| 2026 | NDSS | From Noise to Signal: Precisely Identify Affected Packages of Known Vulnerabilities in npm Ecosystem. | Yingyuan Pu, Lingyun Ying, Yacong Gu |
| 2026 | NDSS | Cache Me, Catch You: Cache Related Security Threats in LLM Serving Frameworks. | XiangFan Wu, Lingyun Ying, Guoqiang Chen, Yacong Gu, Haipeng Qu |
| 2025 | SRDS | Secretscout: Effective Hard-Coded Secrets Detection in Ci Configuration Files. | Chu Qiao, Yacong Gu, Xiaofan Li, Xing Gao |
| 2024 | CCS | Toward Understanding the Security of Plugins in Continuous Integration Services. | Xiaofan Li, Yacong Gu, Chu Qiao, Zhenkai Zhang, Daiping Liu, Lingyun Ying, Haixin Duan, Xing Gao |
| 2024 | CCS | MiniCAT: Understanding and Detecting Cross-Page Request Forgery Vulnerabilities in Mini-Programs. | Zidong Zhang, Qinsheng Hou, Lingyun Ying, Wenrui Diao, Yacong Gu, Rui Li, Shanqing Guo, Haixin Duan |
| 2024 | SP | More Haste, Less Speed: Cache Related Security Threats in Continuous Integration Services. | Yacong Gu, Lingyun Ying, Huajun Chai, Yingyuan Pu, Haixin Duan, Xing Gao |
| 2023 | SP | Continuous Intrusion: Characterizing the Security of Continuous Integration Services. | Yacong Gu, Lingyun Ying, Huajun Chai, Chu Qiao, Haixin Duan, Xing Gao |
| 2023 | SP | Investigating Package Related Security Threats in Software Registries. | Yacong Gu, Lingyun Ying, Yingyuan Pu, Xiao Hu, Huajun Chai, Ruimin Wang, Xing Gao, Haixin Duan |
| 2017 | DSN | JGRE: An Analysis of JNI Global Reference Exhaustion Vulnerabilities in Android. | Yacong Gu, Kun Sun, Purui Su, Qi Li, Yemian Lu, Lingyun Ying, Dengguo Feng |
| 2017 | ICCCN | RealDroid: Large-Scale Evasive Malware Detection on "Real Devices". | Lang Liu, Yacong Gu, Qi Li, Purui Su |
| 2016 | CCS | Attacks and Defence on Android Free Floating Windows. | Lingyun Ying, Yao Cheng, Yemian Lu, Yacong Gu, Purui Su, Dengguo Feng |
| 2016 | SecureComm | Exploiting Android System Services Through Bypassing Service Helpers. | Yacong Gu, Yao Cheng, Lingyun Ying, Yemian Lu, Qi Li, Purui Su |