53 citations · 81 across the 5 of their papers we have counts for
8 papers
Don't Leak Your Keys: Understanding, Measuring, and Exploiting the AppSecret Leaks in Mini-Programs
Yue Zhang, Yuqing Yang, Zhiqiang Lin
Mobile mini-programs in WeChat have gained significant popularity since their debut in 2017, reaching a scale similar to that of Android apps in the Play Store. Like Google, Tencen…
Uncovering and Exploiting Hidden APIs in Mobile Super Apps
Chao Wang, Yue Zhang, Zhiqiang Lin
Mobile applications, particularly those from social media platforms such as WeChat and TikTok, are evolving into "super apps" that offer a wide range of services such as instant me…
SoK: Decoding the Super App Enigma: The Security Mechanisms, Threats, and Trade-offs in OS-alike Apps
Yuqing Yang, Chao Wang, Yue Zhang +1
The super app paradigm, exemplified by platforms such as WeChat and AliPay, has revolutionized the mobile app landscape by enabling third-party developers to deploy add-ons within…
Analyzing Control Flow Integrity with LLVM-CFI
Paul Muntean, Matthias Neumayer, Zhiqiang Lin +3
Control-flow hijacking attacks are used to perform malicious com-putations. Current solutions for assessing the attack surface afteracontrol flow integrity(CFI) policy was applied…
On the (In)security of Bluetooth Low Energy One-Way Secure Connections Only Mode
Yue Zhang, Jian Weng, Rajib Dey +3
To defeat security threats such as man-in-the-middle (MITM) attacks, Bluetooth Low Energy (BLE) 4.2 and 5.x introduce the Secure Connections Only mode, under which a BLE device acc…
Injected and Delivered: Fabricating Implicit Control over Actuation Systems by Spoofing Inertial Sensors
Yazhou Tu, Zhiqiang Lin, Insup Lee +1
Inertial sensors provide crucial feedback for control systems to determine motional status and make timely, automated decisions. Prior efforts tried to control the output of inerti…