Yuan Zhang - RankMe

74 papers A* 50A 3B 1C 1Journal 16Unranked 3

Year	Rank	Type	Title / Venue / Authors
2025	A*	`conf`	Algernon: A Flag-Guided Hybrid Fuzzer for Unlocking Hidden Program Paths. ASE Peng Deng, Lei Zhang, Jingqi Long, Wenzheng Hong, Zhemin Yang, Yuan Zhang, Donglai Zhu, Min Yang
2025	J	`jnl`	ApkDiffer: Accurate and Scalable Cross-Version Diffing Analysis for Android Applications. Proc. ACM Program. Lang. Jiarun Dai, Mingyuan Luo, Yuan Zhang, Min Yang, Minghui Yang
2025	A*	`conf`	BACScan: Automatic Black-Box Detection of Broken-Access-Control Vulnerabilities in Web Applications. CCS Fengyu Liu, Yuan Zhang, Enhao Li, Wei Meng, Youkun Shi, Qianheng Wang, Chenlin Wang, Zihan Lin, Min Yang
2025	A*	`conf`	Be Aware of What You Let Pass: Demystifying URL-based Authentication Bypass Vulnerability in Java Web Applications. CCS Qiyi Zhang, Fengyu Liu, Zihan Lin, Yuan Zhang
2025	J	`jnl`	CXXCrafter: An LLM-Based Agent for Automated C/C++ Open Source Software Building. Proc. ACM Softw. Eng. Zhengmin Yu, Yuan Zhang, Ming Wen, Yinan Nie, Wenhui Zhang, Min Yang
2025	A*	`conf`	Careless Retention and Management: Understanding and Detecting Data Retention Denial-of-Service Vulnerabilities in Java Web Containers. USENIX Security Symposium Keke Lian, Lei Zhang, Haoran Zhao, Yinzhi Cao, Yongheng Liu, Fute Sun, Yuan Zhang, Min Yang
2025	A*	`conf`	ChainFuzz: Exploiting Upstream Vulnerabilities in Open-Source Supply Chains. USENIX Security Symposium Peng Deng, Lei Zhang, Yuchuan Meng, Zhemin Yang, Yuan Zhang, Min Yang
2025	A*	`conf`	DeepExploitor: LLM-Enhanced Automated Exploitation of DeepLink Attack in Hybrid Apps. ASE Zhangyue Zhang, Lei Zhang, Zhibo Zhang, Yongheng Liu, Zhemin Yang, Yuan Zhang, Min Yang
2025	A*	`conf`	Detecting Taint-Style Vulnerabilities in Microservice-Structured Web Applications. SP Fengyu Liu, Yuan Zhang, Tian Chen, Youkun Shi, Guangliang Yang, Zihan Lin, Min Yang, Junyao He, Qi Li
2025	A*	`conf`	Effective Directed Fuzzing with Hierarchical Scheduling for Web Vulnerability Detection. USENIX Security Symposium Zihan Lin, Yuan Zhang, Jiarun Dai, Xinyou Huang, Bocheng Xiang, Guangliang Yang, Letian Yuan, Lei Zhang, Tian Chen, Min Yang
2025	A*	`conf`	Exploring Static Taint Analysis in LLMs: A Dynamic Benchmarking Framework for Measurement and Enhancement. ASE Haoran Zhao, Lei Zhang, Keke Lian, Fute Sun, Bofei Chen, Yongheng Liu, Zhiyu Wu, Yuan Zhang, Min Yang
2025	J	`jnl`	Facilitating Access Control Vulnerability Detection in Modern Java Web Applications With Accurate Permission Check Identification. IEEE Trans. Inf. Forensics Secur. Youkun Shi, Fengyu Liu, Guangliang Yang, Yuan Zhang, Yinzhi Cao, Enhao Li, Xin Tan, Xiapu Luo, Min Yang, Siyi Chen
2025	J	`jnl`	Locating Security Patch Variants With Two-Dimensional Code Commit Features. IEEE Trans. Inf. Forensics Secur. Lin Wang, Yuan Zhang, Xiaoting Chen, Min Yang
2025	A*	`conf`	MOCGuard: Automatically Detecting Missing-Owner-Check Vulnerabilities in Java Web Applications. SP Fengyu Liu, Youkun Shi, Yuan Zhang, Guangliang Yang, Enhao Li, Min Yang
2025	A*	`conf`	Make Agent Defeat Agent: Automatic Detection of Taint-Style Vulnerabilities in LLM-based Agents. USENIX Security Symposium Fengyu Liu, Yuan Zhang, Jiaqi Luo, Jiarun Dai, Tian Chen, Letian Yuan, Zhengmin Yu, Youkun Shi, Ke Li, Chengyuan Zhou, Hao Chen, Min Yang
2025	A*	`conf`	Misdirection of Trust: Demystifying the Abuse of Dedicated URL Shortening Service. NDSS Zhibo Zhang, Lei Zhang, Zhangyue Zhang, Geng Hong, Yuan Zhang, Min Yang
2025	J	`jnl`	PHPJoy: A Novel Extended Graph-Based PHP Code Analysis Framework. IEEE Trans. Software Eng. Youkun Shi, Yuan Zhang, Tianhan Luo, Guangliang Yang, Shengke Ye, Chengyu Yang, Fengyu Liu, Xiapu Luo, Min Yang
2025	A*	`conf`	Pig in a Poke: Automatically Detecting and Exploiting Link Following Vulnerabilities in Windows File Operations. USENIX Security Symposium Bocheng Xiang, Yuan Zhang, Fengyu Liu, Hao Huang, Zihan Lin, Min Yang
2025	A*	`conf`	Security Debt in LLM Agent Applications: A Measurement Study of Vulnerabilities and Mitigation Trade-offs. ASE Zhuoxiang Shen, Jiarun Dai, Yuan Zhang, Min Yang
2025	J	`jnl`	Shell or Nothing: Real-World Benchmarks and Memory-Activated Agents for Automated Penetration Testing. CoRR Wuyuao Mai, Geng Hong, Qi Liu, Jinsong Chen, Jiarun Dai, Xudong Pan, Yuan Zhang, Min Yang
2025	A*	`conf`	Towards Automatic Detection and Exploitation of Java Web Application Vulnerabilities via Concolic Execution guided by Cross-thread Object Manipulation. USENIX Security Symposium Xinyou Huang, Lei Zhang, Yongheng Liu, Peng Deng, Yinzhi Cao, Yuan Zhang, Min Yang
2025	A*	`conf`	XSSky: Detecting XSS Vulnerabilities through Local Path-Persistent Fuzzing. USENIX Security Symposium Youkun Shi, Yuan Zhang, Tianhao Bai, Feng Xue, Jiarun Dai, Fengyu Liu, Lei Zhang, Xiapu Luo, Min Yang
2025	A*	`conf`	You Can't Eat Your Cake and Have It Too: The Performance Degradation of LLMs with Jailbreak Defense. WWW Wuyuao Mai, Geng Hong, Pei Chen, Xudong Pan, Baojun Liu, Yuan Zhang, Haixin Duan, Min Yang
2025	J	`jnl`	You Can't Eat Your Cake and Have It Too: The Performance Degradation of LLMs with Jailbreak Defense. CoRR Wuyuao Mai, Geng Hong, Pei Chen, Xudong Pan, Baojun Liu, Yuan Zhang, Haixin Duan, Min Yang
2024	A*	`conf`	Accurate and Efficient Recurring Vulnerability Detection for IoT Firmware. CCS Haoyu Xiao, Yuan Zhang, Minghang Shen, Chaoyang Lin, Can Zhang, Shengli Liu, Min Yang
2024	A*	`conf`	Applying Fuzz Driver Generation to Native C/C++ Libraries of OEM Android Framework: Obstacles and Solutions. ASE Shiyan Peng, Yuan Zhang, Jiarun Dai, Yue Gu, Zhuoxiang Shen, Jingcheng Liu, Lin Wang, Yong Chen, Yu Qin, Lei Ai, Xianfeng Lu, Min Yang
2024	J	`jnl`	Component Security Ten Years Later: An Empirical Study of Cross-Layer Threats in Real-World Mobile Applications. Proc. ACM Softw. Eng. Keke Lian, Lei Zhang, Guangliang Yang, Shuo Mao, Xinjie Wang, Yuan Zhang, Min Yang
2024	A*	`conf`	Efficient Detection of Java Deserialization Gadget Chains via Bottom-up Gadget Search and Dataflow-aided Payload Construction. SP Bofei Chen, Lei Zhang, Xinyou Huang, Yinzhi Cao, Keke Lian, Yuan Zhang, Min Yang
2024	—	`conf`	How Well Industry-Level Cause Bisection Works in Real-World: A Study on Linux Kernel. SIGSOFT FSE Companion Kangzheng Gu, Yuan Zhang, Jiajun Cao, Xin Tan, Min Yang
2024	A*	`conf`	Interface Illusions: Uncovering the Rise of Visual Scams in Cryptocurrency Wallets. WWW Guoyi Ye, Geng Hong, Yuan Zhang, Min Yang
2024	A	`conf`	New PHP Language Features Make Your Static Code Analysis Tools Miss Vulnerabilities. ICSME Lin Wang, Yuan Zhang, Xin Tan, Shengke Ye, Min Yang
2024	A*	`conf`	RecurScan: Detecting Recurring Vulnerabilities in PHP Web Applications. WWW Youkun Shi, Yuan Zhang, Tianhao Bai, Lei Zhang, Xin Tan, Min Yang
2024	A*	`conf`	SCTrans: Constructing a Large Public Scenario Dataset for Simulation Testing of Autonomous Driving Systems. ICSE Jiarun Dai, Bufan Gao, Mingyuan Luo, Zongan Huang, Zhongrui Li, Yuan Zhang, Min Yang
2024	A*	`conf`	Samba: Detecting SSL/TLS API Misuses in IoT Binary Applications. INFOCOM Kaizheng Liu, Ming Yang, Zhen Ling, Yuan Zhang, Chongqing Lei, Lan Luo, Xinwen Fu
2024	A	`conf`	VioHawk: Detecting Traffic Violations of Autonomous Driving Systems through Criticality-Guided Simulation Testing. ISSTA Zhongrui Li, Jiarun Dai, Zongan Huang, Nianhao You, Yuan Zhang, Min Yang
2023	A*	`conf`	AEM: Facilitating Cross-Version Exploitability Assessment of Linux Kernel Vulnerabilities. SP Zheyue Jiang, Yuan Zhang, Jun Xu, Xinqian Sun, Zhuang Liu, Min Yang
2023	A*	`conf`	AEM: Facilitating Cross-Version Exploitability Assessment of Linux Kernel Vulnerabilities. SP Zheyue Jiang, Yuan Zhang, Jun Xu, Xinqian Sun, Zhuang Liu, Min Yang
2023	A*	`conf`	NestFuzz: Enhancing Fuzzing with Comprehensive Understanding of Input Processing Logic. CCS Peng Deng, Zhemin Yang, Lei Zhang, Guangliang Yang, Wenzheng Hong, Yuan Zhang, Min Yang
2023	A*	`conf`	Remote Code Execution from SSTI in the Sandbox: Automatically Detecting and Exploiting Template Escape Bugs. USENIX Security Symposium Yudi Zhao, Yuan Zhang, Min Yang
2023	J	`jnl`	Slowing Down the Aging of Learning-Based Malware Detectors With API Knowledge. IEEE Trans. Dependable Secur. Comput. Xiaohan Zhang, Mi Zhang, Yuan Zhang, Ming Zhong, Xin Zhang, Yinzhi Cao, Min Yang
2023	A*	`conf`	SyzDirect: Directed Greybox Fuzzing for Linux Kernel. CCS Xin Tan, Yuan Zhang, Jiadong Lu, Xin Xiong, Zhuang Liu, Min Yang
2023	—	`conf`	TrustedDomain Compromise Attack in App-in-app Ecosystems. SaTS@CCS Zhibo Zhang, Zhangyue Zhang, Keke Lian, Guangliang Yang, Lei Zhang, Yuan Zhang, Min Yang
2023	A*	`conf`	Understanding the (In)Security of Cross-side Face Verification Systems in Mobile Apps: A System Perspective. SP Xiaohan Zhang, Haoqi Ye, Ziqi Huang, Xiao Ye, Yinzhi Cao, Yuan Zhang, Min Yang
2022	A*	`conf`	Backporting Security Patches of Web Applications: A Prototype Design and Implementation on Injection Vulnerability Patches. USENIX Security Symposium Youkun Shi, Yuan Zhang, Tianhan Luo, Xiangyu Mao, Yinzhi Cao, Ziwen Wang, Yudi Zhao, Zongan Huang, Min Yang
2022	A*	`conf`	Exploit the Last Straw That Breaks Android Systems. SP Lei Zhang, Keke Lian, Haoyu Xiao, Zhibo Zhang, Peng Liu, Yuan Zhang, Min Yang, Haixin Duan
2022	A*	`conf`	Identity Confusion in WebView-based Mobile App-in-app Ecosystems. USENIX Security Symposium Lei Zhang, Zhibo Zhang, Ancong Liu, Yinzhi Cao, Xiaohan Zhang, Yanjun Chen, Yuan Zhang, Guangliang Yang, Min Yang
2022	A*	`conf`	Precise (Un)Affected Version Analysis for Web Vulnerabilities. ASE Youkun Shi, Yuan Zhang, Tianhan Luo, Xiangyu Mao, Min Yang
2022	J	`jnl`	Preface to Special Issue on System Software Security. Int. J. Softw. Informatics Min Yang, Chao Zhang, Fu Song, Yuan Zhang
2022	J	`jnl`	Refcount Field Identification for Linux Kernel Based on Deep Learning. Int. J. Softw. Informatics Xin Tan, Xiyu Yang, Jiajun Cao, Yuan Zhang
2022	A*	`conf`	Understanding the Practice of Security Patch Management across Multiple Branches in OSS Projects. WWW Xin Tan, Yuan Zhang, Jiajun Cao, Kun Sun, Mi Zhang, Min Yang
2021	A*	`conf`	Detecting Kernel Refcount Bugs with Two-Dimensional Consistency Checking. USENIX Security Symposium Xin Tan, Yuan Zhang, Xiyu Yang, Kangjie Lu, Min Yang
2021	A*	`conf`	Facilitating Vulnerability Assessment through PoC Migration. CCS Jiarun Dai, Yuan Zhang, Hailong Xu, Haiming Lyu, Zicheng Wu, Xinyu Xing, Min Yang
2021	A*	`conf`	Locating the Security Patches for Disclosed OSS Vulnerabilities with Vulnerability-Commit Correlation Ranking. CCS Xin Tan, Yuan Zhang, Chenyuan Mi, Jiajun Cao, Kun Sun, Yifan Lin, Min Yang
2020	A*	`conf`	An Ever-evolving Game: Evaluation of Real-world Attacks and Defenses in Ethereum Ecosystem. USENIX Security Symposium Shunfan Zhou, Zhemin Yang, Jie Xiang, Yinzhi Cao, Min Yang, Yuan Zhang
2020	A*	`conf`	BScout: Direct Whole Patch Presence Test for Java Executables. USENIX Security Symposium Jiarun Dai, Yuan Zhang, Zheyue Jiang, Yingtian Zhou, Junyan Chen, Xinyu Xing, Xiaohan Zhang, Xin Tan, Min Yang, Zhemin Yang
2020	A*	`conf`	Enhancing State-of-the-art Classifiers with API Semantics to Detect Evolved Android Malware. CCS Xiaohan Zhang, Yuan Zhang, Ming Zhong, Daizong Ding, Yinzhi Cao, Yukun Zhang, Mi Zhang, Min Yang
2020	A*	`conf`	How Android developers handle evolution-induced API compatibility issues: a large-scale study. ICSE Hao Xia, Yuan Zhang, Yingtian Zhou, Xiaoting Chen, Yang Wang, Xiangyu Zhang, Shuaishuai Cui, Geng Hong, Xiaohan Zhang, Min Yang, Zhemin Yang
2020	J	`jnl`	Hybrid malware detection approach with feedback-directed machine learning. Sci. China Inf. Sci. Zhetao Li, Wenlin Li, Fuyuan Lin, Yi Sun, Min Yang, Yuan Zhang, Zhibo Wang
2020	A*	`conf`	PDiff: Semantic-based Patch Presence Testing for Downstream Kernels. CCS Zheyue Jiang, Yuan Zhang, Jun Xu, Qi Wen, Zhenghe Wang, Xiaohan Zhang, Xinyu Xing, Min Yang, Zhemin Yang
2020	A*	`conf`	TextExerciser: Feedback-driven Text Input Exercising for Android Applications. SP Yuyu He, Lei Zhang, Zhemin Yang, Yinzhi Cao, Keke Lian, Shuai Li, Wei Yang, Zhibo Zhang, Min Yang, Yuan Zhang, Haixin Duan
2019	—	`conf`	App in the Middle: Demystify Application Virtualization in Android and its Security Threats. SIGMETRICS (Abstracts) Lei Zhang, Zhemin Yang, Yuyu He, Mingqi Li, Sen Yang, Min Yang, Yuan Zhang, Zhiyun Qian
2019	J	`jnl`	App in the Middle: Demystify Application Virtualization in Android and its Security Threats. Proc. ACM Meas. Anal. Comput. Syst. Lei Zhang, Zhemin Yang, Yuyu He, Mingqi Li, Sen Yang, Min Yang, Yuan Zhang, Zhiyun Qian
2018	A*	`conf`	An Empirical Study of Web Resource Manipulation in Real-world Mobile Applications. USENIX Security Symposium Xiaohan Zhang, Yuan Zhang, Qianqian Mo, Hao Xia, Zhemin Yang, Min Yang, Xiaofeng Wang, Long Lu, Hai-Xin Duan
2018	A	`conf`	Detecting third-party libraries in Android applications with high precision and recall. SANER Yuan Zhang, Jiarun Dai, Xiaohan Zhang, Sirong Huang, Zhemin Yang, Min Yang, Hao Chen
2018	A*	`conf`	Finding Clues for Your Secrets: Semantics-Driven, Learning-Based Privacy Discovery in Mobile Apps. NDSS Yuhong Nan, Zhemin Yang, Xiaofeng Wang, Yuan Zhang, Donglai Zhu, Min Yang
2018	A*	`conf`	How You Get Shot in the Back: A Systematical Study about Cryptojacking in the Real World. CCS Geng Hong, Zhemin Yang, Sen Yang, Lei Zhang, Yuhong Nan, Zhibo Zhang, Min Yang, Yuan Zhang, Zhiyun Qian, Hai-Xin Duan
2018	A*	`conf`	Invetter: Locating Insecure Input Validations in Android Services. CCS Lei Zhang, Zhemin Yang, Yuyu He, Zhenyu Zhang, Zhiyun Qian, Geng Hong, Yuan Zhang, Min Yang
2017	J	`jnl`	Identifying User-Input Privacy in Mobile Applications at a Large Scale. IEEE Trans. Inf. Forensics Secur. Yuhong Nan, Zhemin Yang, Min Yang, Shunfan Zhou, Yuan Zhang, Guofei Gu, Xiaofeng Wang, Limin Sun
2016	J	`jnl`	Rethinking Permission Enforcement Mechanism on Mobile Systems. IEEE Trans. Inf. Forensics Secur. Yuan Zhang, Min Yang, Guofei Gu, Hao Chen
2015	C	`conf`	FineDroid: Enforcing Permissions with System-Wide Application Execution Context. SecureComm Yuan Zhang, Min Yang, Guofei Gu, Hao Chen
2014	J	`jnl`	Permission Use Analysis for Vetting Undesirable Behaviors in Android Apps. IEEE Trans. Inf. Forensics Secur. Yuan Zhang, Min Yang, Zhemin Yang, Guofei Gu, Peng Ning, Binyu Zang
2013	A*	`conf`	AppIntent: analyzing sensitive data transmission in android for privacy leakage detection. CCS Zhemin Yang, Min Yang, Yuan Zhang, Guofei Gu, Peng Ning, Xiaoyang Sean Wang
2013	A*	`conf`	Vetting undesirable behaviors in android apps with permission use analysis. CCS Yuan Zhang, Min Yang, Bingquan Xu, Zhemin Yang, Guofei Gu, Peng Ning, Xiaoyang Sean Wang, Binyu Zang
2012	B	`conf`	Swift: a register-based JIT compiler for embedded JVMs. VEE Yuan Zhang, Min Yang, Bo Zhou, Zhemin Yang, Weihua Zhang, Binyu Zang