| 2026 | DSN | SPDAgent: Leveraging LLM Agents for Context-Aware Binary Security Patch Detection via Pseudocode Diff Analysis. | Fengrui Yang, Zeyu Gao, Xi Xiao, Lingyun Ying, Bin Yin, Chao Zhang, Qing Li |
| 2026 | NDSS | From Noise to Signal: Precisely Identify Affected Packages of Known Vulnerabilities in npm Ecosystem. | Yingyuan Pu, Lingyun Ying, Yacong Gu |
| 2026 | NDSS | Cache Me, Catch You: Cache Related Security Threats in LLM Serving Frameworks. | XiangFan Wu, Lingyun Ying, Guoqiang Chen, Yacong Gu, Haipeng Qu |
| 2026 | NDSS | Understanding the Status and Strategies of the Code Signing Abuse Ecosystem. | Hanqing Zhao, Yiming Zhang, Lingyun Ying, Mingming Zhang, Baojun Liu, Haixin Duan, Zi-Quan You, Shuhao Zhang |
| 2026 | NDSS | From Obfuscated to Obvious: A Comprehensive JavaScript Deobfuscation Tool for Security Analysis. | Dongchao Zhou, Lingyun Ying, Huajun Chai, Dongbin Wang |
| 2025 | ICSE | Exposing the Hidden Layer: Software Repositories in the Service of Seo Manipulation. | Mengying Wu, Geng Hong, Wuyuao Mai, Xinyi Wu, Lei Zhang, Yingyuan Pu, Huajun Chai, Lingyun Ying, Haixin Duan, Min Yang |
| 2025 | IWQoS | Distilling Benign Knowledge with Fine-Grained AST Fragments for Precise Real-World Web Shell Detection. | Mingzhe Gao, Ligeng Chen, Yiling He, Yuhang Chen, Lingyun Ying, Wang Yang |
| 2025 | WWW | Dr. Docker: A Large-Scale Security Measurement of Docker Image Ecosystem. | Hequan Shi, Lingyun Ying, Libo Chen, Haixin Duan, Ming Liu, Zhi Xue |
| 2025 | SP | Hey, Your Secrets Leaked! Detecting and Characterizing Secret Leakage in the Wild. | Jiawei Zhou, Zidong Zhang, Lingyun Ying, Huajun Chai, Jiuxin Cao, Haixin Duan |
| 2024 | CCS | Toward Understanding the Security of Plugins in Continuous Integration Services. | Xiaofan Li, Yacong Gu, Chu Qiao, Zhenkai Zhang, Daiping Liu, Lingyun Ying, Haixin Duan, Xing Gao |
| 2024 | CCS | PowerPeeler: A Precise and General Dynamic Deobfuscation Method for PowerShell Scripts. | Ruijie Li, Chenyang Zhang, Huajun Chai, Lingyun Ying, Haixin Duan, Jun Tao |
| 2024 | CCS | MiniCAT: Understanding and Detecting Cross-Page Request Forgery Vulnerabilities in Mini-Programs. | Zidong Zhang, Qinsheng Hou, Lingyun Ying, Wenrui Diao, Yacong Gu, Rui Li, Shanqing Guo, Haixin Duan |
| 2024 | ICST | Enhanced Fast and Reliable Statistical Vulnerability Root Cause Analysis with Sanitizer. | Zhuo Yan, Haipeng Qu, Lingyun Ying, Ke Liu, Q. Chao |
| 2024 | WWW | From Promises to Practice: Evaluating the Private Browsing Modes of Android Browser Apps. | Xiaoyin Liu, Wenzhi Li, Qinsheng Hou, Shishuai Yang, Lingyun Ying, Wenrui Diao, Yanan Li, Shanqing Guo, Haixin Duan |
| 2024 | TrustCom | Maldet: An Automated Malicious npm Package Detector Based on Behavior Characteristics and Attack Vectors. | Yu Zhang, Haipeng Qu, Lingyun Ying, Linghui Wang |
| 2024 | SP | More Haste, Less Speed: Cache Related Security Threats in Continuous Integration Services. | Yacong Gu, Lingyun Ying, Huajun Chai, Yingyuan Pu, Haixin Duan, Xing Gao |
| 2023 | IMC | Wolf in Sheep's Clothing: Evaluating Security Risks of the Undelegated Record on DNS Hosting Services. | Fenglu Zhang, Yunyi Zhang, Baojun Liu, Eihal Alowaisheq, Lingyun Ying, Xiang Li, Zaifeng Zhang, Ying Liu, Haixin Duan, Min Zhang |
| 2023 | SP | Continuous Intrusion: Characterizing the Security of Continuous Integration Services. | Yacong Gu, Lingyun Ying, Huajun Chai, Chu Qiao, Haixin Duan, Xing Gao |
| 2023 | SP | Investigating Package Related Security Threats in Software Registries. | Yacong Gu, Lingyun Ying, Yingyuan Pu, Xiao Hu, Huajun Chai, Ruimin Wang, Xing Gao, Haixin Duan |
| 2022 | ACSAC | DitDetector: Bimodal Learning based on Deceptive Image and Text for Macro Malware Detection. | Jia Yan, Ming Wan, Xiangkun Jia, Lingyun Ying, Purui Su, Zhanyi Wang |
| 2022 | APSEC | A Composite Discover Method for Gadget Chains in Java Deserialization Vulnerability. | Zhaojia Lai, Haipeng Qu, Lingyun Ying |
| 2022 | DSN | Invoke-Deobfuscation: AST-Based and Semantics-Preserving Deobfuscation for PowerShell Scripts. | Huajun Chai, Lingyun Ying, Haixin Duan, Daren Zha |
| 2022 | ICSE | Large-scale Security Measurements on the Android Firmware Ecosystem. | Qinsheng Hou, Wenrui Diao, Yanhao Wang, Xiaofeng Liu, Song Liu, Lingyun Ying, Shanqing Guo, Yuanzhi Li, Meining Nie, Haixin Duan |
| 2022 | QRS | Understanding and Mitigating Label Bias in Malware Classification: An Empirical Study. | Jia Yan, Xiangkun Jia, Lingyun Ying, Purui Su |
| 2020 | CCS | NativeX: Native Executioner Freezes Android. | Qinsheng Hou, Yao Cheng, Lingyun Ying |
| 2017 | DSN | JGRE: An Analysis of JNI Global Reference Exhaustion Vulnerabilities in Android. | Yacong Gu, Kun Sun, Purui Su, Qi Li, Yemian Lu, Lingyun Ying, Dengguo Feng |
| 2016 | CCS | Attacks and Defence on Android Free Floating Windows. | Lingyun Ying, Yao Cheng, Yemian Lu, Yacong Gu, Purui Su, Dengguo Feng |
| 2016 | SecureComm | Exploiting Android System Services Through Bypassing Service Helpers. | Yacong Gu, Yao Cheng, Lingyun Ying, Yemian Lu, Qi Li, Purui Su |
| 2015 | ISPEC | A Rapid and Scalable Method for Android Application Repackaging Detection. | Sibei Jiao, Yao Cheng, Lingyun Ying, Purui Su, Dengguo Feng |
| 2015 | RAID | Xede: Practical Exploit Early Detection. | Meining Nie, Purui Su, Qi Li, Zhi Wang, Lingyun Ying, Jinlong Hu, Dengguo Feng |
| 2014 | NSS | Revisiting Node Injection of P2P Botnet. | Jia Yan, Lingyun Ying, Yi Yang, Purui Su, Qi Li, Hui Kong, Dengguo Feng |
| 2014 | TrustCom | Automated User Profiling in Location-Based Mobile Messaging Applications. | Yao Cheng, Chang Xu, Yi Yang, Lingyun Ying, Purui Su, Dengguo Feng |
| 2014 | TrustCom | Long Term Tracking and Characterization of P2P Botnet. | Jia Yan, Lingyun Ying, Yi Yang, Purui Su, Dengguo Feng |
| 2013 | CCS | Bind your phone number with caution: automated user profiling through address book matching on smartphone. | Yao Cheng, Lingyun Ying, Sibei Jiao, Purui Su, Dengguo Feng |
| 2013 | ICICS | OSNGuard: Detecting Worms with User Interaction Traces in Online Social Networks. | Liang He, Dengguo Feng, Purui Su, Lingyun Ying, Yi Yang, Huafeng Huang, Huipeng Fang |
| 2013 | SecureComm | Automatic Polymorphic Exploit Generation for Software Vulnerabilities. | Minghua Wang, Purui Su, Qi Li, Lingyun Ying, Yi Yang, Dengguo Feng |
| 2008 | CIS | Exploring Malware Behaviors Based on Environment Constitution. | Purui Su, Lingyun Ying, Dengguo Feng |