| 2025 | SP | Code Speaks Louder: Exploring Security and Privacy Relevant Regional Variations in Mobile Applications. | Jiawei Guo, Yu Nong, Zhiqiang Lin, Haipeng Cai |
| 2024 | CCS | A First Look at Security and Privacy Risks in the RapidAPI Ecosystem. | Song Liao, Long Cheng, Xiapu Luo, Zheng Song, Haipeng Cai, Danfeng (Daphne) Yao, Hongxin Hu |
| 2024 | ICSE | VGX: Large-Scale Sample Generation for Boosting Learning-Based Software Vulnerability Analyses. | Yu Nong, Richard Fang, Guangbei Yi, Kunsong Zhao, Xiapu Luo, Feng Chen, Haipeng Cai |
| 2024 | NDSS | Beyond the Surface: Uncovering the Unprotected Components of Android Against Overlay Attack. | Hao Zhou, Shuohan Wu, Chenxiong Qian, Xiapu Luo, Haipeng Cai, Chao Zhang |
| 2024 | WWW | Understanding GDPR Non-Compliance in Privacy Policies of Alexa Skills in European Marketplaces. | Song Liao, Mohammed Aldeen, Jingwen Yan, Long Cheng, Xiapu Luo, Haipeng Cai, Hongxin Hu |
| 2024 | SP | Towards Smart Contract Fuzzing on GPUs. | Weimin Chen, Xiapu Luo, Haipeng Cai, Haoyu Wang |
| 2023 | CCS | SkillScanner: Detecting Policy-Violating Voice Applications Through Static Analysis at the Development Phase. | Song Liao, Long Cheng, Haipeng Cai, Linke Guo, Hongxin Hu |
| 2023 | CCS | PyRTFuzz: Detecting Bugs in Python Runtimes via Two-Level Collaborative Fuzzing. | Wen Li, Haoran Yang, Xiapu Luo, Long Cheng, Haipeng Cai |
| 2023 | ICDCS | Poster: Uncovering Vulnerabilities in Wasm Smart Contracts. | Weimin Chen, Zihan Sun, Haoyu Wang, Xiapu Luo, Haipeng Cai, Lei Wu |
| 2023 | ICSE | A Control-Theoretic Approach to Auto-Tuning Dynamic Analysis for Distributed Services. | Chandan Dhal, Xiaoqin Fu, Haipeng Cai |
| 2023 | ICSE | VULGEN: Realistic Vulnerability Generation Via Pattern Mining and Deep Learning. | Yu Nong, Yuzhe Ou, Michael Pradel, Feng Chen, Haipeng Cai |
| 2023 | ICSE | Demystifying Issues, Challenges, and Solutions for Multilingual Software Development. | Haoran Yang, Weile Lian, Shaowei Wang, Haipeng Cai |
| 2022 | CCS | Uncovering Intent based Leak of Sensitive Data in Android Framework. | Hao Zhou, Xiapu Luo, Haoyu Wang, Haipeng Cai |
| 2022 | ICSE | DistFax: A Toolkit for Measuring Interprocess Communications and Quality of Distributed Systems. | Xiaoqin Fu, Boxiang Lin, Haipeng Cai |
| 2022 | ISSTA | WASAI: uncovering vulnerabilities in Wasm smart contracts. | Weimin Chen, Zihan Sun, Haoyu Wang, Xiapu Luo, Haipeng Cai, Lei Wu |
| 2022 | ISSTA | Automatically detecting API-induced compatibility issues in Android apps: a comparative analysis (replicability study). | Pei Liu, Yanjie Zhao, Haipeng Cai, Mattia Fazzini, John C. Grundy, Li Li |
| 2022 | ISSTA | NCScope: hardware-assisted analyzer for native code in Android apps. | Hao Zhou, Shuohan Wu, Xiapu Luo, Ting Wang, Yajin Zhou, Chao Zhang, Haipeng Cai |
| 2021 | ICSE | Understanding Language Selection in Multi-language Software Projects on GitHub. | Wen Li, Na Meng, Li Li, Haipeng Cai |
| 2021 | MSR | AndroCT: Ten Years of App Call Traces in Android. | Wen Li, Xiaoqin Fu, Haipeng Cai |
| 2020 | ICSE | Embracing mobile app evolution via continuous ecosystem mining and characterization. | Haipeng Cai |
| 2020 | ICSE | Scaling application-level dynamic taint analysis to enterprise-scale distributed systems. | Xiaoqin Fu, Haipeng Cai |
| 2019 | ICSE | On the deterioration of learning-based malware detectors for Android. | Xiaoqin Fu, Haipeng Cai |
| 2019 | ICSE | A look into developer intentions for app compatibility in Android. | Ziyi Zhang, Haipeng Cai |
| 2019 | ISSTA | A large-scale study of application incompatibilities in Android. | Haipeng Cai, Ziyi Zhang, Li Li, Xiaoqin Fu |
| 2018 | ICSE | Towards sustainable Android malware detection. | Haipeng Cai, John Jenkins |
| 2018 | ICSE | Automated detection and repair of incompatible uses of runtime permissions in Android apps. | Malinda Dilhara, Haipeng Cai, John Jenkins |
| 2018 | ICSE | ICC-inspect: supporting runtime inspection of Android inter-component communications. | John Jenkins, Haipeng Cai |
| 2018 | MSR | Leveraging historical versions of Android apps for efficient and precise taint analysis. | Haipeng Cai, John Jenkins |
| 2017 | ICSE | Automatically Locating Malicious Packages in Piggybacked Android Apps. | Li Li, Daoyuan Li, Tegawend F. Bissyand, Jacques Klein, Haipeng Cai, David Lo, Yves Le Traon |
| 2017 | SP | MR-Droid: A Scalable and Prioritized Analysis of Inter-App Communication Risks. | Fang Liu, Haipeng Cai, Gang Wang, Danfeng Yao, Karim O. Elish, Barbara G. Ryder |
| 2015 | QRS | Facilitating Information Management in Integrated Development Environments through Visual Interface Enhancements. | Haipeng Cai |
| 2015 | QRS | Abstracting Program Dependencies Using the Method Dependence Graph. | Haipeng Cai, Ral A. Santelices |
| 2014 | SCAM | SENSA: Sensitivity Analysis for Quantitative Change-Impact Prediction. | Haipeng Cai, Siyuan Jiang, Ral A. Santelices, Ying-Jie Zhang, Yiji Zhang |
| 2014 | SCAM | On the Accuracy of Forward Dynamic Slicing and Its Effects on Software Maintenance. | Siyuan Jiang, Ral A. Santelices, Mark Grechanik, Haipeng Cai |
| 2013 | ICSE | Quantitative program slicing: separating statements by relevance. | Ral A. Santelices, Yiji Zhang, Siyuan Jiang, Haipeng Cai, Ying-Jie Zhang |
| 2013 | PLDI | DUA-forensics: a fine-grained dependence analysis and instrumentation framework based on Soot. | Ral A. Santelices, Yiji Zhang, Haipeng Cai, Siyuan Jiang |
| 2012 | ISVC | InShape: In-Situ Shape-Based Interactive Multiple-View Exploration of Diffusion MRI Visualizations. | Haipeng Cai, Jian Chen, Alexander P. Auchus, Stephen Correia, David H. Laidlaw |