| 2026 | HPCA | SSBleed: Non-Speculative Side-Channel Attacks via Speculative Store Bypass on Armv9 CPUs. | Chang Liu, Hongpei Zheng, Xin Zhang, Dapeng Ju, Dongsheng Wang, Yinqian Zhang, Trevor E. Carlson |
| 2026 | ICDE | Hydra: Breaking the Global Ordering Barrier in Multi-BFT Consensus. | Hanzheng Lyu, Shaokang Xie, Jianyu Niu, Mohammad Sadoghi, Yinqian Zhang, Cong Wang, Ivan Beschastnikh, Chen Feng |
| 2026 | ISCA | TimeGaps Channels: Exploiting CPU Halted Time for Fun and Profit. | Yusi Feng, Xin Zhang, Sioli O'Connell, Liangwei Qiu, Chitchanok Chuengsatiansup, Daniel Genkin, Yuval Yarom, Yinqian Zhang, Zhi Zhang |
| 2026 | NDSS | When Cache Poisoning Meets LLM Systems: Semantic Cache Poisoning and Its Countermeasures. | Guanlong Wu, Taojie Wang, Yao Zhang, Zheng Zhang, Jianyu Niu, Ye Wu, Yinqian Zhang |
| 2025 | ASPLOS | DejaVuzz: Disclosing Transient Execution Bugs with Dynamic Swappable Memory and Differential Information Flow Tracking Assisted Processor Fuzzing. | Jinyan Xu, Yangye Zhou, Xingzhi Zhang, Yinshuai Li, Qinhan Tan, Yinqian Zhang, Yajin Zhou, Rui Chang, Wenbo Shen |
| 2025 | CCS | Denial of Sequencing Attacks in Ethereum Layer 2 Rollups. | Zihao Li, Zhiyuan Sun, Zheyuan He, Jinzhao Chu, Hao Zhou, Xiapu Luo, Ting Chen, Yinqian Zhang |
| 2025 | CCS | GhostCache: Timer- and Counter-Free Cache Attacks Exploiting Weak Coherence on RISC-V and ARM Chips. | Yu Jin, Minghong Sun, Dongsheng Wang, Pengfei Qiu, Yinqian Zhang, Shuwen Deng |
| 2025 | CCS | An Empirical Study Measuring In-The-Wild Cryptographic Microarchitectural Side-Channel Patches. | Sen Deng, Zhibo Liu, Shuai Wang, Yinqian Zhang |
| 2025 | CCS | Tide: An Efficient Kernel-level Isolation Execution Environment on AArch64 via Dynamically Adjusting Output Address Size. | Shiyang Zhang, Chenggang Wu, Chengxuan Hou, Jinglin Lv, Yinqian Zhang, Qianyu Guo, Yuanming Lai, Mengyao Xie, Yan Kang, Zhe Wang |
| 2025 | DAC | ZenLeak: Practical Last-Level Cache Side-Channel Attacks on AMD Zen Processors. | Han Wang, Ming Tang, Quancheng Wang, Ke Xu, Yinqian Zhang |
| 2025 | DAC | ZION: A Practical Confidential Virtual Machine Architecture on Commodity RISC-V Processors. | Jie Wang, Juan Wang, Yinqian Zhang |
| 2025 | DSN | MicroSampler: A Framework for Microarchitecture-Level Leakage Detection in Constant Time Execution. | Moein Ghaniyoun, Kristin Barber, Yinqian Zhang, Radu Teodorescu |
| 2025 | EuroSys | Ladon: High-Performance Multi-BFT Consensus via Dynamic Global Ordering. | Hanzheng Lyu, Shaokang Xie, Jianyu Niu, Chen Feng, Yinqian Zhang, Ivan Beschastnikh |
| 2025 | EuroSys | Achilles: Efficient TEE-Assisted BFT Consensus via Rollback Resilient Recovery. | Jianyu Niu, Xiaoqing Wen, Guanlong Wu, Shengqi Liu, Jiangshan Yu, Yinqian Zhang |
| 2025 | ICDE | Orthrus: Accelerating Multi-BFT Consensus Through Concurrent Partial Ordering of Transactions. | Hanzheng Lyu, Shaokang Xie, Jianyu Niu, Ivan Beschastnikh, Yinqian Zhang, Mohammad Sadoghi, Chen Feng |
| 2025 | MICRO | ρHammer: Reviving RowHammer Attacks on New Architectures via Prefetching. | Weijie Chen, Shan Tang, Yulin Tang, Xiapu Luo, Yinqian Zhang, Weizhong Qiang |
| 2025 | NDSS | WAVEN: WebAssembly Memory Virtualization for Enclaves. | Weili Wang, Honghan Ji, Peixuan He, Yao Zhang, Ye Wu, Yinqian Zhang |
| 2025 | NDSS | I Know What You Asked: Prompt Leakage via KV-Cache Sharing in Multi-Tenant LLM Serving. | Guanlong Wu, Zheng Zhang, Yao Zhang, Weili Wang, Jianyu Niu, Ye Wu, Yinqian Zhang |
| 2025 | SP | CipherSteal: Stealing Input Data from TEE-Shielded Neural Networks with Ciphertext Side Channels. | Yuanyuan Yuan, Zhibo Liu, Sen Deng, Yanzuo Chen, Shuai Wang, Yinqian Zhang, Zhendong Su |
| 2025 | USENIX | ASTERINAS: A Linux ABI-Compatible, Rust-Based Framekernel OS with a Small and Sound TCB. | Yuke Peng, Hongliang Tian, Junyang Zhang, Ruihan Li, Chengjun Chen, Jianfeng Jiang, Jinyi Xian, Xiaolin Wang, Chenren Xu, Diyu Zhou, Yingwei Luo, Shoumeng Yan, Yinqian Zhang |
| 2024 | ACSAC | Breaking the Privacy Barrier: On the Feasibility of Reorganization Attacks on Ethereum Private Transactions. | Mengya Zhang, Xingyu Lyu, Jianyu Niu, Xiaokuan Zhang, Yinqian Zhang, Zhiqiang Lin |
| 2024 | AsiaCCS | SoK: Understanding Design Choices and Pitfalls of Trusted Execution Environments. | Mengyuan Li, Yuheng Yang, Guoxing Chen, Mengjia Yan, Yinqian Zhang |
| 2024 | CCS | DoubleUp Roll: Double-spending in Arbitrum by Rolling It Back. | Zhiyuan Sun, Zihao Li, Xinghao Peng, Xiapu Luo, Muhui Jiang, Hao Zhou, Yinqian Zhang |
| 2024 | CCS | HyperTheft: Thieving Model Weights from TEE-Shielded Neural Networks via Ciphertext Side Channels. | Yuanyuan Yuan, Zhibo Liu, Sen Deng, Yanzuo Chen, Shuai Wang, Yinqian Zhang, Zhendong Su |
| 2024 | ESORICS | ReminISCence: Trusted Monitoring Against Privileged Preemption Side-Channel Attacks. | Weijie Chen, Yu Zhao, Yinqian Zhang, Weizhong Qiang, Deqing Zou, Hai Jin |
| 2024 | ESORICS | SAEG: Stateful Automatic Exploit Generation. | Yifan Wu, Yinshuai Li, Hong Zhu, Yinqian Zhang |
| 2024 | FORTE | Formally Verifying a Rollback-Prevention Protocol for TEEs. | Weili Wang, Jianyu Niu, Michael K. Reiter, Yinqian Zhang |
| 2024 | HPCA | Uncovering and Exploiting AMD Speculative Memory Access Predictors for Fun and Profit. | Chang Liu, Dongsheng Wang, Yongqiang Lyu, Pengfei Qiu, Yu Jin, Zhuoyuan Lu, Yinqian Zhang, Gang Qu |
| 2024 | RAID | Security of Cross-chain Bridges: Attack Surfaces, Defenses, and Open Problems. | Mengya Zhang, Xiaokuan Zhang, Yinqian Zhang, Zhiqiang Lin |
| 2023 | CCS | PANIC: PAN-assisted Intra-process Memory Isolation on ARM. | Jiali Xu, Mengyao Xie, Chenggang Wu, Yinqian Zhang, Qijing Li, Xuan Huang, Yuanming Lai, Yan Kang, Wei Wang, Qiang Wei, Zhe Wang |
| 2023 | DIMVA | PwrLeak: Exploiting Power Reporting Interface for Side-Channel Attacks on AMD SEV. | Wubing Wang, Mengyuan Li, Yinqian Zhang, Zhiqiang Lin |
| 2023 | ISCA | TEESec: Pre-Silicon Vulnerability Discovery for Trusted Execution Environments. | Moein Ghaniyoun, Kristin Barber, Yuan Xiao, Yinqian Zhang, Radu Teodorescu |
| 2022 | CC | Cape: compiler-aided program transformation for HTM-based cache side-channel defense. | Rui Zhang, Michael D. Bond, Yinqian Zhang |
| 2022 | CCS | ENGRAFT: Enclave-guarded Raft on Byzantine Faulty Nodes. | Weili Wang, Sen Deng, Jianyu Niu, Michael K. Reiter, Yinqian Zhang |
| 2022 | CCS | NARRATOR: Secure and Practical State Continuity for Trusted Execution in the Cloud. | Jianyu Niu, Wei Peng, Xiaokuan Zhang, Yinqian Zhang |
| 2022 | CCS | CETIS: Retrofitting Intel CET for Generic and Efficient Intra-process Memory Isolation. | Mengyao Xie, Chenggang Wu, Yinqian Zhang, Jiali Xu, Yuanming Lai, Yan Kang, Wei Wang, Zhe Wang |
| 2022 | NDSS | Multi-Certificate Attacks against Proof-of-Elapsed-Time and Their Countermeasures. | Huibo Wang, Guoxing Chen, Yinqian Zhang, Zhiqiang Lin |
| 2022 | SP | A Systematic Look at Ciphertext Side Channels on AMD SEV-SNP. | Mengyuan Li, Luca Wilke, Jan Wichelmann, Thomas Eisenbarth, Radu Teodorescu, Yinqian Zhang |
| 2022 | SP | vSGX: Virtualizing SGX Enclaves on AMD SEV. | Shixuan Zhao, Mengyuan Li, Yinqian Zhang, Zhiqiang Lin |
| 2021 | ACSAC | TLB Poisoning Attacks on AMD Secure Encrypted Virtualization. | Mengyuan Li, Yinqian Zhang, Huibo Wang, Kang Li, Yueqiang Cheng |
| 2021 | AsiaCCS | See through Walls: Detecting Malware in SGX Enclaves with SGX-Bouncer. | Zeyu Zhang, Xiaoli Zhang, Qi Li, Kun Sun, Yinqian Zhang, Songsong Liu, Yukun Liu, Xiaoning Li |
| 2021 | CCS | CrossLine: Breaking "Security-by-Crash" based Memory Isolation in AMD SEV. | Mengyuan Li, Yinqian Zhang, Zhiqiang Lin |
| 2021 | DIMVA | Specularizer : Detecting Speculative Execution Attacks via Performance Tracing. | Wubing Wang, Guoxing Chen, Yueqiang Cheng, Yinqian Zhang, Zhiqiang Lin |
| 2021 | ISCA | INTROSPECTRE: A Pre-Silicon Framework for Discovery and Analysis of Transient Execution Vulnerabilities. | Moein Ghaniyoun, Kristin Barber, Yinqian Zhang, Radu Teodorescu |
| 2020 | CCS | CCSW'20: 2020 Cloud Computing Security Workshop. | Radu Sion, Yinqian Zhang |
| 2020 | CCS | FirmXRay: Detecting Bluetooth Link Layer Vulnerabilities From Bare-Metal Firmware. | Haohuang Wen, Zhiqiang Lin, Yinqian Zhang |
| 2020 | NDSS | SPEECHMINER: A Framework for Investigating and Measuring Speculative Execution Vulnerabilities. | Yuan Xiao, Yinqian Zhang, Radu Teodorescu |
| 2020 | SP | SEIMI: Efficient and Secure SMAP-Enabled Intra-process Memory Isolation. | Zhe Wang, Chenggang Wu, Mengyao Xie, Yinqian Zhang, Kangjie Lu, Xiaofeng Zhang, Yuanming Lai, Yan Kang, Min Yang |
| 2019 | CCS | OPERA: Open Remote Attestation for Intel's Secure Enclaves. | Guoxing Chen, Yinqian Zhang, Ten-Hwang Lai |
| 2019 | CCS | Running Language Interpreters Inside SGX: A Lightweight, Legacy-Compatible Script Code Hardening Approach. | Huibo Wang, Erick Bauman, Vishal Karande, Zhiqiang Lin, Yueqiang Cheng, Yinqian Zhang |
| 2019 | CCS | Speculative Execution Attacks and Cloud Security. | Yinqian Zhang, Radu Sion |
| 2019 | CCS | Automatic Fingerprinting of Vulnerable BLE IoT Devices with Static UUIDs from Mobile Apps. | Chaoshun Zuo, Haohuang Wen, Zhiqiang Lin, Yinqian Zhang |
| 2019 | DSN | Your IoTs Are (Not) Mine: On the Remote Binding Between IoT Devices and Users. | Jiongyi Chen, Chaoshun Zuo, Wenrui Diao, Shuaike Dong, Qingchuan Zhao, Menghan Sun, Zhiqiang Lin, Yinqian Zhang, Kehuan Zhang |
| 2019 | NDSS | OBFUSCURO: A Commodity Obfuscation Engine on Intel SGX. | Adil Ahmad, Byunggill Joe, Yuan Xiao, Yinqian Zhang, Insik Shin, Byoungyoung Lee |
| 2019 | NDSS | Statistical Privacy for Streaming Traffic. | Xiaokuan Zhang, Jihun Hamm, Michael K. Reiter, Yinqian Zhang |
| 2019 | RAID | Time and Order: Towards Automatically Identifying Side-Channel Vulnerabilities in Enclave Binaries. | Wubing Wang, Yinqian Zhang, Zhiqiang Lin |
| 2019 | SP | Why Does Your Data Leak? Uncovering the Data Leakage in Cloud from Mobile Apps. | Chaoshun Zuo, Zhiqiang Lin, Yinqian Zhang |
| 2018 | ACSAC | A Measurement Study of Authentication Rate-Limiting Mechanisms of Modern Websites. | Bo Lu, Xiaokuan Zhang, Ziman Ling, Yinqian Zhang, Zhiqiang Lin |
| 2018 | ACSAC | Analyzing Cache Side Channels Using Deep Neural Networks. | Tianwei Zhang, Yinqian Zhang, Ruby B. Lee |
| 2018 | CCS | Leveraging Hardware Transactional Memory for Cache Side-Channel Defenses. | Sanchuan Chen, Fangfei Liu, Zeyu Mi, Yinqian Zhang, Ruby B. Lee, Haibo Chen, XiaoFeng Wang |
| 2018 | CCS | HoMonit: Monitoring Smart Home Apps from Encrypted Traffic. | Wei Zhang, Yan Meng, Yugeng Liu, Xiaokuan Zhang, Yinqian Zhang, Haojin Zhu |
| 2018 | ICCD | NVCool: When Non-Volatile Caches Meet Cold Boot Attacks. | Xiang Pan, Anys Bacha, Spencer Rudolph, Li Zhou, Yinqian Zhang, Radu Teodorescu |
| 2018 | INFOCOM | Differentially Private Access Patterns for Searchable Symmetric Encryption. | Guoxing Chen, Ten-Hwang Lai, Michael K. Reiter, Yinqian Zhang |
| 2018 | NDSS | Face Flashing: a Secure Liveness Detection Protocol based on Light Reflections. | Di Tang, Zhe Zhou, Yinqian Zhang, Kehuan Zhang |
| 2018 | NDSS | OS-level Side Channels without Procfs: Exploring Cross-App Information Leakage on iOS. | Xiaokuan Zhang, Xueqiang Wang, Xiaolong Bai, Yinqian Zhang, XiaoFeng Wang |
| 2018 | SP | Racing in Hyperspace: Closing Hyper-Threading Side Channels on SGX with Contrived Data Races. | Guoxing Chen, Wenhao Wang, Tianyu Chen, Sanchuan Chen, Yinqian Zhang, XiaoFeng Wang, Ten-Hwang Lai, Dongdai Lin |
| 2018 | SP | Static Evaluation of Noninterference Using Approximate Model Counting. | Ziqiao Zhou, Zhiyun Qian, Michael K. Reiter, Yinqian Zhang |
| 2018 | USENIX | Peeking Behind the Curtains of Serverless Platforms. | Liang Wang, Mengyuan Li, Yinqian Zhang, Thomas Ristenpart, Michael M. Swift |
| 2017 | CCS | Detecting Privileged Side-Channel Attacks in Shielded Execution with Dj Vu. | Sanchuan Chen, Xiaokuan Zhang, Michael K. Reiter, Yinqian Zhang |
| 2017 | CCS | Leaky Cauldron on the Dark Land: Understanding Memory Side-Channel Hazards in SGX. | Wenhao Wang, Guoxing Chen, Xiaorui Pan, Yinqian Zhang, XiaoFeng Wang, Vincent Bindschaedler, Haixu Tang, Carl A. Gunter |
| 2017 | CCS | STACCO: Differentially Analyzing Side-Channel Traces for Detecting SSL/TLS Vulnerabilities in Secure Enclaves. | Yuan Xiao, Mengyuan Li, Sanchuan Chen, Yinqian Zhang |
| 2017 | CCS | Cache Side Channels: State of the Art and Research Opportunities. | Yinqian Zhang |
| 2017 | CCS | DoS Attacks on Your Memory in Cloud. | Tianwei Zhang, Yinqian Zhang, Ruby B. Lee |
| 2016 | CCS | Return-Oriented Flush-Reload Side Channels on ARM and Their Implications for Android Devices. | Xiaokuan Zhang, Yuan Xiao, Yinqian Zhang |
| 2016 | CCS | A Software Approach to Defeating Side Channels in Last-Level Caches. | Ziqiao Zhou, Michael K. Reiter, Yinqian Zhang |
| 2016 | RAID | CloudRadar: A Real-Time Side-Channel Attack Detection System in Clouds. | Tianwei Zhang, Yinqian Zhang, Ruby B. Lee |
| 2015 | CCS | Mitigating Storage Side Channels Using Statistical Privacy Mechanisms. | Qiuyu Xiao, Michael K. Reiter, Yinqian Zhang |
| 2014 | CCS | Cross-Tenant Side-Channel Attacks in PaaS Clouds. | Yinqian Zhang, Ari Juels, Michael K. Reiter, Thomas Ristenpart |
| 2013 | CCS | Dppel: retrofitting commodity operating systems to mitigate cache side channels in the cloud. | Yinqian Zhang, Michael K. Reiter |
| 2012 | CCS | Cross-VM side channels and their use to extract private keys. | Yinqian Zhang, Ari Juels, Michael K. Reiter, Thomas Ristenpart |
| 2011 | SP | HomeAlone: Co-residency Detection in the Cloud via Side-Channel Analysis. | Yinqian Zhang, Ari Juels, Alina Oprea, Michael K. Reiter |
| 2010 | CCS | The security of modern password expiration: an algorithmic framework and empirical analysis. | Yinqian Zhang, Fabian Monrose, Michael K. Reiter |
| 2008 | ACSAC | Attack Grammar: A New Approach to Modeling and Analyzing Network Attack Sequences. | Yinqian Zhang, Xun Fan, Yijun Wang, Zhi Xue |