Danfeng Yao

Publication Activity (10 Years)

Years Active: 2004-2024
Publications (10 Years): 47

Top Topics

Anomaly Detection

Top Venues

IEEE Trans. Dependable Secur. Comput.

IEEE Trans. Software Eng.

Publications

Miles Frantz, Ya Xiao, Tanmoy Sarkar Pias, Na Meng, Danfeng Yao
Methods and Benchmark for Detecting Cryptographic API Misuses in Python. IEEE Trans. Software Eng. 50 (5) (2024)
Wenjia Song, Sanjula Karanam, Ya Xiao, Jingyuan Qi, Nathan Dautenhahn, Na Meng, Danfeng Yao
Crypto-ransomware Detection through Quantitative API-based Behavioral Profiling. CoRR (2023)
Ya Xiao, Wenjia Song, Jingyuan Qi, Bimal Viswanath, Patrick D. McDaniel, Danfeng Yao
Specializing Neural Networks for Cryptographic Code Completion Applications. IEEE Trans. Software Eng. 49 (6) (2023)
Edward J. Jacobs, Sabrina N. Campelo, Kenneth N. Aycock, Danfeng Yao, Rafael V. Davalos
Spatiotemporal estimations of temperature rise during electroporation treatments using a deep neural network. Comput. Biol. Medicine 161 (2023)
Ying Zhang, Wenjia Song, Zhengjie Ji, Danfeng Yao, Na Meng
How well does LLM generate security tests? CoRR (2023)
Tahmina Sultana Priya, Fan Leng, Anthony C. Luehrs, Eric W. Klee, Alina M. Allen, Konstantinos N. Lazaridis, Danfeng Yao, Shulan Tian
Deep Phenotyping of Non-Alcoholic Fatty Liver Disease Patients with Genetic Factors for Insights into the Complex Disease. CoRR (2023)
Salman Ahmed, Hans Liljestrand, Hani Jamjoom, Matthew Hicks, N. Asokan, Danfeng Yao
Not All Data are Created Equal: Data and Pointer Prioritization for Scalable Protection Against Data-Oriented Attacks. USENIX Security Symposium (2023)
Sharmin Afrose, Ya Xiao, Sazzadur Rahaman, Barton P. Miller, Danfeng Yao
Evaluation of Static Vulnerability Detection Tools With Java Cryptographic API Benchmarks. IEEE Trans. Software Eng. 49 (2) (2023)
Ying Zhang, Md Mahir Asef Kabir, Ya Xiao, Danfeng Yao, Na Meng
Automatic Detection of Java Cryptographic API Misuses: Are We There Yet? IEEE Trans. Software Eng. 49 (1) (2023)
Md Mahir Asef Kabir, Ying Wang, Danfeng Yao, Na Meng
How Do Developers Follow Security-Relevant Best Practices When Using NPM Packages? SecDev (2022)
Ya Xiao, Yang Zhao, Nicholas Allen, Nathan Keynes, Danfeng Yao, Cristina Cifuentes
Industrial Strength Static Detection for Cryptographic API Misuses. SecDev (2022)
Sazzadur Rahaman, Haipeng Cai, Omar Chowdhury, Danfeng Yao
From Theory to Code: Identifying Logical Flaws in Cryptographic Implementations in C/C++. IEEE Trans. Dependable Secur. Comput. 19 (6) (2022)
Ying Zhang, Ya Xiao, Md Mahir Asef Kabir, Danfeng Yao, Na Meng
Example-Based Vulnerability Detection and Repair in Java Code. CoRR (2022)
Ying Zhang, Mahir Kabir, Ya Xiao, Danfeng Yao, Na Meng
Data-Driven Vulnerability Detection and Repair in Java Code. CoRR (2021)
Salman Ahmed, Ya Xiao, Taejoong Chung, Carol Fung, Moti Yung, Danfeng Yao
Privacy Guarantees of BLE Contact Tracing: A Case Study on COVIDWISE. CoRR (2021)
Sharmin Afrose, Ya Xiao, Sazzadur Rahaman, Barton P. Miller, Danfeng Yao
Evaluation of Static Vulnerability Detection Tools with Java Cryptographic API Benchmarks. CoRR (2021)
Ya Xiao, Salman Ahmed, Wenjia Song, Xinyang Ge, Bimal Viswanath, Danfeng Yao
Embedding Code Contexts for Cryptographic API Suggestion: New Methodologies and Comparisons. CoRR (2021)
Yuan Luo, Long Cheng, Hongxin Hu, Guojun Peng, Danfeng Yao
Context-Rich Privacy Leakage Analysis Through Inferring Apps in Smart Home IoT. IEEE Internet Things J. 8 (4) (2021)
Karim O. Elish, Haipeng Cai, Daniel Barton, Danfeng Yao, Barbara G. Ryder
Identifying Mobile Inter-App Communication Risks. IEEE Trans. Mob. Comput. 19 (1) (2020)
Li Xu, Thomas Lux, Tyler H. Chang, Bo Li, Yili Hong, Layne T. Watson, Ali Raza Butt, Danfeng Yao, Kirk W. Cameron
Prediction of High-Performance Computing Input/Output Variability and Its Application to Optimization for System Configurations. CoRR (2020)
Mazharul Islam, Sazzadur Rahaman, Na Meng, Behnaz Hassanshahi, Padmanabhan Krishnan, Danfeng Yao
Coding Practices and Recommendations of Spring Security for Enterprise Applications. CoRR (2020)
Sazzadur Rahaman, Gang Wang, Danfeng Yao
Security Certification in Payment Card Industry: Testbeds, Measurements, and Recommendations. CoRR (2020)
Ke Tian, Danfeng Yao, Barbara G. Ryder, Gang Tan, Guojun Peng
Detection of Repackaged Android Malware with Code-Heterogeneity Features. IEEE Trans. Dependable Secur. Comput. 17 (1) (2020)
Ya Xiao, Yang Zhao, Nicholas Allen, Nathan Keynes, Danfeng Yao, Cristina Cifuentes
Industrial Experience of Finding Cryptographic Vulnerabilities in Large-scale Codebases. CoRR (2020)
Long Cheng, Hans Liljestrand, Md. Salman Ahmed, Thomas Nyman, Trent Jaeger, N. Asokan, Danfeng Yao
Exploitation Techniques and Defenses for Data-Oriented Attacks. SecDev (2019)
Ya Xiao, Qingying Hao, Danfeng Yao
Neural Cryptanalysis: Metrics, Methodology, and Applications in CPS Ciphers. CoRR (2019)
Haipeng Cai, Na Meng, Barbara G. Ryder, Danfeng Yao
DroidCat: Effective Android Malware Detection and Categorization via App-Level Profiling. IEEE Trans. Inf. Forensics Secur. 14 (6) (2019)
Long Cheng, Hans Liljestrand, Thomas Nyman, Yu Tsung Lee, Danfeng Yao, Trent Jaeger, N. Asokan
Exploitation Techniques and Defenses for Data-Oriented Attacks. CoRR (2019)
Sharmin Afrose, Sazzadur Rahaman, Danfeng Yao
CryptoAPI-Bench: A Comprehensive Benchmark on Java Cryptographic API Misuses. SecDev (2019)
Md. Salman Ahmed, Ya Xiao, Gang Tan, Kevin Z. Snow, Fabian Monrose, Danfeng Yao
Measuring Attack Surface Reduction in the Presence of Code (Re-)Randomization. CoRR (2019)
Long Cheng, Ke Tian, Danfeng Yao, Lui Sha, Raheem A. Beyah
Checking is Believing: Event-Aware Program Anomaly Detection in Cyber-Physical Systems. CoRR (2018)
Sazzadur Rahaman, Na Meng, Danfeng Yao
Tutorial: Principles and Practices of Secure Crypto Coding in Java. SecDev (2018)
Thomas C. H. Lux, Layne T. Watson, Tyler H. Chang, Jon Bernard, Bo Li, Xiaodong Yu, Li Xu, Godmar Back, Ali Raza Butt, Kirk W. Cameron, Danfeng Yao, Yili Hong
Novel meshes for multivariate interpolation and approximation. ACM Southeast Regional Conference (2018)
Ke Tian, Steve T. K. Jan, Hang Hu, Danfeng Yao, Gang Wang
Needle in a Haystack: Tracking Down Elite Phishing Domains in the Wild. Internet Measurement Conference (2018)
Sazzadur Rahaman, Ya Xiao, Ke Tian, Fahad Shaon, Murat Kantarcioglu, Danfeng Yao
CHIRON: Deployment-quality Detection of Java Cryptographic Vulnerabilities. CoRR (2018)
Fang Liu, Haipeng Cai, Gang Wang, Danfeng Yao, Karim O. Elish, Barbara G. Ryder
MR-Droid: A Scalable and Prioritized Analysis of Inter-App Communication Risks. IEEE Symposium on Security and Privacy Workshops (2017)
Fang Liu, Chun Wang, Andres Pico, Danfeng Yao, Gang Wang
Measuring the Insecurity of Mobile Deep Links of Android. USENIX Security Symposium (2017)
Ning Zhang, Ruide Zhang, Qiben Yan, Wenjing Lou, Y. Thomas Hou, Danfeng Yao
Black penguin: On the feasibility of detecting intrusion with homogeneous memory. CNS (2017)
Sazzadur Rahaman, Danfeng Yao
Program Analysis of Cryptographic Implementations for Security. SecDev (2017)
Xiaokui Shu, Ke Tian, Andrew Ciambrone, Danfeng Yao
Breaking the Target: An Analysis of Target Data Breach and Lessons Learned. CoRR (2017)
Hussain M. J. Almohri, Long Cheng, Danfeng Yao, Homa Alemzadeh
On Threat Modeling and Mitigation of Medical Cyber-Physical Systems. CHASE (2017)
Hossein Fereidooni, Mauro Conti, Danfeng Yao, Alessandro Sperduti
ANASTASIA: ANdroid mAlware detection using STatic analySIs of Applications. NTMS (2016)
Ke Tian, Danfeng Yao, Barbara G. Ryder, Gang Tan
Analysis of Code Heterogeneity for High-Precision Classification of Repackaged Malware. IEEE Symposium on Security and Privacy Workshops (2016)
Xiaokui Shu, Danfeng Yao
Program Anomaly Detection: Methodology and Practices. CCS (2016)
Xiaokui Shu, Nikolay Laptev, Danfeng Yao
DECT: Distributed Evolving Context Tree for Mining Web Behavior Evolution. EDBT (2016)
Kui Xu, Ke Tian, Danfeng Yao, Barbara G. Ryder
A Sharper Sense of Self: Probabilistic Reasoning of Program Behaviors for Anomaly Detection with Context Sensitivity. DSN (2016)
Hussain M. J. Almohri, Layne T. Watson, Danfeng Yao, Xinming Ou
Security Optimization of Dynamic Networks with Probabilistic Graph Modeling and Linear Programming. IEEE Trans. Dependable Secur. Comput. 13 (4) (2016)
Xiaokui Shu, Jing Zhang, Danfeng Yao, Wu-chun Feng
Rapid Screening of Transformed Data Leaks with Efficient Algorithms and Parallel Computing. CODASPY (2015)
Xiaokui Shu, Danfeng Yao, Naren Ramakrishnan
Unearthing Stealthy Program Attacks Buried in Extremely Long Execution Paths. CCS (2015)
Xiaokui Shu, Jing Zhang, Danfeng Yao, Wu-chun Feng
Rapid and parallel content screening for detecting transformed data exposure. INFOCOM Workshops (2015)
Fang Liu, Xiaokui Shu, Danfeng Yao, Ali Raza Butt
Privacy-Preserving Scanning of Big Content for Sensitive Data Exposure with MapReduce. CODASPY (2015)
Xiaokui Shu, Danfeng Yao, Elisa Bertino
Privacy-Preserving Detection of Sensitive Data Exposure. IEEE Trans. Inf. Forensics Secur. 10 (5) (2015)
Kui Xu, Danfeng Yao, Manuel A. Pérez-Quiñones, Casey Link, E. Scott Geller
Role-playing game for studying user behaviors in security: A case study on email secrecy. CollaborateCom (2014)
Hussain M. J. Almohri, Danfeng Yao, Dennis G. Kafura
Process Authentication for High System Assurance. IEEE Trans. Dependable Secur. Comput. 11 (2) (2014)
Britton Wolfe, Karim O. Elish, Danfeng Yao
High Precision Screening for Android Malware with Dimensionality Reduction. ICMLA (2014)
Huijun Xiong, Qingji Zheng, Xinwen Zhang, Danfeng Yao
CloudSafe: Securing data processing within vulnerable virtualization environments in the cloud. CNS (2013)
Yipeng Wang, Xiao-chun Yun, Muhammad Zubair Shafiq, Liyan Wang, Alex X. Liu, Zhibin Zhang, Danfeng Yao, Yongzheng Zhang, Li Guo
A semantics aware approach to automated reverse engineering unknown protocols. ICNP (2012)
Kui Xu, Huijun Xiong, Chehai Wu, Deian Stefan, Danfeng Yao
Data-Provenance Verification For Secure Hosts. IEEE Trans. Dependable Secur. Comput. 9 (2) (2012)
Hao Zhang, William Banick, Danfeng Yao, Naren Ramakrishnan
User Intention-Based Traffic Dependence Analysis for Anomaly Detection. IEEE Symposium on Security and Privacy Workshops (2012)
Huijun Xiong, Xinwen Zhang, Danfeng Yao, Xiaoxin Wu, Yonggang Wen
Towards end-to-end secure content storage and delivery with public cloud. CODASPY (2012)
Huijun Xiong, Xinwen Zhang, Wei Zhu, Danfeng Yao
CloudSeal: End-to-End Content Protection in Cloud-Based Storage and Delivery Services. SecureComm (2011)
Kui Xu, Danfeng Yao, Qiang Ma, Alexander Crowell
Detecting infection onset with behavior-based policies. NSS (2011)
Deian Stefan, Danfeng Yao
Keystroke-dynamics authentication against synthetic forgeries. CollaborateCom (2010)
Jerry Rick Ramstetter, Yaling Yang, Danfeng Yao
Applications and Security of Next-Generation, User-Centric Wireless Systems. Future Internet 2 (3) (2010)
Chih-Cheng Chang, Brian Thompson, Wendy Hui Wang, Danfeng Yao
Towards publishing recommendation data with predictive anonymization. AsiaCCS (2010)
Roberto Tamassia, Danfeng Yao, William H. Winsborough
Independently Verifiable Decentralized Role-Based Delegation. IEEE Trans. Syst. Man Cybern. Part A 40 (6) (2010)
Tzvi Chumash, Danfeng Yao
Detection and Prevention of Insider Threats in Database Driven Web Services. IFIPTM (2009)
Brian Thompson, Stuart Haber, William G. Horne, Tomas Sander, Danfeng Yao
Privacy-Preserving Computation and Verification of Aggregate Queries on Outsourced Databases. Privacy Enhancing Technologies (2009)
Anitra Babic, Huijun Xiong, Danfeng Yao, Liviu Iftode
Building robust authentication systems with activity-based personal questions. SafeConfig (2009)
Saman Zarandioon, Danfeng Yao, Vinod Ganapathy
Privacy-aware identity management for client-side mashup applications. Digital Identity Management (2009)
Nitya Vyas, Anna Cinzia Squicciarini, Chih-Cheng Chang, Danfeng Yao
Towards automatic privacy management in Web 2.0 with semantic analysis on annotations. CollaborateCom (2009)
Brian Thompson, Danfeng Yao
The union-split algorithm and cluster-based anonymization of social networks. AsiaCCS (2009)
Huijun Xiong, Prateek Malhotra, Deian Stefan, Chehai Wu, Danfeng Yao
User-Assisted Host-Based Detection of Outbound Malware Traffic. ICICS (2009)
Danfeng Yao, Roberto Tamassia
Compact and Anonymous Role-Based Authorization Chain. ACM Trans. Inf. Syst. Secur. 12 (3) (2009)
Vivek Pathak, Danfeng Yao, Liviu Iftode
Securing location aware services over VANET using geographical secure path routing. ICVES (2008)
Saman Zarandioon, Danfeng Yao, Vinod Ganapathy
OMOS: A Framework for Secure Communication in Mashup Applications. ACSAC (2008)
Danfeng Yao, Keith B. Frikken, Mikhail J. Atallah, Roberto Tamassia
Private Information: To Reveal or not to Reveal. ACM Trans. Inf. Syst. Secur. 12 (1) (2008)
Stuart Haber, Yasuo Hatano, Yoshinori Honda, William G. Horne, Kunihiko Miyazaki, Tomas Sander, Satoru Tezoku, Danfeng Yao
Efficient signature schemes supporting redaction, pseudonymization, and data deidentification. AsiaCCS (2008)
Yunhua Koglin, Danfeng Yao, Elisa Bertino
Efficient and Secure Content Processing and Distribution by Cooperative Intermediaries. IEEE Trans. Parallel Distributed Syst. 19 (5) (2008)
Vivek Pathak, Liviu Iftode, Danfeng Yao
Improving Email Trustworthiness through Social-Group Key Authentication. CEAS (2008)
Danfeng Yao
An Ad Hoc Trust Inference Model for Flexible and Controlled Information Sharing. Security and Management (2008)
Danfeng Yao, Roberto Tamassia, Seth Proctor
Private Distributed Scalar Product Protocol With Application To Privacy-Preserving Computation of Trust. IFIPTM (2007)
Danfeng Yao, Yunhua Koglin, Elisa Bertino, Roberto Tamassia
Decentralized authorization and data security in web content delivery. SAC (2007)
Isabel F. Cruz, Roberto Tamassia, Danfeng Yao
Privacy-Preserving Schema Matching Using Mutual Information. DBSec (2007)
Danfeng Yao, Keith B. Frikken, Mikhail J. Atallah, Roberto Tamassia
Point-Based Trust: Define How Much Privacy Is Worth. ICICS (2006)
Michael T. Goodrich, Roberto Tamassia, Danfeng Yao
Notarized Federated Identity Management for Web Services. DBSec (2006)
Danfeng Yao, Roberto Tamassia, Seth Proctor
On Improving the Performance of Role-Based Cascaded Delegation in Ubiquitous Computing. SecureComm (2005)
Danfeng Yao, Michael Shin, Roberto Tamassia, William H. Winsborough
Visualization of Automated Trust Negotiation. VizSEC (2005)
Michael T. Goodrich, Roberto Tamassia, Danfeng Yao
Accredited DomainKeys: A Service Architecture for Improved Email Validation. CEAS (2005)
Roberto Tamassia, Danfeng Yao, William H. Winsborough
Role-based cascaded delegation. SACMAT (2004)
Danfeng Yao, Nelly Fazio, Yevgeniy Dodis, Anna Lysyanskaya
ID-Based Encryption for Complex Hierarchies with Applications to Forward Security and Broadcast Encryption. IACR Cryptol. ePrint Arch. 2004 (2004)
Danfeng Yao, Nelly Fazio, Yevgeniy Dodis, Anna Lysyanskaya
ID-based encryption for complex hierarchies with applications to forward security and broadcast encryption. CCS (2004)