publications
ROLoad: Securing Sensitive Operations with Pointee Integrity
Protect sensitive operations with hardware support.
News
2021
publications
publications
VScape: Assessing and Escaping Virtual Call Protections
Bypass virtual protections towards AEG.
publications
Sharing More and Checking Less: Leveraging Common Input Keywords to Detect Bugs in Embedded Systems
Finding vulnerabilities in embedded systems
publications
MAZE: Towards Automated Heap Feng Shui
Manipulate heap layouts automatically.
publications
Weak Links in Authentication Chains: A Large-scale Analysis of Email Sender Spoofing Attacks
This work explored the vulnerabilities of the chain-based authentication structure in the email ecosystem. We conducted a large-scale analysis of 30 popular email services and 23 email clients.
publications
Code is the (F)Law: Demystifying and Mitigating Blockchain Inconsistency AttacksCaused by Software Bugs
Exploit vulnerabilities in blockchains
publications
POP and PUSH: Demystifying and Defending against (Mach) Port-Oriented Programming
Mitigate port-oriented programming attacks for macOS
publications
Argot: Generating Adversarial Readable Chinese Texts
Generate adversarial Chinese texts with Glyph and Pinyin mutation.