publications

2026

  1. Record and Replay Methods for Software Engineering Reproducibility: A Cross-Layer Survey and Taxonomy
    Chenxi Hou, Chun Jie Chong, Mahya Samdaliri, and
    In Proc. ACM REP, 2026
    HTML PDF
  2. Measuring Reproducibility in LLM Research: A Rubric and Cross-Topic Corpus Study
    Chun Jie Chong, Chenxi Hou, Sichao Liu, and
    In Proc. ACM REP, 2026 🏆Best Paper Award
    HTML PDF Software
  3. Failure Modes of Standalone LLM-Based Test Generation
    Zhihao Yao, and Sichao Liu
    In Proc. IIAI-AAI (SCAI), 2026
    HTML
  4. Poster: Securing llama.cpp Parser Surfaces with Structured Mutation Testing
    Zhihao Yao, and Sichao Liu
    In Accepted to International Conference on Applied Cryptography and Network Security (ACNS), Poster, 2026
  5. Trustworthy Data Paths for Sensitive Smartphone Workloads
    Zhihao Yao
    In Proc. IEEE MDM (PhD Dissertation Showcase), 2026
    HTML
  6. Can LLMs be Effective Code Contributors? A Study on Open-source Projects
    Chun Jie Chong, Muyeed Ahmed, Zhihao Yao, and
    Accepted to International Conference on Evaluation and Assessment in Software Engineering (EASE), 2026
    HTML Software

2025

  1. PACE: Policy Adaptation for Cybersecurity Events Through Formal Verification of LLM-Generated Firewall Policies
    Mahya Samdaliri, and Zhihao Yao
    In Proc. IEEE BigData (CyberHunt Workshop), 2025
    HTML Software
  2. Catamaran: User Privacy Violation Detection in Mobile Logging
    Chenxi Hou, Chun Jie Chong, Zhihao Yao, and
    In Proc. IEEE SecDev, 2025
    HTML Software
  3. NUSGuard: Smart Device Anti-Eavesdropping Protection based on Near-Ultrasonic Interference
    Xiaoxiao Qiao, Man Zhou, Hongwei Li, and
    IEEE Transactions on Information Forensics and Security, 2025
    HTML
  4. PyPitfall: Dependency Chaos and Software Supply Chain Vulnerabilities in Python
    Jacob Mahon, Chenxi Hou, and Zhihao Yao
    In Proc. IEEE BigData (CyberHunt Workshop), 2025
    HTML
  5. Casper: Prompt Sanitization for Protecting User Privacy in Web-Based Large Language Models
    Chun Jie Chong, Chenxi Hou, Zhihao Yao, and
    In Proc. IEEE CSCloud, 2025
    HTML Software

2024

  1. Formal Trust and Threat Modeling Using Large Language Models
    Zhihao Yao
    In Proc. ACSAC Workshop on AI for Cyber Threat Intelligence (WAITI), 2024
    HTML
  2. Artificial-Intelligence Generated Code Considered Harmful: A Road Map for Secure and High-Quality Code Generation
    Chun Jie Chong, Zhihao Yao, and Iulian Neamtiu
    Technical Report 2024-09-27, NJIT, 2024
    HTML PDF
  3. Hora: High Assurance Periodic Availability Guarantee for Life-Critical Applications on Smartphones
    Dylan Zueck, Nathaniel Atallah, Ian Do, and
    In Proc. ACM APSys, 2024
    HTML PDF
  4. ProvCam: A Camera Module with Self-Contained TCB for Producing Verifiable Videos
    Yuxin Liu, Zhihao Yao, Mingyi Chen, and
    In Proc. ACM MobiCom, 2024
    HTML PDF Software Hardware
  5. Poster: StreamGuard: Enabling Secure and Uncensored Video Calls on Mobile Devices
    Chenxi Hou, Zhihao Yao, and Hui Peng
    In Proc. ACM MobiSys Poster, 2024
    HTML PDF

2023

  1. Minimizing a Smartphone’s TCB for Security-Critical Programs with Exclusively-Used, Physically-Isolated, Statically-Partitioned Hardware
    Zhihao Yao, Seyed Mohammadjavad Seyed Talebi, Mingyi Chen, and
    In Proc. ACM MobiSys, 2023 🏆Best Artifact Award
    HTML PDF Artifact Archive Technical Manual Software Hardware
  2. GLeeFuzz: Fuzzing WebGL Through Error Message Guided Mutation
    Hui Peng, Zhihao Yao, Ardalan Amiri Sani, and
    In Proc. USENIX Security Symposium, 2023
    HTML PDF Code Slides
  3. A real-time electrical load forecasting and unsupervised anomaly detection framework
    Xinlin Wang, Zhihao Yao, and Marios Papaefthymiou
    Applied Energy, 2023
    HTML
  4. Building secure systems across all layers
    Zhihao Yao
    Doctoral thesis, University of California, Irvine, 2023
    HTML PDF

2021

  1. Undo Workarounds for Kernel Bugs
    Seyed Mohammadjavad Seyed Talebi, Zhihao Yao, Ardalan Amiri Sani, and
    In Proc. USENIX Security Symposium, 2021
    HTML PDF Code Slides

2018

  1. Sugar: Secure GPU Acceleration in Web Browsers
    Zhihao Yao, Zongheng Ma, Yingtong Liu, and
    In Proc. ACM ASPLOS, 2018
    HTML PDF Supp Code Slides
  2. Milkomeda: Safeguarding the Mobile GPU Interface Using WebGL Security Checks
    Zhihao Yao, Saeed Mirzamohammadi, Ardalan Amiri Sani, and
    In Proc. ACM CCS, 2018
    HTML PDF Blog Code