WhistleBlower: A System-Level Empirical Study on RowHammer. - He, Wei; Zhang, Zhi; Cheng, Yueqiang; Wang, Wenhao; Song, Wei; Gao, Yansong; Zhang, Qifei; Li, Kang; Liu, Dongxi; Nepal, Surya (IEEE Trans. Computers, 2025)

PointCAT: Contrastive Adversarial Training for Robust Point Cloud Recognition. - Huang, Qidong; Dong, Xiaoyi; Chen, Dongdong; Zhou, Hang; Zhang, Weiming; Zhang, Kui; Hua, Gang; Cheng, Yueqiang; Yu, Nenghai (IEEE Trans. Image Process., 2024)

Interface-Based Side Channel in TEE-Assisted Networked Services. - Zhang, Xiaohan; Wang, Jinwen; Cheng, Yueqiang; Li, Qi; Sun, Kun; Zheng, Yao; Zhang, Ning; Li, Xinghua (IEEE/ACM Trans. Netw., 2024)

SoK: Rowhammer on Commodity Operating Systems. - Zhang, Zhi; Chen, Decheng; Qi, Jiahao; Cheng, Yueqiang; Jiang, Shijie; Lin, Yiyang; Gao, Yansong; Nepal, Surya; Zou, Yi; Zhang, Jiliang; Xiang, Yang (2024)

Generating Robust DNN With Resistance to Bit-Flip Based Adversarial Weight Attack. - Liu, Liang; Guo, Yanan; Cheng, Yueqiang; Zhang, Youtao; Yang, Jun (IEEE Trans. Computers, 2023)

SvTPM: SGX-Based Virtual Trusted Platform Modules for Cloud Computing. - Wang, Juan; Wang, Jie; Fan, Chengyang; Yan, Fei; Cheng, Yueqiang; Zhang, Yinqian; Zhang, Wenhui; Yang, Mengda; Hu, Hongxin (IEEE Trans. Cloud Comput., 2023)

SpecBox: A Label-Based Transparent Speculation Scheme Against Transient Execution Attacks. - Tang, Bowen; Wu, Chenggang; Wang, Zhe; Jia, Lichen; Yew, Pen-Chung; Cheng, Yueqiang; Zhang, Yinqian; Wang, Chenxi; Xu, Guoqing Harry (IEEE Trans. Dependable Secur. Comput., 2023)

Implicit Hammer: Cross-Privilege-Boundary Rowhammer Through Implicit Accesses. - Zhang, Zhi; He, Wei; Cheng, Yueqiang; Wang, Wenhao; Gao, Yansong; Liu, Dongxi; Li, Kang; Nepal, Surya; Fu, Anmin; Zou, Yi (IEEE Trans. Dependable Secur. Comput., 2023)

Adversarial Attacks on Adaptive Cruise Control Systems. - Guo, Yanan; Sato, Takami; Cao, Yulong; Chen, Qi Alfred; Cheng, Yueqiang (2023)

Input-Driven Dynamic Program Debloating for Code-Reuse Attack Mitigation. - Wang, Xiaoke; Hui, Tao; Zhao, Lei; Cheng, Yueqiang (2023)

Meltdown-type attacks are still feasible in the wall of kernel page-Table isolation. - Cheng, Yueqiang; Zhang, Zhi; Gao, Yansong; Chen, Zhaofeng; Guo, Shengjian; Zhang, Qifei; Mei, Rui; Nepal, Surya; Xiang, Yang (Comput. Secur., 2022)

Conan: A Practical Real-Time APT Detection System With High Accuracy and Efficiency. - Xiong, Chunlin; Zhu, Tiantian; Dong, Weihao; Ruan, Linqi; Yang, Runqing; Cheng, Yueqiang; Chen, Yan; Cheng, Shuai; Chen, Xutong (IEEE Trans. Dependable Secur. Comput., 2022)

RATScope: Recording and Reconstructing Missing RAT Semantic Behaviors for Forensic Analysis on Windows. - Yang, Runqing; Chen, Xutong; Xu, Haitao; Cheng, Yueqiang; Xiong, Chunlin; Ruan, Linqi; Kavousi, Mohammad; Li, Zhenyuan; Xu, Liheng; Chen, Yan (IEEE Trans. Dependable Secur. Comput., 2022)

Making Information Hiding Effective Again. - Wang, Zhe; Wu, Chenggang; Zhang, Yinqian; Tang, Bowen; Yew, Pen-Chung; Xie, Mengyao; Lai, Yuanming; Kang, Yan; Cheng, Yueqiang; Shi, Zhiping (IEEE Trans. Dependable Secur. Comput., 2022)

Alphuzz: Monte Carlo Search on Seed-Mutation Tree for Coverage-Guided Fuzzing. - Zhao, Yiru; Wang, Xiaoke; Zhao, Lei; Cheng, Yueqiang; Yin, Heng (2022)

SoftTRR: Protect Page Tables against Rowhammer Attacks using Software-only Target Row Refresh. - Zhang, Zhi; Cheng, Yueqiang; Wang, Minghua; He, Wei; Wang, Wenhao; Nepal, Surya; Gao, Yansong; Li, Kang; Wang, Zhe; Wu, Chenggang (2022)

A Retrospective and Futurespective of Rowhammer Attacks and Defenses on DRAM. - Zhang, Zhi; Qi, Jiahao; Cheng, Yueqiang; Jiang, Shijie; Lin, Yiyang; Gao, Yansong; Nepal, Surya; Zou, Yi (CoRR, 2022)

CATTmew: Defeating Software-Only Physical Kernel Isolation. - Cheng, Yueqiang; Zhang, Zhi; Nepal, Surya; Wang, Zhi (IEEE Trans. Dependable Secur. Comput., 2021)

Detecting Hardware-Assisted Virtualization With Inconspicuous Features. - Zhang, Zhi; Cheng, Yueqiang; Gao, Yansong; Nepal, Surya; Liu, Dongxi; Zou, Yi (IEEE Trans. Inf. Forensics Secur., 2021)

BitMine: An End-to-End Tool for Detecting Rowhammer Vulnerability. - Zhang, Zhi; He, Wei; Cheng, Yueqiang; Wang, Wenhao; Gao, Yansong; Wang, Minghua; Li, Kang; Nepal, Surya; Xiang, Yang (IEEE Trans. Inf. Forensics Secur., 2021)

TLB Poisoning Attacks on AMD Secure Encrypted Virtualization. - Li, Mengyuan; Zhang, Yinqian; Wang, Huibo; Li, Kang; Cheng, Yueqiang (2021)

Continuous Release of Data Streams under both Centralized and Local Differential Privacy. - Wang, Tianhao; Chen, Joann Qiongna; Zhang, Zhikun; Su, Dong; Cheng, Yueqiang; Li, Zhou; Li, Ninghui; Jha, Somesh (2021)

Specularizer : Detecting Speculative Execution Attacks via Performance Tracing. - Wang, Wubing; Chen, Guoxing; Cheng, Yueqiang; Zhang, Yinqian; Lin, Zhiqiang (2021)

Aion Attacks: Manipulating Software Timers in Trusted Execution Environment. - Huang, Wei; Xu, Shengjie; Cheng, Yueqiang; Lie, David (2021)

ModelShield: A Generic and Portable Framework Extension for Defending Bit-Flip based Adversarial Weight Attacks. - Guo, Yanan; Liu, Liang; Cheng, Yueqiang; Zhang, Youtao; Yang, Jun (2021)

SpecTaint: Speculative Taint Analysis for Discovering Spectre Gadgets. - Qi, Zhenxiao; Feng, Qian; Cheng, Yueqiang; Yan, Mengjia; Li, Peng; Yin, Heng; Wei, Tao (2021)

Performance-Enhanced Integrity Verification for Large Memories. - Guo, Yanan; Zigerelli, Andrew; Cheng, Yueqiang; Zhang, Youtao; Yang, Jun (2021)

CIPHERLEAKS: Breaking Constant-time Cryptography on AMD SEV via the Ciphertext Side Channel. - Li, Mengyuan; Zhang, Yinqian; Wang, Huibo; Li, Kang; Cheng, Yueqiang (2021)

Hermes Attack: Steal DNN Models with Lossless Inference Accuracy. - Zhu, Yuankun; Cheng, Yueqiang; Zhou, Husheng; Lu, Yantao (2021)

AlphaFuzz: Evolutionary Mutation-based Fuzzing as Monte Carlo Tree Search. - Zhao, Yiru; Shi, Ruiheng; Zhao, Lei; Cheng, Yueqiang (CoRR, 2021)

SoftTRR: Protect Page Tables Against RowHammer Attacks using Software-only Target Row Refresh. - Zhang, Zhi; Cheng, Yueqiang; Wang, Minghua; He, Wei; Wang, Wenhao; Nepal, Surya; Gao, Yansong; Li, Kang; Wang, Zhe; Wu, Chenggang (CoRR, 2021)

SpecBox: A Label-Based Transparent Speculation Scheme Against Transient Execution Attacks. - Tang, Bowen; Wu, Chenggang; Wang, Zhe; Jia, Lichen; Yew, Pen-Chung; Cheng, Yueqiang; Zhang, Yinqian; Wang, Chenxi; Xu, Guoqing Harry (CoRR, 2021)

Exposing cache timing side-channel leaks through out-of-order symbolic execution. - Guo, Shengjian; Chen, Yueqi; Yu, Jiyong; Wu, Meng; Zuo, Zhiqiang; Li, Peng; Cheng, Yueqiang; Wang, Huibo (Proc. ACM Program. Lang., 2020)

Super Root: A New Stealthy Rooting Technique on ARM Devices. - Zhang, Zhangkai; Cheng, Yueqiang; Li, Zhoujun (2020)

COIN Attacks: On Insecurity of Enclave Untrusted Interfaces in SGX. - Khandaker, Mustakimur Rahman; Cheng, Yueqiang; Wang, Zhi; Wei, Tao (2020)

DRAMDig: A Knowledge-assisted Tool to Uncover DRAM Address Mapping. - Wang, Minghua; Zhang, Zhi; Cheng, Yueqiang; Nepal, Surya (2020)

SpecuSym: speculative symbolic execution for cache timing leak detection. - Guo, Shengjian; Chen, Yueqi; Li, Peng; Cheng, Yueqiang; Wang, Huibo; Wu, Meng; Zuo, Zhiqiang (2020)

PThammer: Cross-User-Kernel-Boundary Rowhammer through Implicit Accesses. - Zhang, Zhi; Cheng, Yueqiang; Liu, Dongxi; Nepal, Surya; Wang, Zhi; Yarom, Yuval (2020)

PCKV: Locally Differentially Private Correlated Key-Value Data Collection with Optimized Utility. - Gu, Xiaolan; Li, Ming; Cheng, Yueqiang; Xiong, Li; Cao, Yang (2020)

GhostKnight: Breaching Data Integrity via Speculative Execution. - Zhang, Zhi; Cheng, Yueqiang; Zhang, Yinqian; Nepal, Surya (CoRR, 2020)

DRAMDig: A Knowledge-assisted Tool to Uncover DRAM Address Mapping. - Wang, Minghua; Zhang, Zhi; Cheng, Yueqiang; Nepal, Surya (CoRR, 2020)

Continuous Release of Data Streams under both Centralized and Local Differential Privacy. - Wang, Tianhao; Chen, Joann Qiongna; Zhang, Zhikun; Su, Dong; Cheng, Yueqiang; Li, Zhou; Li, Ninghui; Jha, Somesh (CoRR, 2020)

Hermes Attack: Steal DNN Models with Lossless Inference Accuracy. - Zhu, Yuankun; Cheng, Yueqiang; Zhou, Husheng; Lu, Yantao (CoRR, 2020)

PThammer: Cross-User-Kernel-Boundary Rowhammer through Implicit Accesses. - Zhang, Zhi; Cheng, Yueqiang; Liu, Dongxi; Nepal, Surya; Wang, Zhi; Yarom, Yuval (CoRR, 2020)

Running Language Interpreters Inside SGX: A Lightweight, Legacy-Compatible Script Code Hardening Approach. - Wang, Huibo; Bauman, Erick; Karande, Vishal; Lin, Zhiqiang; Cheng, Yueqiang; Zhang, Yinqian (2019)

Adaptive Call-Site Sensitive Control Flow Integrity. - Khandaker, Mustakimur; Naser, Abu; Liu, Wenqing; Wang, Zhi; Zhou, Yajin; Cheng, Yueqiang (2019)

Defending against ROP Attacks with Nearly Zero Overhead. - Qin, Peng; Tan, Cheng; Zhao, Lei; Cheng, Yueqiang (2019)

SafeHidden: An Efficient and Secure Information Hiding Technique Using Re-randomization. - Wang, Zhe; Wu, Chenggang; Zhang, Yinqian; Tang, Bowen; Yew, Pen-Chung; Xie, Mengyao; Lai, Yuanming; Kang, Yan; Cheng, Yueqiang; Shi, Zhiping (2019)

Understanding Rowhammer Attacks through the Lens of a Unified Reference Framework. - Lou, Xiaoxuan; Zhang, Fan; Chua, Zheng Leong; Liang, Zhenkai; Cheng, Yueqiang; Zhou, Yajin (CoRR, 2019)

SvTPM: A Secure and Efficient vTPM in the Cloud. - Wang, Juan; Fan, Chengyang; Wang, Jie; Cheng, Yueqiang; Zhang, Yinqian; Zhang, Wenhui; Liu, Peng; Hu, Hongxin (CoRR, 2019)

PiBooster: A Light-Weight Approach to Performance Improvements in Page Table Management for Paravirtual Virtual-Machines. - Zhang, Zhi; Cheng, Yueqiang (CoRR, 2019)

SpecuSym: Speculative Symbolic Execution for Cache Timing Leak Detection. - Guo, Shengjian; Chen, Yueqi; Li, Peng; Cheng, Yueqiang; Wang, Huibo; Wu, Meng; Zuo, Zhiqiang (CoRR, 2019)

PCKV: Locally Differentially Private Correlated Key-Value Data Collection with Optimized Utility. - Gu, Xiaolan; Li, Ming; Cheng, Yueqiang; Xiong, Li; Cao, Yang (CoRR, 2019)

TeleHammer : A Stealthy Cross-Boundary Rowhammer Technique. - Zhang, Zhi; Cheng, Yueqiang; Liu, Dongxi; Nepal, Surya; Wang, Zhi (CoRR, 2019)

KASR: A Reliable and Practical Approach to Attack Surface Reduction of Commodity OS Kernels. - Zhang, Zhi; Cheng, Yueqiang; Nepal, Surya; Liu, Dongxi; Shen, Qingni; Rabhi, Fethi A. (2018)

Still Hammerable and Exploitable: on the Effectiveness of Software-only Physical Kernel Isolation. - Cheng, Yueqiang; Zhang, Zhi; Nepal, Surya (CoRR, 2018)

A Reliable and Practical Approach to Kernel Attack Surface Reduction of Commodity OS. - Zhang, Zhi; Cheng, Yueqiang; Nepal, Surya; Liu, Dongxi; Shen, Qingni; Rabhi, Fethi A. (CoRR, 2018)

Interface-Based Side Channel Attack Against Intel SGX. - Wang, Jinwen; Cheng, Yueqiang; Li, Qi; Jiang, Yong (CoRR, 2018)

deExploit: Identifying misuses of input data to diagnose memory-corruption exploits at the binary level. - Wang, Run; Liu, Pei; Zhao, Lei; Cheng, Yueqiang; Wang, Lina (J. Syst. Softw., 2017)

Secure and Efficient Software-based Attestation for Industrial Control Devices with ARM Processors. - Chen, Binbin; Dong, Xinshu; Bai, Guangdong; Jauhar, Sumeet; Cheng, Yueqiang (2017)

SPOKE: Scalable Knowledge Collection and Attack Surface Analysis of Access Control Policy for Security Enhanced Android. - Wang, Ruowen; Azab, Ahmed M.; Enck, William; Li, Ninghui; Ning, Peng; Chen, Xun; Shen, Wenbo; Cheng, Yueqiang (2017)

POSTER: Rust SGX SDK: Towards Memory Safety in Intel SGX Enclave. - Ding, Yu; Duan, Ran; Li, Long; Cheng, Yueqiang; Zhang, Yulong; Chen, Tanghui; Wei, Tao; Wang, Huibo (2017)

ReRanz: A Light-Weight Virtual Machine to Mitigate Memory Disclosure Attacks. - Wang, Zhe; Wu, Chenggang; Li, Jianjun; Lai, Yuanming; Zhang, Xiangyu; Hsu, Wei-Chung; Cheng, Yueqiang (2017)

PiBooster: Performance Accelerations in Page Table Management for Paravirtual VMs. - Zhang, Zhi; Cheng, Yueqiang (2016)

Efficient Virtualization-Based Application Protection Against Untrusted Operating System. - Cheng, Yueqiang; Ding, Xuhua; Deng, Robert H. (2015)

Reversing and Identifying Overwritten Data Structures for Memory-Corruption Exploit Diagnosis. - Zhao, Lei; Wang, Run; Wang, Lina; Cheng, Yueqiang (2015)

SuperCall: A Secure Interface for Isolated Execution Environment to Dynamically Use External Services. - Cheng, Yueqiang; Li, Qing; Yu, Miao; Ding, Xuhua; Shen, Qingni (2015)

Establishing Software-Only Root of Trust on Embedded Systems: Facts and Fiction. - Li, Yanlin; Cheng, Yueqiang; Gligor, Virgil D.; Perrig, Adrian (2015)

ROPecker: A Generic and Practical Approach For Defending Against ROP Attacks. - Cheng, Yueqiang; Zhou, Zongwei; Yu, Miao; Ding, Xuhua; Deng, Robert H. (2014)

DriverGuard: Virtualization-Based Fine-Grained Protection on I/O Flows. - Cheng, Yueqiang; Ding, Xuhua; Deng, Robert H. (ACM Trans. Inf. Syst. Secur., 2013)

Guardian: Hypervisor as Security Foothold for Personal Computers. - Cheng, Yueqiang; Ding, Xuhua (2013)

Virtualization Based Password Protection against Malware in Untrusted Operating Systems. - Cheng, Yueqiang; Ding, Xuhua (2012)

DriverGuard: A Fine-Grained Protection on I/O Flows. - Cheng, Yueqiang; Ding, Xuhua; Deng, Robert H. (2011)

Remote Attestation on Function Execution (Work-in-Progress). - Gu, Liang; Cheng, Yueqiang; Ding, Xuhua; Deng, Robert H.; Guo, Yao; Shao, Weizhong (2009)