| 2026 | Demystifying the Access Control Mechanism of ESXi VMKernel. | Yue Liu, Zexiang Zhang, Jiaxun Zhu, Hao Zheng, Jiaqing Huang, Wenbo Shen, Gaoning Pan, Yuliang Lu, Min Zhang, Zulie Pan, Guang Cheng |
| 2026 | A Hard-Label Black-Box Evasion Attack against ML-based Malicious Traffic Detection Systems. | Zixuan Liu, Yi Zhao, Zhuotao Liu, Qi Li, Chuanpu Fu, Guangmeng Zhou, Ke Xu |
| 2026 | The Dark Side of Flexibility: Detecting Risky Permission Chaining Attacks in Serverless Applications. | Xunqi Liu, Nanzi Yang, Chang Li, Jinku Li, Jianfeng Ma, Kangjie Lu |
| 2026 | Crack in the Armor: Underlying Infrastructure Threats to RPKI Publication Point Reachability. | Yunhao Liu, Jessie Hui Wang, Yuedong Xu, Zongpeng Li, Yangyang Wang, Jilong Wang |
| 2026 | ExpShield: Safeguarding Web Text from Unauthorized Crawling and LLM Exploitation. | Ruixuan Liu, Toan Tran, Tianhao Wang, Hongsheng Hu, Shuo Wang, Li Xiong |
| 2026 | Indicator of Benignity: An Industry View of False Positive in Malicious Domain Detection and its Mitigation. | Daiping Liu, Danyu Sun, Zhenhua Chen, Shu Wang, Zhou Li |
| 2026 | LatticeBox: A Hardware-Software Co-Designed Framework for Scalable and Low-Latency Compartmentalization. | Zhanpeng Liu, Chenyang Li, Wende Tan, Yuan Li, Xinhui Han, Xi Cao, Yong Xie, Chao Zhang |
| 2026 | PrivCode: When Code Generation Meets Differential Privacy. | Zheng Liu, Chen Gong, Terry Yue Zhuo, Kecen Li, Weichen Yu, Matt Fredrikson, Tianhao Wang |
| 2026 | FirmCross: Detecting Taint-style Vulnerabilities in Modern C-Lua Hybrid Web Services of Linux-based Firmware. | Runhao Liu, Jiarun Dai, Haoyu Xiao, Yuan Zhang, Yeqi Mou, Lukai Xu, Bo Yu, Baosheng Wang, Min Yang |
| 2026 | Rethinking Fake Speech Detection: A Generalized Framework Leveraging Spectrogram Magnitude. | Zihao Liu, Aobo Chen, Yan Zhang, Wensheng Zhang, Chenglin Miao |
| 2026 | What Do They Fix? LLM-Aided Categorization of Security Patches for Critical Memory Bugs. | Xingyu Li, Juefei Pu, Yifan Wu, Xiaochen Zou, Shitong Zhu, Qiushi Wu, Zheng Zhang, Joshua Hsu, Yue Dong, Zhiyun Qian, Kangjie Lu, Trent Jaeger, Michael J. De Lucia, Srikanth V. Krishnamurthy |
| 2026 | There is No War in Ba Sing Se: A Global Analysis of Content Moderation in Large Language Models. | Friedemann Lipphardt, Moonis Ali, Martin Banzer, Anja Feldmann, Devashish Gosain |
| 2026 | PortRush: Detect Write Port Contention Side-Channel Vulnerabilities via Hardware Fuzzing. | Peihong Lin, Pengfei Wang, Lei Zhou, Gen Zhang, Xu Zhou, Wei Xie, Zhiyuan Jiang, Kai Lu |
| 2026 | CHAMELEOSCAN: Demystifying and Detecting iOS Chameleon Apps via LLM-Powered UI Exploration. | Hongyu Lin, Yicheng Hu, Haitao Xu, Yanchen Lu, Mengxia Ren, Shuai Hao, Chuan Yue, Zhao Li, Fan Zhang, Yixin Jiang |
| 2026 | Faster Than Ever: A New Lightweight Private Set Intersection and Its Variants. | Guowei Ling, Peng Tang, Jinyong Shan, Liyao Xiang, Weidong Qiu |
| 2026 | Achieving Interpretable DL-based Web Attack Detection through Malicious Payload Localization. | Peiyang Li, Fukun Mei, Ye Wang, Zhuotao Liu, Ke Xu, Chao Shen, Qian Wang, Qi Li |
| 2026 | ACE: A Security Architecture for LLM-Integrated App Systems. | Evan Li, Tushin Mallick, Evan Rose, William K. Robertson, Alina Oprea, Cristina Nita-Rotaru |
| 2026 | CoordMail: Exploiting SMTP Timeout and Command Interaction to Coordinate Email Middleware for Convergence Amplification Attack. | Ruixuan Li, Chaoyi Lu, Baojun Liu, Yanzhong Lin, Qingfeng Pan, Jun Shao |
| 2026 | WiFinger: Fingerprinting Noisy IoT Event Traffic Using Packet-level Sequence Matching. | Ronghua Li, Shinan Liu, Haibo Hu, Qingqing Ye, Nick Feamster |
| 2026 | Les Dissonances: Cross-Tool Harvesting and Polluting in Pool-of-Tools Empowered LLM Agents. | Zichuan Li, Jian Cui, Xiaojing Liao, Luyi Xing |
| 2026 | Learning from Leakage: Database Reconstruction from Just a Few Multidimensional Range Queries. | Peijie Li, Huanhuan Chen, Kaitai Liang, Evangelia Anna Markatou |
| 2026 | Odysseus: Jailbreaking Commercial Multimodal LLM-integrated Systems via Dual Steganography. | Songze Li, Jiameng Cheng, Yiming Li, Xiaojun Jia, Dacheng Tao |
| 2026 | cwPSU: Efficient Unbalanced Private Set Union via Constant-weight Codes. | Qingwen Li, Song Bian, Hui Li |
| 2026 | VeriLoRA: Fine-Tuning Large Language Models with Verifiable Security via Zero-Knowledge Proofs. | Guofu Liao, Taotao Wang, Shengli Zhang, Jiqun Zhang, Long Shi, Dacheng Tao |
| 2026 | Efficiently Detecting DBMS Bugs through Bottom-up Syntax-based SQL Generation. | Yu Liang, Peng Liu |