| 2026 | AsiaCCS | LASGen: Synergistic Harness-Seed Co-Synthesis for High-Coverage Library Fuzzing. | Ming Chen, Yujie Xing, Jiongyi Chen, Wenrui Diao |
| 2026 | SANER | Dialing Danger: Large-Scale Risk Assessment of Android Secret Codes in OEM Firmware. | Ruoyan Lin, Shishuai Yang, Fenghao Xu, Wenrui Diao |
| 2026 | SANER | From Patterns to Precision: LLM-Guided Detection of Signature Verification Flaws in Smart Contracts. | Huixin Wang, Kailun Yan, Wenrui Diao |
| 2025 | AsiaCCS | An Empirical Study on Cross-chain Transactions: Costs, Inconsistencies, and Activities. | Kailun Yan, Bo Lu, Pranav Agrawal, Jiasun Li, Wenrui Diao, Xiaokuan Zhang |
| 2024 | CCS | Stealing Trust: Unraveling Blind Message Attacks in Web3 Authentication. | Kailun Yan, Xiaokuan Zhang, Wenrui Diao |
| 2024 | CCS | MiniCAT: Understanding and Detecting Cross-Page Request Forgery Vulnerabilities in Mini-Programs. | Zidong Zhang, Qinsheng Hou, Lingyun Ying, Wenrui Diao, Yacong Gu, Rui Li, Shanqing Guo, Haixin Duan |
| 2024 | ICSE | DEMISTIFY: Identifying On-device Machine Learning Models Stealing and Reuse Vulnerabilities in Mobile Apps. | Pengcheng Ren, Chaoshun Zuo, Xiaofeng Liu, Wenrui Diao, Qingchuan Zhao, Shanqing Guo |
| 2024 | ISSRE | Android's Cat-and-Mouse Game: Understanding Evasion Techniques against Dynamic Analysis. | Shuang Li, Rui Li, Shishuai Yang, Wenrui Diao |
| 2024 | ISSRE | Beyond the Horizon: Exploring Cross-Market Security Discrepancies in Parallel Android Apps. | Shishuai Yang, Guangdong Bai, Ruoyan Lin, Jialong Guo, Wenrui Diao |
| 2024 | RAID | CrypTody: Cryptographic Misuse Analysis of IoT Firmware via Data-flow Reasoning. | Jianing Wang, Shanqing Guo, Wenrui Diao, Yue Liu, Haixin Duan, Yichen Liu, Zhenkai Liang |
| 2024 | WWW | From Promises to Practice: Evaluating the Private Browsing Modes of Android Browser Apps. | Xiaoyin Liu, Wenzhi Li, Qinsheng Hou, Shishuai Yang, Lingyun Ying, Wenrui Diao, Yanan Li, Shanqing Guo, Haixin Duan |
| 2024 | TrustCom | Custom Permission Misconfigurations in Android: A Large-Scale Security Analysis. | Rui Li, Wenrui Diao, Debin Gao |
| 2024 | TrustCom | Security Assessment of Customizations in Android Smartwatch Firmware. | Yifan Yu, Ruoyan Lin, Shuang Li, Qinsheng Hou, Peng Tang, Wenrui Diao |
| 2023 | APSEC | Do App Developers Follow the Android Official Data Security Guidelines? An Empirical Measurement on App Data Security. | Shishuai Yang, Qinsheng Hou, Shuang Li, Wenrui Diao |
| 2023 | WWW | Bad Apples: Understanding the Centralized Security Risks in Decentralized Ecosystems. | Kailun Yan, Jilian Zhang, Xiangyu Liu, Wenrui Diao, Shanqing Guo |
| 2022 | ICSE | Large-scale Security Measurements on the Android Firmware Ecosystem. | Qinsheng Hou, Wenrui Diao, Yanhao Wang, Xiaofeng Liu, Song Liu, Lingyun Ying, Shanqing Guo, Yuanzhi Li, Meining Nie, Haixin Duan |
| 2022 | ICSE | Demystifying Android Non-SDK APls: Measurement and Understanding. | Shishuai Yang, Rui Li, Jiongyi Chen, Wenrui Diao, Shanqing Guo |
| 2022 | ICSE | Default: Mutual Information-based Crash Triage for Massive Crashes. | Xing Zhang, Jiongyi Chen, Chao Feng, Ruilin Li, Wenrui Diao, Kehuan Zhang, Jing Lei, Chaojing Tang |
| 2022 | QRS | Cast Away: On the Security of DLNA Deployments in the SmartTV Ecosystem. | Guangwei Tian, Jiongyi Chen, Kailun Yan, Shishuai Yang, Wenrui Diao |
| 2022 | SECON | Identifying the BLE Misconfigurations of IoT Devices through Companion Mobile Apps. | Jianqi Du, Fenghao Xu, Chennan Zhang, Zidong Zhang, Xiaoyin Liu, Pengcheng Ren, Wenrui Diao, Shanqing Guo, Kehuan Zhang |
| 2021 | CCS | Android on PC: On the Security of End-user Android Emulators. | Fenghao Xu, Siyu Shen, Wenrui Diao, Zhou Li, Yi Chen, Rui Li, Kehuan Zhang |
| 2021 | ICPADS | ShadowDroid: Practical Black-box Attack against ML-based Android Malware Detection. | Jin Zhang, Chennan Zhang, Xiangyu Liu, Yuncheng Wang, Wenrui Diao, Shanqing Guo |
| 2021 | SP | Android Custom Permissions Demystified: From Privilege Escalation to Design Shortcomings. | Rui Li, Wenrui Diao, Zhou Li, Jianqi Du, Shanqing Guo |
| 2019 | DSN | Your IoTs Are (Not) Mine: On the Remote Binding Between IoT Devices and Users. | Jiongyi Chen, Chaoshun Zuo, Wenrui Diao, Shuaike Dong, Qingchuan Zhao, Menghan Sun, Zhiqiang Lin, Yinqian Zhang, Kehuan Zhang |
| 2019 | NDSS | BadBluetooth: Breaking Android Security Mechanisms via Malicious Bluetooth Peripherals. | Fenghao Xu, Wenrui Diao, Zhou Li, Jiongyi Chen, Kehuan Zhang |
| 2019 | RAID | Kindness is a Risky Business: On the Usage of the Accessibility APIs in Android. | Wenrui Diao, Yue Zhang, Li Zhang, Zhou Li, Fenghao Xu, Xiaorui Pan, Xiangyu Liu, Jian Weng, Kehuan Zhang, XiaoFeng Wang |
| 2019 | RAID | CryptoREX: Large-scale Analysis of Cryptographic Misuse in IoT Devices. | Li Zhang, Jiongyi Chen, Wenrui Diao, Shanqing Guo, Jian Weng, Kehuan Zhang |
| 2018 | DSN | FragDroid: Automated User Interface Interaction with Activity and Fragment Analysis in Android Applications. | Jia Chen, Ge Han, Shanqing Guo, Wenrui Diao |
| 2018 | NDSS | IoTFuzzer: Discovering Memory Corruptions in IoT Through App-based Fuzzing. | Jiongyi Chen, Wenrui Diao, Qingchuan Zhao, Chaoshun Zuo, Zhiqiang Lin, XiaoFeng Wang, Wing Cheong Lau, Menghan Sun, Ronghai Yang, Kehuan Zhang |
| 2018 | SecureComm | Understanding Android Obfuscation Techniques: A Large-Scale Investigation in the Wild. | Shuaike Dong, Menghao Li, Wenrui Diao, Xiangyu Liu, Jian Liu, Zhou Li, Fenghao Xu, Kai Chen, Xiaofeng Wang, Kehuan Zhang |
| 2016 | SP | No Pardon for the Interruption: New Inference Attacks on Android Through Interrupt Timing Analysis. | Wenrui Diao, Xiangyu Liu, Zhou Li, Kehuan Zhang |
| 2015 | CCS | When Good Becomes Evil: Keystroke Inference with Smartwatch. | Xiangyu Liu, Zhe Zhou, Wenrui Diao, Zhou Li, Kehuan Zhang |
| 2015 | ESORICS | Mind-Reading: Privacy Attacks Exploiting Cross-App KeyEvent Injections. | Wenrui Diao, Xiangyu Liu, Zhe Zhou, Kehuan Zhang, Zhou Li |
| 2015 | SEC | An Empirical Study on Android for Saving Non-shared Data on Public Storage. | Xiangyu Liu, Zhe Zhou, Wenrui Diao, Zhou Li, Kehuan Zhang |
| 2014 | CCS | Your Voice Assistant is Mine: How to Abuse Speakers to Steal Information and Control Your Phone. | Wenrui Diao, Xiangyu Liu, Zhe Zhou, Kehuan Zhang |
| 2014 | CCS | Acoustic Fingerprinting Revisited: Generate Stable Device ID Stealthily with Inaudible Sound. | Zhe Zhou, Wenrui Diao, Xiangyu Liu, Kehuan Zhang |