Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page

Xuechao Du

dblp:224/9391 · DBLP profile ↗
← Back
3ranked-venue papers
2as first author
2since 2021 · last 2023
0000-0001-6032-3002ORCID · corroborated

Domains — the database's venue-derived domains; a paper can count in several

Security and privacy · 2 · 1 first-author · 1 since 2021Computer networks · 1 · 1 first-author · 1 since 2021

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Network and information security
2 papers
Web and mobile security · 71% Systems and software security · 18% Privacy and data protection · 11%
Software engineering, system software, and programming languages
2 papers
Program analysis · 100%

Topics — the 3 heaviest of 5, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Program analysis
static analysis
0.822023
FlowCog: Context-Aware Semantic Extraction and Analysis of Information Flow Leaks in Android Apps · IEEE Trans. Mob. Comput. 2023
FlowCog: Context-aware Semantics Extraction and Analysis of Information Flow Leaks in Android Apps · USENIX Security Symposium 2018
Web and mobile security › mobile security
android application analysis
0.712023
FlowCog: Context-Aware Semantic Extraction and Analysis of Information Flow Leaks in Android Apps · IEEE Trans. Mob. Comput. 2023
Web and mobile security
mobile security
0.712023
FlowCog: Context-Aware Semantic Extraction and Analysis of Information Flow Leaks in Android Apps · IEEE Trans. Mob. Comput. 2023

Methods — techniques the papers use, named apart from their topics

natural language processing · 1.3deep learning · 1.3context-aware semantics extraction · 0.7
YearPublicationVenuePosition
2023 FlowCog: Context-Aware Semantic Extraction and Analysis of Information Flow Leaks in Android Apps
abstract
Android apps having access to private information may be legitimate, depending on whether the app provides users enough semantics to justify the access. Existing works analyzing app semantics are coarse-grained, staying on the app-level. They can only identify whether an app, as a whole, should request special permission but cannot answer whether a specific app behavior under a particular runtime context, such as information flow, is correctly justified. We proposeFlowCog, an automated system to extract semantics related to information flows and correlate such semantics with given information flows to address these issues. Particularly,FlowCogstatically finds all the Android views related to the given flow via control or data dependencies and then extracts semantics, such as texts and images, from these views and associated layouts. Next, FlowCog adopts natural language processing and deep learning approaches to infer whether the extracted semantics correlate with the given flow.FlowCogis open-source and available athttps://github.com/xcdu/FlowCog. Our evaluation shows thatFlowCogcan achieve an accuracy rate of 95.4% and an$\mathrm{F}_{1}$score of 0.953.
Xuechao Du, Yinzhi Cao, Boyuan He, Gan Fang, Yan Chen 0004, Daigang Xu
IEEE Trans. Mob. Comput.1
2022 AflIot: Fuzzing on linux-based IoT device with binary-level instrumentation
Xuechao Du, Boyuan He, Hao Chen 0003, Fan Zhang 0010, Yan Chen 0004
Comput. Secur.1
2018 FlowCog: Context-aware Semantics Extraction and Analysis of Information Flow Leaks in Android Apps
Yinzhi Cao, Xuechao Du, Boyuan He, Gan Fang, Rui Shao 0003, Yan Chen 0004
USENIX Security Symposium3