@inproceedings {291257,
	author = {Guoren Li and Hang Zhang and Jinmeng Zhou and Wenbo Shen and Yulei Sui and Zhiyun Qian},
	title = {A Hybrid Alias Analysis and Its Application to Global Variable Protection in the Linux Kernel},
	booktitle = {32nd USENIX Security Symposium (USENIX Security 23)},
	year = {2023},
	isbn = {978-1-939133-37-3},
	address = {Anaheim, CA},
	pages = {4211--4228},
	url = {https://www.usenix.org/conference/usenixsecurity23/presentation/li-guoren},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {285782,
	author = {Aditya Basu and John Sampson and Zhiyun Qian and Trent Jaeger},
	title = {Unsafe at Any Copy: Name Collisions from Mixing Case Sensitivities},
	booktitle = {21st USENIX Conference on File and Storage Technologies (FAST 23)},
	year = {2023},
	isbn = {978-1-939133-32-8},
	address = {Santa Clara, CA},
	pages = {183--198},
	url = {https://www.usenix.org/conference/fast23/presentation/basu},
	publisher = {USENIX Association},
	month = feb
}
@inproceedings {277162,
	author = {Jian Liu and Lin Yi and Weiteng Chen and Chengyu Song and Zhiyun Qian and Qiuping Yi},
	title = {{LinKRID}: Vetting Imbalance Reference Counting in Linux kernel with Symbolic Execution},
	booktitle = {31st USENIX Security Symposium (USENIX Security 22)},
	year = {2022},
	isbn = {978-1-939133-31-1},
	address = {Boston, MA},
	pages = {125--142},
	url = {https://www.usenix.org/conference/usenixsecurity22/presentation/liu-jian},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {281336,
	author = {Xuewei Feng and Qi Li and Kun Sun and Zhiyun Qian and Gang Zhao and Xiaohui Kuang and Chuanpu Fu and Ke Xu},
	title = {{Off-Path} Network Traffic Manipulation via Revitalized {ICMP} Redirect Attacks},
	booktitle = {31st USENIX Security Symposium (USENIX Security 22)},
	year = {2022},
	isbn = {978-1-939133-31-1},
	address = {Boston, MA},
	pages = {2619--2636},
	url = {https://www.usenix.org/conference/usenixsecurity22/presentation/feng},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {277242,
	author = {Xiaochen Zou and Guoren Li and Weiteng Chen and Hang Zhang and Zhiyun Qian},
	title = {{SyzScope}: Revealing {High-Risk} Security Impacts of {Fuzzer-Exposed} Bugs in Linux kernel},
	booktitle = {31st USENIX Security Symposium (USENIX Security 22)},
	year = {2022},
	isbn = {978-1-939133-31-1},
	address = {Boston, MA},
	pages = {3201--3217},
	url = {https://www.usenix.org/conference/usenixsecurity22/presentation/zou},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {263842,
	author = {Zheng Zhang and Hang Zhang and Zhiyun Qian and Billy Lau},
	title = {An Investigation of the Android Kernel Patch Ecosystem},
	booktitle = {30th USENIX Security Symposium (USENIX Security 21)},
	year = {2021},
	isbn = {978-1-939133-24-3},
	pages = {3649--3666},
	url = {https://www.usenix.org/conference/usenixsecurity21/presentation/zhang-zheng},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {272112,
	author = {Yu-Tsung Lee and William Enck and Haining Chen and Hayawardh Vijayakumar and Ninghui Li and Zhiyun Qian and Daimeng Wang and Giuseppe Petracca and Trent Jaeger},
	title = {{PolyScope}: {Multi-Policy} Access Control Analysis to Compute Authorized Attack Operations in Android Systems},
	booktitle = {30th USENIX Security Symposium (USENIX Security 21)},
	year = {2021},
	isbn = {978-1-939133-24-3},
	pages = {2579--2596},
	url = {https://www.usenix.org/conference/usenixsecurity21/presentation/lee-yu-tsung},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {274553,
	author = {Daimeng Wang and Zheng Zhang and Hang Zhang and Zhiyun Qian and Srikanth V. Krishnamurthy and Nael Abu-Ghazaleh},
	title = {{SyzVegas}: Beating Kernel Fuzzing Odds with Reinforcement Learning},
	booktitle = {30th USENIX Security Symposium (USENIX Security 21)},
	year = {2021},
	isbn = {978-1-939133-24-3},
	pages = {2741--2758},
	url = {https://www.usenix.org/conference/usenixsecurity21/presentation/wang-daimeng},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {272242,
	author = {Seyed Mohammadjavad Seyed Talebi and Zhihao Yao and Ardalan Amiri Sani and Zhiyun Qian and Daniel Austin},
	title = {Undo Workarounds for Kernel Bugs},
	booktitle = {30th USENIX Security Symposium (USENIX Security 21)},
	year = {2021},
	isbn = {978-1-939133-24-3},
	pages = {2381--2398},
	url = {https://www.usenix.org/conference/usenixsecurity21/presentation/talebi},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {247640,
	author = {Weiteng Chen and Xiaochen Zou and Guoren Li and Zhiyun Qian},
	title = {{KOOBE}: Towards Facilitating Exploit Generation of Kernel {Out-Of-Bounds} Write Vulnerabilities},
	booktitle = {29th USENIX Security Symposium (USENIX Security 20)},
	year = {2020},
	isbn = {978-1-939133-17-5},
	pages = {1093--1110},
	url = {https://www.usenix.org/conference/usenixsecurity20/presentation/chen-weiteng},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {255314,
	author = {Xiaofeng Zheng and Chaoyi Lu and Jian Peng and Qiushi Yang and Dongjie Zhou and Baojun Liu and Keyu Man and Shuang Hao and Haixin Duan and Zhiyun Qian},
	title = {Poison Over Troubled Forwarders: A Cache Poisoning Attack Targeting {DNS} Forwarding Devices},
	booktitle = {29th USENIX Security Symposium (USENIX Security 20)},
	year = {2020},
	isbn = {978-1-939133-17-5},
	pages = {577--593},
	url = {https://www.usenix.org/conference/usenixsecurity20/presentation/zheng},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {242071,
	author = {Ahmed Abdo and Sakib Md Bin Malek and Zhiyun Qian and Qi Zhu and Matthew Barth and Nael Abu-Ghazaleh},
	title = {Application level attacks on Connected Vehicle Protocols},
	booktitle = {22nd International Symposium on Research in Attacks, Intrusions and Defenses (RAID 2019)},
	year = {2019},
	isbn = {978-1-939133-07-6},
	address = {Chaoyang District, Beijing},
	pages = {459--471},
	url = {https://www.usenix.org/conference/raid2019/presentation/abdo},
	publisher = {USENIX Association},
	month = sep
}
@inproceedings {217577,
	author = {Seyed Mohammadjavad Seyed Talebi and Hamid Tavakoli and Hang Zhang and Zheng Zhang and Ardalan Amiri Sani and Zhiyun Qian},
	title = {Charm: Facilitating Dynamic Analysis of Device Drivers of Mobile Systems},
	booktitle = {27th USENIX Security Symposium (USENIX Security 18)},
	year = {2018},
	isbn = {978-1-939133-04-5},
	address = {Baltimore, MD},
	pages = {291--307},
	url = {https://www.usenix.org/conference/usenixsecurity18/presentation/talebi},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {217603,
	author = {Weiteng Chen and Zhiyun Qian},
	title = {{Off-Path} {TCP} Exploit: How Wireless Routers Can Jeopardize Your Secrets},
	booktitle = {27th USENIX Security Symposium (USENIX Security 18)},
	year = {2018},
	isbn = {978-1-939133-04-5},
	address = {Baltimore, MD},
	pages = {1581--1598},
	url = {https://www.usenix.org/conference/usenixsecurity18/presentation/chen-weiteng},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {217581,
	author = {Hang Zhang and Zhiyun Qian},
	title = {Precise and Accurate Patch Presence Test for Binaries},
	booktitle = {27th USENIX Security Symposium (USENIX Security 18)},
	year = {2018},
	isbn = {978-1-939133-04-5},
	address = {Baltimore, MD},
	pages = {887--902},
	url = {https://www.usenix.org/conference/usenixsecurity18/presentation/zhang-hang},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {203666,
	author = {Ioannis Gasparis and Zhiyun Qian and Chengyu Song and Srikanth V. Krishnamurthy},
	title = {Detecting Android Root Exploits by Learning from Root Providers},
	booktitle = {26th USENIX Security Symposium (USENIX Security 17)},
	year = {2017},
	isbn = {978-1-931971-40-9},
	address = {Vancouver, BC},
	pages = {1129--1144},
	url = {https://www.usenix.org/conference/usenixsecurity17/technical-sessions/presentation/gasparis},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {206172,
	author = {Ahmed Atya and Azeem Aqil and Karim Khalil and Zhiyun Qian and Srikanth V. Krishnamurthy and Thomas F. La Porta},
	title = {Stalling Live Migrations on the Cloud},
	booktitle = {11th USENIX Workshop on Offensive Technologies (WOOT 17)},
	year = {2017},
	address = {Vancouver, BC},
	url = {https://www.usenix.org/conference/woot17/workshop-program/presentation/atya},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {197253,
	author = {Yue Cao and Zhiyun Qian and Zhongjie Wang and Tuan Dao and Srikanth V. Krishnamurthy and Lisa M. Marvel},
	title = {{Off-Path} {TCP} Exploits: Global Rate Limit Considered Dangerous},
	booktitle = {25th USENIX Security Symposium (USENIX Security 16)},
	year = {2016},
	isbn = {978-1-931971-32-4},
	address = {Austin, TX},
	pages = {209--225},
	url = {https://www.usenix.org/conference/usenixsecurity16/technical-sessions/presentation/cao},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {184397,
	author = {Qi Alfred Chen and Zhiyun Qian and Z. Morley Mao},
	title = {Peeking into Your App without Actually Seeing It: {UI} State Inference and Novel Android Attacks},
	booktitle = {23rd USENIX Security Symposium (USENIX Security 14)},
	year = {2014},
	isbn = {978-1-931971-15-7},
	address = {San Diego, CA},
	pages = {1037--1052},
	url = {https://www.usenix.org/conference/usenixsecurity14/technical-sessions/presentation/chen},
	publisher = {USENIX Association},
	month = aug
}
