publications

2019

1. SEC

   Understanding and securing device vulnerabilities through automated bug report analysis

   Feng, Xuan, Liao, Xiaojing, Wang, X, Wang, Haining, Li, Qiang, Yang, Kai, Zhu, Hongsong, and Sun, Limin

   In Proceedings of the 28th USENIX Conference on Security Symposium (SEC) 2019

   Bib PDF

   @inproceedings{feng2019understanding,
     abbr = {SEC},
     bibtex_show = {true},
     title = {Understanding and securing device vulnerabilities through automated bug report analysis},
     author = {Feng, Xuan and Liao, Xiaojing and Wang, X and Wang, Haining and Li, Qiang and Yang, Kai and Zhu, Hongsong and Sun, Limin},
     booktitle = {Proceedings of the 28th USENIX Conference on Security Symposium (SEC)},
     year = {2019},
     selected = {true},
     pdf = {/sec19winter-final110.pdf}
   }

2. S&P

   Dangerous skills: Understanding and mitigating security risks of voice-controlled third-party functions on virtual personal assistant systems

   Zhang, Nan, Mi, Xianghang, Feng, Xuan, Wang, XiaoFeng, Tian, Yuan, and Qian, Feng

   In IEEE Symposium on Security and Privacy (SP) 2019

   Bib PDF

   @inproceedings{zhang2019dangerous,
     abbr = {S&P},
     bibtex_show = {true},
     title = {Dangerous skills: Understanding and mitigating security risks of voice-controlled third-party functions on virtual personal assistant systems},
     author = {Zhang, Nan and Mi, Xianghang and Feng, Xuan and Wang, XiaoFeng and Tian, Yuan and Qian, Feng},
     booktitle = {IEEE Symposium on Security and Privacy (SP)},
     pages = {0},
     year = {2019},
     organization = {IEEE},
     selected = {true},
     pdf = {/sp19-zhang.pdf}
   }

3. S&P

   Demystifying hidden privacy settings in mobile apps

   Chen, Yi, Zha, Mingming, Zhang, Nan, Xu, Dandan, Zhao, Qianqian, Feng, Xuan, Yuan, Kan, Suya, Fnu, Tian, Yuan, Chen, Kai, and others,

   In 2019 IEEE Symposium on Security and Privacy (SP) 2019
4. S&P

   Resident evil: Understanding residential IP proxy as a dark service

   Mi, Xianghang, Feng, Xuan, Liao, Xiaojing, Liu, Baojun, Wang, XiaoFeng, Qian, Feng, Li, Zhou, Alrwais, Sumayah, Sun, Limin, and Liu, Ying

   In 2019 IEEE symposium on security and privacy (SP) 2019
5. S&P

   Stealthy porn: Understanding real-world adversarial images for illicit online promotion

   Yuan, Kan, Tang, Di, Liao, Xiaojing, Wang, XiaoFeng, Feng, Xuan, Chen, Yi, Sun, Menghan, Lu, Haoran, and Zhang, Kehuan

   In 2019 IEEE Symposium on Security and Privacy (SP) 2019

2018

1. SEC

   Acquisitional Rule-based Engine for Discovering Internet-of-Things Devices

   Feng, Xuan, Li, Qiang, Wang, Haining, and Sun, Limin

   In Proceedings of the USENIX Security Symposium (SEC) 2018

   Bib PDF

   @inproceedings{xuan2018acquisitional,
     abbr = {SEC},
     bibtex_show = {true},
     author = {Feng, Xuan and Li, Qiang and Wang, Haining and Sun, Limin},
     title = {Acquisitional Rule-based Engine for Discovering Internet-of-Things Devices},
     booktitle = { Proceedings of the {USENIX} Security Symposium (SEC)},
     year = {2018},
     pages = {327-341},
     url = {https://www.usenix.org/conference/usenixsecurity18/presentation/feng},
     pdf = {/sec18-feng.pdf},
     selected = {true}
   }

2016

1. ICNP

   Characterizing industrial control system devices on the internet

   Feng, Xuan, Li, Qiang, Wang, Haining, and Sun, Limin

   In 2016 IEEE 24th International Conference on Network Protocols (ICNP) 2016

   Bib PDF

   @inproceedings{feng2016characterizing,
     abbr = {ICNP},
     title = {Characterizing industrial control system devices on the internet},
     author = {Feng, Xuan and Li, Qiang and Wang, Haining and Sun, Limin},
     booktitle = {2016 IEEE 24th International Conference on Network Protocols (ICNP)},
     pages = {1--10},
     year = {2016},
     organization = {IEEE},
     bibtex_show = {true},
     pdf = {/icnp16.pdf}
   }