Yan's Papers

2026

📚 SIGCSE - Open Cybersecurity Education: Five Years of pwn.college [text]
🐧 SIGCSE - Linux Luminarium [text] Best Paper Award

🧩 NDSS - ropbot [text]
🔁 NDSS - Taveren [text]
↩️ NDSS - Decompiling the Synergy [text] Best Paper Award

2025

🔀 USENIX Security - System Register Hijacking [text]

🈴 SIGCSE - SENSAI [text]

🔎 NDSS - ScamMagnifier [text]

🗭 AAAI - ScamNet [text]

2024

👟 USENIX Security - Take a Step Further [text]
🐯 USENIX Security - TYGR [text]
⛵ USENIX Security - SAILR [text]
🥭 USENIX Security - Mango [text]

🇻 SP - VarBERT [text]
🤦 SP - Mistakes [text]

📘 SIGCSE - PWN the Learning Curve [text]
🥋 SIGCSE - Enter the DOJO [text]

️🏞️ RAID - From Victims to Defenders [text]

🤥 IMC - Browser Polygraph [text]

🫠 ICML - WMDP [text]

🐶 DIMVA - SandPuppy [text]

📛 CODASPY - Nothing Personal [text]

🤞 CCS - Trust, Because You Can't Verify [text]
🦺 CCS - FlakJack [text]

🤿 AsiaCCS - Deep Dive into Client-Side Anti-Phishing [text]

2023

🪴 USENIX Security - Greenhouse [text]

💫 SecureComm - Street Rep [text]

🧙‍♀️ SP - Toss a Fault to Your Witcher [text]
🛒 SP - Beyond Phish [text]

📻 DSN - Targeted Privacy Attacks (LTE) [text]

🔥 CCS - RetSpill [text]

2022

🛤️ USENIX Security - Unleash the Simulacrum [text]
🃏 USENIX Security - Playing for kHeaps [text]
⚖️ USENIX Security - Arbiter [text]

🗨️ SP - Evaluating Security Papers [text]

🚫 RAID - Context-Auditor [text]

✂️ DIMVA - Hybrid Pruning [text]

🛡️ CCSW - Eirene [text]

🎭 CCS - Spartacus [text]

🌉 AsiaCCS - Convergence of Source Code and Binary Vulnerability Discovery [text]

🆔 ASPLOS - ViK [text]

2021

💰 USENIX Security - Having Your Cake and Eating It [text]

🎣 SP - Crawlphish [text] Best Student Paper Award

🥑 NDSS - Favocado [text]

🐺 HICCS - MuTent [text]

🪙 Financial Crypto - Bitcoin Mixers [text]

2020

🦠 eCrimes - Pandemic Phishing [text]

🥞 USENIX WOOT - Uninitialized Kernel Stack [text]

⏳ USENIX Security - PhishTime [text]

🌾 SP - KARONTE [text]

💣 MobiSys - SmokeBomb [text]

🧬 CNS - Exploring Abstraction Functions in Fuzzing [text]

🍯 CCS - HoneyPLC [text]

2019

💇 DIMVA - Bintrimmer [text]

🥾 CODASPY - Bootkeeper [text]

🧦 CCS - Matched and Mismatched SOCs [text]

💧 ACSAC - Sleak [text]

2018

🐛 USENIX Security - HeapHopper [text]

🤖 SP Magazine - Mechanical Phish [text]

🔪 SP - T-Fuzz [text]

🧑‍🚒 SDN NFV - Challenges and Preparedness of SDN Firewalls [text]

🔧 Langsec - Retrofitting Security in Input Parsing Routines [text]

🔗 CCS - AIM-SDN [text]

🕯️ ASHES - Cachelight [text]

📞 ACSAC - WiNotCalling [text]

2017

👢 USENIX Security - Bootstomp [text]

🕵️ SP - Your Exploit is Mine [text]

🐚 Phrack - Cyber Grand Shellphish [text]

🪡 NDSS - Ramblr [text] Distinguished Paper Award

🎓 Dissertation - Building a Base For Cyber Autonomy [text] UCSB Computer Science Outstanding Dissertation Award

👑 CSF - How Shall We Play a Game [text] 2018 NSA Cybersecurity Paper Award

🤝 CCS - Rise of the HaCRS [text]
💎 CCS - DIFUZE [text]

🕹️ ACSAC - Piston [text]

2016

🧰 SP - State of the Art of War [text] ACSAC 2023 Artifact Impact Award

💱 RAID - Taming Transactions [text]

🚪 NDSS - Firmalice [text]
🪛 NDSS - Driller [text]

2015

🛀 USENIX Security - How the ELF Ruined Christmas [text]

📸 PETS - Portrait of a Privacy Invasion [text]

2014

🎲 SAC - Do You Feel Lucky [text]

↔️ RAID - Protecting Web-Based Single Sign-On Protocols [text]

🕸️ DIMVA - PEXy [text]

🏁 3GSE - Ten Years of iCTF [text]

2013

📽️ USENIX Security - Steal This Movie [text]
🔫 USENIX Security - Revolver [text]

2012

🐑 CCS - Blacksheep [text]

2011

🕰️ GSWC - Back to the Future [text]