| 2024 | DSN | On the Correctness of Metadata-Based SBOM Generation: A Differential Analysis Approach. | Sheng Yu, Wei Song, Xunchao Hu, Heng Yin |
| 2020 | DSN | Chaser: An Enhanced Fault Injection Tool for Tracing Soft Errors in MPI Applications. | Qiang Guan, Xunchao Hu, Terence Grove, Bo Fang, Hailong Jiang, Heng Yin, Nathan DeBardeleben |
| 2019 | SecureComm | ChaffyScript: Vulnerability-Agnostic Defense of JavaScript Exploits via Memory Perturbation. | Xunchao Hu, Brian Testa, Heng Yin |
| 2018 | NDSS | Measuring and Disrupting Anti-Adblockers Using Differential Execution Analysis. | Shitong Zhu, Xunchao Hu, Zhiyun Qian, Zubair Shafiq, Heng Yin |
| 2017 | SecureComm | JSForce: A Forced Execution Engine for Malicious JavaScript Detection. | Xunchao Hu, Yao Cheng, Yue Duan, Andrew Henderson, Heng Yin |
| 2016 | NDSS | Extract Me If You Can: Abusing PDF Parsers in Malware Detectors. | Curtis Carmony, Xunchao Hu, Heng Yin, Abhishek Vasisht Bhaskar, Mu Zhang |
| 2016 | RAID | Semantics-Preserving Dissection of JavaScript Exploits via Dynamic JS-Binary Analysis. | Xunchao Hu, Aravind Prakash, Jinghan Wang, Rundong Zhou, Yao Cheng, Heng Yin |
| 2015 | NDSS | vfGuard: Strict Protection for Virtual Function Calls in COTS C++ Binaries. | Aravind Prakash, Xunchao Hu, Heng Yin |
| 2014 | CCS | Code Injection Attacks on HTML5-based Mobile Apps: Characterization, Detection and Mitigation. | Xing Jin, Xunchao Hu, Kailiang Ying, Wenliang Du, Heng Yin, Gautam Nagesh Peri |
| 2014 | ISSTA | Make it work, make it right, make it fast: building a platform-neutral whole-system dynamic binary analysis platform. | Andrew Henderson, Aravind Prakash, Lok-Kwong Yan, Xunchao Hu, Xujiewen Wang, Rundong Zhou, Heng Yin |