研究方向
代表论文
Convenience at a Cost: The Security Risks of Template-based Development in the App-in-App Ecosystem
Yizhe Shi, Zhemin Yang, Yifan Yang, Yunteng Yang, Min Yang
In Proceedings of the 47th IEEE Symposium on Security and Privacy,
Oakland'26, San Francisco, CA, USA, May 18-21, 2026.
Better Safe than Sorry: Uncovering the Insecure Resource Management in App-in-App Cloud Services
Yizhe Shi, Zhemin Yang, Dingyi Liu, Kangwei Zhong, Jiarun Dai, Min Yang
In Proceedings of The Network and Distributed System Security
Symposium, NDSS'26, San Diego, California, USA, February 23–27, 2026.
The Skeleton Keys: A Large Scale Analysis of Credential Leakage in Mini-apps
Yizhe Shi, Zhemin Yang, Kangwei Zhong, Guangliang Yang, Yifan Yang, Xiaohan Zhang, Min Yang
In Proceedings of The Network and Distributed System Security
Symposium, NDSS'25, San Diego, California, USA, February 23–28, 2025.
[PDF]
Identifying Cross-User Privacy Leakage in Mobile Mini-Apps at A Large Scale
Shuai Li, Zhemin Yang, Yunteng Yang, Dingyi Liu, Min Yang
IEEE Transactions on Information Forensics and Security(TIFS),
2024,
19, 3135-3147.
Are We Getting Well-informed? An In-depth Study of Runtime Privacy Notice Practice in Mobile Apps
Shuai Li, Zhemin Yang, Yuhong Nan, Shutian Yu, Qirui Zhu, Min Yang
In Proceedings of the 31st ACM Conference on Computer and
Communications Security, CCS'24, Salt Lake City, USA, October 14-18, 2024.
[PDF]
Withdrawing is believing? Detecting Inconsistencies Between Withdrawal Choices and Third-party Data Collections
Xiaolin Du, Zhemin Yang, Jiapeng Lin, Yinzhi Cao, Min Yang
In Proceedings of the 45th IEEE Symposium on Security and Privacy,
Oakland'24, San Francisco, CA, USA, May 20-23, 2024.
[PDF]
Notice the Imposter! A Study on User Tag Spoofing Attack in Mobile Apps
Shuai Li, Zhemin Yang, Guangliang Yang, Hange Zhang, Nan Hua, Yurui Huang, Min Yang
In Proceedings of The 32nd USENIX Security Symposium, Security’23,
Anaheim, CA, USA, August 9–11, 2023.
[PDF]
Collect Responsibly But Deliver Arbitrarily? A Study on Cross-User Privacy Leakage in Mobile Apps
Shuai Li, Zhemin Yang, Nan Hua, Peng Liu, Xiaohan Zhang, Guangliang Yang, Min Yang
In Proceedings of the 29th ACM Conference on Computer and
Communications Security, CCS'22, Los Angeles, USA, November 7-11, 2022.
[PDF]