48 citations · 100 across the 10 of their papers we have counts for
10 papers · 1 filter
(A)I Sees What You Don't: Exploiting New Attack Surfaces in Third-Party Mobile Agents
Zidong Zhang, Zhentao Xie, Wenrui Diao +1
Third-party mobile agents powered by Vision-Language Models (VLMs) have emerged as a promising paradigm for automating smartphone interactions. These agents act as high-privilege d…
Mini-Programs, Mega-Problems: Unveiling OAuth-based Authentication Misuses in Mini-Programs via Dynamic Analysis
Zidong Zhang, Zhentao Xie, Lingyun Ying +4
Mini-programs have become a dominant paradigm for lightweight application deployment within super apps such as WeChat. To support seamless integration, super apps provide OAuth mec…
CAPED: Context-Aware Privacy Exposure Defense for Mobile GUI Agents
Siyu Shen, Fenghao Xu, Wenrui Diao +1
Screenshot-based mobile GUI agents can operate ordinary smartphone apps through the same visual interface as a human user, but this capability also turns every screen observation i…
Lost in Migration: Exposing Android Framework Vulnerabilities in Parallel Java-Kotlin Implementations
Rui Li, Wenrui Diao, Debin Gao
Android has adopted Kotlin alongside Java across apps and core system components. During this shift, we observe parallel implementations in the Android Open Source Project (AOSP) w…
DRLGENCERT: Deep Learning-based Automated Testing of Certificate Verification in SSL/TLS Implementations
Chao Chen, Wenrui Diao, Yingpei Zeng +2
The Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols are the foundation of network security. The certificate verification in SSL/TLS implementations is vital…
Understanding IoT Security Through the Data Crystal Ball: Where We Are Now and Where We Are Going to Be
Nan Zhang, Soteris Demetriou, Xianghang Mi +11
Inspired by the boom of the consumer IoT market, many device manufacturers, start-up companies and technology giants have jumped into the space. Unfortunately, the exciting utility…
Vulnerable GPU Memory Management: Towards Recovering Raw Data from GPU
Zhe Zhou, Wenrui Diao, Xiangyu Liu +3
In this paper, we present that security threats coming with existing GPU memory management strategy are overlooked, which opens a back door for adversaries to freely break the memo…
Your Voice Assistant is Mine: How to Abuse Speakers to Steal Information and Control Your Phone
Wenrui Diao, Xiangyu Liu, Zhe Zhou +1
Previous research about sensor based attacks on Android platform focused mainly on accessing or controlling over sensitive device components, such as camera, microphone and GPS. Th…
Acoustic Fingerprinting Revisited: Generate Stable Device ID Stealthy with Inaudible Sound
Zhe Zhou, Wenrui Diao, Xiangyu Liu +1
The popularity of mobile device has made people's lives more convenient, but threatened people's privacy at the same time. As end users are becoming more and more concerned on the…
An Empirical Study on Android for Saving Non-shared Data on Public Storage
Xiangyu Liu, Zhe Zhou, Wenrui Diao +2
With millions of apps that can be downloaded from official or third-party market, Android has become one of the most popular mobile platforms today. These apps help people in all k…