| 2025 | NDSS | The Skeleton Keys: A Large Scale Analysis of Credential Leakage in Mini-apps. | Yizhe Shi, Zhemin Yang, Kangwei Zhong, Guangliang Yang, Yifan Yang, Xiaohan Zhang, Min Yang |
| 2025 | SP | Detecting Taint-Style Vulnerabilities in Microservice-Structured Web Applications. | Fengyu Liu, Yuan Zhang, Tian Chen, Youkun Shi, Guangliang Yang, Zihan Lin, Min Yang, Junyao He, Qi Li |
| 2025 | SP | MOCGuard: Automatically Detecting Missing-Owner-Check Vulnerabilities in Java Web Applications. | Fengyu Liu, Youkun Shi, Yuan Zhang, Guangliang Yang, Enhao Li, Min Yang |
| 2024 | SP | Jasmine: Scale up JavaScript Static Security Analysis with Computation-based Semantic Explanation. | Feng Xiao, Zhongfu Su, Guangliang Yang, Wenke Lee |
| 2023 | CCS | NestFuzz: Enhancing Fuzzing with Comprehensive Understanding of Input Processing Logic. | Peng Deng, Zhemin Yang, Lei Zhang, Guangliang Yang, Wenzheng Hong, Yuan Zhang, Min Yang |
| 2022 | CCS | Collect Responsibly But Deliver Arbitrarily?: A Study on Cross-User Privacy Leakage in Mobile Apps. | Shuai Li, Zhemin Yang, Nan Hua, Peng Liu, Xiaohan Zhang, Guangliang Yang, Min Yang |
| 2022 | CCS | Understanding and Mitigating Remote Code Execution Vulnerabilities in Cross-platform Ecosystem. | Feng Xiao, Zheng Yang, Joey Allen, Guangliang Yang, Grant Williams, Wenke Lee |
| 2021 | RAID | The Service Worker Hiding in Your Browser: The Next Web Attack Target? | Phakpoom Chinprutthiwong, Raj Vardhan, Guangliang Yang, Yangyong Zhang, Guofei Gu |
| 2021 | WWW | SEPAL: Towards a Large-scale Analysis of SEAndroid Policy Customization. | Dongsong Yu, Guangliang Yang, Guozhu Meng, Xiaorui Gong, Xiu Zhang, Xiaobo Xiang, Xiaoyu Wang, Yue Jiang, Kai Chen, Wei Zou, Wenke Lee, Wenchang Shi |
| 2020 | ACSAC | Security Study of Service Worker Cross-Site Scripting. | Phakpoom Chinprutthiwong, Raj Vardhan, Guangliang Yang, Guofei Gu |
| 2019 | NDSS | Life after Speech Recognition: Fuzzing Semantic Misinterpretation for Voice Assistant Applications. | Yangyong Zhang, Lei Xu, Abner Mendoza, Guangliang Yang, Phakpoom Chinprutthiwong, Guofei Gu |
| 2018 | CCS | Towards Fine-grained Network Security Forensics and Diagnosis in the SDN Era. | Haopei Wang, Guangliang Yang, Phakpoom Chinprutthiwong, Lei Xu, Yangyong Zhang, Guofei Gu |
| 2018 | NDSS | Automated Generation of Event-Oriented Exploits in Android Hybrid Apps. | Guangliang Yang, Jeff Huang, Guofei Gu |
| 2018 | SP | Study and Mitigation of Origin Stripping Vulnerabilities in Hybrid-postMessage Enabled Mobile Applications. | Guangliang Yang, Jeff Huang, Guofei Gu, Abner Mendoza |
| 2017 | RAID | Precisely and Scalably Vetting JavaScript Bridge in Android Hybrid Apps. | Guangliang Yang, Abner Mendoza, Jialong Zhang, Guofei Gu |
| 2015 | SecureComm | Using Provenance Patterns to Vet Sensitive Behaviors in Android Apps. | Chao Yang, Guangliang Yang, Ashish Gehani, Vinod Yegneswaran, Dawood Tariq, Guofei Gu |
| 2014 | CCS | AUTOPROBE: Towards Automatic Active Malicious Server Probing Using Dynamic Binary Analysis. | Zhaoyan Xu, Antonio Nappa, Robert Baykov, Guangliang Yang, Juan Caballero, Guofei Gu |