180 citations · 282 across the 18 of their papers we have counts for
18 papers
Demystifying Solana Bots: From GitHub Blueprints to On-Chain Fingerprints
Xiaoye Zheng, Yujing Chen, Minghao Wu +5
Solana is an emerging blockchain platform designed for high throughput and low transaction fees, making it inexpensive to submit transactions at scale and, consequently, increasing…
GPTScan: Detecting Logic Vulnerabilities in Smart Contracts by Combining GPT with Program Analysis
Yuqiang Sun, Daoyuan Wu, Yue Xue +5
Smart contracts are prone to various vulnerabilities, leading to substantial financial losses over time. Current analysis tools mainly target vulnerabilities with fixed control or…
On Extracting Specialized Code Abilities from Large Language Models: A Feasibility Study
Zongjie Li, Chaozheng Wang, Pingchuan Ma +5
Recent advances in large language models (LLMs) significantly boost their usage in software engineering. However, training a well-performing LLM demands a substantial workforce for…
On the Usability (In)Security of In-App Browsing Interfaces in Mobile Apps
Zicheng Zhang, Daoyuan Wu, Lixiang Li +1
Due to the frequent encountering of web URLs in various application scenarios (e.g., chatting and email reading), many mobile apps build their in-app browsing interfaces (IABIs) to…
BlockScope: Detecting and Investigating Propagated Vulnerabilities in Forked Blockchain Projects
Xiao Yi, Yuzhou Fang, Daoyuan Wu +1
Due to the open-source nature of the blockchain ecosystem, it is common for new blockchains to fork or partially reuse the code of classic blockchains. For example, the popular Dog…
Effective Online Exam Proctoring by Combining Lightweight Face Detection and Deep Recognition
Xu Yang, Juantao Zhong, Daoyuan Wu +4
Online exams conducted via video conferencing platforms such as Zoom have become widespread, yet ensuring exam integrity remains challenging due to the difficulty of monitoring mul…
An Empirical Study of Blockchain System Vulnerabilities: Modules, Types, and Patterns
Xiao Yi, Daoyuan Wu, Lingxiao Jiang +3
Blockchain, as a distributed ledger technology, becomes increasingly popular, especially for enabling valuable cryptocurrencies and smart contracts. However, the blockchain softwar…
AGChain: A Blockchain-based Gateway for Trustworthy App Delegation from Mobile App Markets
Mengjie Chen, Xiao Yi, Daoyuan Wu +3
The popularity of smartphones has led to the growth of mobile app markets, creating a need for enhanced transparency, global access, and secure downloading. This paper introduces A…
When Program Analysis Meets Bytecode Search: Targeted and Efficient Inter-procedural Analysis of Modern Android Apps in BackDroid
Daoyuan Wu, Debin Gao, Robert H. Deng +1
Widely-used Android static program analysis tools, e.g., Amandroid and FlowDroid, perform the whole-app inter-procedural analysis that is comprehensive but fundamentally difficult…
Scalable Online Vetting of Android Apps for Measuring Declared SDK Versions and Their Consistency with API Calls
Daoyuan Wu, Debin Gao, David Lo
Android has been the most popular smartphone system with multiple platform versions active in the market. To manage the application's compatibility with one or more platform versio…
SCLib: A Practical and Lightweight Defense against Component Hijacking in Android Applications
Daoyuan Wu, Yao Cheng, Debin Gao +2
Cross-app collaboration via inter-component communication is a fundamental mechanism on Android. Although it brings the benefits such as functionality reuse and data sharing, a thr…
Measuring the Declared SDK Versions and Their Consistency with API Calls in Android Apps
Daoyuan Wu, Ximing Liu, Jiayun Xu +2
Android has been the most popular smartphone system, with multiple platform versions (e.g., KITKAT and Lollipop) active in the market. To manage the application's compatibility wit…
MopEye: Opportunistic Monitoring of Per-app Mobile Network Performance
Daoyuan Wu, Rocky K. C. Chang, Weichao Li +2
Crowdsourcing mobile user's network performance has become an effective way of understanding and improving mobile network performance and user quality-of-experience. However, the c…
MopEye: Monitoring Per-app Network Performance with Zero Measurement Traffic
Daoyuan Wu, Weichao Li, Rocky K. C. Chang +1
Mobile network performance measurement is important for understanding mobile user experience, problem diagnosis, and service comparison. A number of crowdsourcing measurement apps…
SecComp: Towards Practically Defending Against Component Hijacking in Android Applications
Daoyuan Wu, Debin Gao, Yingjiu Li +1
Cross-app collaboration via inter-component communication is a fundamental mechanism on Android. Although it brings the benefits such as functionality reuse and data sharing, a thr…
Cross-Platform Analysis of Indirect File Leaks in Android and iOS Applications
Daoyuan Wu, Rocky K. C. Chang
Today, much of our sensitive information is stored inside mobile applications (apps), such as the browsing histories and chatting logs. To safeguard these privacy files, modern mob…
A Sink-driven Approach to Detecting Exposed Component Vulnerabilities in Android Apps
Daoyuan Wu, Xiapu Luo, Rocky K. C. Chang
Android apps could expose their components for cooperating with other apps. This convenience, however, makes apps susceptible to the exposed component vulnerability (ECV), in which…
Analyzing Android Browser Apps for file:// Vulnerabilities
Daoyuan Wu, Rocky K. C. Chang
Securing browsers in mobile devices is very challenging, because these browser apps usually provide browsing services to other apps in the same device. A malicious app installed in…