Yan's Papers

2026

2025

🔀 USENIX Security - System Register Hijacking

🈴 SIGCSE - SENSAI

🔎 NDSS - ScamMagnifier

🗭 AAAI - ScamNet

2024

🇻 SP - VarBERT
🤦 SP - Mistakes

📘 SIGCSE - PWN the Learning Curve
🥋 SIGCSE - Enter the DOJO

️🏞️ RAID - From Victims to Defenders

🤥 IMC - Browser Polygraph

🫠 ICML - WMDP

🐶 DIMVA - SandPuppy

📛 CODASPY - Nothing Personal

🤞 CCS - Trust, Because You Can't Verify
🦺 CCS - FlakJack

🤿 AsiaCCS - Deep Dive into Client-Side Anti-Phishing

2023

🪴 USENIX Security - Greenhouse

💫 SecureComm - Street Rep

🧙‍♀️ SP - Toss a Fault to Your Witcher
🛒 SP - Beyond Phish

📻 DSN - Targeted Privacy Attacks (LTE)

🔥 CCS - RetSpill

2022

🛤️ USENIX Security - Unleash the Simulacrum
🃏 USENIX Security - Playing for kHeaps
⚖️ USENIX Security - Arbiter

🗨️ SP - Evaluating Security Papers

🚫 RAID - Context-Auditor

✂️ DIMVA - Hybrid Pruning

🛡️ CCSW - Eirene

🎭 CCS - Spartacus

🌉 AsiaCCS - Convergence of Source Code and Binary Vulnerability Discovery

🆔 ASPLOS - ViK

2021

💰 USENIX Security - Having Your Cake and Eating It

🎣 SP - Crawlphish

🥑 NDSS - Favocado

🐺 HICCS - MuTent

🪙 Financial Crypto - Bitcoin Mixers

2020

🦠 eCrimes - Pandemic Phishing

🥞 USENIX WOOT - Uninitialized Kernel Stack

⏳ USENIX Security - PhishTime

🌾 SP - KARONTE

💣 MobiSys - SmokeBomb

🧬 CNS - Exploring Abstraction Functions in Fuzzing

🍯 CCS - HoneyPLC

2019

💇 DIMVA - Bintrimmer

🥾 CODASPY - Bootkeeper

🧦 CCS - Matched and Mismatched SOCs

💧 ACSAC - Sleak

2018

🐛 USENIX Security - HeapHopper

🤖 SP Magazine - Mechanical Phish

🔪 SP - T-Fuzz

🧑‍🚒 SDN NFV - Challenges and Preparedness of SDN Firewalls

🔧 Langsec - Retrofitting Security in Input Parsing Routines

🔗 CCS - AIM-SDN

🕯️ ASHES - Cachelight

📞 ACSAC - WiNotCalling

2017

👢 USENIX Security - Bootstomp

🕵️ SP - Your Exploit is Mine

🐚 Phrack - Cyber Grand Shellphish

🪡 NDSS - Ramblr

🎓 Dissertation - Building a Base For Cyber Autonomy

👑 CSF - How Shall We Play a Game

🤝 CCS - Rise of the HaCRS
💎 CCS - DIFUZE

🕹️ ACSAC - Piston

2016

🧰 SP - State of the Art of War

💱 RAID - Taming Transactions

🚪 NDSS - Firmalice
🪛 NDSS - Driller

2015

🛀 USENIX Security - How the ELF Ruined Christmas

📸 PETS - Portrait of a Privacy Invasion

2014

🎲 SAC - Do You Feel Lucky

↔️ RAID - Protecting Web-Based Single Sign-On Protocols

🕸️ DIMVA - PEXy

🏁 3GSE - Ten Years of iCTF

2013

📽️ USENIX Security - Steal This Movie
🔫 USENIX Security - Revolver

2012

🐑 CCS - Blacksheep

2011

🕰️ GSWC - Back to the Future