180 citations · 282 across the 18 of their papers we have counts for
11 papers · 1 filter
GPTScan: Detecting Logic Vulnerabilities in Smart Contracts by Combining GPT with Program Analysis
Yuqiang Sun, Daoyuan Wu, Yue Xue +5
Smart contracts are prone to various vulnerabilities, leading to substantial financial losses over time. Current analysis tools mainly target vulnerabilities with fixed control or…
On the Usability (In)Security of In-App Browsing Interfaces in Mobile Apps
Zicheng Zhang, Daoyuan Wu, Lixiang Li +1
Due to the frequent encountering of web URLs in various application scenarios (e.g., chatting and email reading), many mobile apps build their in-app browsing interfaces (IABIs) to…
BlockScope: Detecting and Investigating Propagated Vulnerabilities in Forked Blockchain Projects
Xiao Yi, Yuzhou Fang, Daoyuan Wu +1
Due to the open-source nature of the blockchain ecosystem, it is common for new blockchains to fork or partially reuse the code of classic blockchains. For example, the popular Dog…
An Empirical Study of Blockchain System Vulnerabilities: Modules, Types, and Patterns
Xiao Yi, Daoyuan Wu, Lingxiao Jiang +3
Blockchain, as a distributed ledger technology, becomes increasingly popular, especially for enabling valuable cryptocurrencies and smart contracts. However, the blockchain softwar…
AGChain: A Blockchain-based Gateway for Trustworthy App Delegation from Mobile App Markets
Mengjie Chen, Xiao Yi, Daoyuan Wu +3
The popularity of smartphones has led to the growth of mobile app markets, creating a need for enhanced transparency, global access, and secure downloading. This paper introduces A…
When Program Analysis Meets Bytecode Search: Targeted and Efficient Inter-procedural Analysis of Modern Android Apps in BackDroid
Daoyuan Wu, Debin Gao, Robert H. Deng +1
Widely-used Android static program analysis tools, e.g., Amandroid and FlowDroid, perform the whole-app inter-procedural analysis that is comprehensive but fundamentally difficult…
SCLib: A Practical and Lightweight Defense against Component Hijacking in Android Applications
Daoyuan Wu, Yao Cheng, Debin Gao +2
Cross-app collaboration via inter-component communication is a fundamental mechanism on Android. Although it brings the benefits such as functionality reuse and data sharing, a thr…
SecComp: Towards Practically Defending Against Component Hijacking in Android Applications
Daoyuan Wu, Debin Gao, Yingjiu Li +1
Cross-app collaboration via inter-component communication is a fundamental mechanism on Android. Although it brings the benefits such as functionality reuse and data sharing, a thr…
Cross-Platform Analysis of Indirect File Leaks in Android and iOS Applications
Daoyuan Wu, Rocky K. C. Chang
Today, much of our sensitive information is stored inside mobile applications (apps), such as the browsing histories and chatting logs. To safeguard these privacy files, modern mob…
A Sink-driven Approach to Detecting Exposed Component Vulnerabilities in Android Apps
Daoyuan Wu, Xiapu Luo, Rocky K. C. Chang
Android apps could expose their components for cooperating with other apps. This convenience, however, makes apps susceptible to the exposed component vulnerability (ECV), in which…
Analyzing Android Browser Apps for file:// Vulnerabilities
Daoyuan Wu, Rocky K. C. Chang
Securing browsers in mobile devices is very challenging, because these browser apps usually provide browsing services to other apps in the same device. A malicious app installed in…