Publications

Papers by ICT-PAG members (Since 2018)

Detecting Broken Object-Level Authorization Vulnerabilities in Database-Backed Applications
Yongheng Huang, Chenghang Shi, Jie Lu, Haofeng Li, Haining Meng, Lian Li
CCS, 2024
[Paper] [Code]

Boosting the Performance of Alias-Aware IFDS Analysis with CFL-based Environment Transformers
Haofeng Li, Chenghang Shi, Jie Lu, Lian Li, Jingling Xue
OOPSLA, 2024
[Paper] [Code]

Better Not Together: Staged Solving for Context-Free Language Reachability
Chenghang Shi, Haofeng Li, Jie Lu, Lian Li
ISSTA, 2024
[Paper] [Code]

PEARL: A Multi-Derivation Approach to Efficient CFL-Reachability Solving
Chenghang Shi, Haofeng Li, Yulei Sui, Jie Lu, Lian Li, Jingling Xue
TSE, 2024
[Paper] [Code]

Generic Sensitivity: Generics-Guided Context Sensitivity for Pointer Analysis
Haofeng Li, Tian Tan, Yue Li, Jie Lu, Haining Meng, Liqing Cao, Yongheng Huang, Lian Li, Lin Gao, Peng Di, Liang Lin, ChenXi Cui
TSE, 2024
[Paper] [Code]

Boosting the Performance of Multi-Solver IFDS Algorithms with Flow-sensitivity Optimizations
Haofeng Li, Jie Lu, Haining Meng, Liqing Cao, Lian Li, Lin Gao
CGO, 2024
[Paper] [Code]

File Hijacking Vulnerability: The Elephant in the Room
Chendong Yu, Yang Xiao, Jie Lu, Yuekang Li , Yeting Li, L. Li, Y. Dong, J. Wang, J. Shi, D. Bo, W. Huo
NDSS, 2024
[Paper] [Code]

AutoWeb: Automatically Inferring Web Framework Semantics via Configuration Mutation
Haining Meng, Haofeng Li, Jie Lu, Chenghang Shi, Liqing Cao, Lian Li, lin Gao
ICECCS, 2024
[Paper] [Code]

Two Birds with One Stone: Multi-Derivation for Fast Context-Free Language Reachability Analysis
Chenghang Shi, Haofeng Li, Yulei Sui, Jie Lu, Lian Li, Jingling Xue
ASE, 2023
[Paper] [Code]

Detecting Missing-Permission-Check Vulnerabilities in Distributed Cloud Systems
Jie Lu, Haofeng Li, Chen Liu, Lian li, Kun Cheng
Best Paper Honorable Mention, ACM CCS, 2022
[Paper] [Code]

Generic Sensitivity: Customizing Context-Sensitive Pointer Analysis for Generics
Haofeng Li, Jie Lu, Haining Meng, Liqing Cao, Yongheng Huang, Lian Li, Lin Gao
ESEC/FSE, 2022
[Paper] [Code]

COMRACE: Detecting Data Race Vulnerabilities in COM Objects
Fangming Gu, Qingli Guo, Lian Li, Zhiniang Peng, Wei Lin, Xiaobo Yang , Xiaorui Gong
Security, 2022
[Paper] [Code]

Exposing Vulnerable Paths: Enhance Static Analysis with Lightweight Symbolic Execution
Guangwei Li, Ting Yuan, Jie Lu, Lian Li, Xiaobin Zhang, Xu Song, Kejun Zhang
APSEC, 2021
[Paper] [Code]

Detecting TensorFlow Program Bugs in Real-World Industrial Environment
Chen Liu, Jie Lu, Guangwei Li, Ting Yuan, Lian Li, Feng Tan, Jun Yang, Liang You, Jingling Xue
ASE, 2021
[Paper] [Code]

Scaling Up the IFDS Algorithm with Efficient Disk-assisted Computing
Haofeng Li, Haining Meng, Hengjie Zheng, Liqing Cao, Jie Lu, Lian Li, Lin Gao
CGO, 2021
[Paper] [Code]

GoBench: a Benchmark Suite of Real-World Go Concurrency Bugs
Ting Yuan, Guangwei Li, Jie Lu, Chen Liu, Lian Li, Jingling Xue
CGO, 2021
[Paper] [Code]

CloudRaid: Detecting Distributed Concurrency Bugs via Log Mining and Enhancement
Jie Lu, Feng Li, Chen Liu, Lian Li, Xiaobing Feng, Jingling Xue
TSE, 2020
[Paper] [Code]

CrashTuner: detecting crash-recovery bugs in cloud systems via meta-info analysis
Jie Lu, Chen Liu, Lian Li, Xiaobing Feng, Feng Tan, Jun Yang, Liang You
SOSP, 2019
[Paper] [Code]

Performance-boosting sparsification of the IFDS algorithm with applications to taint analysis
Dongjie He, Haofeng Li , Lei Wang, Haining Meng, Hengjie Zheng, Jie Liu, Shuangwei Hu, Lian Li, Jingling Xue
Distinguished Paper Award, ASE, 2019
[Paper] [Code]

AgamottoEye: Recovering Request Flow for Cloud Systems via Log Analysis
Jie Lu, Feng Li, Lian li
Journal of Computer Science Research, 2019
[Paper] [Code]

Understanding Node Change Bugs for Distributed Systems
Jie Lu, Liu Chen, Lian Li and Xiaobing Feng
SANER, 2019
[Paper] [Code]

CloudRaid: hunting concurrency bugs in the cloud via log-mining
Jie Lu, Feng Li, Lian Li and Xiaobing Feng
ESEC/FSE, 2018
[Paper] [Code]

Understanding and Detecting Evolution-Induced Compatibility Issues in Android Apps
Dongjie He, Lian Li, Lei Wang, Hengjie Zheng, Guangwei Li, and Jingling Xue
ASE, 2018
[Paper] [Code]