| 2022 | SP | Scraping Sticky Leftovers: App User Information Left on Servers After Account Deletion. | Preethi Santhanam, Hoang Dang, Zhiyong Shan, Iulian Neamtiu |
| 2022 | SERA | Automated Testing to Detect Status Data Loss in Android Applications. | Anusha Konduru, Zhiyong Shan |
| 2019 | MASS | Automated Dynamic Detection of Self-Hiding Behavior. | Luke Baird, Zhiyong Shan, Vinod Namboodiri |
| 2019 | MOBICOM | Device Administrator Use and Abuse in Android: Detection and Characterization. | Zhiyong Shan, Raina Samuel, Iulian Neamtiu |
| 2018 | ICSE | Self-hiding behavior in Android apps: detection and characterization. | Zhiyong Shan, Iulian Neamtiu, Raina Samuel |
| 2016 | OOPSLA | Finding resume and restart errors in Android applications. | Zhiyong Shan, Tanzirul Azim, Iulian Neamtiu |
| 2015 | HPCA | FTXen: Making hypervisor resilient to hardware faults on relaxed cores. | Xinxin Jin, Soyeon Park, Tianwei Sheng, Rishan Chen, Zhiyong Shan, Yuanyuan Zhou |
| 2012 | VEE | Facilitating inter-application interactions for OS-level virtualization. | Zhiyong Shan, Xin Wang, Tzi-cker Chiueh, Xiaofeng Meng |
| 2011 | CCS | Tracer: enforcing mandatory access control in commodity OS with the support of light-weight intrusion detection and tracing. | Zhiyong Shan, Xin Wang, Tzi-cker Chiueh |
| 2011 | SAC | Virtualizing system and ordinary services in Windows-based OS-level virtual machines. | Zhiyong Shan, Tzi-cker Chiueh, Xin Wang |
| 2009 | EuroSys | Confining windows inter-process communications for OS-level virtual machine. | Zhiyong Shan, Yang Yu, Tzi-cker Chiueh |
| 2009 | MASS | Operating System Mechanisms for TPM-Based Lifetime Measurement of Process Integrity. | Xiao Li, Wenchang Shi, Zhaohui Liang, Bin Liang, Zhiyong Shan |
| 2007 | ICISS | An OS Security Protection Model for Defeating Attacks from Network. | Zhiyong Shan, Qiuyue Wang, Xiaofeng Meng |