160 citations · 1.2k across the 101 of their papers we have counts for
103 papers
When Agents See Differently: Exposing UI Desynchronization Threats in Mobile Agents
Heng Li, Fulin Zhao, Zhe Geng +3
Mobile agents are increasingly capable of autonomously interacting with mobile applications and performing consequential actions on behalf of users. Effective human oversight of su…
CIG-MIA: Context-Induced Information Gain Membership Inference Attacks against Retrieval-Augmented Generation
Tan Xue, Huo Chang, Wang Changhui +4
Retrieval-augmented generation (RAG) systems ground large language models on external knowledge bases, enabling access to private, domain-specific, and up-to-date knowledge without…
Are Unreachable Nodes Truly Safe? Fully Eclipsing Monero's P2P Network!
Ruisheng Shi, Jiaqi Zeng, Lina Lan +6
Eclipse attacks isolate a blockchain node by monopolizing its network connections. Existing attacks on Monero (NDSS'25), Bitcoin (USENIX'15/21, S&P'20) and Ethereum (WWW'26) implic…
EventSpec: Defining and Detecting Event-Semantic Issues in Blockchain Ecosystems
Yixuan Liu, Yuxin Dong, Ye Liu +4
In recent years, smart contracts have become the backbone of decentralized applications (DApps), and off-chain systems such as bridges, wallets, and indexers rely heavily on event…
Lightweight Detection of Electromagnetic Signal Injection Attacks on Image Sensors
Youqian Zhang, Chunxi Yang, Eugene Yujun Fu +3
Electromagnetic signal injection attacks (ESIA) pose a growing threat to image sensors, which are increasingly used in different intelligent systems. By emitting electromagnetic in…
XRFix: Exploring Performance Bug Repair of Extended Reality Applications with Large Language Models
Jingwen Wu, Hanyang Guo, Hong-Ning Dai +1
As an emerging technology, Extended Reality provides end-users with an immersive experience of interacting with virtual and physical environments. Unlike traditional software, the…
Blockchain Transaction Simulation Phishing
Xiaocan Wang, Shixuan Guan, Tong Yang +3
Cryptocurrency users have increasingly become targets of phishing and scam attacks. To mitigate these threats, leading crypto wallets (e.g., MetaMask) have introduced transaction s…
Tracing the Shadows: Automatic Tracking and Analysis of Crypto Money Laundering via Transaction Semantic Analysis
Hao Wu, Haijun Wang, Shangwang Li +4
With the rapid advancement of decentralized finance (DeFi), security incidents related to cryptocurrency have become increasingly prevalent. After such incidents, attackers typical…
A Survey of LLM-Driven Penetration Testing: Taxonomy, Co-Evolution, and Open Challenges
Zheyuan He, Jiaxun Dong, Zihao Li +6
Agents4Pentest, an emerging class of LLM-based autonomous penetration testing systems, has become a rapidly growing area in security research. Despite this growth, the field still…
Belobog: Move Language Fuzzing Framework For Real-World Smart Contracts
Ziqiao Kong, Wanxu Xia, Zhengwei Li +6
Move is a resource-oriented programming language designed for secure and verifiable smart contract development and has been widely used in managing billions of digital assets in bl…
RISKTAGGER: Evidence-Guided LLM Agent for Post-Incident Forensic Analysis of Money Laundering in Web3
Dan Lin, Yanli Ding, Weipeng Zou +5
Cryptocurrency money-laundering forensic analysis after Web3 incidents faces challenges such as fragmented evidence, expanding transaction paths, and cross-chain discontinuity. Exi…
FDI: Attack Neural Code Generation Systems through User Feedback Channel
Zhensu Sun, Xiaoning Du, Xiapu Luo +3
Neural code generation systems have recently attracted increasing attention to improve developer productivity and speed up software development. Typically, these systems maintain a…
A Simulation Framework for Electromagnetic Signal Injection Attacks on Image Sensors
Youqian Zhang, MK Michael Cheung, Chunxi Yang +6
Image sensors are fundamental to many intelligent systems, allowing visual perception and AI-driven decision-making. However, their integrity can be compromised by electromagnetic…
Understanding Impacts of Electromagnetic Signal Injection Attacks on Object Detection
Youqian Zhang, Chunxi Yang, Eugene Y. Fu +7
Object detection can localize and identify objects in images, and it is extensively employed in critical multimedia applications such as security surveillance and autonomous drivin…
Detect Llama -- Finding Vulnerabilities in Smart Contracts using Large Language Models
Peter Ince, Xiapu Luo, Jiangshan Yu +2
In this paper, we test the hypothesis that although OpenAI's GPT-4 performs well generally, we can fine-tune open-source models to outperform GPT-4 in smart contract vulnerability…
Nurgle: Exacerbating Resource Consumption in Blockchain State Storage via MPT Manipulation
Zheyuan He, Zihao Li, Ao Qiao +6
Blockchains, with intricate architectures, encompass various components, e.g., consensus network, smart contracts, decentralized applications, and auxiliary services. While offerin…
All Your Tokens are Belong to Us: Demystifying Address Verification Vulnerabilities in Solidity Smart Contracts
Tianle Sun, Ningyu He, Jiang Xiao +3
In Ethereum, the practice of verifying the validity of the passed addresses is a common practice, which is a crucial step to ensure the secure execution of smart contracts. Vulnera…
Demystifying the DAO Governance Process
Junjie Ma, Muhui Jiang, Jinan Jiang +5
Decentralized Autonomous Organization (DAO) becomes a popular governance solution for decentralized applications (dApps) to achieve decentralized governance. In the DAO, no single…
LLM-CompDroid: Repairing Configuration Compatibility Bugs in Android Apps with Pre-trained Large Language Models
Zhijie Liu, Yutian Tang, Meiyun Li +4
XML configurations are integral to the Android development framework, particularly in the realm of UI display. However, these configurations can introduce compatibility issues (bug…
An Empirical Study on Oculus Virtual Reality Applications: Security and Privacy Perspectives
Hanyang Guo, Hong-Ning Dai, Xiapu Luo +3
Although Virtual Reality (VR) has accelerated its prevalent adoption in emerging metaverse applications, it is not a fundamentally new technology. On one hand, most VR operating sy…
Are We There Yet? Unraveling the State-of-the-Art Smart Contract Fuzzers
Shuohan Wu, Zihao Li, Luyi Yan +5
Given the growing importance of smart contracts in various applications, ensuring their security and reliability is critical. Fuzzing, an effective vulnerability detection techniqu…
MalModel: Hiding Malicious Payload in Mobile Deep Learning Models with Black-box Backdoor Attack
Jiayi Hua, Kailong Wang, Meizhen Wang +3
Mobile malware has become one of the most critical security threats in the era of ubiquitous mobile computing. Despite the intensive efforts from security experts to counteract it,…
The Devil Behind the Mirror: Tracking the Campaigns of Cryptocurrency Abuses on the Dark Web
Pengcheng Xia, Zhou Yu, Kailong Wang +6
The dark web has emerged as the state-of-the-art solution for enhanced anonymity. Just like a double-edged sword, it also inadvertently becomes the safety net and breeding ground f…
SliceLocator: Locating Vulnerable Statements with Graph-based Detectors
Baijun Cheng, Kailong Wang, Cuiyun Gao +5
Vulnerability detection is a crucial component in the software development lifecycle. Existing vulnerability detectors, especially those based on deep learning (DL) models, have ac…