| 2026 | SP | Detecting Privilege Escalation in Polyglot Microservices via Agentic Program Analysis. | Penghui Li, Hong Yau Chong, Yinzhi Cao, Junfeng Yang |
| 2025 | CCS | PickleBall: Secure Deserialization of Pickle-based Machine Learning Models. | Andreas D. Kellas, Neophytos Christou, Wenxin Jiang, Penghui Li, Laurent Simon, Yaniv David, Vasileios P. Kemerlis, James C. Davis, Junfeng Yang |
| 2025 | NDSS | VulShield: Protecting Vulnerable Code Before Deploying Patches. | Yuan Li, Chao Zhang, Jinhao Zhu, Penghui Li, Chenyang Li, Songtao Yang, Wende Tan |
| 2025 | SP | Predator: Directed Web Application Fuzzing for Efficient Vulnerability Validation. | Chenlin Wang, Wei Meng, Changhua Luo, Penghui Li |
| 2024 | CCS | FuzzCache: Optimizing Web Application Fuzzing Through Software-Based Data Cache. | Penghui Li, Mingxue Zhang |
| 2024 | CCS | Test Suites Guided Vulnerability Validation for Node.js Applications. | Changhua Luo, Penghui Li, Wei Meng, Chao Zhang |
| 2024 | SP | Holistic Concolic Execution for Dynamic Web Applications via Symbolic Interpreter Analysis. | Penghui Li, Wei Meng, Mingxue Zhang, Chenlin Wang, Changhua Luo |
| 2023 | SP | SelectFuzz: Efficient Directed Fuzzing with Selective Path Exploration. | Changhua Luo, Wei Meng, Penghui Li |
| 2022 | CCS | TChecker: Precise Static Inter-Procedural Analysis for Detecting Taint-Style Vulnerabilities in PHP Applications. | Changhua Luo, Penghui Li, Wei Meng |
| 2022 | SMC | Curora: An Acoustic Communication Framework for Low-cost Microcontroller. | Chen Chen, Xianliang Jiang, Guang Jin, Yan Yu, Penghui Li |
| 2021 | ICPADS | ALSTM: An Attention-based LSTM Model for Multi-Scenario Bandwidth Prediction. | Penghui Li, Xianliang Jiang, Guang Jin, Yan Yu, Zhijun Xie |
| 2021 | WWW | LChecker: Detecting Loose Comparison Bugs in PHP. | Penghui Li, Wei Meng |
| 2021 | WWW | On the Feasibility of Automated Built-in Function Modeling for PHP Symbolic Execution. | Penghui Li, Wei Meng, Kangjie Lu, Changhua Luo |