| 2026 | SECON | Poster: Automated Extraction of Protocol State Machines from 3GPP Specifications with Domain-Informed Prompts and LLM Ensembles. | Miao Zhang, Runhan Feng, Hongbo Tang, Yu Zhao, Jie Yang, Hang Qiu, Qi Liu |
| 2025 | TrustCom | 5GC-PDA:A Novel Proactive Defense Architecture for Enhancing 5G Core Network Security. | Xingxing Liao, Wei You, Jie Yang, Jian Tao, Runhan Feng, Xinsheng Ji |
| 2025 | SANER | Pay Your Attention on Lib! Android Third-Party Library Detection via Feature Language Model. | Dahan Pan, Yi Xu, Runhan Feng, Donghui Yu, Jiawen Chen, Ya Fang, Yuanyuan Zhang |
| 2022 | ICSE | Automated Detection of Password Leakage from Public GitHub Repositories. | Runhan Feng, Ziyang Yan, Shiyan Peng, Yuanyuan Zhang |
| 2021 | TrustCom | MagikCube: Securing Cross-Domain Publish/Subscribe Systems with Enclave. | Shuran Wang, Dahan Pan, Runhan Feng, Yuanyuan Zhang |
| 2019 | ACSAC | An empirical study of SMS one-time password authentication in Android apps. | Siqi Ma, Runhan Feng, Juanru Li, Yang Liu, Surya Nepal, Diethelm Ostry, Elisa Bertino, Robert H. Deng, Zhuo Ma, Sanjay Jha |