AIS2 Lab

@inproceedings{yang2026trichord,
  title = {TriChord: Extension-Oriented Browser Fuzzing for Chromium},
  author = {Yang, Huinian and Wu, Daoyuan and Li, Qingyu and Liu, Yiming},
  booktitle = {Proc. ACM SIGSAC Conference on Computer and Communications Security (CCS)},
  year = {2026}
}

@article{ji2026bingrag,
  top_se_conf = {true},
  title = {BinRAG: An RAG-Based Decompilation Framework Fusing Name Prediction and Calling Context},
  author = {Wong, Wai Kin and Wu, Daoyuan and Liu, Zhibo and Wang, Huaijin and Li, Zongjie and Wang, Shuai},
  journal = {Proceedings of the ACM on Software Engineering (ISSTA)},
  number = {ISSTA},
  year = {2026},
  publisher = {ACM New York, NY, USA}
}

@article{ji2026functioncall,
  top_se_conf = {true},
  title = {Function Calling as a Flexible LLM Defense Add-On: Capability and Application Exploration},
  author = {Ji, Zhenlan and Wu, Daoyuan and Wang, Wenxuan and Ma, Pingchuan and Wang, Shuai and Ma, Lei and Rahmel, Juergen},
  journal = {Proceedings of the ACM on Software Engineering (ISSTA)},
  number = {ISSTA},
  year = {2026},
  publisher = {ACM New York, NY, USA}
}

@article{zhang2026llmpowered,
  top_se_conf = {true},
  llm4sec = {true},
  title = {LLM-Powered Silent Bug Fuzzing in Deep Learning Libraries via Versatile and Controlled Bug Transfer},
  author = {Zhang, Kunpeng and Xiao, Dongwei and Wu, Daoyuan and Wang, Shuai and Zhao, Jiali and Lin, Yuanyi and Xu, Tongtong and Wang, Shaohua},
  journal = {Proceedings of the ACM on Programming Languages (OOPSLA)},
  year = {2026}
}

@inproceedings{zhong2025detecting,
  top_se_conf = {true},
  llm4sec = {true},
  title = {Detecting Various DeFi Price Manipulations with LLM Reasoning},
  author = {Zhong, Juantao and Wu, Daoyuan and Liu, Ye and Xie, Maoyi and Liu, Yang and Li, Yi and Liu, Ning},
  booktitle = {Proc. IEEE/ACM Automated Software Engineering (ASE)},
  year = {2025}
}

@inproceedings{liu2025demystifying,
  top_se_conf = {true},
  title = {Demystifying OpenZeppelin's Own Vulnerabilities and Analyzing Their Propagation in Smart Contracts},
  author = {Liu, Han and Wu, Daoyuan and Sun, Yuqiang and Wang, Shuai and Liu, Yang and Chen, Yixiang},
  booktitle = {Proc. IEEE/ACM Automated Software Engineering (ASE)},
  year = {2025}
}

@inproceedings{liu2025have,
  top_se_conf = {true},
  title = {Have We Solved Access Control Vulnerability Detection in Smart Contracts? A Benchmark Study},
  author = {Liu, Han and Wu, Daoyuan and Sun, Yuqiang and Wang, Shuai and Liu, Yang},
  booktitle = {Proc. IEEE/ACM Automated Software Engineering (ASE)},
  year = {2025}
}

@article{zhang2025acfix,
  llm4sec = {true},
  title = {ACFix: Guiding LLMs with Mined Common RBAC Practices for Context-Aware Repair of Access Control Vulnerabilities in Smart Contracts},
  author = {Zhang, Lyuye and Li, Kaixuan and Sun, Kairan and Wu, Daoyuan and Liu, Ye and Tian, Haoye and Liu, Yang},
  journal = {IEEE Transactions on Software Engineering (TSE)},
  year = {2025}
}

@inproceedings{ji2025measuring,
  llm4sec = {true},
  title = {Measuring and Augmenting Large Language Models for Solving Capture-the-Flag Challenges},
  author = {Ji, Zimo and Wu, Daoyuan and Jiang, Wenyuan and Ma, Pingchuan and Li, Zongjie and Wang, Shuai},
  booktitle = {Proc. ACM SIGSAC Conference on Computer and Communications Security (CCS)},
  year = {2025}
}

@inproceedings{li2025differentiation,
  title = {Differentiation-Based Extraction of Proprietary Data from Fine-tuned LLMs},
  author = {Li, Zongjie and Wu, Daoyuan and Wang, Shuai and Su, Zhendong},
  booktitle = {Proc. ACM SIGSAC Conference on Computer and Communications Security (CCS)},
  year = {2025}
}

@article{li2025api,
  top_se_conf = {true},
  title = {API-guided Dataset Synthesis to Finetune Large Code Models},
  author = {Li, Zongjie and Wu, Daoyuan and Wang, Shuai and Su, Zhendong},
  journal = {Proceedings of the ACM on Programming Languages (OOPSLA)},
  volume = {9},
  number = {OOPSLA1},
  pages = {786--815},
  year = {2025},
  publisher = {ACM New York, NY, USA}
}

@inproceedings{wang2025selfdefend,
  title = {SelfDefend: LLMs Can Defend Themselves against Jailbreaking in a Practical Manner},
  author = {Wang, Xunguang and Wu, Daoyuan and Ji, Zhenlan and Li, Zongjie and Ma, Pingchuan and Wang, Shuai and Li, Yingjiu and Liu, Yang and Liu, Ning and Rahmel, Juergen},
  booktitle = {Proc. USENIX Security Symposium},
  year = {2025}
}

@inproceedings{zhang2025lowcost,
  llm4sec = {true},
  title = {Low-Cost and Comprehensive Non-textual Input Fuzzing with LLM-Synthesized Input Generators},
  author = {Zhang, Kunpeng and Li, Zongjie and Wu, Daoyuan and Wang, Shuai and Xia, Xin},
  booktitle = {Proc. USENIX Security Symposium},
  year = {2025}
}

@article{wong2025decllm,
  top_se_conf = {true},
  llm4sec = {true},
  title = {DecLLM: LLM-Augmented Recompilable Decompilation for Enabling Programmatic Use of Decompiled Code},
  author = {Wong, Wai Kin and Wu, Daoyuan and Wang, Huaijin and Li, Zongjie and Liu, Zhibo and Wang, Shuai and Tang, Qiyi and Nie, Sen and Wu, Shi},
  journal = {Proceedings of the ACM on Software Engineering (ISSTA)},
  volume = {2},
  number = {ISSTA},
  pages = {1841--1864},
  year = {2025},
  publisher = {ACM New York, NY, USA}
}

@inproceedings{peng2025testing,
  top_se_conf = {true},
  title = {Testing and Understanding Deviation Behaviors in FHE-hardened Machine Learning Models},
  author = {Peng, Yiteng and Wu, Daoyuan and Liu, Zhibo and Xiao, Dongwei and Ji, Zhenlan and Rahmel, Juergen and Wang, Shuai},
  booktitle = {Proc. IEEE/ACM Conference on Software Engineering (ICSE)},
  year = {2025}
}

@inproceedings{ma2025combining,
  top_se_conf = {true},
  llm4sec = {true},
  title = {Combining Fine-Tuning and LLM-Based Agents for Intuitive Smart Contract Auditing with Justifications},
  author = {Ma, Wei and Wu, Daoyuan and Sun, Yuqiang and Wang, Tianwen and Liu, Shangqing and Zhang, Jian and Xue, Yue and Liu, Yang},
  booktitle = {Proc. IEEE/ACM Conference on Software Engineering (ICSE)},
  year = {2025}
}

@inproceedings{zhong2025detectinh,
  llm4sec = {true},
  title = {PropertyGPT: LLM-driven Formal Verification of Smart Contracts through Retrieval-Augmented Property Generation},
  author = {Liu, Ye and Xue, Yue and Wu, Daoyuan and Sun, Yuqiang and Li, Yi and Shi, Miaolei and Liu, Yang},
  booktitle = {Proc. ISOC Network and Distributed System Security Symposium (NDSS)},
  year = {2025}
}

@article{chen2024agchain,
  title = {AGChain: A Blockchain-based Gateway for Trustworthy App Delegation from Mobile App Markets},
  author = {Chen, Mengjie and Yi, Xiao and Wu, Daoyuan and Xu, Jianliang and Li, Yingjiu and Gao, Debin},
  journal = {ACM Distributed Ledger Technologies: Research and Practice (DLT)},
  year = {2024}
}

@inproceedings{li2024split,
  title = {Split and Merge: Aligning Position Biases in LLM-based Evaluators},
  author = {Li, Zongjie and Wang, Chaozheng and Ma, Pingchuan and Wu, Daoyuan and Wang, Shuai and Gao, Cuiyun and Liu, Yang},
  booktitle = {Proc. Conference on Empirical Methods in Natural Language Processing (EMNLP)},
  year = {2024}
}

@inproceedings{liu2024using,
  title = {Using My Functions Should Follow My Checks: Understanding and Detecting Insecure OpenZeppelin Code in Smart Contracts},
  author = {Liu, Han and Wu, Daoyuan and Sun, Yuqiang and Wang, Haijun and Li, Kaixuan and Liu, Yang and Chen, Yixiang},
  booktitle = {Proc. USENIX Security Symposium},
  year = {2024}
}

@inproceedings{zhang2024mtdscout,
  title = {MtdScout: Complementing the Identification of Insecure Methods in Android Apps via Source-to-Bytecode Signature Generation and Tree-based Layered Search},
  author = {Zhang, Zicheng and Ma, Haoyu and Wu, Daoyuan and Gao, Debin and Yi, Xiao and Chen, Yufan and Wu, Yan and Jiang, Lingxiao},
  booktitle = {Proc. IEEE European Symposium on Security and Privacy (EuroS\&P)},
  year = {2024}
}

@inproceedings{sun2024gptscan,
  top_se_conf = {true},
  llm4sec = {true},
  title = {GPTScan: Detecting Logic Vulnerabilities in Smart Contracts by Combining GPT with Program Analysis},
  author = {Sun, Yuqiang and Wu, Daoyuan and Xue, Yue and Liu, Han and Wang, Haijun and Xu, Zhengzi and Xie, Xiaofei and Liu, Yang},
  booktitle = {Proc. IEEE/ACM Conference on Software Engineering (ICSE)},
  year = {2024}
}

@inproceedings{fang2023beyond,
  top_se_conf = {true},
  title = {Beyond “Protected” and “Private”: An Empirical Security Analysis of Custom Function Modifiers in Smart Contracts},
  author = {Fang, Yuzhou and Wu, Daoyuan and Yi, Xiao and Wang, Shuai and Chen, Yufan and Chen, Mengjie and Liu, Yang and Jiang, Lingxiao},
  booktitle = {Proc. ACM International Symposium on Software Testing and Analysis (ISSTA)},
  pages = {1157--1168},
  year = {2023}
}

@inproceedings{yi2023blockscope,
  title = {BlockScope: Detecting and Investigating Propagated Vulnerabilities in Forked Blockchain Projects},
  author = {Yi, Xiao and Fang, Yuzhou and Wu, Daoyuan and Jiang, Lingxiao},
  booktitle = {Proc. ISOC Network and Distributed System Security Symposium (NDSS)},
  year = {2023}
}

@inproceedings{yi2022empirical,
  top_se_conf = {true},
  title = {An Empirical Study of Blockchain System Vulnerabilities: Modules, Types, and Patterns},
  author = {Yi, Xiao and Wu, Daoyuan and Jiang, Lingxiao and Fang, Yuzhou and Zhang, Kehuan and Zhang, Wei},
  booktitle = {Proc. ACM Symposium on the Foundations of Software Engineering (FSE)},
  year = {2022}
}

@inproceedings{zhang2021usability,
  title = {On the Usability (In)Security of In-App Browsing Interfaces in Mobile Apps},
  author = {Zhang, Zicheng and Wu, Daoyuan and Li, Lixiang and Gao, Debin},
  booktitle = {Proc. International Symposium on Research in Attacks, Intrusions and Defenses (RAID)},
  year = {2021}
}

@inproceedings{wu2021program,
  title = {When Program Analysis Meets Bytecode Search: Targeted and Efficient Inter-procedural Analysis of Modern Android Apps in BackDroid},
  author = {Wu, Daoyuan and Gao, Debin and Deng, Robert H and KC, Chang Rocky},
  booktitle = {Proc. IEEE/IFIP International Conference on Dependable Systems and Networks (DSN)},
  year = {2021}
}

@article{wu2021scalable,
  title = {Scalable Online Vetting of Android Apps for Measuring Declared SDK Versions and Their Consistency with API Calls},
  author = {Wu, Daoyuan and Gao, Debin and Lo, David},
  journal = {Springer Empirical Software Engineering (EMSE)},
  year = {2021}
}

@inproceedings{he2020understanding,
  title = {Understanding Android VoIP Security: A System-Level Vulnerability Assessment},
  author = {He, En and Wu, Daoyuan and Deng, Robert H},
  booktitle = {Springer International Conference on Detection of Intrusions and Malware, and Vulnerability Assessment (DIMVA)},
  year = {2020}
}

@inproceedings{wu2019towards,
  title = {Towards Understanding Android System Vulnerabilities: Techniques and Insights},
  author = {Wu, Daoyuan and Gao, Debin and Cheng, Eric KT and Cao, Yichen and Jiang, Jintao and Deng, Robert H},
  booktitle = {Proc. ACM Asia Conference on Computer and Communications Security (AsiaCCS)},
  year = {2019}
}

@inproceedings{wu2019understanding,
  title = {Understanding Open Ports in Android Applications: Discovery, Diagnosis, and Security Assessment},
  author = {Wu, Daoyuan and Gao, Debin and Chang, Rocky KC and He, En and Cheng, Eric KT and Deng, Robert H},
  booktitle = {Proc. ISOC Network and Distributed System Security Symposium (NDSS)},
  year = {2019}
}

@inproceedings{wu2018sclib,
  title = {SCLib: A Practical and Lightweight Defense against Component Hijacking in Android Applications},
  author = {Wu, Daoyuan and Cheng, Yao and Gao, Debin and Li, Yingjiu and Deng, Robert H},
  booktitle = {Proc. ACM Conference on Data and Applications Security and Privacy (CODASPY)},
  year = {2018}
}

@inproceedings{wu2017mopeye,
  top_aisys_conf = {true},
  title = {MopEye: Opportunistic Monitoring of Per-app Mobile Network Performance},
  author = {Wu, Daoyuan and Chang, Rocky KC and Li, Weichao and Cheng, Eric KT and Gao, Debin},
  booktitle = {Proc. USENIX Annual Technical Conference (ATC)},
  year = {2017}
}

@inproceedings{wu2017measuring,
  title = {Measuring the Declared SDK Versions and Their Consistency with API Calls in Android Apps},
  author = {Wu, Daoyuan and Liu, Ximing and Xu, Jiayun and Lo, David and Gao, Debin},
  booktitle = {Proc. Springer International Conference on Wireless Algorithms, Systems, and Applications (WASA)},
  year = {2017}
}

@inproceedings{wu2015indirect,
  title = {Indirect File Leaks in Mobile Applications},
  author = {Wu, Daoyuan and Chang, Rocky KC},
  booktitle = {Proc. IEEE Mobile Security Technologies (MoST), in conjunction with S\&P},
  year = {2015}
}

@inproceedings{wu2014analyzing,
  title = {Analyzing Android Browser Apps for file:// Vulnerabilities},
  author = {Wu, Daoyuan and Chang, Rocky KC},
  booktitle = {Proc. Springer Information Security Conference (ISC)},
  year = {2014}
}