Haixin Duan
Publication record assembled from the DBLP archive of ranked conferences.
Papers indexed
84
Venues
18
Active years
2019–2026
Best venue rank
A*
Where they publish
Papers
84 indexed papers, newest first.
| Year | Venue | Title | Authors |
|---|---|---|---|
| 2026 | NDSS | Identifying Logical Vulnerabilities in QUIC Implementations. | Kaihua Wang, Jianjun Chen, Pinji Chen, Jianwei Zhuge, Jiaju Bai, Haixin Duan |
| 2026 | NDSS | SIPConfusion: Exploiting SIP Semantic Ambiguities for Caller ID and SMS Spoofing. | Qi Wang, Jianjun Chen, Jingcheng Yang, Jiahe Zhang, Yaru Yang, Haixin Duan |
| 2026 | NDSS | Token Time Bomb: Evaluating JWT Implementations for Vulnerability Discovery. | Jingcheng Yang, Enze Wang, Jianjun Chen, Qi Wang, Yuheng Zhang, Haixin Duan, Wei Xie, Baosheng Wang |
| 2026 | NDSS | Small Cell, Big Risk: A Security Assessment of 4G LTE Femtocells in the Wild. | Yaru Yang, Yiming Zhang, Tao Wan, Haixin Duan, Deliang Chang, Yishen Li, Shujun Tang |
| 2026 | NDSS | Understanding the Status and Strategies of the Code Signing Abuse Ecosystem. | Hanqing Zhao, Yiming Zhang, Lingyun Ying, Mingming Zhang, Baojun Liu, Haixin Duan, Zi-Quan You, Shuhao Zhang |
| 2026 | WWW | Characterizing Iran's Phased National Internet Shutdown in 2025: A Progressive and Distributed Action. | Shibo Cui, Mingxuan Liu, Baojun Liu, Haixin Duan, Ruixuan Li, Chaoyi Lu, Jin Zhang, Zhicheng Wang, Jinghua Bai |
| 2026 | SP | LLMThief: Evaluating Configuration Leaking Risks in Commercial LLM App Stores. | Pinji Chen, Jinlong Jiang, Jianjun Chen, Feiran Qin, Minghao Zhang, Jiahe Zhang, Haixin Duan, Kaiwen Shen, Hui Jiang |
| 2025 | CCS | RebirthDay Attack: Reviving DNS Cache Poisoning with the Birthday Paradox. | Xiang Li, Mingming Zhang, Zuyao Xu, Fasheng Miao, Yuqi Qiu, Baojun Liu, Jia Zhang, Xiaofeng Zheng, Haixin Duan, Zheli Liu, Yunhai Zhang, Dunqiu Fan |
| 2025 | CCS | Exploring and Analyzing Cross Layer DoS Attack Against UDP-based Services on Linux. | Dashuai Wu, Yunyi Zhang, Baojun Liu, Xiang Li, Eihal Alowaisheq, Haixin Duan |
| 2025 | DSN | Decoding DNS Centralization: Measuring and Identifying NS Domains Across Hosting Providers. | Qihang Peng, Mingming Zhang, Deliang Chang, Jia Zhang, Baojun Liu, Haixin Duan |
| 2025 | ESORICS | Email Cloaking: Deceiving Users and Spam Email Detectors with Invisible HTML Settings. | Bingyang Guo, Mingxuan Liu, Yihui Ma, Ruixuan Li, Fan Shi, Min Zhang, Baojun Liu, Chengxi Xu, Haixin Duan, Geng Hong, Min Yang, Qingfeng Pan |
| 2025 | IMC | Understanding and Characterizing Intermediate Paths of Email Delivery: The Hidden Dependencies. | Ruixuan Li, Chaoyi Lu, Baojun Liu, Yanzhong Lin, Haixin Duan, Qingfeng Pan, Jun Shao |
| 2025 | IMC | Dive into the Cloud: Unveiling the (Ab)Usage of Serverless Cloud Function in the Wild. | Yijing Liu, Mingxuan Liu, Yiming Zhang, Baojun Liu, Jia Zhang, Geng Hong, Haixin Duan, Min Yang |
| 2025 | IMC | Chaos in the Chain: Evaluate Deployment and Construction Compliance of Web PKI Certificate Chain. | Jia Yao, Yiming Zhang, Baojun Liu, Zhan Liu, Mingming Zhang, Haixin Duan |
| 2025 | IMC | Analyzing Compliance and Complications of Integrating Internationalized X.509 Certificates. | Mingming Zhang, Jinfeng Guo, Yiming Zhang, Shenglin Zhang, Baojun Liu, Hanqing Zhao, Xiang Li, Haixin Duan |
| 2025 | ICSE | Exposing the Hidden Layer: Software Repositories in the Service of Seo Manipulation. | Mengying Wu, Geng Hong, Wuyuao Mai, Xinyi Wu, Lei Zhang, Yingyuan Pu, Huajun Chai, Lingyun Ying, Haixin Duan, Min Yang |
| 2025 | NDSS | HADES Attack: Understanding and Evaluating Manipulation Risks of Email Blocklists. | Ruixuan Li, Chaoyi Lu, Baojun Liu, Yunyi Zhang, Geng Hong, Haixin Duan, Yanzhong Lin, Qingfeng Pan, Min Yang, Jun Shao |
| 2025 | NDSS | Cross-Origin Web Attacks via HTTP/2 Server Push and Signed HTTP Exchange. | Pinji Chen, Jianjun Chen, Mingming Zhang, Qi Wang, Yiming Zhang, Mingwei Xu, Haixin Duan |
| 2025 | NDSS | Automatic Insecurity: Exploring Email Auto-configuration in the Wild. | Shushang Wen, Yiming Zhang, Yuxiang Shen, Bingyu Li, Haixin Duan, Jingqiang Lin |
| 2025 | NDSS | Revealing the Black Box of Device Search Engine: Scanning Assets, Strategies, and Ethical Consideration. | Mengying Wu, Geng Hong, Jinsong Chen, Qi Liu, Shujun Tang, Youhao Li, Baojun Liu, Haixin Duan, Min Yang |
| 2025 | WWW | You Can't Eat Your Cake and Have It Too: The Performance Degradation of LLMs with Jailbreak Defense. | Wuyuao Mai, Geng Hong, Pei Chen, Xudong Pan, Baojun Liu, Yuan Zhang, Haixin Duan, Min Yang |
| 2025 | WWW | Dr. Docker: A Large-Scale Security Measurement of Docker Image Ecosystem. | Hequan Shi, Lingyun Ying, Libo Chen, Haixin Duan, Ming Liu, Zhi Xue |
| 2025 | TrustCom | Detection and Mitigation of Unknown Threats in IPv6 Networks via Layered Data Adaptation. | Youjun Huang, Xiang Li, Jia Zhang, Haixin Duan |
| 2025 | SP | Invade the Walled Garden: Evaluating GTP Security in Cellular Networks. | Yiming Zhang, Tao Wan, Yaru Yang, Haixin Duan, Yichen Wang, Jianjun Chen, Zixiang Wei, Xiang Li |
| 2025 | SP | Hey, Your Secrets Leaked! Detecting and Characterizing Secret Leakage in the Wild. | Jiawei Zhou, Zidong Zhang, Lingyun Ying, Huajun Chai, Jiuxin Cao, Haixin Duan |
| 2025 | SecureComm | From Dark Network to Honeypot: Analysis and Traceability of Multi-prefix IPv6 Network Attacks. | Youjun Huang, Xiang Li, Fasheng Miao, Yanyan Ding, Haixin Duan, Jia Zhang |
| 2024 | ACSAC | Dissecting Open Edge Computing Platforms: Ecosystem, Usage, and Security Risks. | Yu Bi, Mingshuo Yang, Yong Fang, Xianghang Mi, Shanqing Guo, Shujun Tang, Haixin Duan |
| 2024 | CCS | Internet's Invisible Enemy: Detecting and Measuring Web Cache Poisoning in the Wild. | Yuejia Liang, Jianjun Chen, Run Guo, Kaiwen Shen, Hui Jiang, Man Hou, Yue Yu, Haixin Duan |
| 2024 | CCS | Toward Understanding the Security of Plugins in Continuous Integration Services. | Xiaofan Li, Yacong Gu, Chu Qiao, Zhenkai Zhang, Daiping Liu, Lingyun Ying, Haixin Duan, Xing Gao |
| 2024 | CCS | PowerPeeler: A Precise and General Dynamic Deobfuscation Method for PowerShell Scripts. | Ruijie Li, Chenyang Zhang, Huajun Chai, Lingyun Ying, Haixin Duan, Jun Tao |
| 2024 | CCS | Inbox Invasion: Exploiting MIME Ambiguities to Evade Email Attachment Detectors. | Jiahe Zhang, Jianjun Chen, Qi Wang, Hangyu Zhang, Chuhan Wang, Jianwei Zhuge, Haixin Duan |
| 2024 | CCS | MiniCAT: Understanding and Detecting Cross-Page Request Forgery Vulnerabilities in Mini-Programs. | Zidong Zhang, Qinsheng Hou, Lingyun Ying, Wenrui Diao, Yacong Gu, Rui Li, Shanqing Guo, Haixin Duan |
| 2024 | DSN | ChatScam: Unveiling the Rising Impact of ChatGPT on Domain Name Abuse. | Mingxuan Liu, Zhenglong Jin, Jiahai Yang, Baoiun Liu, Haixin Duan, Ying Liu, Ximeng Liu, Shujun Tang |
| 2024 | IMC | Bounce in the Wild: A Deep Dive into Email Delivery Failures from a Large Email Service Provider. | Ruixuan Li, Shaodong Xiao, Baojun Liu, Yanzhong Lin, Haixin Duan, Qingfeng Pan, Jianjun Chen, Jia Zhang, Ximeng Liu, Xiuqi Lu, Jun Shao |
| 2024 | IMC | Yesterday Once More: Global Measurement of Internet Traffic Shadowing Behaviors. | Yunpeng Xing, Chaoyi Lu, Baojun Liu, Haixin Duan, Junzhe Sun, Zhou Li |
| 2024 | NDSS | Understanding the Implementation and Security Implications of Protective DNS Services. | Mingxuan Liu, Yiming Zhang, Xiang Li, Chaoyi Lu, Baojun Liu, Haixin Duan, Xiaofeng Zheng |
| 2024 | NDSS | BreakSPF: How Shared Infrastructures Magnify SPF Vulnerabilities Across the Internet. | Chuhan Wang, Yasuhiro Kuranaga, Yihang Wang, Mingming Zhang, Linkai Zheng, Xiang Li, Jianjun Chen, Haixin Duan, Yanzhong Lin, Qingfeng Pan |
| 2024 | NDSS | ReqsMiner: Automated Discovery of CDN Forwarding Request Inconsistencies and DoS Attacks with Grammar-based Fuzzing. | Linkai Zheng, Xiang Li, Chuhan Wang, Run Guo, Haixin Duan, Jianjun Chen, Chao Zhang, Kaiwen Shen |
| 2024 | RAID | CrypTody: Cryptographic Misuse Analysis of IoT Firmware via Data-flow Reasoning. | Jianing Wang, Shanqing Guo, Wenrui Diao, Yue Liu, Haixin Duan, Yichen Liu, Zhenkai Liang |
| 2024 | WWW | A Worldwide View on the Reachability of Encrypted DNS Services. | Ruixuan Li, Baojun Liu, Chaoyi Lu, Haixin Duan, Jun Shao |
| 2024 | WWW | From Promises to Practice: Evaluating the Private Browsing Modes of Android Browser Apps. | Xiaoyin Liu, Wenzhi Li, Qinsheng Hou, Shishuai Yang, Lingyun Ying, Wenrui Diao, Yanan Li, Shanqing Guo, Haixin Duan |
| 2024 | SP | More Haste, Less Speed: Cache Related Security Threats in Continuous Integration Services. | Yacong Gu, Lingyun Ying, Huajun Chai, Yingyuan Pu, Haixin Duan, Xing Gao |
| 2024 | SP | DNSBomb: A New Practical-and-Powerful Pulsing DoS Attack Exploiting DNS Queries-and-Responses. | Xiang Li, Dashuai Wu, Haixin Duan, Qi Li |
| 2024 | SP | TuDoor Attack: Systematically Exploring and Exploiting Logic Vulnerabilities in DNS Response Pre-processing with Malformed Packets. | Xiang Li, Wei Xu, Baojun Liu, Mingming Zhang, Zhou Li, Jia Zhang, Deliang Chang, Xiaofeng Zheng, Chuhan Wang, Jianjun Chen, Haixin Duan, Qi Li |
| 2024 | SP | Break the Wall from Bottom: Automated Discovery of Protocol-Level Evasion Vulnerabilities in Web Application Firewalls. | Qi Wang, Jianjun Chen, Zheyu Jiang, Run Guo, Ximeng Liu, Chao Zhang, Haixin Duan |
| 2024 | SP | Where URLs Become Weapons: Automated Discovery of SSRF Vulnerabilities in Web Applications. | Enze Wang, Jianjun Chen, Wei Xie, Chuhan Wang, Yifei Gao, Zhenhua Wang, Haixin Duan, Yang Liu, Baosheng Wang |
| 2023 | CCS | Stolen Risks of Models with Security Properties. | Yue Qin, Zhuoqun Fu, Chuyun Deng, Xiaojing Liao, Jia Zhang, Haixin Duan |
| 2023 | CCS | TsuKing: Coordinating DNS Resolvers and Queries into Potent DoS Amplifiers. | Wei Xu, Xiang Li, Chaoyi Lu, Baojun Liu, Haixin Duan, Jia Zhang, Jianjun Chen, Tao Wan |
| 2023 | CCS | Under the Dark: A Systematical Study of Stealthy Mining Pools (Ab)use in the Wild. | Zhenrui Zhang, Geng Hong, Xiang Li, Zhuoqun Fu, Jia Zhang, Mingxuan Liu, Chuhan Wang, Jianjun Chen, Baojun Liu, Haixin Duan, Chao Zhang, Min Yang |
| 2023 | CCS | Silence is not Golden: Disrupting the Load Balancing of Authoritative DNS Servers. | Fenglu Zhang, Baojun Liu, Eihal Alowaisheq, Jianjun Chen, Chaoyi Lu, Linjian Song, Yong Ma, Ying Liu, Haixin Duan, Min Yang |
| 2023 | IMC | Wolf in Sheep's Clothing: Evaluating Security Risks of the Undelegated Record on DNS Hosting Services. | Fenglu Zhang, Yunyi Zhang, Baojun Liu, Eihal Alowaisheq, Lingyun Ying, Xiang Li, Zaifeng Zhang, Ying Liu, Haixin Duan, Min Zhang |
| 2023 | NDSS | A Security Study about Electron Applications and a Programming Methodology to Tame DOM Functionalities. | Zihao Jin, Shuo Chen, Yang Chen, Haixin Duan, Jianjun Chen, Jianping Wu |
| 2023 | NDSS | Ghost Domain Reloaded: Vulnerable Links in Domain Name Delegation and Revocation. | Xiang Li, Baojun Liu, Xuesong Bai, Mingming Zhang, Qifan Zhang, Zhou Li, Haixin Duan, Qi Li |
| 2023 | SP | Continuous Intrusion: Characterizing the Security of Continuous Integration Services. | Yacong Gu, Lingyun Ying, Huajun Chai, Chu Qiao, Haixin Duan, Xing Gao |
| 2023 | SP | Investigating Package Related Security Threats in Software Registries. | Yacong Gu, Lingyun Ying, Yingyuan Pu, Xiao Hu, Huajun Chai, Ruimin Wang, Xing Gao, Haixin Duan |
| 2023 | SIGMETRICS | Detecting and Measuring Security Risks of Hosting-Based Dangling Domains. | Mingming Zhang, Xiang Li, Baojun Liu, Jianyu Lu, Yiming Zhang, Jianjun Chen, Haixin Duan, Shuang Hao, Xiaofeng Zheng |
| 2022 | CCS | SFuzz: Slice-based Fuzzing for Real-Time Operating Systems. | Libo Chen, Quanpu Cai, Zhenbang Ma, Yanhao Wang, Hong Hu, Minghang Shen, Yue Liu, Shanqing Guo, Haixin Duan, Kaida Jiang, Zhi Xue |
| 2022 | CCS | An Extensive Study of Residential Proxies in China. | Mingshuo Yang, Yunnan Yu, Xianghang Mi, Shujun Tang, Shanqing Guo, Yilin Li, Xiaofeng Zheng, Haixin Duan |
| 2022 | DSN | Invoke-Deobfuscation: AST-Based and Semantics-Preserving Deobfuscation for PowerShell Scripts. | Huajun Chai, Lingyun Ying, Haixin Duan, Daren Zha |
| 2022 | DSN | HDiff: A Semi-automatic Framework for Discovering Semantic Gap Attack in HTTP Implementations. | Kaiwen Shen, Jianyu Lu, Yaru Yang, Jianjun Chen, Mingming Zhang, Haixin Duan, Jia Zhang, Xiaofeng Zheng |
| 2022 | ESORICS | Exploring the Characteristics and Security Risks of Emerging Emoji Domain Names. | Mingxuan Liu, Yiming Zhang, Baojun Liu, Haixin Duan |
| 2022 | ICSE | Large-scale Security Measurements on the Android Firmware Ecosystem. | Qinsheng Hou, Wenrui Diao, Yanhao Wang, Xiaofeng Liu, Song Liu, Lingyun Ying, Shanqing Guo, Yuanzhi Li, Meining Nie, Haixin Duan |
| 2022 | NDSS | PMTUD is not Panacea: Revisiting IP Fragmentation Attacks against TCP. | Xuewei Feng, Qi Li, Kun Sun, Ke Xu, Baojun Liu, Xiaofeng Zheng, Qiushi Yang, Haixin Duan, Zhiyun Qian |
| 2022 | PAM | Measuring the Practical Effect of DNS Root Server Instances: A China-Wide Case Study. | Fenglu Zhang, Chaoyi Lu, Baojun Liu, Haixin Duan, Ying Liu |
| 2022 | RAID | Encrypted Malware Traffic Detection via Graph-based Network Analysis. | Zhuoqun Fu, Mingxuan Liu, Yue Qin, Jia Zhang, Yuan Zou, Qilei Yin, Qi Li, Haixin Duan |
| 2022 | SP | Exploit the Last Straw That Breaks Android Systems. | Lei Zhang, Keke Lian, Haoyu Xiao, Zhibo Zhang, Peng Liu, Yuan Zhang, Min Yang, Haixin Duan |
| 2022 | SP | Analyzing Ground-Truth Data of Mobile Gambling Scams. | Geng Hong, Zhemin Yang, Sen Yang, Xiaojing Liao, Xiaolin Du, Min Yang, Haixin Duan |
| 2022 | SP | Timing-Based Browsing Privacy Vulnerabilities Via Site Isolation. | Zihao Jin, Ziqiao Kong, Shuo Chen, Haixin Duan |
| 2021 | ACSAC | Detecting and Characterizing SMS Spearphishing Attacks. | Mingxuan Liu, Yiming Zhang, Baojun Liu, Zhou Li, Haixin Duan, Donghong Sun |
| 2021 | CCS | Rusted Anchors: A National Client-Side View of Hidden Root CAs in the Web PKI Ecosystem. | Yiming Zhang, Baojun Liu, Chaoyi Lu, Zhou Li, Haixin Duan, Jiachen Li, Zaifeng Zhang |
| 2021 | DSN | Fast IPv6 Network Periphery Discovery and Security Implications. | Xiang Li, Baojun Liu, Xiaofeng Zheng, Haixin Duan, Qi Li, Youjun Huang |
| 2021 | ESORICS | Mingling of Clear and Muddy Water: Understanding and Detecting Semantic Confusion in Blackhat SEO. | Hao Yang, Kun Du, Yubao Zhang, Shuai Hao, Haining Wang, Jia Zhang, Haixin Duan |
| 2021 | GLOBECOM | On Evaluating Delegated Digital Signing of Broadcasting Messages in 5G. | Hui Gao, Yiming Zhang, Tao Wan, Jia Zhang, Haixin Duan |
| 2021 | NDSS | From WHOIS to WHOWAS: A Large-Scale Measurement Study of Domain Registration Privacy under the GDPR. | Chaoyi Lu, Baojun Liu, Yiming Zhang, Zhou Li, Fenglu Zhang, Haixin Duan, Ying Liu, Joann Qiongna Chen, Jinjin Liang, Zaifeng Zhang, Shuang Hao, Min Yang |
| 2020 | ACSAC | Understanding Promotion-as-a-Service on GitHub. | Kun Du, Hao Yang, Yubao Zhang, Haixin Duan, Haining Wang, Shuang Hao, Zhou Li, Min Yang |
| 2020 | CCS | Lies in the Air: Characterizing Fake-base-station Spam Ecosystem in China. | Yiming Zhang, Baojun Liu, Chaoyi Lu, Zhou Li, Haixin Duan, Shuang Hao, Mingxuan Liu, Ying Liu, Dong Wang, Qiang Li |
| 2020 | CCS | DNS Cache Poisoning Attack Reloaded: Revolutions with Side Channels. | Keyu Man, Zhiyun Qian, Zhongjie Wang, Xiaofeng Zheng, Youjun Huang, Haixin Duan |
| 2020 | CCS | Talking with Familiar Strangers: An Empirical Study on HTTPS Context Confusion Attacks. | Mingming Zhang, Xiaofeng Zheng, Kaiwen Shen, Ziqiao Kong, Chaoyi Lu, Yu Wang, Haixin Duan, Shuang Hao, Baojun Liu, Min Yang |
| 2020 | DSN | CDN Backfired: Amplification Attacks Based on HTTP Range Requests. | Weizhong Li, Kaiwen Shen, Run Guo, Baojun Liu, Jia Zhang, Haixin Duan, Shuang Hao, Xiarun Chen, Yao Wang |
| 2020 | IJCAI | Argot: Generating Adversarial Readable Chinese Texts. | Zihan Zhang, Mingxuan Liu, Chao Zhang, Yiming Zhang, Zhou Li, Qi Li, Haixin Duan, Donghong Sun |
| 2020 | NDSS | CDN Judo: Breaking the CDN DoS Protection with Itself. | Run Guo, Weizhong Li, Baojun Liu, Shuang Hao, Jia Zhang, Haixin Duan, Kaiwen Shen, Jianjun Chen, Ying Liu |
| 2020 | SP | TextExerciser: Feedback-driven Text Input Exercising for Android Applications. | Yuyu He, Lei Zhang, Zhemin Yang, Yinzhi Cao, Keke Lian, Shuai Li, Wei Yang, Zhibo Zhang, Min Yang, Yuan Zhang, Haixin Duan |
| 2019 | ICNP | NETHCF: Enabling Line-rate and Adaptive Spoofed IP Traffic Filtering. | Guanyu Li, Menghao Zhang, Chang Liu, Xiao Kong, Ang Chen, Guofei Gu, Haixin Duan |
| 2019 | SRDS | Fuzzing IPC with Knowledge Inference. | Kun Yang, Hanqing Zhao, Chao Zhang, Jianwei Zhuge, Haixin Duan |