| 2025 | DIMVA | Red Light for Security: Uncovering Auto Feature Check and Access Control Gaps in AAOS. | Jumana, Parjanya Vyas, Yousra Aafer |
| 2023 | SP | D-ARM: Disassembling ARM Binaries by Lightweight Superset Instruction Interpretation and Graph Modeling. | Yapeng Ye, Zhuo Zhang, Qingkai Shi, Yousra Aafer, Xiangyu Zhang |
| 2022 | CCS | Poirot: Probabilistically Recommending Protections for the Android Framework. | Zeinab El-Rewini, Zhuo Zhang, Yousra Aafer |
| 2021 | CCS | Dissecting Residual APIs in Custom Android ROMs. | Zeinab El-Rewini, Yousra Aafer |
| 2021 | SP | StochFuzz: Sound and Cost-effective Fuzzing of Stripped Binaries by Incremental and Stochastic Rewriting. | Zhuo Zhang, Wei You, Guanhong Tao, Yousra Aafer, Xuwei Liu, Xiangyu Zhang |
| 2021 | SP | OSPREY: Recovery of Variable and Data Structure via Probabilistic Analysis for Stripped Binary. | Zhuo Zhang, Yapeng Ye, Wei You, Guanhong Tao, Wen-Chuan Lee, Yonghwi Kwon, Yousra Aafer, Xiangyu Zhang |
| 2020 | CCS | Cyber-Physical Inconsistency Vulnerability Identification for Safety Checks in Robotic Vehicles. | Hongjun Choi, Sayali Kate, Yousra Aafer, Xiangyu Zhang, Dongyan Xu |
| 2020 | ICSE | Finding client-side business flow tampering vulnerabilities. | I Luk Kim, Yunhui Zheng, Hogun Park, Weihang Wang, Wei You, Yousra Aafer, Xiangyu Zhang |
| 2020 | RAID | Software-based Realtime Recovery from Sensor Attacks on Robotic Vehicles. | Hongjun Choi, Sayali Kate, Yousra Aafer, Xiangyu Zhang, Dongyan Xu |
| 2020 | SP | PMP: Cost-effective Forced Execution with Probabilistic Memory Pre-planning. | Wei You, Zhuo Zhang, Yonghwi Kwon, Yousra Aafer, Fei Peng, Yu Shi, Carson Harmon, Xiangyu Zhang |
| 2019 | CCS | ABS: Scanning Neural Networks for Back-doors by Artificial Brain Stimulation. | Yingqi Liu, Wen-Chuan Lee, Guanhong Tao, Shiqing Ma, Yousra Aafer, Xiangyu Zhang |
| 2018 | CCS | Precise Android API Protection Mapping Derivation and Reasoning. | Yousra Aafer, Guanhong Tao, Jianjun Huang, Xiangyu Zhang, Ninghui Li |
| 2018 | CCS | Detecting Attacks Against Robotic Vehicles: A Control Invariant Approach. | Hongjun Choi, Wen-Chuan Lee, Yousra Aafer, Fan Fei, Zhan Tu, Xiangyu Zhang, Dongyan Xu, Xinyan Deng |
| 2018 | NDSS | AceDroid: Normalizing Diverse Android Access Control Checks for Inconsistency Detection. | Yousra Aafer, Jianjun Huang, Yi Sun, Xiangyu Zhang, Ninghui Li, Chen Tian |
| 2018 | NDSS | Trojaning Attack on Neural Networks. | Yingqi Liu, Shiqing Ma, Yousra Aafer, Wen-Chuan Lee, Juan Zhai, Weihang Wang, Xiangyu Zhang |
| 2018 | WWW | AdBudgetKiller: Online Advertising Budget Draining Attack. | I Luk Kim, Weihang Wang, Yonghwi Kwon, Yunhui Zheng, Yousra Aafer, Weijie Meng, Xiangyu Zhang |
| 2017 | ACSAC | Analysis of SEAndroid Policies: Combining MAC and DAC in Android. | Haining Chen, Ninghui Li, William Enck, Yousra Aafer, Xiangyu Zhang |
| 2016 | ESORICS | Hey, You, Get Off of My Image: Detecting Data Residue in Android Images. | Xiao Zhang, Yousra Aafer, Kailiang Ying, Wenliang Du |
| 2016 | NDSS | Life after App Uninstallation: Are the Data Still Alive? Data Residue Attacks on Android. | Xiao Zhang, Kailiang Ying, Yousra Aafer, Zhenshen Qiu, Wenliang Du |
| 2015 | CCS | Hare Hunting in the Wild Android: A Study on the Threat of Hanging Attribute References. | Yousra Aafer, Nan Zhang, Zhongwen Zhang, Xiao Zhang, Kai Chen, XiaoFeng Wang, Xiao-yong Zhou, Wenliang Du, Michael Grace |
| 2013 | SecureComm | DroidAPIMiner: Mining API-Level Features for Robust Malware Detection in Android. | Yousra Aafer, Wenliang Du, Heng Yin |