfan Zhou, Michael R. Lyu
Tamper-resistance is a fundamental software security research area. Many approaches have been proposed to thwart specific procedures of tampering, e.g., obfuscation and self-checks…