A Security Study about Electron Applications and a Programming Methodology to Tame DOM Functionalities
Zihao Jin, Shuo Chen, Yang Chen, Haixin Duan, Jianjun Chen, Jianping Wu
Symposium on Network and Distributed System Security (NDSS) | March 2023
Shuo Chen
Senior Principal Researcher
Publications
Publications by Year
-
-
Timing-Based Browsing Privacy Vulnerabilities Via Site Isolation
Zihao Jin, Ziqiao Kong, Shuo Chen, Haixin Duan
IEEE Symposium on Security and Privacy (Oakland) | May 2022
-
Forerunner: Constraint-based Speculative Transaction Execution for Ethereum
Yang Chen, Zhongxin Guo, Runhuai Li, Shuo Chen, Lidong Zhou, Yajin Zhou, Xian Zhang
SOSP 2021 | October 2021
Argus: A Fully Transparent Incentive System for Anti-Piracy Campaigns
Xian Zhang, Xiaobing Guo, Zixuan Zeng, Wenyan Liu, Zhongxin Guo, Yang Chen, Shuo Chen, Qiufeng Yin, Mao Yang
The 40th International Symposium on Reliable Distributed Systems (SRDS) | September 2021
Agatha: Smart Contract for DNN Computation
Zihan Zheng, Peichen Xie, Xian Zhang, Shuo Chen, Yang Chen, Xiaobing Guo, Guangzhong Sun, Guangyu Sun, Lidong Zhou
May 2021
Characterizing Ethereum’s Mining Power Decentralization at a Deeper Level
Liyi Zeng, Yang Chen, Shuo Chen, Xian Zhang, Zhongxin Guo, Wei Xu, Thomas Moscibroda
IEEE Conference on Computer Communications (INFOCOM) | May 2021
-
Formal Verification of Workflow Policies for Smart Contracts in Azure Blockchain
Yuepeng Wang, Shuvendu Lahiri, Shuo Chen, Rong Pan, Isil Dillig, Cody Born, Immad Naseer, Kostas Ferles
Verified Software: Theories, Tools and Experiments | September 2019
-
We Still Don’t Have Secure Cross-Domain Requests: an Empirical Study of CORS
Jianjun Chen, Jian Jiang, Haixin Duan, Tao Wan, Shuo Chen, Vern Paxson, Min Yang
Proceedings of USENIX Security Symposium | August 2018
-
SVAuth – A Single-Sign-On Integration Solution with Runtime Verification (tool paper)
Shuo Chen, Matt McCutchen, Phuong Cao, Shaz Qadeer, Ravishankar K. Iyer
International Conference on Runtime Verification 2017 | September 2017
-
Swords and Shields – A Study of Mobile Game Hacks and Existing Defenses
Yuan Tian, Eric Chen, Xiaojun Ma, Shuo Chen, Xiao Wang, Patrick Tague
Annual Computer Security Applications Conference (ACSAC) 2016 | December 2016
Self-Verifying Execution (Position Paper)
Matt McCutchen, Daniel Song, Shuo Chen, Shaz Qadeer
Proceedings of the IEEE Cybersecurity Development Conference (SecDev) | November 2016
Proceedings of the IEEE Cybersecurity Development Conference (SecDev)
The “Web/Local” Boundary Is Fuzzy: A Security Study of Chrome’s Process-based Sandboxing
Yaoqi Jia, Zheng Leong Chua, Hong Hu, Shuo Chen, Prateek Saxena, Zhenkai Liang
Proceedings of the ACM Conference on Computer and Communications Security (CCS) | October 2016
Uncovering Bugs in Distributed Storage Systems during Testing (not in Production!)
Pantazis Deligiannis, Matt McCutchen, Paul Thomson, Shuo Chen, Alastair F. Donaldson, John Erickson, Cheng Huang, Akash Lal, Rashmi Mudduluru, Shaz Qadeer, Wolfram Schulte
14th USENIX Conference on File and Storage Technologies (FAST) | February 2016
-
Enlightening Ph.D. Students with the Elegance of Logic — My personal memory about Prof. Jose Meseguer
Proceedings of the Festschrift Symposium in Honor of Jose Meseguer (LNCS 9200) | September 2015
Cookies Lack Integrity: Real-World Implications
Xiaofeng Zheng, Jian Jiang, Jinjin Liang, Haixin Duan, Shuo Chen, Tao Wan
Proceedings of USENIX Security Symposium | August 2015
Securing Multiparty Online Services via Certification of Symbolic Transactions
Eric Chen, Shuo Chen, Shaz Qadeer, Rui Wang
Proceedings of the IEEE Symposium on Security and Privacy (Oakland) | May 2015
test test
-
OAuth Demystified for Mobile Application Developers
Eric Chen, Yutong Pei, Shuo Chen, Yuan Tian, Robert Kotcher, Patrick Tague
Proceedings of the ACM Conference on Computer and Communications Security (CCS) | November 2014
Brahmastra: Driving Apps to Test the Security of Third-Party Components
Ravi Bhoraskar, Seungyeop Han, Jinseong Jeon, Tanzirul Azim, Shuo Chen, Suman Nath, Rui Wang, David Wetherall, Jaeyeon Jung
USENIX Security Symposium | August 2014
-
Unauthorized Origin Crossing on Mobile Platforms: Threats and Mitigation
Rui Wang, Luyi Xing, XiaoFeng Wang, Shuo Chen
Proceedings of the ACM Conference on Computer and Communications Security (CCS) | November 2013
Explicating SDKs: Uncovering Assumptions Underlying Secure Authentication and Authorization
Rui Wang, Yuchen Zhou, Shuo Chen, Shaz Qadeer, David Evans, Yuri Gurevich,
Proceedings of the USENIX Security Symposium | August 2013
InteGuard: Toward Automatic Protection of Third-Party Web Service Integrations
Luyi Xing, Yangyi Chen, XiaoFeng Wang, Shuo Chen
Network & Distributed System Security Symposium (NDSS) | February 2013
Network & Distributed System Security Symposium (NDSS)
-
Signing Me onto Your Accounts through Facebook and Google: a Traffic-Guided Security Study of Commercially Deployed Single-Sign-On Web Services
Rui Wang, Shuo Chen, XiaoFeng Wang
Proceedings of the IEEE Symposium on Security and Privacy (Oakland) | May 2012
-
How to Shop for Free Online – Security Analysis of Cashier-as-a-Service Based Web Stores
Rui Wang, Shuo Chen, XiaoFeng Wang, Shaz Qadeer
Proceedings of the IEEE Symposium on Security and Privacy (Oakland) (Best Practical Paper award) | May 2011
Proceedings of the IEEE Symposium on Security and Privacy (Oakland) (Best Practical Paper award)
-
Sidebuster: Automated Detection and Quantification of Side-Channel Leaks in Web Application Development
Kehuan Zhang, Zhou Li, Rui Wang, XiaoFeng Wang, Shuo Chen
Proceedings of the ACM Conference on Computer and Communications Security (CCS) | October 2010
Side-Channel Leaks in Web Applications: a Reality Today, a Challenge Tomorrow
Shuo Chen, Rui Wang, XiaoFeng Wang, Kehuan Zhang
Proceedings of the IEEE Symposium on Security and Privacy (Oakland) | May 2010
Residue Objects: A Challenge to Web Browser Security
Shuo Chen, Hong Chen, Manuel Caballero
Proceedings of EuroSys | April 2010
-
Pretty-Bad-Proxy: An Overlooked Adversary in Browsers’ HTTPS Deployments
Shuo Chen, Ziqing Mao, Yi-Min Wang, Ming Zhang
Proceedings of the IEEE Symposium on Security and Privacy (Oakland) | May 2009
Proceedings of the IEEE Symposium on Security and Privacy (Oakland)
-
An Analysis of Browser Domain-Isolation Bugs and A Light-Weight Transparent Defense Mechanism
Shuo Chen, David Ross, Yi-Min Wang
Proceedings of the ACM Conference on Computer and Communications Security (CCS) | October 2007
Proceedings of the ACM Conference on Computer and Communications Security (CCS)
Automatically Segregating Greedy and Malicious Internet Flows
Jose Brustoloni, Shuo Chen
Proceedings of IEEE International Conference on Communications | June 2007
A Systematic Approach to Uncover Security Flaws in GUI Logic
Shuo Chen, Ralf Sasse, Jose Meseguer, Helen Wang, Yi-Min Wang
Proceedings of the IEEE Symposium on Security and Privacy (Oakland) | May 2007
Proceedings of the IEEE Symposium on Security and Privacy (Oakland)
-
Non-Control-Data Attacks Are Realistic Threats
Shuo Chen, Jun Xu, Emre C. Sezer, Prachi Gauriar, Ravishankar K. Iyer
Proceedings of USENIX Security Symposium | August 2005
Source code of attack programs can be obtained from the attached txt file.
Defeating Memory Corruption Attacks via Pointer Taintedness Detection
Shuo Chen, Jun Xu, Nithin Nakka, Zbigniew Kalbarczyk, Ravishankar K. Iyer
Proceedings of IEEE International Conference on Dependable Systems and Networks | June 2005
A Black-Box Tracing Technique to Identify Causes of Least-Privilege Incompatibilities
Shuo Chen, John Dunagan, Chad Verbowski, Yi-Min Wang
Proceedings of Network and Distributed System Security Symposium (NDSS) | February 2005
Proceedings of Network and Distributed System Security Symposium (NDSS)
-
Formal Reasoning of Various Categories of Widely Exploited Security Vulnerabilities Using Pointer Taintedness Semantics
Shuo Chen, Karthik Pattabiraman, Zbigniew Kalbarczyk, Ravishankar K. Iyer
Proceedings of IFIP International Information Security Conference | August 2004
Toulouse, France
-
A Data-Driven Finite State Machine Model for Analyzing Security Vulnerabilities
Shuo Chen, Ravishankar K. Iyer, Jun Xu, Zbigniew Kalbarczyk
IEEE International Conference on Dependable Systems and Networks | June 2003
Publications by Research Area
-
A Security Study about Electron Applications and a Programming Methodology to Tame DOM Functionalities
Zihao Jin, Shuo Chen, Yang Chen, Haixin Duan, Jianjun Chen, Jianping Wu
Symposium on Network and Distributed System Security (NDSS) | March 2023
Timing-Based Browsing Privacy Vulnerabilities Via Site Isolation
Zihao Jin, Ziqiao Kong, Shuo Chen, Haixin Duan
IEEE Symposium on Security and Privacy (Oakland) | May 2022
Argus: A Fully Transparent Incentive System for Anti-Piracy Campaigns
Xian Zhang, Xiaobing Guo, Zixuan Zeng, Wenyan Liu, Zhongxin Guo, Yang Chen, Shuo Chen, Qiufeng Yin, Mao Yang
The 40th International Symposium on Reliable Distributed Systems (SRDS) | September 2021
Agatha: Smart Contract for DNN Computation
Zihan Zheng, Peichen Xie, Xian Zhang, Shuo Chen, Yang Chen, Xiaobing Guo, Guangzhong Sun, Guangyu Sun, Lidong Zhou
May 2021
Characterizing Ethereum’s Mining Power Decentralization at a Deeper Level
Liyi Zeng, Yang Chen, Shuo Chen, Xian Zhang, Zhongxin Guo, Wei Xu, Thomas Moscibroda
IEEE Conference on Computer Communications (INFOCOM) | May 2021
We Still Don’t Have Secure Cross-Domain Requests: an Empirical Study of CORS
Jianjun Chen, Jian Jiang, Haixin Duan, Tao Wan, Shuo Chen, Vern Paxson, Min Yang
Proceedings of USENIX Security Symposium | August 2018
SVAuth – A Single-Sign-On Integration Solution with Runtime Verification (tool paper)
Shuo Chen, Matt McCutchen, Phuong Cao, Shaz Qadeer, Ravishankar K. Iyer
International Conference on Runtime Verification 2017 | September 2017
Swords and Shields – A Study of Mobile Game Hacks and Existing Defenses
Yuan Tian, Eric Chen, Xiaojun Ma, Shuo Chen, Xiao Wang, Patrick Tague
Annual Computer Security Applications Conference (ACSAC) 2016 | December 2016
Self-Verifying Execution (Position Paper)
Matt McCutchen, Daniel Song, Shuo Chen, Shaz Qadeer
Proceedings of the IEEE Cybersecurity Development Conference (SecDev) | November 2016
Proceedings of the IEEE Cybersecurity Development Conference (SecDev)
The “Web/Local” Boundary Is Fuzzy: A Security Study of Chrome’s Process-based Sandboxing
Yaoqi Jia, Zheng Leong Chua, Hong Hu, Shuo Chen, Prateek Saxena, Zhenkai Liang
Proceedings of the ACM Conference on Computer and Communications Security (CCS) | October 2016
Enlightening Ph.D. Students with the Elegance of Logic — My personal memory about Prof. Jose Meseguer
Proceedings of the Festschrift Symposium in Honor of Jose Meseguer (LNCS 9200) | September 2015
Cookies Lack Integrity: Real-World Implications
Xiaofeng Zheng, Jian Jiang, Jinjin Liang, Haixin Duan, Shuo Chen, Tao Wan
Proceedings of USENIX Security Symposium | August 2015
Securing Multiparty Online Services via Certification of Symbolic Transactions
Eric Chen, Shuo Chen, Shaz Qadeer, Rui Wang
Proceedings of the IEEE Symposium on Security and Privacy (Oakland) | May 2015
test test
OAuth Demystified for Mobile Application Developers
Eric Chen, Yutong Pei, Shuo Chen, Yuan Tian, Robert Kotcher, Patrick Tague
Proceedings of the ACM Conference on Computer and Communications Security (CCS) | November 2014
Brahmastra: Driving Apps to Test the Security of Third-Party Components
Ravi Bhoraskar, Seungyeop Han, Jinseong Jeon, Tanzirul Azim, Shuo Chen, Suman Nath, Rui Wang, David Wetherall, Jaeyeon Jung
USENIX Security Symposium | August 2014
Unauthorized Origin Crossing on Mobile Platforms: Threats and Mitigation
Rui Wang, Luyi Xing, XiaoFeng Wang, Shuo Chen
Proceedings of the ACM Conference on Computer and Communications Security (CCS) | November 2013
Explicating SDKs: Uncovering Assumptions Underlying Secure Authentication and Authorization
Rui Wang, Yuchen Zhou, Shuo Chen, Shaz Qadeer, David Evans, Yuri Gurevich,
Proceedings of the USENIX Security Symposium | August 2013
InteGuard: Toward Automatic Protection of Third-Party Web Service Integrations
Luyi Xing, Yangyi Chen, XiaoFeng Wang, Shuo Chen
Network & Distributed System Security Symposium (NDSS) | February 2013
Network & Distributed System Security Symposium (NDSS)
Side-Channel Leaks in Web Applications: a Reality Today, a Challenge Tomorrow
Shuo Chen, Rui Wang, XiaoFeng Wang, Kehuan Zhang
Proceedings of the IEEE Symposium on Security and Privacy (Oakland) | May 2010
Pretty-Bad-Proxy: An Overlooked Adversary in Browsers’ HTTPS Deployments
Shuo Chen, Ziqing Mao, Yi-Min Wang, Ming Zhang
Proceedings of the IEEE Symposium on Security and Privacy (Oakland) | May 2009
Proceedings of the IEEE Symposium on Security and Privacy (Oakland)
An Analysis of Browser Domain-Isolation Bugs and A Light-Weight Transparent Defense Mechanism
Shuo Chen, David Ross, Yi-Min Wang
Proceedings of the ACM Conference on Computer and Communications Security (CCS) | October 2007
Proceedings of the ACM Conference on Computer and Communications Security (CCS)
A Systematic Approach to Uncover Security Flaws in GUI Logic
Shuo Chen, Ralf Sasse, Jose Meseguer, Helen Wang, Yi-Min Wang
Proceedings of the IEEE Symposium on Security and Privacy (Oakland) | May 2007
Proceedings of the IEEE Symposium on Security and Privacy (Oakland)
Non-Control-Data Attacks Are Realistic Threats
Shuo Chen, Jun Xu, Emre C. Sezer, Prachi Gauriar, Ravishankar K. Iyer
Proceedings of USENIX Security Symposium | August 2005
Source code of attack programs can be obtained from the attached txt file.
Defeating Memory Corruption Attacks via Pointer Taintedness Detection
Shuo Chen, Jun Xu, Nithin Nakka, Zbigniew Kalbarczyk, Ravishankar K. Iyer
Proceedings of IEEE International Conference on Dependable Systems and Networks | June 2005
Formal Reasoning of Various Categories of Widely Exploited Security Vulnerabilities Using Pointer Taintedness Semantics
Shuo Chen, Karthik Pattabiraman, Zbigniew Kalbarczyk, Ravishankar K. Iyer
Proceedings of IFIP International Information Security Conference | August 2004
Toulouse, France
A Data-Driven Finite State Machine Model for Analyzing Security Vulnerabilities
Shuo Chen, Ravishankar K. Iyer, Jun Xu, Zbigniew Kalbarczyk
IEEE International Conference on Dependable Systems and Networks | June 2003
-
Timing-Based Browsing Privacy Vulnerabilities Via Site Isolation
Zihao Jin, Ziqiao Kong, Shuo Chen, Haixin Duan
IEEE Symposium on Security and Privacy (Oakland) | May 2022
Forerunner: Constraint-based Speculative Transaction Execution for Ethereum
Yang Chen, Zhongxin Guo, Runhuai Li, Shuo Chen, Lidong Zhou, Yajin Zhou, Xian Zhang
SOSP 2021 | October 2021
Agatha: Smart Contract for DNN Computation
Zihan Zheng, Peichen Xie, Xian Zhang, Shuo Chen, Yang Chen, Xiaobing Guo, Guangzhong Sun, Guangyu Sun, Lidong Zhou
May 2021
OAuth Demystified for Mobile Application Developers
Eric Chen, Yutong Pei, Shuo Chen, Yuan Tian, Robert Kotcher, Patrick Tague
Proceedings of the ACM Conference on Computer and Communications Security (CCS) | November 2014
Brahmastra: Driving Apps to Test the Security of Third-Party Components
Ravi Bhoraskar, Seungyeop Han, Jinseong Jeon, Tanzirul Azim, Shuo Chen, Suman Nath, Rui Wang, David Wetherall, Jaeyeon Jung
USENIX Security Symposium | August 2014
InteGuard: Toward Automatic Protection of Third-Party Web Service Integrations
Luyi Xing, Yangyi Chen, XiaoFeng Wang, Shuo Chen
Network & Distributed System Security Symposium (NDSS) | February 2013
Network & Distributed System Security Symposium (NDSS)
Signing Me onto Your Accounts through Facebook and Google: a Traffic-Guided Security Study of Commercially Deployed Single-Sign-On Web Services
Rui Wang, Shuo Chen, XiaoFeng Wang
Proceedings of the IEEE Symposium on Security and Privacy (Oakland) | May 2012
How to Shop for Free Online – Security Analysis of Cashier-as-a-Service Based Web Stores
Rui Wang, Shuo Chen, XiaoFeng Wang, Shaz Qadeer
Proceedings of the IEEE Symposium on Security and Privacy (Oakland) (Best Practical Paper award) | May 2011
Proceedings of the IEEE Symposium on Security and Privacy (Oakland) (Best Practical Paper award)
Sidebuster: Automated Detection and Quantification of Side-Channel Leaks in Web Application Development
Kehuan Zhang, Zhou Li, Rui Wang, XiaoFeng Wang, Shuo Chen
Proceedings of the ACM Conference on Computer and Communications Security (CCS) | October 2010
Side-Channel Leaks in Web Applications: a Reality Today, a Challenge Tomorrow
Shuo Chen, Rui Wang, XiaoFeng Wang, Kehuan Zhang
Proceedings of the IEEE Symposium on Security and Privacy (Oakland) | May 2010
Pretty-Bad-Proxy: An Overlooked Adversary in Browsers’ HTTPS Deployments
Shuo Chen, Ziqing Mao, Yi-Min Wang, Ming Zhang
Proceedings of the IEEE Symposium on Security and Privacy (Oakland) | May 2009
Proceedings of the IEEE Symposium on Security and Privacy (Oakland)
Automatically Segregating Greedy and Malicious Internet Flows
Jose Brustoloni, Shuo Chen
Proceedings of IEEE International Conference on Communications | June 2007
A Systematic Approach to Uncover Security Flaws in GUI Logic
Shuo Chen, Ralf Sasse, Jose Meseguer, Helen Wang, Yi-Min Wang
Proceedings of the IEEE Symposium on Security and Privacy (Oakland) | May 2007
Proceedings of the IEEE Symposium on Security and Privacy (Oakland)
Non-Control-Data Attacks Are Realistic Threats
Shuo Chen, Jun Xu, Emre C. Sezer, Prachi Gauriar, Ravishankar K. Iyer
Proceedings of USENIX Security Symposium | August 2005
Source code of attack programs can be obtained from the attached txt file.
A Black-Box Tracing Technique to Identify Causes of Least-Privilege Incompatibilities
Shuo Chen, John Dunagan, Chad Verbowski, Yi-Min Wang
Proceedings of Network and Distributed System Security Symposium (NDSS) | February 2005
Proceedings of Network and Distributed System Security Symposium (NDSS)
-
Formal Verification of Workflow Policies for Smart Contracts in Azure Blockchain
Yuepeng Wang, Shuvendu Lahiri, Shuo Chen, Rong Pan, Isil Dillig, Cody Born, Immad Naseer, Kostas Ferles
Verified Software: Theories, Tools and Experiments | September 2019
SVAuth – A Single-Sign-On Integration Solution with Runtime Verification (tool paper)
Shuo Chen, Matt McCutchen, Phuong Cao, Shaz Qadeer, Ravishankar K. Iyer
International Conference on Runtime Verification 2017 | September 2017
Self-Verifying Execution (Position Paper)
Matt McCutchen, Daniel Song, Shuo Chen, Shaz Qadeer
Proceedings of the IEEE Cybersecurity Development Conference (SecDev) | November 2016
Proceedings of the IEEE Cybersecurity Development Conference (SecDev)
Uncovering Bugs in Distributed Storage Systems during Testing (not in Production!)
Pantazis Deligiannis, Matt McCutchen, Paul Thomson, Shuo Chen, Alastair F. Donaldson, John Erickson, Cheng Huang, Akash Lal, Rashmi Mudduluru, Shaz Qadeer, Wolfram Schulte
14th USENIX Conference on File and Storage Technologies (FAST) | February 2016
Enlightening Ph.D. Students with the Elegance of Logic — My personal memory about Prof. Jose Meseguer
Proceedings of the Festschrift Symposium in Honor of Jose Meseguer (LNCS 9200) | September 2015
Securing Multiparty Online Services via Certification of Symbolic Transactions
Eric Chen, Shuo Chen, Shaz Qadeer, Rui Wang
Proceedings of the IEEE Symposium on Security and Privacy (Oakland) | May 2015
test test
An Analysis of Browser Domain-Isolation Bugs and A Light-Weight Transparent Defense Mechanism
Shuo Chen, David Ross, Yi-Min Wang
Proceedings of the ACM Conference on Computer and Communications Security (CCS) | October 2007
Proceedings of the ACM Conference on Computer and Communications Security (CCS)
-
Residue Objects: A Challenge to Web Browser Security
Shuo Chen, Hong Chen, Manuel Caballero
Proceedings of EuroSys | April 2010
-
An Analysis of Browser Domain-Isolation Bugs and A Light-Weight Transparent Defense Mechanism
Shuo Chen, David Ross, Yi-Min Wang
Proceedings of the ACM Conference on Computer and Communications Security (CCS) | October 2007
Proceedings of the ACM Conference on Computer and Communications Security (CCS)
Publications by Type
-
A Security Study about Electron Applications and a Programming Methodology to Tame DOM Functionalities
Zihao Jin, Shuo Chen, Yang Chen, Haixin Duan, Jianjun Chen, Jianping Wu
Symposium on Network and Distributed System Security (NDSS) | March 2023
Timing-Based Browsing Privacy Vulnerabilities Via Site Isolation
Zihao Jin, Ziqiao Kong, Shuo Chen, Haixin Duan
IEEE Symposium on Security and Privacy (Oakland) | May 2022
Forerunner: Constraint-based Speculative Transaction Execution for Ethereum
Yang Chen, Zhongxin Guo, Runhuai Li, Shuo Chen, Lidong Zhou, Yajin Zhou, Xian Zhang
SOSP 2021 | October 2021
Argus: A Fully Transparent Incentive System for Anti-Piracy Campaigns
Xian Zhang, Xiaobing Guo, Zixuan Zeng, Wenyan Liu, Zhongxin Guo, Yang Chen, Shuo Chen, Qiufeng Yin, Mao Yang
The 40th International Symposium on Reliable Distributed Systems (SRDS) | September 2021
Characterizing Ethereum’s Mining Power Decentralization at a Deeper Level
Liyi Zeng, Yang Chen, Shuo Chen, Xian Zhang, Zhongxin Guo, Wei Xu, Thomas Moscibroda
IEEE Conference on Computer Communications (INFOCOM) | May 2021
Formal Verification of Workflow Policies for Smart Contracts in Azure Blockchain
Yuepeng Wang, Shuvendu Lahiri, Shuo Chen, Rong Pan, Isil Dillig, Cody Born, Immad Naseer, Kostas Ferles
Verified Software: Theories, Tools and Experiments | September 2019
We Still Don’t Have Secure Cross-Domain Requests: an Empirical Study of CORS
Jianjun Chen, Jian Jiang, Haixin Duan, Tao Wan, Shuo Chen, Vern Paxson, Min Yang
Proceedings of USENIX Security Symposium | August 2018
SVAuth – A Single-Sign-On Integration Solution with Runtime Verification (tool paper)
Shuo Chen, Matt McCutchen, Phuong Cao, Shaz Qadeer, Ravishankar K. Iyer
International Conference on Runtime Verification 2017 | September 2017
Swords and Shields – A Study of Mobile Game Hacks and Existing Defenses
Yuan Tian, Eric Chen, Xiaojun Ma, Shuo Chen, Xiao Wang, Patrick Tague
Annual Computer Security Applications Conference (ACSAC) 2016 | December 2016
Self-Verifying Execution (Position Paper)
Matt McCutchen, Daniel Song, Shuo Chen, Shaz Qadeer
Proceedings of the IEEE Cybersecurity Development Conference (SecDev) | November 2016
Proceedings of the IEEE Cybersecurity Development Conference (SecDev)
The “Web/Local” Boundary Is Fuzzy: A Security Study of Chrome’s Process-based Sandboxing
Yaoqi Jia, Zheng Leong Chua, Hong Hu, Shuo Chen, Prateek Saxena, Zhenkai Liang
Proceedings of the ACM Conference on Computer and Communications Security (CCS) | October 2016
Uncovering Bugs in Distributed Storage Systems during Testing (not in Production!)
Pantazis Deligiannis, Matt McCutchen, Paul Thomson, Shuo Chen, Alastair F. Donaldson, John Erickson, Cheng Huang, Akash Lal, Rashmi Mudduluru, Shaz Qadeer, Wolfram Schulte
14th USENIX Conference on File and Storage Technologies (FAST) | February 2016
Enlightening Ph.D. Students with the Elegance of Logic — My personal memory about Prof. Jose Meseguer
Proceedings of the Festschrift Symposium in Honor of Jose Meseguer (LNCS 9200) | September 2015
Cookies Lack Integrity: Real-World Implications
Xiaofeng Zheng, Jian Jiang, Jinjin Liang, Haixin Duan, Shuo Chen, Tao Wan
Proceedings of USENIX Security Symposium | August 2015
Securing Multiparty Online Services via Certification of Symbolic Transactions
Eric Chen, Shuo Chen, Shaz Qadeer, Rui Wang
Proceedings of the IEEE Symposium on Security and Privacy (Oakland) | May 2015
test test
OAuth Demystified for Mobile Application Developers
Eric Chen, Yutong Pei, Shuo Chen, Yuan Tian, Robert Kotcher, Patrick Tague
Proceedings of the ACM Conference on Computer and Communications Security (CCS) | November 2014
Brahmastra: Driving Apps to Test the Security of Third-Party Components
Ravi Bhoraskar, Seungyeop Han, Jinseong Jeon, Tanzirul Azim, Shuo Chen, Suman Nath, Rui Wang, David Wetherall, Jaeyeon Jung
USENIX Security Symposium | August 2014
Unauthorized Origin Crossing on Mobile Platforms: Threats and Mitigation
Rui Wang, Luyi Xing, XiaoFeng Wang, Shuo Chen
Proceedings of the ACM Conference on Computer and Communications Security (CCS) | November 2013
Explicating SDKs: Uncovering Assumptions Underlying Secure Authentication and Authorization
Rui Wang, Yuchen Zhou, Shuo Chen, Shaz Qadeer, David Evans, Yuri Gurevich,
Proceedings of the USENIX Security Symposium | August 2013
InteGuard: Toward Automatic Protection of Third-Party Web Service Integrations
Luyi Xing, Yangyi Chen, XiaoFeng Wang, Shuo Chen
Network & Distributed System Security Symposium (NDSS) | February 2013
Network & Distributed System Security Symposium (NDSS)
Signing Me onto Your Accounts through Facebook and Google: a Traffic-Guided Security Study of Commercially Deployed Single-Sign-On Web Services
Rui Wang, Shuo Chen, XiaoFeng Wang
Proceedings of the IEEE Symposium on Security and Privacy (Oakland) | May 2012
How to Shop for Free Online – Security Analysis of Cashier-as-a-Service Based Web Stores
Rui Wang, Shuo Chen, XiaoFeng Wang, Shaz Qadeer
Proceedings of the IEEE Symposium on Security and Privacy (Oakland) (Best Practical Paper award) | May 2011
Proceedings of the IEEE Symposium on Security and Privacy (Oakland) (Best Practical Paper award)
Sidebuster: Automated Detection and Quantification of Side-Channel Leaks in Web Application Development
Kehuan Zhang, Zhou Li, Rui Wang, XiaoFeng Wang, Shuo Chen
Proceedings of the ACM Conference on Computer and Communications Security (CCS) | October 2010
Side-Channel Leaks in Web Applications: a Reality Today, a Challenge Tomorrow
Shuo Chen, Rui Wang, XiaoFeng Wang, Kehuan Zhang
Proceedings of the IEEE Symposium on Security and Privacy (Oakland) | May 2010
Residue Objects: A Challenge to Web Browser Security
Shuo Chen, Hong Chen, Manuel Caballero
Proceedings of EuroSys | April 2010
Pretty-Bad-Proxy: An Overlooked Adversary in Browsers’ HTTPS Deployments
Shuo Chen, Ziqing Mao, Yi-Min Wang, Ming Zhang
Proceedings of the IEEE Symposium on Security and Privacy (Oakland) | May 2009
Proceedings of the IEEE Symposium on Security and Privacy (Oakland)
An Analysis of Browser Domain-Isolation Bugs and A Light-Weight Transparent Defense Mechanism
Shuo Chen, David Ross, Yi-Min Wang
Proceedings of the ACM Conference on Computer and Communications Security (CCS) | October 2007
Proceedings of the ACM Conference on Computer and Communications Security (CCS)
Automatically Segregating Greedy and Malicious Internet Flows
Jose Brustoloni, Shuo Chen
Proceedings of IEEE International Conference on Communications | June 2007
A Systematic Approach to Uncover Security Flaws in GUI Logic
Shuo Chen, Ralf Sasse, Jose Meseguer, Helen Wang, Yi-Min Wang
Proceedings of the IEEE Symposium on Security and Privacy (Oakland) | May 2007
Proceedings of the IEEE Symposium on Security and Privacy (Oakland)
Non-Control-Data Attacks Are Realistic Threats
Shuo Chen, Jun Xu, Emre C. Sezer, Prachi Gauriar, Ravishankar K. Iyer
Proceedings of USENIX Security Symposium | August 2005
Source code of attack programs can be obtained from the attached txt file.
Defeating Memory Corruption Attacks via Pointer Taintedness Detection
Shuo Chen, Jun Xu, Nithin Nakka, Zbigniew Kalbarczyk, Ravishankar K. Iyer
Proceedings of IEEE International Conference on Dependable Systems and Networks | June 2005
A Black-Box Tracing Technique to Identify Causes of Least-Privilege Incompatibilities
Shuo Chen, John Dunagan, Chad Verbowski, Yi-Min Wang
Proceedings of Network and Distributed System Security Symposium (NDSS) | February 2005
Proceedings of Network and Distributed System Security Symposium (NDSS)
Formal Reasoning of Various Categories of Widely Exploited Security Vulnerabilities Using Pointer Taintedness Semantics
Shuo Chen, Karthik Pattabiraman, Zbigniew Kalbarczyk, Ravishankar K. Iyer
Proceedings of IFIP International Information Security Conference | August 2004
Toulouse, France
A Data-Driven Finite State Machine Model for Analyzing Security Vulnerabilities
Shuo Chen, Ravishankar K. Iyer, Jun Xu, Zbigniew Kalbarczyk
IEEE International Conference on Dependable Systems and Networks | June 2003
-
Agatha: Smart Contract for DNN Computation
Zihan Zheng, Peichen Xie, Xian Zhang, Shuo Chen, Yang Chen, Xiaobing Guo, Guangzhong Sun, Guangyu Sun, Lidong Zhou
May 2021