310 citations · 449 across the 9 of their papers we have counts for
10 papers
Don't Leak Your Keys: Understanding, Measuring, and Exploiting the AppSecret Leaks in Mini-Programs
Yue Zhang, Yuqing Yang, Zhiqiang Lin
Mobile mini-programs in WeChat have gained significant popularity since their debut in 2017, reaching a scale similar to that of Android apps in the Play Store. Like Google, Tencen…
Uncovering and Exploiting Hidden APIs in Mobile Super Apps
Chao Wang, Yue Zhang, Zhiqiang Lin
Mobile applications, particularly those from social media platforms such as WeChat and TikTok, are evolving into "super apps" that offer a wide range of services such as instant me…
SoK: Decoding the Super App Enigma: The Security Mechanisms, Threats, and Trade-offs in OS-alike Apps
Yuqing Yang, Chao Wang, Yue Zhang +1
The super app paradigm, exemplified by platforms such as WeChat and AliPay, has revolutionized the mobile app landscape by enabling third-party developers to deploy add-ons within…
CROSSLINE: Breaking "Security-by-Crash" based Memory Isolation in AMD SEV
Mengyuan Li, Yinqian Zhang, Zhiqiang Lin
AMD's Secure Encrypted Virtualization (SEV) is an emerging security feature on AMD processors that allows virtual machines to run on encrypted memory and perform confidential compu…
Analyzing Control Flow Integrity with LLVM-CFI
Paul Muntean, Matthias Neumayer, Zhiqiang Lin +3
Control-flow hijacking attacks are used to perform malicious com-putations. Current solutions for assessing the attack surface afteracontrol flow integrity(CFI) policy was applied…
On the (In)security of Bluetooth Low Energy One-Way Secure Connections Only Mode
Yue Zhang, Jian Weng, Rajib Dey +3
To defeat security threats such as man-in-the-middle (MITM) attacks, Bluetooth Low Energy (BLE) 4.2 and 5.x introduce the Secure Connections Only mode, under which a BLE device acc…
Injected and Delivered: Fabricating Implicit Control over Actuation Systems by Spoofing Inertial Sensors
Yazhou Tu, Zhiqiang Lin, Insup Lee +1
Inertial sensors provide crucial feedback for control systems to determine motional status and make timely, automated decisions. Prior efforts tried to control the output of inerti…
SgxPectre Attacks: Stealing Intel Secrets from SGX Enclaves via Speculative Execution
Guoxing Chen, Sanchuan Chen, Yuan Xiao +3
This paper presents SgxPectre Attacks that exploit the recently disclosed CPU bugs to subvert the confidentiality and integrity of SGX enclaves. Particularly, we show that when bra…
FreeGuard: A Faster Secure Heap Allocator
Sam Silvestro, Hongyu Liu, Corey Crosser +2
In spite of years of improvements to software security, heap-related attacks still remain a severe threat. One reason is that many existing memory allocators fall short in a variet…
Energy Attacks on Mobile Devices
Ashish Kundu, Zhiqiang Lin, Joshua Hammond
All mobile devices are energy-constrained. They use batteries that allows using the device for a limited amount of time. In general, energy attacks on mobile devices are denial of…