Haixin Duan

Publication Activity (10 Years)

Years Active: 2019-2024
Publications (10 Years): 67

Top Topics

Automated Discovery

Top Venues

USENIX Security Symposium

Publications

Ruixuan Li, Baojun Liu, Chaoyi Lu, Haixin Duan, Jun Shao
A Worldwide View on the Reachability of Encrypted DNS Services. WWW (2024)
Yunyi Zhang, Baojun Liu, Haixin Duan, Min Zhang, Xiang Li, Fan Shi, Chengxi Xu, Eihal Alowaisheq
Rethinking the Security Threats of Stale DNS Glue Records. USENIX Security Symposium (2024)
Yijing Liu, Yiming Zhang, Baojun Liu, Haixin Duan, Qiang Li, Mingxuan Liu, Ruixuan Li, Jia Yao
Tickets or Privacy? Understand the Ecosystem of Chinese Ticket Grabbing Apps. USENIX Security Symposium (2024)
Xiaoyin Liu, Wenzhi Li, Qinsheng Hou, Shishuai Yang, Lingyun Ying, Wenrui Diao, Yanan Li, Shanqing Guo, Haixin Duan
From Promises to Practice: Evaluating the Private Browsing Modes of Android Browser Apps. WWW (2024)
Yunyi Zhang, Mingming Zhang, Baojun Liu, Zhan Liu, Jia Zhang, Haixin Duan, Min Zhang, Fan Shi, Chengxi Xu
Cross the Zone: Toward a Covert Domain Hijacking via Shared DNS Infrastructure. USENIX Security Symposium (2024)
Qifan Zhang, Xuesong Bai, Xiang Li, Haixin Duan, Qi Li, Zhou Li
ResolverFuzz: Automated Discovery of DNS Resolver Vulnerabilities with Query-Response Fuzzing. USENIX Security Symposium (2024)
Yu Bi, Mingshuo Yang, Yong Fang, Xianghang Mi, Shanqing Guo, Shujun Tang, Haixin Duan
An Empirical Study of Open Edge Computing Platforms: Ecosystem, Usage, and Security Risks. CoRR (2024)
Ruijie Li, Chenyang Zhang, Huajun Chai, Lingyun Ying, Haixin Duan, Jun Tao
PowerPeeler: A Precise and General Dynamic Deobfuscation Method for PowerShell Scripts. CoRR (2024)
Yaru Yang, Yiming Zhang, Tao Wan, Chuhan Wang, Haixin Duan, Jianjun Chen, Yishen Li
Uncovering Security Vulnerabilities in Real-world Implementation and Deployment of 5G Messaging Services. WISEC (2024)
Yunyi Zhang, Mingxuan Liu, Baojun Liu, Yiming Zhang, Haixin Duan, Min Zhang, Hui Jiang, Yanzhe Li, Fan Shi
Into the Dark: Unveiling Internal Site Search Abused for Black Hat SEO. USENIX Security Symposium (2024)
Yacong Gu, Lingyun Ying, Huajun Chai, Chu Qiao, Haixin Duan, Xing Gao
Continuous Intrusion: Characterizing the Security of Continuous Integration Services. SP (2023)
Qinsheng Hou, Wenrui Diao, Yanhao Wang, Chenglin Mao, Lingyun Ying, Song Liu, Xiaofeng Liu, Yuanzhi Li, Shanqing Guo, Meining Nie, Haixin Duan
Can We Trust the Phone Vendors? Comprehensive Security Measurements on the Android Firmware Ecosystem. IEEE Trans. Software Eng. 49 (7) (2023)
Mingxuan Liu, Zihan Zhang, Yiming Zhang, Chao Zhang, Zhou Li, Qi Li, Haixin Duan, Donghong Sun
Automatic Generation of Adversarial Readable Chinese Texts. IEEE Trans. Dependable Secur. Comput. 20 (2) (2023)
Wei Xu, Xiang Li, Chaoyi Lu, Baojun Liu, Haixin Duan, Jia Zhang, Jianjun Chen, Tao Wan
TsuKing: Coordinating DNS Resolvers and Queries into Potent DoS Amplifiers. CCS (2023)
Mingming Zhang, Xiang Li, Baojun Liu, Jianyu Lu, Yiming Zhang, Jianjun Chen, Haixin Duan, Shuang Hao, Xiaofeng Zheng
Detecting and Measuring Security Risks of Hosting-Based Dangling Domains. SIGMETRICS (Abstracts) (2023)
Yacong Gu, Lingyun Ying, Yingyuan Pu, Xiao Hu, Huajun Chai, Ruimin Wang, Xing Gao, Haixin Duan
Investigating Package Related Security Threats in Software Registries. SP (2023)
Fenglu Zhang, Baojun Liu, Eihal Alowaisheq, Jianjun Chen, Chaoyi Lu, Linjian Song, Yong Ma, Ying Liu, Haixin Duan, Min Yang
Silence is not Golden: Disrupting the Load Balancing of Authoritative DNS Servers. ACM TUR-C (2023)
Fenglu Zhang, Yunyi Zhang, Baojun Liu, Eihal Alowaisheq, Lingyun Ying, Xiang Li, Zaifeng Zhang, Ying Liu, Haixin Duan, Min Zhang
Wolf in Sheep's Clothing: Evaluating Security Risks of the Undelegated Record on DNS Hosting Services. IMC (2023)
Zihao Jin, Shuo Chen, Yang Chen, Haixin Duan, Jianjun Chen, Jianping Wu
A Security Study about Electron Applications and a Programming Methodology to Tame DOM Functionalities. NDSS (2023)
Mingming Zhang, Xiang Li, Baojun Liu, Jianyu Lu, Yiming Zhang, Jianjun Chen, Haixin Duan, Shuang Hao, Xiaofeng Zheng
Detecting and Measuring Security Risks of Hosting-Based Dangling Domains. Proc. ACM Meas. Anal. Comput. Syst. 7 (1) (2023)
Yue Qin, Zhuoqun Fu, Chuyun Deng, Xiaojing Liao, Jia Zhang, Haixin Duan
Stolen Risks of Models with Security Properties. CCS (2023)
Zhongyu Pei, Xingman Chen, Songtao Yang, Haixin Duan, Chao Zhang
TAICHI: Transform Your Secret Exploits Into Mine From a Victim's Perspective. IEEE Trans. Dependable Secur. Comput. 20 (6) (2023)
Run Guo, Jianjun Chen, Yihang Wang, Keran Mu, Baojun Liu, Xiang Li, Chao Zhang, Haixin Duan, Jianping Wu
Temporal CDN-Convex Lens: A CDN-Assisted Practical Pulsing DDoS Attack. USENIX Security Symposium (2023)
Fenglu Zhang, Baojun Liu, Eihal Alowaisheq, Jianjun Chen, Chaoyi Lu, Linjian Song, Yong Ma, Ying Liu, Haixin Duan, Min Yang
Silence is not Golden: Disrupting the Load Balancing of Authoritative DNS Servers. CCS (2023)
Xiang Li, Baojun Liu, Xuesong Bai, Mingming Zhang, Qifan Zhang, Zhou Li, Haixin Duan, Qi Li
Ghost Domain Reloaded: Vulnerable Links in Domain Name Delegation and Revocation. NDSS (2023)
Xiang Li, Chaoyi Lu, Baojun Liu, Qifan Zhang, Zhou Li, Haixin Duan, Qi Li
The Maginot Line: Attacking the Boundary of DNS Caching Protection. USENIX Security Symposium (2023)
Zhenrui Zhang, Geng Hong, Xiang Li, Zhuoqun Fu, Jia Zhang, Mingxuan Liu, Chuhan Wang, Jianjun Chen, Baojun Liu, Haixin Duan, Chao Zhang, Min Yang
Under the Dark: A Systematical Study of Stealthy Mining Pools (Ab)use in the Wild. CCS (2023)
Qifan Zhang, Xuesong Bai, Xiang Li, Haixin Duan, Qi Li, Zhou Li
ResolverFuzz: Automated Discovery of DNS Resolver Vulnerabilities with Query-Response Fuzzing. CoRR (2023)
Xingman Chen, Yinghao Shi, Zheyu Jiang, Yuan Li, Ruoyu Wang, Haixin Duan, Haoyu Wang, Chao Zhang
MTSan: A Feasible and Practical Memory Sanitizer for Fuzzing COTS Binaries. USENIX Security Symposium (2023)
Qinsheng Hou, Wenrui Diao, Yanhao Wang, Xiaofeng Liu, Song Liu, Lingyun Ying, Shanqing Guo, Yuanzhi Li, Meining Nie, Haixin Duan
Large-scale Security Measurements on the Android Firmware Ecosystem. ICSE (2022)
Zhuoqun Fu, Mingxuan Liu, Yue Qin, Jia Zhang, Yuan Zou, Qilei Yin, Qi Li, Haixin Duan
Encrypted Malware Traffic Detection via Graph-based Network Analysis. RAID (2022)
Geng Hong, Zhemin Yang, Sen Yang, Xiaojing Liao, Xiaolin Du, Min Yang, Haixin Duan
Analyzing Ground-Truth Data of Mobile Gambling Scams. IEEE Symposium on Security and Privacy (2022)
Kaiwen Shen, Jianyu Lu, Yaru Yang, Jianjun Chen, Mingming Zhang, Haixin Duan, Jia Zhang, Xiaofeng Zheng
HDiff: A Semi-automatic Framework for Discovering Semantic Gap Attack in HTTP Implementations. DSN (2022)
Libo Chen, Quanpu Cai, Zhenbang Ma, Yanhao Wang, Hong Hu, Minghang Shen, Yue Liu, Shanqing Guo, Haixin Duan, Kaida Jiang, Zhi Xue
SFuzz: Slice-based Fuzzing for Real-Time Operating Systems. CCS (2022)
Lei Zhang, Keke Lian, Haoyu Xiao, Zhibo Zhang, Peng Liu, Yuan Zhang, Min Yang, Haixin Duan
Exploit the Last Straw That Breaks Android Systems. IEEE Symposium on Security and Privacy (2022)
Xuewei Feng, Qi Li, Kun Sun, Ke Xu, Baojun Liu, Xiaofeng Zheng, Qiushi Yang, Haixin Duan, Zhiyun Qian
PMTUD is not Panacea: Revisiting IP Fragmentation Attacks against TCP. NDSS (2022)
Chuhan Wang, Kaiwen Shen, Minglei Guo, Yuxuan Zhao, Mingming Zhang, Jianjun Chen, Baojun Liu, Xiaofeng Zheng, Haixin Duan, Yanzhong Lin, Qingfeng Pan
A Large-scale and Longitudinal Measurement Study of DKIM Deployment. USENIX Security Symposium (2022)
Yiming Zhang, Mingxuan Liu, Mingming Zhang, Chaoyi Lu, Haixin Duan
Ethics in Security Research: Visions, Reality, and Paths Forward. EuroS&P Workshops (2022)
Mingshuo Yang, Yunnan Yu, Xianghang Mi, Shujun Tang, Shanqing Guo, Yilin Li, Xiaofeng Zheng, Haixin Duan
An Extensive Study of Residential Proxies in China. CoRR (2022)
Fenglu Zhang, Chaoyi Lu, Baojun Liu, Haixin Duan, Ying Liu
Measuring the Practical Effect of DNS Root Server Instances: A China-Wide Case Study. PAM (2022)
Zihao Jin, Ziqiao Kong, Shuo Chen, Haixin Duan
Timing-Based Browsing Privacy Vulnerabilities Via Site Isolation. IEEE Symposium on Security and Privacy (2022)
Huikai Xu, Miao Yu, Yanhao Wang, Yue Liu, Qinsheng Hou, Zhenbang Ma, Haixin Duan, Jianwei Zhuge, Baojun Liu
Trampoline Over the Air: Breaking in IoT Devices Through MQTT Brokers. EuroS&P (2022)
Qinge Xie, Shujun Tang, Xiaofeng Zheng, Qingran Lin, Baojun Liu, Haixin Duan, Frank Li
Building an Open, Robust, and Stable Voting-Based Domain Top List. USENIX Security Symposium (2022)
Huajun Chai, Lingyun Ying, Haixin Duan, Daren Zha
Invoke-Deobfuscation: AST-Based and Semantics-Preserving Deobfuscation for PowerShell Scripts. DSN (2022)
Mingshuo Yang, Yunnan Yu, Xianghang Mi, Shujun Tang, Shanqing Guo, Yilin Li, Xiaofeng Zheng, Haixin Duan
An Extensive Study of Residential Proxies in China. CCS (2022)
Shiyue Nie, Yiming Zhang, Tao Wan, Haixin Duan, Song Li
Measuring the Deployment of 5G Security Enhancement. WISEC (2022)
Mingxuan Liu, Yiming Zhang, Baojun Liu, Haixin Duan
Exploring the Characteristics and Security Risks of Emerging Emoji Domain Names. ESORICS (3) (2022)
Hui Gao, Yiming Zhang, Tao Wan, Jia Zhang, Haixin Duan
On Evaluating Delegated Digital Signing of Broadcasting Messages in 5G. GLOBECOM (2021)
Kaiwen Shen, Chuhan Wang, Minglei Guo, Xiaofeng Zheng, Chaoyi Lu, Baojun Liu, Yuxuan Zhao, Shuang Hao, Haixin Duan, Qingfeng Pan, Min Yang
Weak Links in Authentication Chains: A Large-scale Analysis of Email Sender Spoofing Attacks. USENIX Security Symposium (2021)
Libo Chen, Yanhao Wang, Quanpu Cai, Yunfan Zhan, Hong Hu, Jiaqi Linghu, Qinsheng Hou, Chao Zhang, Haixin Duan, Zhi Xue
Sharing More and Checking Less: Leveraging Common Input Keywords to Detect Bugs in Embedded Systems. USENIX Security Symposium (2021)
Chaoyi Lu, Baojun Liu, Yiming Zhang, Zhou Li, Fenglu Zhang, Haixin Duan, Ying Liu, Joann Qiongna Chen, Jinjin Liang, Zaifeng Zhang, Shuang Hao, Min Yang
From WHOIS to WHOWAS: A Large-Scale Measurement Study of Domain Registration Privacy under the GDPR. NDSS (2021)
Hao Yang, Kun Du, Yubao Zhang, Shuai Hao, Haining Wang, Jia Zhang, Haixin Duan
Mingling of Clear and Muddy Water: Understanding and Detecting Semantic Confusion in Blackhat SEO. ESORICS (1) (2021)
Mingxuan Liu, Yiming Zhang, Baojun Liu, Zhou Li, Haixin Duan, Donghong Sun
Detecting and Characterizing SMS Spearphishing Attacks. ACSAC (2021)
Yiming Zhang, Baojun Liu, Chaoyi Lu, Zhou Li, Haixin Duan, Jiachen Li, Zaifeng Zhang
Rusted Anchors: A National Client-Side View of Hidden Root CAs in the Web PKI Ecosystem. CCS (2021)
Xiang Li, Baojun Liu, Xiaofeng Zheng, Haixin Duan, Qi Li, Youjun Huang
Fast IPv6 Network Periphery Discovery and Security Implications. DSN (2021)
Weizhong Li, Kaiwen Shen, Run Guo, Baojun Liu, Jia Zhang, Haixin Duan, Shuang Hao, Xiarun Chen, Yao Wang
CDN Backfired: Amplification Attacks Based on HTTP Range Requests. DSN (2020)
Kun Du, Hao Yang, Yubao Zhang, Haixin Duan, Haining Wang, Shuang Hao, Zhou Li, Min Yang
Understanding Promotion-as-a-Service on GitHub. ACSAC (2020)
Yuyu He, Lei Zhang, Zhemin Yang, Yinzhi Cao, Keke Lian, Shuai Li, Wei Yang, Zhibo Zhang, Min Yang, Yuan Zhang, Haixin Duan
TextExerciser: Feedback-driven Text Input Exercising for Android Applications. IEEE Symposium on Security and Privacy (2020)
Yiming Zhang, Baojun Liu, Chaoyi Lu, Zhou Li, Haixin Duan, Shuang Hao, Mingxuan Liu, Ying Liu, Dong Wang, Qiang Li
Lies in the Air: Characterizing Fake-base-station Spam Ecosystem in China. CCS (2020)
Run Guo, Weizhong Li, Baojun Liu, Shuang Hao, Jia Zhang, Haixin Duan, Kaiwen Sheng, Jianjun Chen, Ying Liu
CDN Judo: Breaking the CDN DoS Protection with Itself. NDSS (2020)
Kaiwen Shen, Chuhan Wang, Minglei Guo, Xiaofeng Zheng, Chaoyi Lu, Baojun Liu, Yuxuan Zhao, Shuang Hao, Haixin Duan, Qingfeng Pan, Min Yang
Weak Links in Authentication Chains: A Large-scale Analysis of Email Sender Spoofing Attacks. CoRR (2020)
Mingming Zhang, Xiaofeng Zheng, Kaiwen Shen, Ziqiao Kong, Chaoyi Lu, Yu Wang, Haixin Duan, Shuang Hao, Baojun Liu, Min Yang
Talking with Familiar Strangers: An Empirical Study on HTTPS Context Confusion Attacks. CCS (2020)
Keyu Man, Zhiyun Qian, Zhongjie Wang, Xiaofeng Zheng, Youjun Huang, Haixin Duan
DNS Cache Poisoning Attack Reloaded: Revolutions with Side Channels. CCS (2020)
Xiaofeng Zheng, Chaoyi Lu, Jian Peng, Qiushi Yang, Dongjie Zhou, Baojun Liu, Keyu Man, Shuang Hao, Haixin Duan, Zhiyun Qian
Poison Over Troubled Forwarders: A Cache Poisoning Attack Targeting DNS Forwarding Devices. USENIX Security Symposium (2020)
Zihan Zhang, Mingxuan Liu, Chao Zhang, Yiming Zhang, Zhou Li, Qi Li, Haixin Duan, Donghong Sun
Argot: Generating Adversarial Readable Chinese Texts. IJCAI (2020)
Kun Yang, Hanqing Zhao, Chao Zhang, Jianwei Zhuge, Haixin Duan
Fuzzing IPC with Knowledge Inference. SRDS (2019)
Guanyu Li, Menghao Zhang, Chang Liu, Xiao Kong, Ang Chen, Guofei Gu, Haixin Duan
NETHCF: Enabling Line-rate and Adaptive Spoofed IP Traffic Filtering. ICNP (2019)