| 2026 | SANER | PiCo: Privacy-Preserving Code Sanitization for Cloud-Based LLMs. | Xinyuan Zhang, Yuhong Nan, Jiequan Zheng, Jiangrong Wu, Yixi Lin, Zibin Zheng |
| 2025 | ICICS | Identifying Unusual Personal Data in Mobile Apps for Better Privacy Compliance Check. | Jiatao Cheng, Yuhong Nan, Xueqiang Wang, Zhefan Chen, Yuliang Zhang |
| 2025 | ICICS | Why Biting the Bait? Understanding Bait and Switch UI Dark Patterns in Mobile Apps. | Yixi Lin, Yue Xu, Zitong Yao, Yuhong Nan, Queping Kong, Xueqiang Wang |
| 2025 | ICSE | Smartreco: Detecting Read-Only Reentrancy via Fine-Grained Cross-DApp Analysis. | Jingwen Zhang, Zibin Zheng, Yuhong Nan, Mingxi Ye, Kaiwen Ning, Yu Zhang, Weizhe Zhang |
| 2024 | CCS | Are We Getting Well-informed? An In-depth Study of Runtime Privacy Notice Practice in Mobile Apps. | Shuai Li, Zhemin Yang, Yuhong Nan, Shutian Yu, Qirui Zhu, Min Yang |
| 2024 | CCS | Understanding Cross-Platform Referral Traffic for Illicit Drug Promotion. | Mingming Zha, Zilong Lin, Siyuan Tang, Xiaojing Liao, Yuhong Nan, XiaoFeng Wang |
| 2024 | ICSE | PrettySmart: Detecting Permission Re-delegation Vulnerability for Token Behaviors in Smart Contracts. | Zhijie Zhong, Zibin Zheng, Hong-Ning Dai, Qing Xue, Junjia Chen, Yuhong Nan |
| 2024 | ISSTA | Midas: Mining Profitable Exploits in On-Chain Smart Contracts via Feedback-Driven Fuzzing and Differential Analysis. | Mingxi Ye, Xingwei Lin, Yuhong Nan, Jiajing Wu, Zibin Zheng |
| 2024 | NDSS | Leaking the Privacy of Groups and More: Understanding Privacy Risks of Cross-App Content Sharing in Mobile Ecosystem. | Jiangrong Wu, Yuhong Nan, Luyi Xing, Jiatao Cheng, Zimin Lin, Zibin Zheng, Min Yang |
| 2023 | DSN | DARPA: Combating Asymmetric Dark UI Patterns on Android with Run-time View Decorator. | Zhaoxin Cai, Yuhong Nan, Xueqiang Wang, Mengyi Long, Qihua Ou, Min Yang, Zibin Zheng |
| 2023 | ISSTA | SmartState: Detecting State-Reverting Vulnerabilities in Smart Contracts via Fine-Grained State-Dependency Analysis. | Zeqin Liao, Sicheng Hao, Yuhong Nan, Zibin Zheng |
| 2023 | ISSTA | Detecting State Inconsistency Bugs in DApps via On-Chain Transaction Replay and Fuzzing. | Mingxi Ye, Yuhong Nan, Zibin Zheng, Dongpeng Wu, Huizhong Li |
| 2022 | DSN | SIMulation: Demystifying (Insecure) Cellular Network based One-Tap Authentication Services. | Ziyi Zhou, Xing Han, Zeyuan Chen, Yuhong Nan, Juanru Li, Dawu Gu |
| 2022 | ISSTA | SmartDagger: a bytecode-based static analysis approach for detecting cross-contract vulnerability. | Zeqin Liao, Zibin Zheng, Xiao Chen, Yuhong Nan |
| 2022 | NDSS | Hazard Integrated: Understanding Security Risks in App Extensions to Team Chat Systems. | Mingming Zha, Jice Wang, Yuhong Nan, Xiaofeng Wang, Yuqing Zhang, Zelin Yang |
| 2021 | NDSS | On the Insecurity of SMS One-Time Password Messages against Local Attackers in Modern Mobile Devices. | Zeyu Lei, Yuhong Nan, Yanick Fratantonio, Antonio Bianchi |
| 2020 | RAID | BlueShield: Detecting Spoofing Attacks in Bluetooth Low Energy Networks. | Jianliang Wu, Yuhong Nan, Vireshwar Kumar, Mathias Payer, Dongyan Xu |
| 2018 | CCS | How You Get Shot in the Back: A Systematical Study about Cryptojacking in the Real World. | Geng Hong, Zhemin Yang, Sen Yang, Lei Zhang, Yuhong Nan, Zhibo Zhang, Min Yang, Yuan Zhang, Zhiyun Qian, Hai-Xin Duan |
| 2018 | NDSS | Finding Clues for Your Secrets: Semantics-Driven, Learning-Based Privacy Discovery in Mobile Apps. | Yuhong Nan, Zhemin Yang, Xiaofeng Wang, Yuan Zhang, Donglai Zhu, Min Yang |