| 2026 | ACL | CoLA: A Choice Leakage Attack Framework to Expose Privacy Risks in Subset Training. | Qi Li, Cheng-Long Wang, Yinzhi Cao, Di Wang |
| 2026 | EACL | Jailbreaking Safeguarded Text-to-Image Models via Large Language Models. | Zhengyuan Jiang, Yuepeng Hu, Yuchen Yang, Yinzhi Cao, Neil Zhenqiang Gong |
| 2026 | NDSS | TranSPArent: Taint-style Vulnerability Detection in Generic Single Page Applications through Automated Framework Abstraction. | Senapati Diwangkara, Yinzhi Cao |
| 2026 | SP | Detecting Privilege Escalation in Polyglot Microservices via Agentic Program Analysis. | Penghui Li, Hong Yau Chong, Yinzhi Cao, Junfeng Yang |
| 2026 | SP | Practical Covert Channel Across Isolated Browser Instances via GPU Command Queue Contention. | Jinhong Liu, Zifeng Kang, Song Li, Yinzhi Cao |
| 2026 | SP | The First Large-Scale Systematic Study of Python Class Pollution Vulnerability. | Zhengyu Liu, Jiacheng Zhong, Jianjia Yu, Muxi Lyu, Zifeng Kang, Yinzhi Cao |
| 2026 | SP | PILOT: Command-Line Interface Fuzzing Via Path-Guided, Iterative Large Language Model Prompting. | Momoko Shiraishi, Yinzhi Cao, Takahiro Shinagawa |
| 2026 | SP | Poisoned by the Host: Large-Scale Measurement of Host Name Poisoning in Web Applications. | Rui Yang, Haoyu Wang, Zhicheng Sun, Zhengyu Liu, Yinzhi Cao |
| 2025 | ECAI | AUTHNET: Neural Network with Integrated Authentication Logic. | Yuling Cai, Fan Xiang, Guozhu Meng, Yinzhi Cao, Kai Chen |
| 2025 | LCN | Autonomous Data Scientist (ADaS): A Practical Example of the Future Role of AI in Cybersecurity. | Simone F. Green, Abigail Nelson, Zimo Zhang, Aimee Liang, Jeffrey S. Chavis, Paul Velez, Yinzhi Cao, Lanier A. Watkins |
| 2025 | WWW | The First Early Evidence of the Use of Browser Fingerprinting for Online Tracking. | Zengrui Liu, Jimmy Dani, Yinzhi Cao, Shujiang Wu, Nitesh Saxena |
| 2025 | SP | Follow My Flow: Unveiling Client-Side Prototype Pollution Gadgets from One Million Real-World Websites. | Zifeng Kang, Muxi Lyu, Zhengyu Liu, Jianjia Yu, Runqi Fan, Song Li, Yinzhi Cao |
| 2024 | CCS | PLeak: Prompt Leaking Attacks against Large Language Model Applications. | Bo Hui, Haolin Yuan, Neil Gong, Philippe Burlina, Yinzhi Cao |
| 2024 | CCS | ReactAppScan: Mining React Application Vulnerabilities via Component Graph. | Zhiyong Guo, Mingqing Kang, V. N. Venkatakrishnan, Rigel Gjomemo, Yinzhi Cao |
| 2024 | ECCV | Follow the Rules: Reasoning for Video Anomaly Detection with Large Language Models. | Yuchen Yang, Kwonjoon Lee, Behzad Dariush, Yinzhi Cao, Shao-Yuan Lo |
| 2024 | ECCV | PFEDEDIT: Personalized Federated Learning via Automated Model Editing. | Haolin Yuan, William Paul, John N. Aucott, Philippe Burlina, Yinzhi Cao |
| 2024 | EMNLP | RippleCOT: Amplifying Ripple Effect of Knowledge Editing in Language Models via Chain-of-Thought In-Context Learning. | Zihao Zhao, Yuchen Yang, Yijiang Li, Yinzhi Cao |
| 2024 | ICML | Position: TrustLLM: Trustworthiness in Large Language Models. | Yue Huang, Lichao Sun, Haoran Wang, Siyuan Wu, Qihui Zhang, Yuan Li, Chujie Gao, Yixin Huang, Wenhan Lyu, Yixuan Zhang, Xiner Li, Hanchi Sun, Zhengliang Liu, Yixin Liu, Yijue Wang, Zhikun Zhang, Bertie Vidgen, Bhavya Kailkhura, Caiming Xiong, Chaowei Xiao, Chunyuan Li, Eric P. Xing, Furong Huang, Hao Liu, Heng Ji, Hongyi Wang, Huan Zhang, Huaxiu Yao, Manolis Kellis, Marinka Zitnik, Meng Jiang, Mohit Bansal, James Zou, Jian Pei, Jian Liu, Jianfeng Gao, Jiawei Han, Jieyu Zhao, Jiliang Tang, Jindong Wang, Joaquin Vanschoren, John C. Mitchell, Kai Shu, Kaidi Xu, Kai-Wei Chang, Lifang He, Lifu Huang, Michael Backes, Neil Zhenqiang Gong, Philip S. Yu, Pin-Yu Chen, Quanquan Gu, Ran Xu, Rex Ying, Shuiwang Ji, Suman Jana, Tianlong Chen, Tianming Liu, Tianyi Zhou, William Wang, Xiang Li, Xiangliang Zhang, Xiao Wang, Xing Xie, Xun Chen, Xuyu Wang, Yan Liu, Yanfang Ye, Yinzhi Cao, Yong Chen, Yue Zhao |
| 2024 | INFOCOM | Showcasing the Threat of Scalable Generative AI Disinformation through Social Media Simulation. | David Na, Samuel Nathanson, Yungjun Yoo, Yinzhi Cao, Lanier A. Watkins |
| 2024 | ICSE | RogueOne: Detecting Rogue Updates via Differential Data-flow Analysis Using Trust Domains. | Raphael J. Sofaer, Yaniv David, Mingqing Kang, Jianjia Yu, Yinzhi Cao, Junfeng Yang, Jason Nieh |
| 2024 | SP | Efficient Detection of Java Deserialization Gadget Chains via Bottom-up Gadget Search and Dataflow-aided Payload Construction. | Bofei Chen, Lei Zhang, Xinyou Huang, Yinzhi Cao, Keke Lian, Yuan Zhang, Min Yang |
| 2024 | SP | Withdrawing is believing? Detecting Inconsistencies between Withdrawal Choices and Third-party Data Collections in Mobile Apps. | Xiaolin Du, Zhemin Yang, Jiapeng Lin, Yinzhi Cao, Min Yang |
| 2024 | SP | Undefined-oriented Programming: Detecting and Chaining Prototype Pollution Gadgets in Node.js Template Engines for Malicious Consequences. | Zhengyu Liu, Kecheng An, Yinzhi Cao |
| 2024 | SP | SneakyPrompt: Jailbreaking Text-to-image Generative Models. | Yuchen Yang, Bo Hui, Haolin Yuan, Neil Gong, Yinzhi Cao |
| 2023 | CCS | CoCo: Efficient Browser Extension Vulnerability Detection via Coverage-guided, Concurrent Abstract Interpretation. | Jianjia Yu, Song Li, Junmin Zhu, Yinzhi Cao |
| 2023 | DSN | Fortifying Federated Learning against Membership Inference Attacks via Client-level Input Perturbation. | Yuchen Yang, Haolin Yuan, Bo Hui, Neil Zhenqiang Gong, Neil Fendley, Philippe Burlina, Yinzhi Cao |
| 2023 | MICCAI | EdgeMixup: Embarrassingly Simple Data Alteration to Improve Lyme Disease Lesion Segmentation and Diagnosis Fairness. | Haolin Yuan, John N. Aucott, Armin Hadzic, William Paul, Marcia Villegas de Flores, Philip Mathew, Philippe Burlina, Yinzhi Cao |
| 2023 | NDSS | CHKPLUG: Checking GDPR Compliance of WordPress Plugins via Cross-language Code Property Graph. | Faysal Hossain Shezan, Zihao Su, Mingqing Kang, Nicholas Phair, Patrick William Thomas, Michelangelo van Dam, Yinzhi Cao, Yuan Tian |
| 2023 | NDSS | Him of Many Faces: Characterizing Billion-scale Adversarial and Benign Browser Fingerprints on Commercial Websites. | Shujiang Wu, Pengfei Sun, Yao Zhao, Yinzhi Cao |
| 2023 | SP | Scaling JavaScript Abstract Interpretation to Detect and Exploit Node.js Taint-style Vulnerability. | Mingqing Kang, Yichao Xu, Song Li, Rigel Gjomemo, Jianwei Hou, V. N. Venkatakrishnan, Yinzhi Cao |
| 2023 | SP | Understanding the (In)Security of Cross-side Face Verification Systems in Mobile Apps: A System Perspective. | Xiaohan Zhang, Haoqi Ye, Ziqi Huang, Xiao Ye, Yinzhi Cao, Yuan Zhang, Min Yang |
| 2022 | AsiaCCS | GraphTrack: A Graph-based Cross-Device Tracking Framework. | Binghui Wang, Tianchen Zhou, Song Li, Yinzhi Cao, Neil Zhenqiang Gong |
| 2022 | ECCV | Addressing Heterogeneity in Federated Learning via Distributional Transformation. | Haolin Yuan, Bo Hui, Yuchen Yang, Philippe Burlina, Neil Zhenqiang Gong, Yinzhi Cao |
| 2022 | NDSS | Probe the Proto: Measuring Client-Side Prototype Pollution Vulnerabilities of One Million Real-world Websites. | Zifeng Kang, Song Li, Yinzhi Cao |
| 2021 | NDSS | Practical Blind Membership Inference Attack via Differential Comparisons. | Bo Hui, Yuchen Yang, Haolin Yuan, Philippe Burlina, Neil Zhenqiang Gong, Yinzhi Cao |
| 2021 | SP | Runtime Recovery of Web Applications under Zero-Day ReDoS Attacks. | Zhihao Bai, Ke Wang, Hang Zhu, Yinzhi Cao, Xin Jin |
| 2020 | CCS | Enhancing State-of-the-art Classifiers with API Semantics to Detect Evolved Android Malware. | Xiaohan Zhang, Yuan Zhang, Ming Zhong, Daizong Ding, Yinzhi Cao, Yukun Zhang, Mi Zhang, Min Yang |
| 2020 | DSN | JSKernel: Fortifying JavaScript against Web Concurrency Attacks via a Kernel-Like Structure. | Zhanhao Chen, Yinzhi Cao |
| 2020 | ECCV | PatchAttack: A Black-Box Texture-Based Attack with Reinforcement Learning. | Chenglin Yang, Adam Kortylewski, Cihang Xie, Yinzhi Cao, Alan L. Yuille |
| 2020 | IMC | Who Touched My Browser Fingerprint?: A Large-scale Measurement Study and Classification of Fingerprint Dynamics. | Song Li, Yinzhi Cao |
| 2020 | NDSS | TKPERM: Cross-platform Permission Knowledge Transfer to Detect Overprivileged Third-party Applications. | Faysal Hossain Shezan, Kaiming Cheng, Zhen Zhang, Yinzhi Cao, Yuan Tian |
| 2020 | SP | TextExerciser: Feedback-driven Text Input Exercising for Android Applications. | Yuyu He, Lei Zhang, Zhemin Yang, Yinzhi Cao, Keke Lian, Shuai Li, Wei Yang, Zhibo Zhang, Min Yang, Yuan Zhang, Haixin Duan |
| 2018 | CCS | Efficient Repair of Polluted Machine Learning Systems via Causal Unlearning. | Yinzhi Cao, Alexander Fangxiao Yu, Andrew Aday, Eric Stahl, Jon Merwine, Junfeng Yang |
| 2017 | CCS | Deterministic Browser. | Yinzhi Cao, Zhanhao Chen, Song Li, Shujiang Wu |
| 2017 | NDSS | (Cross-)Browser Fingerprinting via OS and Hardware Level Features. | Yinzhi Cao, Song Li, Erik Wijmans |
| 2017 | SOSP | DeepXplore: Automated Whitebox Testing of Deep Learning Systems. | Kexin Pei, Yinzhi Cao, Junfeng Yang, Suman Jana |
| 2016 | CCS | CSPAutoGen: Black-box Enforcement of Content Security Policy upon Real-world Websites. | Xiang Pan, Yinzhi Cao, Shuangping Liu, Yu Zhou, Yan Chen, Tingzhe Zhou |
| 2015 | NDSS | EdgeMiner: Automatically Detecting Implicit Control Flow Transitions through the Android Framework. | Yinzhi Cao, Yanick Fratantonio, Antonio Bianchi, Manuel Egele, Christopher Kruegel, Giovanni Vigna, Yan Chen |
| 2015 | NDSS | I Do Not Know What You Visited Last Summer: Protecting users from stateful third-party web tracking with TrackingFree browser. | Xiang Pan, Yinzhi Cao, Yan Chen |
| 2015 | SP | Towards Making Systems Forget with Machine Unlearning. | Yinzhi Cao, Junfeng Yang |
| 2015 | SP | Vetting SSL Usage in Applications with SSLINT. | Boyuan He, Vaibhav Rastogi, Yinzhi Cao, Yan Chen, V. N. Venkatakrishnan, Runqing Yang, Zhenrui Zhang |
| 2015 | SecureComm | Uranine: Real-time Privacy Leakage Monitoring without System Modification for Android. | Vaibhav Rastogi, Zhengyang Qu, Jedidiah McClurg, Yinzhi Cao, Yan Chen |
| 2014 | ACSAC | JShield: towards real-time and vulnerability-based detection of polluted drive-by download attacks. | Yinzhi Cao, Xiang Pan, Yan Chen, Jianwei Zhuge |
| 2014 | RAID | Protecting Web-Based Single Sign-on Protocols against Relying Party Impersonation Attacks through a Dedicated Bi-directional Authenticated Secure Channel. | Yinzhi Cao, Yan Shoshitaishvili, Kevin Borgolte, Christopher Krgel, Giovanni Vigna, Yan Chen |
| 2014 | SecureComm | Abusing Browser Address Bar for Fun and Profit - An Empirical Investigation of Add-On Cross Site Scripting Attacks. | Yinzhi Cao, Chao Yang, Vaibhav Rastogi, Yan Chen, Guofei Gu |
| 2013 | DSN | Redefining web browser principals with a Configurable Origin Policy. | Yinzhi Cao, Vaibhav Rastogi, Zhichun Li, Yan Chen, Alexander Moshchuk |
| 2012 | CCS | Virtual browser: a virtualized browser to sandbox third-party JavaScripts with enhanced security. | Yinzhi Cao, Zhichun Li, Vaibhav Rastogi, Yan Chen, Xitao Wen |
| 2012 | NDSS | PathCutter: Severing the Self-Propagation Path of XSS JavaScript Worms in Social Web Networks. | Yinzhi Cao, Vinod Yegneswaran, Phillip A. Porras, Yan Chen |
| 2011 | CCS | Poster: a path-cutting approach to blocking XSS worms in social web networks. | Yinzhi Cao, Vinod Yegneswaran, Phillip A. Porras, Yan Chen |
| 2011 | IWQoS | Rake: Semantics assisted network-based tracing framework. | Yao Zhao, Yinzhi Cao, Yan Chen, Ming Zhang, Anup Goyal |
| 2011 | NDSS | WebShield: Enabling Various Web Defense Techniques without Client Side Modifications. | Zhichun Li, Yi Tang, Yinzhi Cao, Vaibhav Rastogi, Yan Chen, Bin Liu, Clint Sbisa |
| 2010 | CCS | Virtual browser: a web-level sandbox to secure third-party JavaScript without sacrificing functionality. | Yinzhi Cao, Zhichun Li, Vaibhav Rastogi, Yan Chen |