papers.bib

---
---

@string{aps = {American Physical Society,}}

@article{wang2026how,
  abbr={TOSEM},
  selected={false},
  bibtex_show={true},
  title={How Multi-Modal LLMs Reshape Visual Deep Learning Testing? A Comprehensive Study Through the Lens of Image Mutation},
  author={Liwen Wang and Yuanyuan Yuan and Ao Sun and Zongjie Li and Pingchuan Ma and Daoyuan Wu and Shuai Wang},
  journal={ACM Transactions on Software Engineering and Methodology (TOSEM)},
  year={2026}
}

@article{ji2026functioncall,
  abbr={ISSTA},
  selected={true},
  bibtex_show={true},
  top_se_conf={true},
  title={Function Calling as a Flexible LLM Defense Add-On: Capability and Application Exploration},
  author={Zhenlan Ji and Daoyuan Wu and Wenxuan Wang and Pingchuan Ma and Shuai Wang and Lei Ma and Juergen Rahmel},
  journal={Proceedings of the ACM on Software Engineering (ISSTA)},
  number={ISSTA},
  year={2026},
  publisher={ACM New York, NY, USA}
}

@article{wei2026hktsmartaudit,
  abbr={TIFS},
  selected={false},
  bibtex_show={true},
  llm4sec={true},
  title={HKT-SmartAudit: Distilling Lightweight Models for Smart Contract Auditing},
  author={Zhiyuan Wei and Jing Sun and Zijian Zhang and Zhe Hou and Xianhao Zhang and Meng Li and Yuqiang Sun and Daoyuan Wu and Yang Liu and Chunmiao Li and Mingchao Wan and Jin Dong},
  journal={IEEE Transactions on Information Forensics \& Security (TIFS)},
  year={2026}
}

@inproceedings{zhang2026detecting,
  abbr={FSE},
  selected={false},
  bibtex_show={true},
  top_se_conf={true},
  llm4sec={true},
  title={Detecting Code-Comment Inconsistencies in Smart Contracts by Combining LLM and Program Analysis},
  author={Jiashuo Zhang and Jiachi Chen and Ting Zhang and Yue Li and Daoyuan Wu and Yanlin Wang and Jianbo Gao and Ting Chen and Zhong Chen},
  booktitle={Proc. ACM Symposium on the Foundations of Software Engineering (FSE)},
  year={2026}
}

@article{zhang2026llmpowered,
  abbr={OOPSLA},
  selected={true},
  bibtex_show={true},
  top_se_conf={true},
  llm4sec={true},
  title={LLM-Powered Silent Bug Fuzzing in Deep Learning Libraries via Versatile and Controlled Bug Transfer},
  author={Kunpeng Zhang and Dongwei Xiao and Daoyuan Wu and Shuai Wang and Jiali Zhao and Yuanyi Lin and Tongtong Xu and Shaohua Wang},
  journal={Proceedings of the ACM on Programming Languages (OOPSLA)},
  year={2026}
}

@inproceedings{liu2026nomoretranslation,
  abbr={EuroSys},
  selected={false},
  bibtex_show={true},
  top_sys_conf={true},
  llm4sec={true},
  title={No More Translation at Runtime: LLM-Empowered Static Binary Translation},
  author={Zhibo Liu and Huaijin Wang and Wai Kin Wong and Daoyuan Wu and Shuai Wang},
  booktitle={Proc. ACM SIGOPS European Conference on Computer Systems (EuroSys)},
  year={2026}
}

@inproceedings{huang2026guidedbench,
  abbr={ICLR},
  selected={false},
  bibtex_show={true},
  top_ai_conf={true},
  title={GuidedBench: Measuring and Mitigating the Evaluation Discrepancies of In-the-wild LLM Jailbreak Methods},
  author={Ruixuan Huang and Xunguang Wang and Zongjie Li and Daoyuan Wu and Shuai Wang},
  booktitle={Proc. International Conference on Learning Representations (ICLR)},
  year={2026}
}

@inproceedings{shao2026lost,
  abbr={USENIX Security},
  selected={false},
  bibtex_show={true},
  big_four={true},
  title={Lost in Blockchain Address Misuse: Hidden Cross-Platform Risks and Their Security Impact},
  author={Zhenzhe Shao and Jiashuo Zhang and Zihao Li and Daoyuan Wu and Chong Chen and Yiming Shen and Lingfeng Bao and Yanlin Wang and Jiachi Chen},
  booktitle={Proc. USENIX Security Symposium},
  year={2026}
}

@inproceedings{huang2026revealing,
  abbr={USENIX Security},
  selected={false},
  bibtex_show={true},
  big_four={true},
  title={Revealing the Dark Side of Smart Accounts: An Empirical Study of EIP-7702 Incurred Risks in Blockchain Ecosystem},
  author={Mingyuan Huang and Han Liu and Shuo Yang and Daoyuan Wu and Shuai Wang},
  booktitle={Proc. USENIX Security Symposium},
  year={2026}
}

@inproceedings{wang2026masleak,
  abbr={USENIX Security},
  selected={false},
  bibtex_show={true},
  big_four={true},
  title={MASLeak: Investigating and Exposing Intellectual Property Leakage Vulnerabilities in Multi-Agent Systems},
  author={Liwen Wang and Wenxuan Wang and Shuai Wang and Zongjie Li and Zhenlan Ji and Zongyi Lyu and Daoyuan Wu and Shing-Chi Cheung},
  booktitle={Proc. USENIX Security Symposium},
  year={2026}
}

@inproceedings{wang2026sok,
  abbr={S\&P},
  selected={false},
  bibtex_show={true},
  big_four={true},
  title={SoK: Evaluating Jailbreak Guardrails for Large Language Models},
  author={Xunguang Wang and Zhenlan Ji and Wenxuan Wang and Zongjie Li and Daoyuan Wu and Shuai Wang},
  booktitle={Proc. IEEE Symposium on Security and Privacy (S\&P)},
  year={2026}
}

@inproceedings{sun2025learning,
  abbr={ASE},
  selected={false},
  bibtex_show={true},
  top_se_conf={true},
  title={Learning from the Past: Real-World Exploit Migration for Smart Contract PoC Generation},
  author={Sun, Kairan and Xu, Zhengzi and Li, Kaixuan and Zhang, Lyuye and Feng, Yebo and Wu, Daoyuan and Liu, Yang},
  booktitle={Proc. IEEE/ACM Automated Software Engineering (ASE)},
  year={2025}
}

@inproceedings{zhong2025detecting,
  abbr={ASE},
  selected={true},
  bibtex_show={true},
  top_se_conf={true},
  llm4sec={true},
  title={Detecting Various DeFi Price Manipulations with LLM Reasoning},
  author={Zhong, Juantao and Wu, Daoyuan and Liu, Ye and Xie, Maoyi and Liu, Yang and Li, Yi and Liu, Ning},
  booktitle={Proc. IEEE/ACM Automated Software Engineering (ASE)},
  year={2025}
}

@inproceedings{liu2025demystifying,
  abbr={ASE},
  selected={true},
  bibtex_show={true},
  top_se_conf={true},
  title={Demystifying OpenZeppelin's Own Vulnerabilities and Analyzing Their Propagation in Smart Contracts},
  author={Liu, Han and Wu, Daoyuan and Sun, Yuqiang and Wang, Shuai and Liu, Yang and Chen, Yixiang},
  booktitle={Proc. IEEE/ACM Automated Software Engineering (ASE)},
  year={2025}
}

@inproceedings{liu2025have,
  abbr={ASE},
  selected={true},
  bibtex_show={true},
  top_se_conf={true},
  title={Have We Solved Access Control Vulnerability Detection in Smart Contracts? A Benchmark Study},
  author={Liu, Han and Wu, Daoyuan and Sun, Yuqiang and Wang, Shuai and Liu, Yang},
  booktitle={Proc. IEEE/ACM Automated Software Engineering (ASE)},
  year={2025}
}

@article{zhang2025acfix,
  abbr={TSE},
  selected={true},
  bibtex_show={true},
  llm4sec={true},
  title={ACFix: Guiding LLMs with Mined Common RBAC Practices for Context-Aware Repair of Access Control Vulnerabilities in Smart Contracts},
  author={Zhang, Lyuye and Li, Kaixuan and Sun, Kairan and Wu, Daoyuan and Liu, Ye and Tian, Haoye and Liu, Yang},
  journal={IEEE Transactions on Software Engineering (TSE)},
  year={2025},
}

@article{wei2025advanced,
  abbr={TSE},
  selected={false},
  bibtex_show={true},
  llm4sec={true},
  title={Advanced Smart Contract Vulnerability Detection via LLM-Powered Multi-Agent Systems},
  author={Wei, Zhiyuan and Sun, Jing and Sun, Yuqiang and Liu, Ye and Wu, Daoyuan and Zhang, Zijian and Zhang, Xianhao and Li, Meng and Liu, Yang and Li, Chunmiao and Mingchao Wan and Jin Dong and Liehuang Zhu},
  journal={IEEE Transactions on Software Engineering (TSE)},
  year={2025}
}

@article{ge2025pretrained,
  abbr={TOSEM},
  selected={false},
  bibtex_show={true},
  llm4sec={true},
  title={Pre-trained Model-based Actionable Warning Identification: A Feasibility Study},
  author={Ge, Xiuting and Fang, Chunrong and Zhang, Quanjun and Wu, Daoyuan and Yu, Bowen and Zheng, Qirui and Guo, An and Lin, Shangwei and Zhao, Zhihong and Liu, Yang and Zhenyu Chen},
  journal={ACM Transactions on Software Engineering and Methodology (TOSEM)},
  year={2025}
}

@article{nguyen2025mando,
  abbr={TOSEM},
  selected={false},
  bibtex_show={true},
  llm4sec={true},
  title={MANDO-LLM: Heterogeneous Graph Transformers with Large Language Models for Smart Contract Vulnerability Detection},
  author={Nguyen, Nhat-Minh and Nguyen, Hoang H and Thanh, Long Le and Ahmadi, Zahra and Doan, Thanh-Nam and Wu, Daoyuan and Jiang, Lingxiao},
  journal={ACM Transactions on Software Engineering and Methodology (TOSEM)},
  year={2025}
}

@inproceedings{peng2025phantom,
  abbr={CCS},
  selected={false},
  bibtex_show={true},
  big_four={true},
  title={The Phantom Menace in Crypto-Based PET-Hardened Deep Learning Models: Invisible Configuration-Induced Attacks},
  author={Peng, Yiteng and Xiao, Dongwei and Liu, Zhibo and Ji, Zhenlan and Wu, Daoyuan and Wang, Shuai and Rahmel, Juergen},
  booktitle={Proc. ACM SIGSAC Conference on Computer and Communications Security (CCS)},
  year={2025}
}

@inproceedings{ji2025measuring,
  abbr={CCS},
  selected={true},
  bibtex_show={true},
  big_four={true},
  llm4sec={true},
  title={Measuring and Augmenting Large Language Models for Solving Capture-the-Flag Challenges},
  author={Ji, Zimo and Wu, Daoyuan and Jiang, Wenyuan and Ma, Pingchuan and Li, Zongjie and Wang, Shuai},
  booktitle={Proc. ACM SIGSAC Conference on Computer and Communications Security (CCS)},
  year={2025}
}

@inproceedings{li2025differentiation,
  abbr={CCS},
  selected={true},
  bibtex_show={true},
  big_four={true},
  title={Differentiation-Based Extraction of Proprietary Data from Fine-tuned LLMs},
  author={Li, Zongjie and Wu, Daoyuan and Wang, Shuai and Su, Zhendong},
  booktitle={Proc. ACM SIGSAC Conference on Computer and Communications Security (CCS)},
  year={2025}
}

@article{wong2025extraction,
  abbr={OOPSLA},
  selected={false},
  top_se_conf={true},
  bibtex_show={true},
  title={Extraction and Mutation at a High Level: Template-Based Fuzzing for JavaScript Engines},
  author={Wong, Wai Kin and Xiao, Dongwei and Lai, Cheuk Tung and Peng, Yiteng and Wu, Daoyuan and Wang, Shuai},
  journal={Proceedings of the ACM on Programming Languages (OOPSLA)},
  volume={9},
  number={OOPSLA2},
  pages={2898--2926},
  year={2025},
  publisher={ACM New York, NY, USA}
}

@article{li2025api,
  abbr={OOPSLA},
  selected={true},
  top_se_conf={true},
  bibtex_show={true},
  title={API-guided Dataset Synthesis to Finetune Large Code Models},
  author={Li, Zongjie and Wu, Daoyuan and Wang, Shuai and Su, Zhendong},
  journal={Proceedings of the ACM on Programming Languages (OOPSLA)},
  volume={9},
  number={OOPSLA1},
  pages={786--815},
  year={2025},
  publisher={ACM New York, NY, USA}
}

@inproceedings{wang2025selfdefend,
  abbr={USENIX Security},
  selected={true},
  bibtex_show={true},
  big_four={true},
  title={SelfDefend: LLMs Can Defend Themselves against Jailbreaking in a Practical Manner},
  author={Wang, Xunguang and Wu, Daoyuan and Ji, Zhenlan and Li, Zongjie and Ma, Pingchuan and Wang, Shuai and Li, Yingjiu and Liu, Yang and Liu, Ning and Rahmel, Juergen},
  booktitle={Proc. USENIX Security Symposium},
  year={2025}
}

@inproceedings{zhang2025lowcost,
  abbr={USENIX Security},
  selected={true},
  bibtex_show={true},
  big_four={true},
  llm4sec={true},
  title={Low-Cost and Comprehensive Non-textual Input Fuzzing with LLM-Synthesized Input Generators},
  author={Zhang, Kunpeng and Li, Zongjie and Wu, Daoyuan and Wang, Shuai and Xia, Xin},
  booktitle={Proc. USENIX Security Symposium},
  year={2025}
}

@inproceedings{yuan2025leakage,
  abbr={SACMAT},
  selected={false},
  bibtex_show={true},
  title={Leakage-Resilient Easily Deployable and Efficiently Searchable Encryption (EDESE)},
  author={Yuan, Jiaming and Li, Yingjiu and Li, Jun and Wu, Daoyuan and Ning, Jianting and Tian, Yangguang and Deng, Robert H},
  booktitle={Proc. ACM Symposium on Access Control Models and Technologies (SACMAT)},
  year={2025}
}

@article{wong2025decllm,
  abbr={ISSTA},
  selected={true},
  bibtex_show={true},
  top_se_conf={true},
  llm4sec={true},
  title={DecLLM: LLM-Augmented Recompilable Decompilation for Enabling Programmatic Use of Decompiled Code},
  author={Wong, Wai Kin and Wu, Daoyuan and Wang, Huaijin and Li, Zongjie and Liu, Zhibo and Wang, Shuai and Tang, Qiyi and Nie, Sen and Wu, Shi},
  journal={Proceedings of the ACM on Software Engineering (ISSTA)},
  volume={2},
  number={ISSTA},
  pages={1841--1864},
  year={2025},
  publisher={ACM New York, NY, USA}
}

@article{xiao2025divergence,
  abbr={PLDI},
  selected={false},
  top_se_conf={true},
  bibtex_show={true},
  title={Divergence-Aware Testing of Graphics Shader Compiler Back-Ends},
  author={Xiao, Dongwei and Wang, Shuai and Liu, Zhibo and Peng, Yiteng and Wu, Daoyuan and Su, Zhendong},
  journal={Proceedings of the ACM on Programming Languages (PLDI)},
  volume={9},
  number={PLDI},
  pages={1367--1391},
  year={2025},
  publisher={ACM New York, NY, USA}
}

@inproceedings{peng2025testing,
  abbr={ICSE},
  selected={true},
  bibtex_show={true},
  top_se_conf={true},
  title={Testing and Understanding Deviation Behaviors in FHE-hardened Machine Learning Models},
  author={Peng, Yiteng and Wu, Daoyuan and Liu, Zhibo and Xiao, Dongwei and Ji, Zhenlan and Rahmel, Juergen and Wang, Shuai},
  booktitle={Proc. IEEE/ACM Conference on Software Engineering (ICSE)},
  year={2025},
}

@inproceedings{ma2025combining,
  abbr={ICSE},
  selected={true},
  bibtex_show={true},
  top_se_conf={true},
  llm4sec={true},
  title={Combining Fine-Tuning and LLM-Based Agents for Intuitive Smart Contract Auditing with Justifications},
  author={Ma, Wei and Wu, Daoyuan and Sun, Yuqiang and Wang, Tianwen and Liu, Shangqing and Zhang, Jian and Xue, Yue and Liu, Yang},
  booktitle={Proc. IEEE/ACM Conference on Software Engineering (ICSE)},
  year={2025},
}

@inproceedings{zhong2025detecting,
  abbr={NDSS},
  selected={true},
  bibtex_show={true},
  big_four={true},
  llm4sec={true},
  award={NDSS 2025 Distinguished Paper Award (10 selected from 211 accepted papers out of 1,311 submissions)},
  award_name={Distinguished Paper Award},
  title={PropertyGPT: LLM-driven Formal Verification of Smart Contracts through Retrieval-Augmented Property Generation},
  author={Liu, Ye and Xue, Yue and Wu, Daoyuan and Sun, Yuqiang and Li, Yi and Shi, Miaolei and Liu, Yang},
  booktitle={Proc. ISOC Network and Distributed System Security Symposium (NDSS)},
  year={2025}
}

@article{chen2024agchain,
  abbr={DLT},
  selected={true},
  bibtex_show={true},
  title={AGChain: A Blockchain-based Gateway for Trustworthy App Delegation from Mobile App Markets},
  author={Chen, Mengjie and Yi, Xiao and Wu, Daoyuan and Xu, Jianliang and Li, Yingjiu and Gao, Debin},
  journal={ACM Distributed Ledger Technologies: Research and Practice (DLT)},
  year={2024}
}

@inproceedings{li2024split,
  abbr={EMNLP},
  selected={true},
  bibtex_show={true},
  title={Split and Merge: Aligning Position Biases in LLM-based Evaluators},
  author={Li, Zongjie and Wang, Chaozheng and Ma, Pingchuan and Wu, Daoyuan and Wang, Shuai and Gao, Cuiyun and Liu, Yang},
  booktitle={Proc. Conference on Empirical Methods in Natural Language Processing (EMNLP)},
  year={2024}
}

@article{ge2024machine,
  abbr={CSUR},
  selected={false},
  bibtex_show={true},
  llm4sec={true},
  title={Machine Learning for Actionable Warning Identification: A Comprehensive Survey},
  author={Ge, Xiuting and Fang, Chunrong and Li, Xuanye and Sun, Weisong and Wu, Daoyuan and Zhai, Juan and Lin, Shang-wei and Zhao, Zhihong and Liu, Yang and Chen, Zhenyu},
  journal={ACM Computing Surveys (CSUR)},
  year={2024}
}

@inproceedings{liu2024using,
  abbr={USENIX Security},
  selected={true},
  bibtex_show={true},
  big_four={true},
  title={Using My Functions Should Follow My Checks: Understanding and Detecting Insecure OpenZeppelin Code in Smart Contracts},
  author={Liu, Han and Wu, Daoyuan and Sun, Yuqiang and Wang, Haijun and Li, Kaixuan and Liu, Yang and Chen, Yixiang},
  booktitle={Proc. USENIX Security Symposium},
  year={2024}
}

@inproceedings{zhang2024mtdscout,
  abbr={EuroS\&P},
  selected={true},
  bibtex_show={true},
  title={MtdScout: Complementing the Identification of Insecure Methods in Android Apps via Source-to-Bytecode Signature Generation and Tree-based Layered Search},
  author={Zhang, Zicheng and Ma, Haoyu and Wu, Daoyuan and Gao, Debin and Yi, Xiao and Chen, Yufan and Wu, Yan and Jiang, Lingxiao},
  booktitle={Proc. IEEE European Symposium on Security and Privacy (EuroS\&P)},
  year={2024}
}

@inproceedings{sun2024gptscan,
  abbr={ICSE},
  selected={true},
  bibtex_show={true},
  top_se_conf={true},
  llm4sec={true},
  title={GPTScan: Detecting Logic Vulnerabilities in Smart Contracts by Combining GPT with Program Analysis},
  author={Sun, Yuqiang and Wu, Daoyuan and Xue, Yue and Liu, Han and Wang, Haijun and Xu, Zhengzi and Xie, Xiaofei and Liu, Yang},
  booktitle={Proc. IEEE/ACM Conference on Software Engineering (ICSE)},
  year={2024}
}

@inproceedings{li2024extracting,
  abbr={ICSE},
  selected={false},
  bibtex_show={true},
  top_se_conf={true},
  title={On Extracting Specialized Code Abilities from Large Language Models: A Feasibility Study},
  author={Li, Zongjie and Wang, Chaozheng and Ma, Pingchuan and Liu, Chaowei and Wang, Shuai and Wu, Daoyuan and Gao, Cuiyun and Liu, Yang},
  booktitle={Proc. IEEE/ACM Conference on Software Engineering (ICSE)},
  year={2024}
}

@inproceedings{fang2023beyond,
  abbr={ISSTA},
  selected={true},
  bibtex_show={true},
  top_se_conf={true},
  title={Beyond “Protected” and “Private”: An Empirical Security Analysis of Custom Function Modifiers in Smart Contracts},
  author={Fang, Yuzhou and Wu, Daoyuan and Yi, Xiao and Wang, Shuai and Chen, Yufan and Chen, Mengjie and Liu, Yang and Jiang, Lingxiao},
  booktitle={Proc. ACM International Symposium on Software Testing and Analysis (ISSTA)},
  pages={1157--1168},
  year={2023}
}

@inproceedings{yi2023blockscope,
  abbr={NDSS},
  selected={true},
  bibtex_show={true},
  big_four={true},
  title={BlockScope: Detecting and Investigating Propagated Vulnerabilities in Forked Blockchain Projects},
  author={Yi, Xiao and Fang, Yuzhou and Wu, Daoyuan and Jiang, Lingxiao},
  booktitle={Proc. ISOC Network and Distributed System Security Symposium (NDSS)},
  year={2023}
}

@inproceedings{yi2022empirical,
  abbr={FSE},
  selected={true},
  bibtex_show={true},
  top_se_conf={true},
  title={An Empirical Study of Blockchain System Vulnerabilities: Modules, Types, and Patterns},
  author={Yi, Xiao and Wu, Daoyuan and Jiang, Lingxiao and Fang, Yuzhou and Zhang, Kehuan and Zhang, Wei},
  booktitle={Proc. ACM Symposium on the Foundations of Software Engineering (FSE)},
  year={2022}
}

@inproceedings{sun2022lica,
  abbr={RAID},
  selected={false},
  bibtex_show={true},
  title={LiCA: A Fine-grained and Path-sensitive Linux Capability Analysis Framework},
  author={Sun, Menghan and Song, Zirui and Ren, Xiaoxi and Wu, Daoyuan and Zhang, Kehuan},
  booktitle={Proc. International Symposium on Research in Attacks, Intrusions and Defenses (RAID)},
  year={2022}
}

@inproceedings{zhang2021usability,
  abbr={RAID},
  selected={true},
  bibtex_show={true},
  title={On the Usability (In)Security of In-App Browsing Interfaces in Mobile Apps},
  author={Zhang, Zicheng and Wu, Daoyuan and Li, Lixiang and Gao, Debin},
  booktitle={Proc. International Symposium on Research in Attacks, Intrusions and Defenses (RAID)},
  year={2021}
}

@inproceedings{wu2021program,
  abbr={DSN},
  selected={true},
  bibtex_show={true},
  title={When Program Analysis Meets Bytecode Search: Targeted and Efficient Inter-procedural Analysis of Modern Android Apps in BackDroid},
  author={Wu, Daoyuan and Gao, Debin and Deng, Robert H and KC, Chang Rocky},
  booktitle={Proc. IEEE/IFIP International Conference on Dependable Systems and Networks (DSN)},
  year={2021}
}

@article{ma2021active,
  abbr={TDSC},
  selected={false},
  bibtex_show={true},
  title={Active Warden Attack: On the (In)Effectiveness of Android App Repackage-Proofing},
  author={Ma, Haoyu and Li, Shijia and Gao, Debin and Wu, Daoyuan and Jia, Qiaowen and Jia, Chunfu},
  journal={IEEE Transactions on Dependable and Secure Computing (TDSC)},
  year={2021}
}

@article{ma2020deep,
  abbr={TII},
  selected={false},
  bibtex_show={true},
  title={Deep-Learning-Based App Sensitive Behavior Surveillance for Android Powered Cyber-Physical Systems},
  author={Ma, Haoyu and Tian, Jianwen and Qiu, Kefan and Lo, David and Gao, Debin and Wu, Daoyuan and Jia, Chunfu and Baker, Thar},
  journal={IEEE Transactions on Industrial Informatics (TII)},
  year={2020}
}

@article{wu2021scalable,
  abbr={EMSE},
  selected={true},
  bibtex_show={true},
  title={Scalable Online Vetting of Android Apps for Measuring Declared SDK Versions and Their Consistency with API Calls},
  author={Wu, Daoyuan and Gao, Debin and Lo, David},
  journal={Springer Empirical Software Engineering (EMSE)},
  year={2021}
}

@inproceedings{he2020understanding,
  abbr={DIMVA},
  selected={true},
  bibtex_show={true},
  title={Understanding Android VoIP Security: A System-Level Vulnerability Assessment},
  author={He, En and Wu, Daoyuan and Deng, Robert H},
  booktitle={Springer International Conference on Detection of Intrusions and Malware, and Vulnerability Assessment (DIMVA)},
  year={2020}
}

@inproceedings{wu2019towards,
  abbr={AsiaCCS},
  selected={true},
  bibtex_show={true},
  title={Towards Understanding Android System Vulnerabilities: Techniques and Insights},
  author={Wu, Daoyuan and Gao, Debin and Cheng, Eric KT and Cao, Yichen and Jiang, Jintao and Deng, Robert H},
  booktitle={Proc. ACM Asia Conference on Computer and Communications Security (AsiaCCS)},
  year={2019}
}

@inproceedings{zhang2019empirical,
  abbr={IWQoS},
  selected={false},
  bibtex_show={true},
  title={An Empirical Study of Mobile Network Behavior and Application Performance in the Wild},
  author={Zhang, Shiwei and Li, Weichao and Wu, Daoyuan and Jin, Bo and Chang, Rocky KC and Gao, Debin and Wang, Yi and Mok, Ricky KP},
  booktitle={Proc. International Symposium on Quality of Service (IWQoS)},
  year={2019}
}

@inproceedings{wu2019understanding,
  abbr={NDSS},
  selected={true},
  bibtex_show={true},
  big_four={true},
  title={Understanding Open Ports in Android Applications: Discovery, Diagnosis, and Security Assessment},
  author={Wu, Daoyuan and Gao, Debin and Chang, Rocky KC and He, En and Cheng, Eric KT and Deng, Robert H},
  booktitle={Proc. ISOC Network and Distributed System Security Symposium (NDSS)},
  year={2019}
}

@inproceedings{tang2018towards,
  abbr={WiSec},
  selected={false},
  bibtex_show={true},
  title={Towards Dynamically Monitoring Android Applications on Non-rooted Devices in the Wild},
  author={Tang, Xiaoxiao and Lin, Yan and Wu, Daoyuan and Gao, Debin},
  booktitle={Proc. ACM Conference on Security \& Privacy in Wireless and Mobile Networks (WiSec)},
  year={2018}
}

@inproceedings{wu2018sclib,
  abbr={CODASPY},
  selected={true},
  bibtex_show={true},
  title={SCLib: A Practical and Lightweight Defense against Component Hijacking in Android Applications},
  author={Wu, Daoyuan and Cheng, Yao and Gao, Debin and Li, Yingjiu and Deng, Robert H},
  booktitle={Proc. ACM Conference on Data and Applications Security and Privacy (CODASPY)},
  year={2018}
}

@inproceedings{wu2017mopeye,
  abbr={USENIX ATC},
  selected={true},
  bibtex_show={true},
  title={MopEye: Opportunistic Monitoring of Per-app Mobile Network Performance},
  author={Wu, Daoyuan and Chang, Rocky KC and Li, Weichao and Cheng, Eric KT and Gao, Debin},
  booktitle={Proc. USENIX Annual Technical Conference (ATC)},
  year={2017}
}

@article{li2017toward,
  abbr={TMC},
  selected={false},
  bibtex_show={true},
  title={Toward Accurate Network Delay Measurement on Android Phones},
  author={Li, Weichao and Wu, Daoyuan and Chang, Rocky KC and Mok, Ricky KP},
  journal={IEEE Transactions on Mobile Computing (TMC)},
  year={2017}
}

@inproceedings{wu2017measuring,
  abbr={WASA},
  selected={true},
  bibtex_show={true},
  title={Measuring the Declared SDK Versions and Their Consistency with API Calls in Android Apps},
  author={Wu, Daoyuan and Liu, Ximing and Xu, Jiayun and Lo, David and Gao, Debin},
  booktitle={Proc. Springer International Conference on Wireless Algorithms, Systems, and Applications (WASA)},
  year={2017}
}

@inproceedings{li2016demystifying,
  abbr={CoNEXT},
  selected={false},
  bibtex_show={true},
  title={Demystifying and Puncturing the Inflated Delay in Smartphone-based WiFi Network Measurement},
  author={Li, Weichao and Wu, Daoyuan and Chang, Rocky KC and Mok, Ricky KP},
  booktitle={Proc. International on Conference on emerging Networking EXperiments and Technologies (CoNEXT)},
  year={2016}
}

@inproceedings{liang2015stack,
  abbr={ICISC},
  selected={false},
  bibtex_show={true},
  title={Stack Layout Randomization with Minimal Rewriting of Android Binaries},
  author={Liang, Yu and Ma, Xinjie and Wu, Daoyuan and Tang, Xiaoxiao and Gao, Debin and Peng, Guojun and Jia, Chunfu and Zhang, Huanguo},
  booktitle={Proc. Springer International Conference on Information Security and Cryptology (ICISC)},
  year={2015}
}

@inproceedings{li2015accuracy,
  abbr={INFOCOM},
  selected={false},
  bibtex_show={true},
  title={On the Accuracy of Smartphone-based Mobile Network Measurement},
  author={Li, Weichao and Mok, Ricky KP and Wu, Daoyuan and Chang, Rocky KC},
  booktitle={Proc. IEEE Conference on Computer Communications (INFOCOM)},
  year={2015}
}

@inproceedings{wu2015indirect,
  abbr={MoST},
  selected={true},
  bibtex_show={true},
  title={Indirect File Leaks in Mobile Applications},
  author={Wu, Daoyuan and Chang, Rocky KC},
  booktitle={Proc. IEEE Mobile Security Technologies (MoST), in conjunction with S\&P},
  year={2015}
}

@inproceedings{wu2014analyzing,
  abbr={ISC},
  selected={true},
  bibtex_show={true},
  title={Analyzing Android Browser Apps for file:// Vulnerabilities},
  author={Wu, Daoyuan and Chang, Rocky KC},
  booktitle={Proc. Springer Information Security Conference (ISC)},
  year={2014}
}