Skip to menu Skip to content Skip to footer

2021

Conference Publication

MoScan: A model-based vulnerability scanner for web single sign-on services

Wei, Hanlin, Hassanshahi, Behnaz, Bai, Guangdong, Krishnan, Padmanabhan and Vorobyov, Kostyantyn (2021). MoScan: A model-based vulnerability scanner for web single sign-on services. 30th ACM SIGSOFT International Symposium on Software Testing and Analysis ISSTA 2021, Online, 11 - 17 July 2021. New York, NY United States: Association for Computing Machinery. doi: 10.1145/3460319.3469081

MoScan: A model-based vulnerability scanner for web single sign-on services

2021

Conference Publication

Identifying privacy weaknesses from multi-party trigger-action integration platforms

Mahadewa, Kulani, Zhang, Yanjun, Bai, Guangdong, Bu, Lei, Zuo, Zhiqiang, Fernando, Dileepa, Liang, Zhenkai and Dong, Jin Song (2021). Identifying privacy weaknesses from multi-party trigger-action integration platforms. ISSTA '21: 30th ACM SIGSOFT International Symposium on Software Testing and Analysis, Virtual, Denmark, 11 - 17 July 2021. New York, NY, USA: Association for Computing Machinery. doi: 10.1145/3460319.3464838

Identifying privacy weaknesses from multi-party trigger-action integration platforms

2021

Conference Publication

It’s Not Just the Site, It’s the Contents: Intra-domain Fingerprinting Social Media Websites Through CDN Bursts

Wang, Kailong, Zhang, Junzhe, Bai, Guangdong, Ko, Ryan and Dong, Jin Song (2021). It’s Not Just the Site, It’s the Contents: Intra-domain Fingerprinting Social Media Websites Through CDN Bursts. WWW '21: The Web Conference 2021, Ljubljana, Slovenia, 19-23 April 2021. New York, NY United States: ACM. doi: 10.1145/3442381.3450008

It’s Not Just the Site, It’s the Contents: Intra-domain Fingerprinting Social Media Websites Through CDN Bursts

2021

Conference Publication

An analytics framework for heuristic inference attacks against industrial control systems

Choi, Taejun, Bai, Guangdong, Ko, Ryan K. L., Dong, Naipeng, Zhang, Wenlu and Wang, Shunyao (2021). An analytics framework for heuristic inference attacks against industrial control systems. 2020 IEEE 19th International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 202, Guangzhou, China, 29 December 2020-1 January 2021. Piscataway, NJ USA: Institute of Electrical and Electronics Engineers. doi: 10.1109/TrustCom50675.2020.00112

An analytics framework for heuristic inference attacks against industrial control systems

2021

Conference Publication

Understanding the impact of COVID-19 on github developers: a preliminary study

Wang, Liu, Li, Ruiqing, Zhu, Jiaxin, Bai, Guangdong, Su, Weihang and Wang, Haoyu (2021). Understanding the impact of COVID-19 on github developers: a preliminary study. 33rd International Conference on Software Engineering and Knowledge Engineering (SEKE 2021), Pittsburg, PA, United States, 1 - 10 July 2021. Skokie, IL, United States: Knowledge Systems Institute Graduate School. doi: 10.18293/SEKE2021-132

Understanding the impact of COVID-19 on github developers: a preliminary study

2021

Conference Publication

A large-scale empirical study of COVID-19 themed GitHub repositories

Wang, Liu, Li, Ruiqing, Zhu, Jiaxin, Bai, Guangdong and Wang, Haoyu (2021). A large-scale empirical study of COVID-19 themed GitHub repositories. 45th Annual International IEEE-Computer-Society Computers, Software, and Applications Conference (COMPSAC), Madrid, Spain, 12-16 July 2021. Piscataway, NJ, United States: Institute of Electrical and Electronics Engineers. doi: 10.1109/compsac51774.2021.00124

A large-scale empirical study of COVID-19 themed GitHub repositories

2021

Conference Publication

DeepAuto: a first step towards formal verification of deep learning systems

Lu, Yuteng, Sun, Weidi, Bai, Guangdong and Sun, Meng (2021). DeepAuto: a first step towards formal verification of deep learning systems. 33rd International Conference on Software Engineering and Knowledge Engineering (SEKE 2021), Pittsburg, PA, United States, 1 - 10 July 2021. Skokie, IL, United States: Knowledge Systems Institute Graduate School. doi: 10.18293/SEKE2021-090

DeepAuto: a first step towards formal verification of deep learning systems

2020

Conference Publication

Don't Fish in Troubled Waters! Characterizing Coronavirus-Themed Cryptocurrency Scams

Xia, Pengcheng, Wang, Haoyu, Luo, Xiapu, Wu, Lei, Zhou, Yajin, Bai, Guangdong, Xu, Guoai, Huang, Gang and Liu, Xuanzhe (2020). Don't Fish in Troubled Waters! Characterizing Coronavirus-Themed Cryptocurrency Scams. APWG Symposium on Electronic Crime Research (eCrime), Online, 16-19 November 2020. Piscataway, NJ United States: IEEE. doi: 10.1109/eCrime51433.2020.9493255

Don't Fish in Troubled Waters! Characterizing Coronavirus-Themed Cryptocurrency Scams

2020

Conference Publication

DEPOSafe: Demystifying the Fake Deposit Vulnerability in Ethereum Smart Contracts

Ji, Ru, He, Ningyu, Wu, Lei, Wang, Haoyu, Bai, Guangdong and Guo, Yao (2020). DEPOSafe: Demystifying the Fake Deposit Vulnerability in Ethereum Smart Contracts. 2020 25th International Conference on Engineering of Complex Computer Systems (ICECCS), Singapore, 28-31 October 2020. Piscataway, NJ United States: Institute of Electrical and Electronics Engineers. doi: 10.1109/ICECCS51672.2020.00022

DEPOSafe: Demystifying the Fake Deposit Vulnerability in Ethereum Smart Contracts

2020

Conference Publication

Foggy: a new anonymous communication architecture based on microservices

Wei, Hanlin, Bai, Guangdong and Luo, Zongwei (2020). Foggy: a new anonymous communication architecture based on microservices. 25th International Conference on Engineering of Complex Computer Systems (ICECCS), Singapore, Singapore, 28 - 31 October 2020. Piscataway, NJ, United States: Institute of Electrical and Electronics Engineers. doi: 10.1109/iceccs51672.2020.00023

Foggy: a new anonymous communication architecture based on microservices

2020

Conference Publication

PrivColl: practical privacy-preserving collaborative machine learning

Zhang, Yanjun, Bai, Guangdong, Li, Xue, Curtis, Caitlin, Chen, Chen and Ko, Ryan K. L. (2020). PrivColl: practical privacy-preserving collaborative machine learning. European Symposium on Research in Computer Security, Guildford, United Kingdom, 14-18 September 2020. Cham, Switzerland: Springer International Publishing. doi: 10.1007/978-3-030-58951-6_20

PrivColl: practical privacy-preserving collaborative machine learning

2019

Conference Publication

DaPanda: detecting aggressive push notifications in android apps

Liu, Tianming, Wang, Haoyu, Li, Li, Bai, Guangdong, Guo, Yao and Xu, Guoai (2019). DaPanda: detecting aggressive push notifications in android apps. 34th IEEE/ACM International Conference on Automated Software Engineering (ASE), San Diego, CA, United States, 10-11 November 2019. New York, United States: Institute of Electrical and Electronics Engineers . doi: 10.1109/ASE.2019.00017

DaPanda: detecting aggressive push notifications in android apps

2019

Conference Publication

LightSense: a novel side channel for zero-permission mobile user tracking

Ye, Quanqi, Zhang, Yan, Bai, Guangdong, Dong, Naipeng, Liang, Zhenkai, Dong, Jin Song and Wang, Haoyu (2019). LightSense: a novel side channel for zero-permission mobile user tracking. 22nd International Conference, ISC, New York, NY, United States, 16-18 September 2019. Cham, Switzerland: Springer. doi: 10.1007/978-3-030-30215-3_15

LightSense: a novel side channel for zero-permission mobile user tracking

2019

Conference Publication

Analyzing use of high privileges on android: an empirical case study of screenshot and screen recording applications

Meng, Mark H., Bai, Guangdong, Liu, Joseph K., Luo, Xiapu and Wang, Yu (2019). Analyzing use of high privileges on android: an empirical case study of screenshot and screen recording applications. 14th International Conference, Inscrypt 2018, Fuzhou, China, 14-17 December 2018. Cham, Switzerland: Springer Nature Switzerland. doi: 10.1007/978-3-030-14234-6_19

Analyzing use of high privileges on android: an empirical case study of screenshot and screen recording applications

2018

Conference Publication

Break the dead end of dynamic slicing: localizing data and control omission bug

Lin, Yun, Sun, Jun, Tran, Lyly, Bai, Guangdong, Wang, Haijun and Dong, Jinsong (2018). Break the dead end of dynamic slicing: localizing data and control omission bug. 33rd IEEE/ACM International Conference on Automated Software Engineering (ASE), Montpellier, France, 3-7 September 2018. New York, NY USA: Institute of Electrical and Electronics Engineers. doi: 10.1145/3238147.3238163

Break the dead end of dynamic slicing: localizing data and control omission bug

2018

Conference Publication

A Framework for Formal Analysis of Privacy on SSO Protocols

Wang, Kailong, Bai, Guangdong, Dong, Naipeng and Dong, Jin Song (2018). A Framework for Formal Analysis of Privacy on SSO Protocols. 13th EAI International Conference on Security and Privacy in Communication Networks (SecureComm), Niagara Falls Canada, 22-25 October 2017. Cham, Switzerland: Springer. doi: 10.1007/978-3-319-78813-5_41

A Framework for Formal Analysis of Privacy on SSO Protocols

2018

Conference Publication

Formal Analysis of a Proof-of-Stake Blockchain

Thin, Wai Yan Maung Maung, Dong, Naipeng, Bai, Guangdong and Dong, Jin Song (2018). Formal Analysis of a Proof-of-Stake Blockchain. 23rd International Conference on Engineering of Complex Computer Systems (ICECCS), Melbourne, VIC Australia, 12-14 December 2018. Piscataway, NJ United States: IEEE. doi: 10.1109/iceccs2018.2018.00031

Formal Analysis of a Proof-of-Stake Blockchain

2018

Conference Publication

Inferring implicit assumptions and correct usage of mobile payment protocols

Ye, Quanqi, Bai, Guangdong, Dong, Naipeng and Dong, Jin Song (2018). Inferring implicit assumptions and correct usage of mobile payment protocols. 13th EAI International Conference on Security and Privacy in Communication Networks (SecureComm), Niagara Falls, Canada, 22-25 October 2017. Heidelberg, Germany: Springer. doi: 10.1007/978-3-319-78813-5_24

Inferring implicit assumptions and correct usage of mobile payment protocols

2017

Conference Publication

Secure and efficient software-based attestation for industrial control devices with ARM processors

Chen, Binbin, Dong, Xinshu, Bai, Guangdong, Jauhar, Sumeet and Cheng, Yueqiang (2017). Secure and efficient software-based attestation for industrial control devices with ARM processors. 33rd Annual Computer Security Applications Conference (ACSAC), Orlando, FL, United States, 4-8 December, 2017. Washington, DC United States: I E E E Computer Society. doi: 10.1145/3134600.3134621

Secure and efficient software-based attestation for industrial control devices with ARM processors

2017

Conference Publication

Privilege Leakage and Information Stealing through the Android Task Mechanism

Xiao, Yinhao, Bai, Guangdong, Mao, Jian, Liang, Zhenkai and Cheng, Wei (2017). Privilege Leakage and Information Stealing through the Android Task Mechanism. 1st IEEE Symposium on Privacy-Aware Computing (PAC), Washington Dc, Aug 01-04, 2017. NEW YORK: IEEE. doi: 10.1109/PAC.2017.29

Privilege Leakage and Information Stealing through the Android Task Mechanism