Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page

Shao Yang

dblp:141/0090 · DBLP profile ↗
← Back
4ranked-venue papers
1as first author
3since 2021 · last 2025
—ORCID · none

Domains — the database's venue-derived domains; a paper can count in several

Security and privacy · 2 · 1 since 2021Artificial intelligence and machine learning · 1 · 1 since 2021Software engineering, systems software and programming languages · 1 · 1 first-author · 1 since 2021

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Network and information security
3 papers
Web and mobile security · 47% Malware analysis · 36% Systems and software security · 17%
Software engineering, system software, and programming languages
2 papers
Program analysis · 79% Empirical software engineering · 21%

Topics — the 8 heaviest of 10, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Web and mobile security › mobile application security
app store security
0.912025
Careful About What App Promotion Ads Recommend! Detecting and Explaining Malware Promotion via App Promotion Graph · NDSS 2025
Program analysis
static analysis
0.722022
DescribeCtx: Context-Aware Description Synthesis for Sensitive Behaviors in Mobile Apps · ICSE 2022
DeepIntent: Deep Icon-Behavior Learning for Detecting Intention-Behavior Discrepancy in Mobile Apps · CCS 2019
Program analysis › static analysis › interprocedural analysis
call graph analysis
0.612022
DescribeCtx: Context-Aware Description Synthesis for Sensitive Behaviors in Mobile Apps · ICSE 2022
Web and mobile security › mobile security
android security
0.412019
DeepIntent: Deep Icon-Behavior Learning for Detecting Intention-Behavior Discrepancy in Mobile Apps · CCS 2019
Malware analysis
mobile malware detection
0.412019
DeepIntent: Deep Icon-Behavior Learning for Detecting Intention-Behavior Discrepancy in Mobile Apps · CCS 2019
Web and mobile security
mobile security
0.412019
DeepIntent: Deep Icon-Behavior Learning for Detecting Intention-Behavior Discrepancy in Mobile Apps · CCS 2019
Empirical software engineering
mining software repositories
0.212022
DescribeCtx: Context-Aware Description Synthesis for Sensitive Behaviors in Mobile Apps · ICSE 2022
Empirical software engineering › mining software repositories
mobile app analysis
0.212022
DescribeCtx: Context-Aware Description Synthesis for Sensitive Behaviors in Mobile Apps · ICSE 2022

Methods — techniques the papers use, named apart from their topics

program analysis · 1.1neural machine translation · 1.1graph learning · 0.9explainable detection · 0.9outlier detection · 0.8icon-behavior modeling · 0.8deep learning · 0.8
YearPublicationVenuePosition
2025 Careful About What App Promotion Ads Recommend! Detecting and Explaining Malware Promotion via App Promotion Graph
Shang Ma, Shao Yang, Shifu Hou, Toby Jia-Jun Li, Xusheng Xiao, Tao Xie 0001, Yanfang Ye 0001
NDSS3
2024 Active Inference With Empathy Mechanism for Socially Behaved Artificial Agents in Diverse Situations
abstract
This article proposes a method for an artificial agent to behave in a social manner. Although defining proper social behavior is difficult because it differs from situation to situation, the agent following the proposed method adaptively behaves appropriately in each situation by empathizing with the surrounding others. The proposed method is achieved by incorporating empathy into active inference. We evaluated the proposed method regarding control of autonomous mobile robots in diverse situations. From the evaluation results, an agent controlled by the proposed method could behave more adaptively socially than an agent controlled by the standard active inference in the diverse situations. In the case of two agents, the agent controlled with the proposed method behaved in a social way that reduced the other agent's travel distance by 13.7% and increased the margin between the agents by 25.8%, even though it increased the agent's travel distance by 8.2%. Also, the agent controlled with the proposed method behaved more socially when it was surrounded by altruistic others but less socially when it was surrounded by selfish others.
Tadayuki Matsumura, Kanako Esaki, Shao Yang, Chihiro Yoshimura, Hiroyuki Mizuno
Artif. Life3
2022 DescribeCtx: Context-Aware Description Synthesis for Sensitive Behaviors in Mobile Apps
abstract
While mobile applications (i.e., apps) are becoming capable of handling various needs from users, their increasing access to sensitive data raises privacy concerns. To inform such sensitive behaviors to users, existing techniques propose to automatically identify explanatory sentences from app descriptions; however, many sensitive behaviors are not explained in the corresponding app descriptions. There also exist general techniques that translate code to sentences. However, these techniques lack the vocabulary to explain the uses of sensitive data and fail to consider the context (i.e., the app functionalities) of the sensitive behaviors. To address these limitations, we propose DescribeCtx, a context-aware description synthesis approach that trains a neural machine translation model using a large set of popular apps, and generates app-specific descriptions for sensitive behaviors. Specifically, DescribeCtx encodes three heterogeneous sources as input, i.e., vocabularies provided by privacy policies, behavior summary provided by the call graphs in code, and contextual information provided by GUI texts. Our evaluations on 1,262 Android apps show that, compared with existing baselines, DescribeCtx produces more accurate descriptions (24.96 in BLEU) and achieves higher user ratings with respect to the reference sentences manually identified in the app descriptions.
Shao Yang, Yuehan Wang, Yuan Yao 0001, Haoyu Wang 0001, Yanfang Ye 0001, Xusheng Xiao
ICSE1
2019 DeepIntent: Deep Icon-Behavior Learning for Detecting Intention-Behavior Discrepancy in Mobile Apps
abstract
Mobile apps have been an indispensable part in our daily life. However, there exist many potentially harmful apps that may exploit users' privacy data, e.g., collecting the user's information or sending messages in the background. Keeping these undesired apps away from the market is an ongoing challenge. While existing work provides techniques to determine what apps do, e.g., leaking information, little work has been done to answer, are the apps' behaviors compatible with the intentions reflected by the app's UI? In this work, we explore the synergistic cooperation of deep learning and program analysis as the first step to address this challenge. Specifically, we focus on the UI widgets that respond to user interactions and examine whether the intentions reflected by their UIs justify their permission uses. We present DeepIntent, a framework that uses novel deep icon-behavior learning to learn an icon-behavior model from a large number of popular apps and detect intention-behavior discrepancies. In particular, DeepIntent provides program analysis techniques to associate the intentions (i.e., icons and contextual texts) with UI widgets' program behaviors, and infer the labels (i.e., permission uses) for the UI widgets based on the program behaviors, enabling the construction of a large-scale high-quality training dataset. Based on the results of the static analysis, DeepIntent uses deep learning techniques that jointly model icons and their contextual texts to learn an icon-behavior model, and detects intention-behavior discrepancies by computing the outlier scores based on the learned model. We evaluate DeepIntent on a large-scale dataset (9,891 benign apps and 16,262 malicious apps). With 80% of the benign apps for training and the remaining for evaluation, DeepIntent detects discrepancies with AUC scores 0.8656 and 0.8839 on benign apps and malicious apps, achieving 39.9% and 26.1% relative improvements over the state-of-the-art approaches.
Shengqu Xi, Shao Yang, Xusheng Xiao, Yuan Yao 0001, Yayuan Xiong, Fengyuan Xu, Haoyu Wang 0001, Peng Gao 0008, Zhuotao Liu, Feng Xu 0007, Jian Lu 0001
CCS2