var bibbase_data = {"data":"\"Loading..\"\n\n
\n\n \n\n \n\n \n \n\n \n\n \n \n\n \n\n \n
\n generated by\n \n \"bibbase.org\"\n\n \n
\n \n\n
\n\n \n\n\n
\n\n Excellent! Next you can\n create a new website with this list, or\n embed it in an existing web page by copying & pasting\n any of the following snippets.\n\n
\n JavaScript\n (easiest)\n
\n \n <script src=\"https://bibbase.org/show?bib=https%3A%2F%2Fraw.githubusercontent.com%2Fgangtan%2Fgtanbib%2Fmain%2Fmypapers.bib&commas=true&jsonp=1&jsonp=1\"></script>\n \n
\n\n PHP\n
\n \n <?php\n $contents = file_get_contents(\"https://bibbase.org/show?bib=https%3A%2F%2Fraw.githubusercontent.com%2Fgangtan%2Fgtanbib%2Fmain%2Fmypapers.bib&commas=true&jsonp=1\");\n print_r($contents);\n ?>\n \n
\n\n iFrame\n (not recommended)\n
\n \n <iframe src=\"https://bibbase.org/show?bib=https%3A%2F%2Fraw.githubusercontent.com%2Fgangtan%2Fgtanbib%2Fmain%2Fmypapers.bib&commas=true&jsonp=1\"></iframe>\n \n
\n\n

\n For more details see the documention.\n

\n
\n
\n\n
\n\n This is a preview! To use this list on your own web site\n or create a new web site from it,\n create a free account. The file will be added\n and you will be able to edit it in the File Manager.\n We will show you instructions once you've created your account.\n
\n\n
\n\n

To the site owner:

\n\n

Action required! Mendeley is changing its\n API. In order to keep using Mendeley with BibBase past April\n 14th, you need to:\n

    \n
  1. renew the authorization for BibBase on Mendeley, and
  2. \n
  3. update the BibBase URL\n in your page the same way you did when you initially set up\n this page.\n
  4. \n
\n

\n\n

\n \n \n Fix it now\n

\n
\n\n
\n\n\n
\n \n \n
\n
\n  \n 2026\n \n \n (4)\n \n \n
\n
\n \n \n
\n \n\n \n \n \n \n \n Attention Pruning: Automated Fairness Repair of Language Models via Surrogate Simulated Annealing.\n \n \n \n\n\n \n Dasu, V. A., Rashid, M. R. U., Tizpaz-Niari, V. G. S., & Tan, G.\n\n\n \n\n\n\n In 48th International Conference on Software Engineering (ICSE), pages To appear, 2026. \n \n\n\n\n
\n\n\n\n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{Dasu26Attn,\n  author       = {Vishnu Asutosh Dasu and Md Rafi Ur Rashid and Vipul Gupta\n                  Saeid Tizpaz{-}Niari and\n                  Gang Tan},\n  title        = {Attention Pruning: Automated Fairness Repair of Language Models via Surrogate Simulated Annealing},\n  booktitle = {48th International Conference on Software Engineering ({ICSE})},\n  pages        = {To appear},\n  year         = {2026},\n  keywords = {ML Fairness}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n On the Robustness of Fairness Practices: A Causal Framework for Systematic Evaluation.\n \n \n \n\n\n \n Monjezi, V., Kumar, A., Trivedi, A., Tan, G., & Tizpaz-Niari, S.\n\n\n \n\n\n\n In 48th International Conference on Software Engineering (ICSE), pages To appear, 2026. \n \n\n\n\n
\n\n\n\n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{Monjeze26ICSE,\n  author={Verya Monjezi and Ashish Kumar and Ashutosh Trivedi and Gang Tan and Saeid Tizpaz-Niari},\n  title        = {On the Robustness of Fairness Practices: A Causal Framework for Systematic Evaluation},\n  booktitle = {48th International Conference on Software Engineering ({ICSE})},\n  pages        = {To appear},\n  year         = {2026},\n  keywords = {ML Fairness}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n Invariant-Guided Logical Testing of Open RAN Controllers.\n \n \n \n\n\n \n Yang, T., Ranjbar, A., Tan, G., & Hussain, S. R.\n\n\n \n\n\n\n In 35th USENIX Security Symposium (USENIX Security), pages to appear, 2026. \n \n\n\n\n
\n\n\n\n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@InProceedings{Yang26Inv,\n  author = {Tianchang Yang and Ali Ranjbar and Gang Tan and Syed Rafiul Hussain},\n  title = {Invariant-Guided Logical Testing of Open {RAN} Controllers},\n  booktitle = {35th USENIX Security Symposium (USENIX Security)},\n  year = {2026},\n  pages = {to appear},\n  keywords = {Systems Security}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n Chain-of-Thought Driven Adversarial Scenario Extrapolation for Robust Language Models.\n \n \n \n\n\n \n Rashid, M. R. U., Dasu, V. A., Wang, Y., Tan, G., & Mehnaz, S.\n\n\n \n\n\n\n In Annual AAAI Conference on Artificial Intelligence (AAAI), 2026. \n \n\n\n\n
\n\n\n\n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{Rashid26AAAI,\ntitle={Chain-of-Thought Driven Adversarial Scenario Extrapolation for Robust Language Models},\nauthor={Md Rafi Ur Rashid and Vishnu Asutosh Dasu and Ye Wang and Gang Tan and Shagufta Mehnaz},\nbooktitle={Annual AAAI Conference on Artificial Intelligence (AAAI)},\nyear={2026},\naward = {Oral presentation},\nkeywords = {Systems Security}\n}\n\n
\n
\n\n\n\n
\n\n\n\n\n\n
\n
\n\n
\n
\n  \n 2025\n \n \n (11)\n \n \n
\n
\n \n \n
\n \n\n \n \n \n \n \n \n Human task performance and associated internal states in extended reality: a systematic review of cognitive, psychophysiological, and physiological dimensions.\n \n \n \n \n\n\n \n Ahmed, N., Wu, P., Huang, K., Jung, S., Rheem, H., Tan, G., Imani, M., & Islam, R.\n\n\n \n\n\n\n Frontiers in Virtual Reality, Volume 6. 2025.\n \n\n\n\n
\n\n\n\n \n \n \"Human paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n\n\n\n
\n
@ARTICLE{Ahmed25VR,\n  AUTHOR={Ahmed, Nasim  and Wu, Peng  and Huang, Kaiming  and Jung, Sungchul  and Rheem, Hansol  and Tan, Gang  and Imani, Mahdi  and Islam, Rifatul },\n  TITLE={Human task performance and associated internal states in extended reality: a systematic review of cognitive, psychophysiological, and physiological dimensions},\n  JOURNAL={Frontiers in Virtual Reality},\n  VOLUME={Volume 6},\n  url_Paper = {https://doi.org/10.3389/frvir.2025.1589256},\n  YEAR={2025}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n Beyond Driver Isolation—Triaging Threats against Driver Isolation.\n \n \n \n\n\n \n Huang, Y., Huang, K., Ennis, M., Narayanan, V., Burtsev, A., Jaeger, T., & Tan, G.\n\n\n \n\n\n\n In Annual Computer Security Applications Conference (ACSAC), pages To appear, 2025. \n \n\n\n\n
\n\n\n\n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{Huang25ACSAC,\n  author    = {Yongzhe Huang and Kaiming Huang and Matthew Ennis and Vikram Narayanan and Anton Burtsev and Trent Jaeger and Gang Tan},\n  title     = {Beyond Driver Isolation---Triaging Threats against Driver Isolation},\n  booktitle = {Annual Computer Security Applications Conference (ACSAC)},\n  pages     = {To appear},\n  year      = {2025},\n  keywords = {Software Security -> Privilege Separation}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Shard-DAG: A scalable and secure block-DAG sharding scheme for AI-driven 6G networks.\n \n \n \n \n\n\n \n Fan, Y., Zhang, W., Wu, G., Zhang, L., Long, C., Tan, G., & Xiong, N. N.\n\n\n \n\n\n\n Digital Communications and Networks,To appear. 2025.\n \n\n\n\n
\n\n\n\n \n \n \"Shard-DAG: paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@article{Fan25shard,\n  author       = {Yongkai Fan and Wenyuan Zhang and Guodong Wu and Le Zhang and Chengnian Long and Gang Tan and Neal N. Xiong},\n  title        = {{Shard-DAG}: A scalable and secure block-{DAG} sharding scheme for {AI}-driven 6G networks},\n  journal      = {Digital Communications and Networks},\n  pages        = {To appear},\n  year         = {2025},\n  url_Paper = {https://doi.org/10.1016/j.dcan.2025.04.005},\n  keywords = {Systems Security}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Better Safe than Sorry: Preventing Policy Violations through Predictive Root-Cause-Analysis for IoT Systems.\n \n \n \n \n\n\n \n Norris, M., Hussain, S. R., & Tan, G.\n\n\n \n\n\n\n In 40th IEEE/ACM Automated Software Engineering Conference (ASE), pages To appear, 2025. \n \n\n\n\n
\n\n\n\n \n \n \"Better paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 2 downloads\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@InProceedings{Norris25ASE,\n    title={Better Safe than Sorry: Preventing Policy Violations through Predictive Root-Cause-Analysis for {IoT} Systems},\n    author    = {Michael Norris and Syed Rafiul Hussain and Gang Tan},\n    booktitle = {40th IEEE/ACM Automated Software Engineering Conference (ASE)},\n    pages = {To appear},\n    url_Paper = {http://www.cse.psu.edu/~gxt29/papers/IoTArmor25ASE.pdf},\n    year={2025},\n    keywords = {Software Security -> IoT Security}\n}\n\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n Uncovering Discrimination Clusters: Quantifying and Explaining Systematic Fairness Violations.\n \n \n \n\n\n \n Akash, R. D., Kumar, A., Monjezi, V., Trivedi, A., Tan, G., & Tizpaz-Niari, S.\n\n\n \n\n\n\n In 40th IEEE/ACM Automated Software Engineering Conference (ASE), pages To appear, 2025. \n \n\n\n\n
\n\n\n\n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@InProceedings{Akash25ASE,\n    title={Uncovering Discrimination Clusters: Quantifying and Explaining Systematic Fairness Violations},\n    author={Ranit Debnath Akash and Ashish Kumar and Verya Monjezi and Ashutosh Trivedi and Gang Tan and Saeid Tizpaz-Niari},\n    booktitle = {40th IEEE/ACM Automated Software Engineering Conference (ASE)},\n    pages = {To appear},\n    year={2025},\n    keywords  = {ML Fairness}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n Personalized Bayesian Networks for Cybersickness Prediction in Virtual Reality.\n \n \n \n\n\n \n Wu, P., Ahmed, N., Huang, K., Islam, R., Lan, T., Tan, G., & Imani, M.\n\n\n \n\n\n\n In Workshop on Enhancing Security, Privacy, and Trust in Extended Reality (XR) Systems, pages 491-496, 2025. \n \n\n\n\n
\n\n\n\n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n\n\n\n
\n
@InProceedings{Peng25XR,\n    title={Personalized Bayesian Networks for Cybersickness Prediction in Virtual Reality},\n    author={Peng Wu and Nasim Ahmed and Kaiming Huang and Rifatul Islam and Tian Lan and Gang Tan and Mahdi Imani},\n    booktitle = {Workshop on Enhancing Security, Privacy, and Trust in Extended Reality (XR) Systems},\n    pages = {491-496},\n    year={2025}\n}\n\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Probabilistic Verification of Cybersickness in Virtual Reality Through Bayesian Networks.\n \n \n \n \n\n\n \n Wu, P., Ahmed, N., Sarma, A., Huang, K., Islam, R., Li, B., Lan, T., Tan, G., & Imani, M.\n\n\n \n\n\n\n In IEEE International Symposium on Mixed and Augmented Reality (ISMAR), pages 782–792, 2025. \n \n\n\n\n
\n\n\n\n \n \n \"Probabilistic paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 1 download\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n\n\n\n
\n
@InProceedings{Peng25ISMAR,\n    title={Probabilistic Verification of Cybersickness in Virtual Reality Through Bayesian Networks},\n    author={Peng Wu and Nasim Ahmed and Abhiram Sarma and Kaiming Huang and Rifatul Islam and Bin Li and Tian Lan and Gang Tan and Mahdi Imani},\n    booktitle = {IEEE International Symposium on Mixed and Augmented Reality (ISMAR)},\n    pages = {782--792},\n    year={2025},\n    url_Paper = {http://www.cse.psu.edu/~gxt29/papers/ISMAR25.pdf}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Disa: Accurate Learning-based Static Disassembly with Attentions.\n \n \n \n \n\n\n \n Wang, P., Santra, M., Liu, M., Sun, C., Zeng, D., & Tan, G.\n\n\n \n\n\n\n In 31st ACM Conference on Computer and Communications Security (CCS), pages 843–857, 2025. \n \n\n\n\n
\n\n\n\n \n \n \"Disa: paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 1 download\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{Wang25Disa,\n  author       = {Peicheng Wang and\n                  Monika Santra and\n                  Mingyu Liu and\n                  Cong Sun and\n                  Dongrui Zeng and\n                  Gang Tan},\n  title        = {Disa: Accurate Learning-based Static Disassembly with Attentions},\n  booktitle = {31st ACM Conference on Computer and Communications Security ({CCS})},\n  pages     = {843--857},\n  year      = {2025},\n  url_Paper = {https://arxiv.org/abs/2507.07246},\n  keywords  = {Software Security -> Binary Code Analysis}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n SoK: Challenges and Paths Toward Memory Safety for eBPF.\n \n \n \n \n\n\n \n Huang, K., Payer, M., Qian, Z., Sampson, J., Tan, G., & Jaeger, T.\n\n\n \n\n\n\n In IEEE Symposium on Security and Privacy (S&P), pages 848–866, 2025. \n \n\n\n\n
\n\n\n\n \n \n \"SoK: paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 2 downloads\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{Huang25ebpf,\n  author       = {Kaiming Huang and\n                  Mathias Payer and\n                  Zhiyun Qian and\n                  Jack Sampson and\n                  Gang Tan and\n                  Trent Jaeger},\n  title        = {{SoK}: Challenges and Paths Toward Memory Safety for {eBPF}},\n  booktitle= {IEEE Symposium on Security and Privacy (S\\&P)},\n  pages        = {848--866},\n  year         = {2025},\n  url_Paper    = {https://lightninghkm.github.io/files/eBPFSoK.pdf},\n  keywords = {Software Security}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Sliver: A Scalable Slicing-Based Verification for Information Flow Security.\n \n \n \n \n\n\n \n Rao, X., Sun, C., Zeng, D., Huang, Y., & Tan, G.\n\n\n \n\n\n\n IEEE Transactions on Dependable and Secure Computing, 22(1): 457–473. 2025.\n \n\n\n\n
\n\n\n\n \n \n \"Sliver: paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@ARTICLE{Xue25TDSC,\n  author={Rao, Xue and Sun, Cong and Zeng, Dongrui and Huang, Yongzhe and Tan, Gang},\n  journal={IEEE Transactions on Dependable and Secure Computing}, \n  title={Sliver: A Scalable Slicing-Based Verification for Information Flow Security}, \n  volume       = {22},\n  number       = {1},\n  pages        = {457--473},\n  year         = {2025},\n  url_Paper = {https://doi.org/10.1109/TDSC.2024.3403653},\n  keywords = {Software Security -> Android Security}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n C2VPG: Translating Practical Context-Free Grammars into Visibly Pushdown Grammars by Order-Based Tagging.\n \n \n \n \n\n\n \n Jia, X., & Tan, G.\n\n\n \n\n\n\n In 11th Workshop on Language-Theoretic Security (LangSec), pages 16–25, 2025. \n \n\n\n\n
\n\n\n\n \n \n \"C2VPG: paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{JiaT25C2VPG,\n  author       = {Xiaodong Jia and Gang Tan},\n  title        = {{C2VPG:} Translating Practical Context-Free Grammars into Visibly\n                  Pushdown Grammars by Order-Based Tagging},\n  booktitle= {11th Workshop on Language-Theoretic Security ({LangSec})},\n  pages        = {16--25},\n  year         = {2025},\n  url_Paper = {http://www.cse.psu.edu/~gxt29/papers/C2VPG25.pdf},\n  keywords = {Formal Methods -> Parser Assurance}\n}\n\n
\n
\n\n\n\n
\n\n\n\n\n\n
\n
\n\n
\n
\n  \n 2024\n \n \n (11)\n \n \n
\n
\n \n \n
\n \n\n \n \n \n \n \n \n Automatic Pseudocode Extraction at ScaleAutomatic Pseudocode Extraction at Scale.\n \n \n \n \n\n\n \n Toksoz, L., Tan, G., & Giles, C. L.\n\n\n \n\n\n\n In IEEE 25th International Conference on Information Reuse and Integration for Data Science, pages 264–269, 2024. \n \n\n\n\n
\n\n\n\n \n \n \"Automatic paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n\n\n\n
\n
@inproceedings{Levent24IRI,\n  author    = {Levent Toksoz and Gang Tan and C. Lee Giles},\n  title     = {Automatic Pseudocode Extraction at ScaleAutomatic Pseudocode Extraction at Scale},\n  booktitle   = {IEEE 25th International Conference on Information Reuse and Integration for Data Science},\n  pages = {264--269},\n  year = {2024},\n  url_Paper={https://ieeexplore.ieee.org/document/10703819}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n ProvPredictor: Utilizing Provenance Information for Real-Time IoT Policy Enforcement.\n \n \n \n \n\n\n \n Norris, M., McDaniel, P., Hussain, S. R., & Tan, G.\n\n\n \n\n\n\n In 2nd EAI International Conference on Security and Privacy in Cyber-Physical Systems and Smart Vehicles (SmartSP), pages 110–134, 2024. \n \n\n\n\n
\n\n\n\n \n \n \"ProvPredictor: paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 1 download\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{Norris24Provpredictor,\n  author    = {Michael Norris and Patrick McDaniel and Syed Rafiul Hussain and Gang Tan},\n  title     = {{ProvPredictor}: Utilizing Provenance Information for Real-Time IoT Policy Enforcement},\n  booktitle   = {2nd EAI International Conference on Security and Privacy in Cyber-Physical Systems and Smart Vehicles (SmartSP)},\n  pages = {110--134},\n  year = {2024},\n  url_Paper = {http://www.cse.psu.edu/~gxt29/papers/ProvPredictor24.pdf},\n  keywords = {Software Security -> IoT Security}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Top of the Heap: Efficient Memory Error Protection of Safe Heap Objects.\n \n \n \n \n\n\n \n Huang, K., Payer, M., Qian, Z., Sampson, J., Tan, G., & Jaeger, T.\n\n\n \n\n\n\n In 30th ACM Conference on Computer and Communications Security (CCS), pages 1330–1344, 2024. \n \n\n\n\n
\n\n\n\n \n \n \"Top paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{Huang24CCS,\n  author    = {Kaiming Huang and Mathias Payer and Zhiyun Qian and Jack Sampson and Gang Tan and Trent Jaeger},\n  title     = {Top of the Heap: Efficient Memory Error Protection of Safe Heap Objects},\n  booktitle = {30th ACM Conference on Computer and Communications Security ({CCS})},\n  pages     = {1330--1344},\n  year      = {2024},\n  url_Paper = {https://lightninghkm.github.io/files/Uriah_CCS24.pdf},\n  keywords = {Software Security}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n VIMU: Effective Physics-based Realtime Detection and Recovery against Stealthy Attacks on UAV.\n \n \n \n \n\n\n \n Wang, Y., Sun, C., Liu, Q., Su, B., Zhang, Z., Norris, M., Tan, G., & Ma, J.\n\n\n \n\n\n\n In Annual Computer Security Applications Conference (ACSAC), pages 1015–1031, 2024. \n \n\n\n\n
\n\n\n\n \n \n \"VIMU: paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{Wang24ACSAC,\n  author    = {Yunbo Wang and Cong Sun and Qiaosen Liu and Bingnan Su and Zongxu Zhang and Michael Norris and Gang Tan and Jianfeng Ma},\n  title     = {{VIMU}: Effective Physics-based Realtime Detection and Recovery against Stealthy Attacks on {UAV}},\n  booktitle = {Annual Computer Security Applications Conference (ACSAC)},\n  pages     = {1015--1031},\n  year      = {2024},\n  url_Paper = {https://doi.org/10.1109/ACSAC63791.2024.00084},\n  keywords = {Systems Securit}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Veiled Pathways: Investigating Covert and Side Channels within GPU Uncore.\n \n \n \n \n\n\n \n Miao, Y., Zhang, Y., Wu, D., Zhang, D., Tan, G., Zhang, R., & Kandemir, M. T.\n\n\n \n\n\n\n In 57th Annual IEEE/ACM International Symposium on Microarchitecture (MICRO), pages 1169–1183, 2024. \n \n\n\n\n
\n\n\n\n \n \n \"Veiled paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{Miao24Micro,\n  author       = {Yuanqing Miao and Yingtian Zhang and Dinghao Wu and \n                  Danfeng Zhang and\n                  Gang Tan and Rui Zhang and\n                  Mahmut Taylan Kandemir},\n  title        = {Veiled Pathways: Investigating Covert and Side Channels within {GPU Uncore}},\n  booktitle    = {57th Annual {IEEE/ACM} International Symposium on Microarchitecture (MICRO)},\n  pages        = {1169--1183},\n  year         = {2024},\n  url_Paper = {https://doi.ieeecomputersociety.org/10.1109/MICRO61859.2024.00088},\n  keywords = {Hardware Security}\n}\n\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n psvCNN: A Zero-Knowledge CNN Prediction Integrity Verification Strategy.\n \n \n \n \n\n\n \n Fan, Y., Xu, B., Zhang, L., Tan, G., Yu, S., Li, K., & Zomaya, A. Y.\n\n\n \n\n\n\n IEEE Trans. Cloud Comput., 12(2): 359–369. 2024.\n \n\n\n\n
\n\n\n\n \n \n \"psvCNN: paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@article{Fan24psvCNN,\n  author       = {Yongkai Fan and\n                  Binyuan Xu and\n                  Linlin Zhang and\n                  Gang Tan and\n                  Shui Yu and\n                  Kuan{-}Ching Li and\n                  Albert Y. Zomaya},\n  title        = {{psvCNN}: {A} Zero-Knowledge {CNN} Prediction Integrity Verification\n                  Strategy},\n  journal      = {{IEEE} Trans. Cloud Comput.},\n  volume       = {12},\n  number       = {2},\n  pages        = {359--369},\n  year         = {2024},\n  url_Paper = {https://ieeexplore.ieee.org/document/10381877},\n  keywords = {ML Security}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n NeuFair: Neural Network Fairness Repair with Dropout.\n \n \n \n \n\n\n \n Dasu, V. A., Kumar, A., Tizpaz-Niari, S., & Tan, G.\n\n\n \n\n\n\n In 33rd ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA), pages 1541–1553, 2024. \n \n\n\n\n
\n\n\n\n \n \n \"NeuFair: paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 2 downloads\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{Dasu24Neufair,\n  author       = {Vishnu Asutosh Dasu and\n                  Ashish Kumar and\n                  Saeid Tizpaz{-}Niari and\n                  Gang Tan},\n  title        = {{NeuFair}: Neural Network Fairness Repair with Dropout},\n  booktitle    = {33rd {ACM} {SIGSOFT} International Symposium on\n                  Software Testing and Analysis (ISSTA)},\n  pages        = {1541--1553},\n  year         = {2024},\n  url_Paper = {https://dl.acm.org/doi/10.1145/3650212.3680380},\n  keywords = {ML Fairness}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Comprehensive Memory Safety Validation: An Alternative Approach to Memory Safety.\n \n \n \n \n\n\n \n Huang, K., Payer, M., Qian, Z., Sampson, J., Tan, G., & Jaeger, T.\n\n\n \n\n\n\n IEEE Security and Privacy, 22: 40–49. Apr 2024.\n \n\n\n\n
\n\n\n\n \n \n \"Comprehensive paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@ARTICLE{Huang24MSafety,\nauthor={Kaiming Huang and Mathias Payer and Zhiyun Qian and Jack Sampson and Gang Tan and Trent Jaeger},\njournal={IEEE Security and Privacy}, \ntitle={Comprehensive Memory Safety Validation: An Alternative Approach to Memory Safety},\nvolume={22},\nissue = {4},\nnumber={},\npages={40--49},\nmonth={Apr},\nyear={2024},\nurl_Paper = {https://ieeexplore.ieee.org/abstract/document/10491404},\nkeywords={Systems Security}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n V-Star: Learning Visibly Pushdown Grammars from Program Inputs.\n \n \n \n \n\n\n \n Jia, X., & Tan, G.\n\n\n \n\n\n\n Proceedings of the ACM on Programming Languages, (PLDI): 2003-2026. 2024.\n \n\n\n\n
\n\n\n\n \n \n \"V-Star: paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@article{JiaT24VStar,\n  author = "Xiaodong Jia and Gang Tan",\n  title = "{V-Star}: Learning Visibly Pushdown Grammars from Program Inputs",\n  journal   = {Proceedings of the ACM on Programming Languages},\n  number    = {{PLDI}},\n  pages     = {2003-2026},\n  year      = {2024},\n  url_Paper = {https://arxiv.org/abs/2404.04201},\n  keywords = {Programming Languages},\n  award     = {Distinguished paper award}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n ORANalyst: Systematic Testing Framework for Open RAN Implementations.\n \n \n \n \n\n\n \n Yang, T., Rashid, S. M. M., Ranjbar, A., Tan, G., & Hussain, S. R.\n\n\n \n\n\n\n In 33rd USENIX Security Symposium (USENIX Security), pages 1921–1938, 2024. \n \n\n\n\n
\n\n\n\n \n \n \"ORANalyst: paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@InProceedings{Yang24ORan,\n  author = {Tianchang Yang and Syed Md Mukit Rashid and Ali Ranjbar and Gang Tan and Syed Rafiul Hussain},\n  title = {{ORANalyst}: Systematic Testing Framework for Open {RAN} Implementations},\n  booktitle = {33rd USENIX Security Symposium (USENIX Security)},\n  year = {2024},\n  pages = {1921--1938},\n  url_Paper = {https://www.usenix.org/conference/usenixsecurity24/presentation/yang-tianchang},\n  keywords = {Systems Security}\n}\n\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n ValidCNN: A large-scale CNN predictive integrity verification scheme based on zk-SNARK.\n \n \n \n \n\n\n \n Fan, Y., Ma, K., Zhang, L., Lei, X., Xu, G., & Tan, G.\n\n\n \n\n\n\n IEEE Transactions on Dependable and Secure Computing, 21: 5185–5195. 2024.\n \n\n\n\n
\n\n\n\n \n \n \"ValidCNN: paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@article{Fan24TDSC,\n  author    = {Yongkai Fan and Kaile Ma  and Linlin Zhang and Xia Lei and Guangquan Xu and Gang Tan},\n  title     = {{ValidCNN}: A large-scale {CNN} predictive integrity verification scheme based on {zk-SNARK}},\n  journal   = {IEEE Transactions on Dependable and Secure Computing},\n  volume={21},\n  issue     = {6},\n  pages     = {5185--5195},\n  year      = {2024},\n  url_Paper = {https://ieeexplore.ieee.org/abstract/document/10453996},\n  keywords = {ML Security}\n}\n\n
\n
\n\n\n\n
\n\n\n\n\n\n
\n
\n\n
\n
\n  \n 2023\n \n \n (12)\n \n \n
\n
\n \n \n
\n \n\n \n \n \n \n \n \n Hardware Support for Constant-Time Programming.\n \n \n \n \n\n\n \n Miao, Y., Kandemir, M. T., Zhang, D., Zhang, Y., Tan, G., & Wu, D.\n\n\n \n\n\n\n In 56th Annual IEEE/ACM International Symposium on Microarchitecture (MICRO), pages 856–870, 2023. \n \n\n\n\n
\n\n\n\n \n \n \"Hardware paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n \n \n\n\n\n
\n
@inproceedings{Miao23Micro,\n  author       = {Yuanqing Miao and\n                  Mahmut Taylan Kandemir and\n                  Danfeng Zhang and\n                  Yingtian Zhang and\n                  Gang Tan and\n                  Dinghao Wu},\n  title        = {Hardware Support for Constant-Time Programming},\n  booktitle    = {56th Annual {IEEE/ACM} International Symposium on Microarchitecture (MICRO)},\n  pages        = {856--870},\n  year         = {2023},\n  url_Paper    = {https://dl.acm.org/doi/10.1145/3613424.3623796},\n  keywords = {Software Security -> Side Channel Mitigation, Hardware Security}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Quantifying and Mitigating Cache Side Channel Leakage with Differential Set.\n \n \n \n \n\n\n \n Ma, C., Wu, D., Tan, G., Kandemir, M., & Zhang, D.\n\n\n \n\n\n\n Proceedings of the ACM on Programming Languages, (OOPSLA): 1470–1498. 2023.\n \n\n\n\n
\n\n\n\n \n \n \"Quantifying paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@article{Ma23OOPSLA,\n  author    = {Cong Ma and Dinghao Wu and Gang Tan and Mahmut Kandemir and Danfeng Zhang},\n  title     = {Quantifying and Mitigating Cache Side Channel Leakage with Differential Set},\n  journal   = {Proceedings of the ACM on Programming Languages},\n  number    = {{OOPSLA}},\n  pages     = {1470--1498},\n  year      = {2023},\n  url_Paper = {https://dl.acm.org/doi/pdf/10.1145/3622850},\n  keywords = {Software Security -> Side Channel Mitigation}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Evolving Operating System Kernels Towards Secure Kernel-Driver Interfaces.\n \n \n \n \n\n\n \n Burtsev, A., Narayanan, V., Huang, Y., Huang, K., Tan, G., & Jaeger, T.\n\n\n \n\n\n\n In 19th Workshop on Hot Topics in Operating Systems (HOTOS), pages 166–173, 2023. \n \n\n\n\n
\n\n\n\n \n \n \"Evolving paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{Burtsev23HotOS,\n  author       = {Anton Burtsev and\n                  Vikram Narayanan and\n                  Yongzhe Huang and\n                  Kaiming Huang and\n                  Gang Tan and\n                  Trent Jaeger},\n  title        = {Evolving Operating System Kernels Towards Secure Kernel-Driver Interfaces},\n  booktitle    = {19th Workshop on Hot Topics in Operating Systems (HOTOS)},\n  pages        = {166--173},\n  year         = {2023},\n  url_Paper = {https://dl.acm.org/doi/pdf/10.1145/3593856.3595914},\n  keywords = {Software Security -> Privilege Separation}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Interval Parsing Grammars for File Format Parsing.\n \n \n \n \n\n\n \n Zhang, J., Morrisett, G., & Tan, G.\n\n\n \n\n\n\n Proceedings of the ACM on Programming Languages, 7(PLDI): 1073–1095. 2023.\n \n\n\n\n
\n\n\n\n \n \n \"Interval paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 2 downloads\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@article{ZhangMT23IPG,\n  author = "Jialun Zhang and Greg Morrisett and Gang Tan",\n  title = "Interval Parsing Grammars for File Format Parsing",\n  journal   = {Proceedings of the ACM on Programming Languages},\n  volume    = {7},\n  number    = {{PLDI}},\n  pages     = {1073--1095},\n  year      = {2023},\n  url_Paper = {https://dl.acm.org/doi/pdf/10.1145/3591264},\n  keywords  = {Formal Methods -> Parser Assurance}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n LibScan: Towards More Precise Third-Party Library Identification for Android Applications.\n \n \n \n \n\n\n \n Wu, Y., Sun, C., Zeng, D., Tan, G., Ma, S., & Wang, P.\n\n\n \n\n\n\n In 32nd USENIX Security Symposium (USENIX Security), pages 3385–3402, 2023. \n \n\n\n\n
\n\n\n\n \n \n \"LibScan: paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 1 download\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@InProceedings{Wu23Libscan,\n  author = {Yafei Wu and Cong Sun and Dongrui Zeng and Gang Tan and Siqi Ma and Peicheng Wang},\n  title = {{LibScan}: Towards More Precise {Third-Party} Library Identification for {Android} Applications},\n  booktitle = {32nd USENIX Security Symposium (USENIX Security)},\n  year = {2023},\n  pages = {3385--3402},\n  url_Paper = {https://www.usenix.org/conference/usenixsecurity23/presentation/wu-yafei},\n  keywords = {Software Security -> Android Security}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n podft: On Accelerating Dynamic Taint Analysis with Precise Path Optimization.\n \n \n \n \n\n\n \n Tian, Z., Sun, C., Zeng, D., & Tan, G.\n\n\n \n\n\n\n In Workshop on Binary Analysis Research (BAR), 2023. \n \n\n\n\n
\n\n\n\n \n \n \"podft: paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 1 download\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@INPROCEEDINGS{Tian23BAR,\nauthor={Zhiyou Tian and Cong Sun and Dongrui Zeng and Gang Tan},\ntitle={podft: On Accelerating Dynamic Taint Analysis with Precise Path Optimization},\nbooktitle= {Workshop on Binary Analysis Research (BAR)},\nyear={2023},\nurl_Paper = {https://www.ndss-symposium.org/ndss-paper/auto-draft-394/},\nkeywords  = {Software Security -> Binary Code Analysis}\n}\n\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n CryptoEval: Evaluating the risk of cryptographic misuses in Android apps with data-flow analysis.\n \n \n \n \n\n\n \n Sun, C., Xu, X., Wu, Y., Zeng, D., Tan, G., Ma, S., & Wang, P.\n\n\n \n\n\n\n IET Information Security, 17(4): 582–597. 2023.\n \n\n\n\n
\n\n\n\n \n \n \"CryptoEval: paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@article{Sun23CryptoEval,\n  author       = {Cong Sun and\n                  Xinpeng Xu and\n                  Yafei Wu and\n                  Dongrui Zeng and\n                  Gang Tan and\n                  Siqi Ma and\n                  Peicheng Wang},\n  title        = {{CryptoEval}: Evaluating the risk of cryptographic misuses in {Android}\n                  apps with data-flow analysis},\n  journal      = {{IET} Information Security},\n  volume       = {17},\n  number       = {4},\n  pages        = {582--597},\n  year         = {2023},\n  url_Paper    = {https://ietresearch.onlinelibrary.wiley.com/doi/full/10.1049/ise2.12117},\n  keywords = {Software Security -> Android Security}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n ABSLearn: a GNN-based framework for aliasing and buffer-size information retrieval.\n \n \n \n \n\n\n \n Liang, K., Tan, J., Zeng, D., Huang, Y., Huang, X., & Tan, G.\n\n\n \n\n\n\n Pattern Analysis and Application, 26(3): 1171–1189. 2023.\n \n\n\n\n
\n\n\n\n \n \n \"ABSLearn: paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n\n\n\n
\n
@article{Liang23AbsLearn,\n  author       = {Ke Liang and\n                  Jim Tan and\n                  Dongrui Zeng and\n                  Yongzhe Huang and\n                  Xiaolei Huang and\n                  Gang Tan},\n  title        = {{ABSLearn}: a {GNN}-based framework for aliasing and buffer-size information\n                  retrieval},\n  journal      = {Pattern Analysis and Application},\n  volume       = {26},\n  number       = {3},\n  pages        = {1171--1189},\n  year         = {2023},\n  url_Paper    = {https://link.springer.com/article/10.1007/s10044-023-01142-2}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n A derivative-based parser generator for visibly pushdown grammars.\n \n \n \n \n\n\n \n Jia, X., Kumar, A., & Tan, G.\n\n\n \n\n\n\n ACM Transactions on Programming Languages and Systems (TOPLAS), 45(9): 1–68. 2023.\n \n\n\n\n
\n\n\n\n \n \n \"A paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 2 downloads\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@article{JiaKT23TOPLAS,\n  author    = {Xiaodong Jia and\n               Ashish Kumar and\n               Gang Tan},\n  title     = {A derivative-based parser generator for visibly pushdown grammars},\n  journal   = {ACM Transactions on Programming Languages and Systems ({TOPLAS})},\n  volume    = {45},\n  issue     = {2},\n  number    = {9},\n  pages     = {1--68},\n  year      = {2023},\n  url_Paper = {https://dl.acm.org/doi/10.1145/3591472},\n  keywords  = {Formal Methods -> Parser Assurance}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n DISV: Domain Independent Semantic Validation of Data Files.\n \n \n \n \n\n\n \n Kumar, A., Harris, B., & Tan, G.\n\n\n \n\n\n\n In 9th Workshop on Language-Theoretic Security (LangSec), 2023. \n \n\n\n\n
\n\n\n\n \n \n \"DISV: paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 1 download\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@INPROCEEDINGS{Kumar23DISV,\nauthor={Ashish Kumar and Bill Harris and Gang Tan},\ntitle={{DISV}: Domain Independent Semantic Validation of Data Files},\nbooktitle= {9th Workshop on Language-Theoretic Security ({LangSec})},\nyear={2023},\naward     = {Best paper award},\nurl_Paper = {http://www.cse.psu.edu/~gxt29/papers/Kumar_LangSec23_DISV.pdf},\nkeywords = {Formal Methods -> Parser Assurance}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Information-Theoretic Testing and Debugging of Fairness Defects in Deep Neural Networks.\n \n \n \n \n\n\n \n Monjezi, V., Trivedi, A., Tan, G., & Tizpaz-Niari, S.\n\n\n \n\n\n\n In 45th International Conference on Software Engineering (ICSE), pages 1571–1582, 2023. \n \n\n\n\n
\n\n\n\n \n \n \"Information-Theoretic paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 1 download\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@InProceedings{Monjezi23ICSE,\n    title={Information-Theoretic Testing and Debugging of Fairness Defects in Deep Neural Networks},\n    author={Verya Monjezi and Ashutosh Trivedi and Gang Tan and Saeid Tizpaz-Niari},\n    booktitle = {45th International Conference on Software Engineering ({ICSE})},\n    pages = {1571--1582},\n    year={2023},\n    url_Paper = {https://tizpaz.github.io/icse2023-paper892.pdf},\n    keywords  = {ML Fairness}\n}\n\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n muDep: Mutation-based Dependency Generation for Precise Taint Analysis on Android Native Code.\n \n \n \n \n\n\n \n Sun, C., Ma, Y., Zeng, D., Tan, G., Ma, S., & Wu, Y.\n\n\n \n\n\n\n IEEE Transactions on Dependable and Secure Computing,1461–1475. 2023.\n \n\n\n\n
\n\n\n\n \n \n \"muDep: paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 1 download\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@article{Sun23TDSC,\n  author    = {Cong Sun and Yuwan Ma and Dongrui Zeng and Gang Tan and Siqi Ma and  Yafei Wu},\n  title     = {{muDep}: Mutation-based Dependency Generation for Precise Taint Analysis on {Android} Native Code},\n  journal   = {IEEE Transactions on Dependable and Secure Computing},\n  volumn = {20},\n  pages     = {1461--1475},\n  year      = {2023},\n  url_Paper = {https://www.computer.org/csdl/journal/tq/2023/02/09726808/1BrwwIPYKyY},\n  keywords = {Software Security -> Android Security}\n}\n\n
\n
\n\n\n\n
\n\n\n\n\n\n
\n
\n\n
\n
\n  \n 2022\n \n \n (11)\n \n \n
\n
\n \n \n
\n \n\n \n \n \n \n \n \n Performant Binary Fuzzing without Source Code using Static Instrumentation.\n \n \n \n \n\n\n \n Pauley, E., Tan, G., Zhang, D., & McDaniel, P. D.\n\n\n \n\n\n\n In 10th IEEE Conference on Communications and Network Security (CNS), pages 226–235, 2022. \n \n\n\n\n
\n\n\n\n \n \n \"Performant paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 1 download\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{Pauley22CNS,\n  author    = {Eric Pauley and\n               Gang Tan and\n               Danfeng Zhang and\n               Patrick D. McDaniel},\n  title     = {Performant Binary Fuzzing without Source Code using Static Instrumentation},\n  booktitle = {10th {IEEE} Conference on Communications and Network Security (CNS)},\n  pages     = {226--235},\n  year      = {2022},\n  url_Paper = {https://pauley.me/publication/2022/cns22/cns22.pdf},\n  keywords  = {Software Security}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Mitigating Vulnerabilities in Closed Source Software.\n \n \n \n \n\n\n \n Huang, Z., Tan, G., & Yu, X.\n\n\n \n\n\n\n EAI Endorsed Transactions on Security and Safety, 8(30): 4. 2022.\n \n\n\n\n
\n\n\n\n \n \n \"Mitigating paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 1 download\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n \n \n\n\n\n
\n
@article{HuangTY22EAI,\n  author    = {Zhen Huang and\n               Gang Tan and\n               Xiaowei Yu},\n  title     = {Mitigating Vulnerabilities in Closed Source Software},\n  journal   = {{EAI} Endorsed Transactions on Security and Safety},\n  volume    = {8},\n  number    = {30},\n  pages     = {4},\n  year      = {2022},\n  url_Paper = {https://facsrv.cs.depaul.edu/zhuang28/Mitigating_Vulnerabilities_in_Closed_Source_Software.pdf},\n  keywords  = {Software Security -> Automated Program Repairs, Software Security -> Binary Code Analysis}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n TraceChain: a blockchain-based scheme to protect data confidentiality and traceability.\n \n \n \n \n\n\n \n Fan, Y., Lin, X., Liang, W., Wang, J., Tan, G., Lei, X., & Lei, J.\n\n\n \n\n\n\n Software: Practice and Experience, 52(1): 115–129. 2022.\n \n\n\n\n
\n\n\n\n \n \n \"TraceChain: paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@article{Fan22SPE,\n  author    = {Yongkai Fan and\n               Xiaodong Lin and\n               Wei Liang and\n               Jinghan Wang and\n               Gang Tan and\n               Xia Lei and\n               Jing Lei},\n  title     = {{TraceChain}: a blockchain-based scheme to protect data confidentiality and traceability},\n  journal   = {Software: Practice and Experience},\n  volume    = {52},\n  number    = {1},\n  pages     = {115--129},\n  year      = {2022},\n  url_Paper = {https://onlinelibrary.wiley.com/doi/abs/10.1002/spe.2753},\n  keywords = {Systems Security}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Certified Parsing of Dependent Grammars.\n \n \n \n \n\n\n \n Sarracino, J., Tan, G., & Morrisett, G.\n\n\n \n\n\n\n In 8th Workshop on Language-Theoretic Security (LangSec), 2022. \n \n\n\n\n
\n\n\n\n \n \n \"Certified paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 1 download\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@INPROCEEDINGS{SarracinoTM22LangSec,\nauthor={John Sarracino and Gang Tan and Greg Morrisett},\ntitle={Certified Parsing of Dependent Grammars},\nbooktitle= {8th Workshop on Language-Theoretic Security (LangSec)},\nyear={2022},\nurl_Paper = {http://www.cse.psu.edu/~gxt29/papers/Sarracino_LangSec22.pdf},\nkeywords = {Formal Methods -> Parser Assurance}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n IoTRepair: Flexible Fault Handling in Diverse IoT Deployments.\n \n \n \n \n\n\n \n Norris, M., Celik, Z. B., Rengasamy, P. V., Zhao, S., McDaniel, P. D., Sivasubramaniam, A., & Tan, G.\n\n\n \n\n\n\n ACM Transactions on Internet of Things, 3(3): 22:1–22:33. 2022.\n \n\n\n\n
\n\n\n\n \n \n \"IoTRepair: paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@article{Norris22IotRepair,\n  author    = {Michael Norris and\n               Z. Berkay Celik and\n               Prasanna Venkatesh Rengasamy and\n               Shulin Zhao and\n               Patrick Drew McDaniel and\n               Anand Sivasubramaniam and\n               Gang Tan},\n  title     = {{IoTRepair}: Flexible Fault Handling in Diverse {IoT} Deployments},\n  journal   = {{ACM} Transactions on  Internet of Things},\n  volume    = {3},\n  number    = {3},\n  pages     = {22:1--22:33},\n  year      = {2022},\n  url_Paper = {http://www.cse.psu.edu/~gxt29/papers/IoTRepair_journal.pdf},\n  keywords = {Software Security -> IoT Security}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n KSplit: Automating Device Driver Isolation.\n \n \n \n \n\n\n \n Huang, Y., Narayanan, V., Detweiler, D., Huang, K., Tan, G., Jaeger, T., & Burtsev, A.\n\n\n \n\n\n\n In 16th USENIX Symposium on Operating Systems Design and Implementation (OSDI'22), pages 613–631, 2022. \n \n\n\n\n
\n\n\n\n \n \n \"KSplit: paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 2 downloads\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@InProceedings{Huang22OSDI,\n    title={KSplit: Automating Device Driver Isolation},\n    author={Yongzhe Huang and Vikram Narayanan and David Detweiler and Kaiming Huang and Gang Tan and Trent Jaeger and Anton Burtsev},\n    booktitle = {16th USENIX Symposium on Operating Systems Design and Implementation (OSDI'22)},\n    pages = {613--631},\n    year={2022},\n    url_Paper = {http://www.cse.psu.edu/~gxt29/papers/ksplit_osdi22.pdf},\n    keywords = {Software Security -> Privilege Separation}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n ROS-SF: A Transparent and Efficient ROS Middleware using Serialization-Free Message.\n \n \n \n \n\n\n \n Wang, Y., Hu, X., Zou, Z., Tan, W., & Tan, G.\n\n\n \n\n\n\n In 23rd ACM/IFIP Middleware Conference, pages 82–93, 2022. \n \n\n\n\n
\n\n\n\n \n \n \"ROS-SF: paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{Wang22ROSSF,\n author = {Yu-Ping Wang and Xu-Qiang Hu and Zi-Xin Zou and Wende Tan and Gang Tan},\n title = {{ROS-SF}: A Transparent and Efficient {ROS} Middleware using Serialization-Free Message},\n booktitle = {23rd ACM/IFIP Middleware Conference},\n pages = {82--93},\n year = {2022},\n url_Paper = {https://dl.acm.org/doi/pdf/10.1145/3528535.3531518},\n keywords  = {Programming Languages}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n BinPointer: Towards Precise, Sound, and Scalable Binary-Level Pointer Analysis.\n \n \n \n \n\n\n \n Kim, S. H., Sun, C., Zeng, D., & Tan, G.\n\n\n \n\n\n\n In ACM SIGPLAN 2022 International Conference Compiler Construction (CC), pages 169–180, 2022. \n \n\n\n\n
\n\n\n\n \n \n \"BinPointer: paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 7 downloads\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@InProceedings{Kim22CC,\n  Title                    = {BinPointer: Towards Precise, Sound, and Scalable Binary-Level Pointer Analysis},\n  Author                   = {Sun Hyoung Kim and Cong Sun and Dongrui Zeng and Gang Tan},\n  Booktitle                = {ACM SIGPLAN 2022 International Conference Compiler Construction (CC)},\n  Year                     = {2022},\n  pages = {169--180},\n  Url_Paper                = {http://www.cse.psu.edu/~gxt29/papers/BinPointerCC22.pdf},\n  keywords = {Software Security -> Binary Code Analysis}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Fairness-aware Configuration of Machine Learning Libraries.\n \n \n \n \n\n\n \n Tizpaz-Niari, S., Kumar, A., Tan, G., & Trivedi, A.\n\n\n \n\n\n\n In 44th International Conference on Software Engineering (ICSE), pages 909–920, 2022. \n \n\n\n\n
\n\n\n\n \n \n \"Fairness-aware paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 5 downloads\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@InProceedings{Niari22ICSE,\n    title={Fairness-aware Configuration of Machine Learning Libraries},\n    author={Saeid Tizpaz-Niari and Ashish Kumar and Gang Tan and Ashutosh Trivedi},\n    booktitle = {44th International Conference on Software Engineering ({ICSE})},\n    pages = {909--920},\n    year={2022},\n    url_Paper = {https://arxiv.org/pdf/2202.06196.pdf},\n    keywords  = {ML Fairness}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Building a Privacy-Preserving Smart Camera System.\n \n \n \n \n\n\n \n Beugin, Y., Burke, Q., Hoak, B., Sheatsley, R., Pauley, E., Tan, G., Hussain, S. R., & McDaniel, P.\n\n\n \n\n\n\n In Privacy Enhancing Technologies Symposium (PETS), pages 25–46, 2022. \n \n\n\n\n
\n\n\n\n \n \n \"Building paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@InProceedings{Beugin22PET,\n    title={Building a Privacy-Preserving Smart Camera System}, \n    author={Yohan Beugin and Quinn Burke and Blaine Hoak and Ryan Sheatsley and Eric Pauley and Gang Tan and Syed Rafiul Hussain and Patrick McDaniel},\n    booktitle = {Privacy Enhancing Technologies Symposium ({PETS})},\n    pages = {25--46},\n    year={2022},\n    url_Paper = {https://arxiv.org/pdf/2201.09338.pdf},\n    keywords  = {Systems Security}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n The Taming of the Stack: Isolating Stack Data from Memory Errors.\n \n \n \n \n\n\n \n Huang, K., Huang, Y., Payer, M., Qian, Z., Sampson, J., Tan, G., & Jaeger, T.\n\n\n \n\n\n\n In Network and Distributed System Security Symposium (NDSS), 2022. \n \n\n\n\n
\n\n\n\n \n \n \"The paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 1 download\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@InProceedings{Huang22NDSS,\n  Title                    = {The Taming of the Stack: Isolating Stack Data from Memory Errors},\n  Author                   = {Kaiming Huang and Yongzhe Huang and Mathias Payer and Zhiyun Qian and Jack Sampson and Gang Tan and Trent Jaeger},\n  Booktitle                = {Network and Distributed System Security Symposium (NDSS)},\n  Year                     = {2022},\n  url_Paper = {https://www.cse.psu.edu/~trj1/papers/huang-ndss22.pdf},\n  keywords  = {Software Security -> Inlined Reference Monitors (CFI; SFI; etc.)}\n}\n\n
\n
\n\n\n\n
\n\n\n\n\n\n
\n
\n\n
\n
\n  \n 2021\n \n \n (13)\n \n \n
\n
\n \n \n
\n \n\n \n \n \n \n \n \n Sdft: A PDG-based Summarization for Efficient Dynamic Data Flow Tracking.\n \n \n \n \n\n\n \n Kan, X., Sun, C., Liu, S., Huang, Y., Tan, G., Ma, S., & Zhang, Y.\n\n\n \n\n\n\n In 21st IEEE International Conference on Software Quality, Reliability, and Security (QRS), 2021. \n \n\n\n\n
\n\n\n\n \n \n \"Sdft: paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@InProceedings{Kan21Sdft,\n  Title                    = {Sdft: A {PDG}-based Summarization for Efficient Dynamic Data Flow Tracking},\n  Author                   = {Xiao Kan and Cong Sun and Shen Liu and Yongzhe Huang and Gang Tan and Siqi Ma and Yumei Zhang},\n  Booktitle                = {21st IEEE International Conference on Software Quality, Reliability, and Security ({QRS})},\n  Year                     = {2021},\n  url_Paper = {https://ieeexplore.ieee.org/stamp/stamp.jsp?arnumber=9724893},\n  keywords  = {Software Security}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n ReCFA: Resilient Control-Flow Attestation.\n \n \n \n \n\n\n \n Zhang, Y., Liu, X., Sun, C., Zeng, D., Tan, G., Kan, X., & Ma, S.\n\n\n \n\n\n\n In Annual Computer Security Applications Conference (ACSAC), pages 311-322, 2021. \n \n\n\n\n
\n\n\n\n \n \n \"ReCFA: paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 3 downloads\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{Zhang21ACSAC,\n  author    = {Yumei Zhang and Xinzhi Liu and Cong Sun and Dongrui Zeng and Gang Tan and Xiao Kan and Siqi Ma},\n  title     = {{ReCFA}: Resilient Control-Flow Attestation},\n  booktitle = {Annual Computer Security Applications Conference (ACSAC)},\n  pages     = {311-322},\n  year      = {2021},\n  url_Paper = {https://dl.acm.org/doi/10.1145/3485832.3485900},\n  keywords = {Software Security -> Inlined Reference Monitors (CFI; SFI; etc.)}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n A derivative-based parser generator for visibly pushdown grammars.\n \n \n \n \n\n\n \n Jia, X., Kumar, A., & Tan, G.\n\n\n \n\n\n\n Proceedings of the ACM on Programming Languages, 5(OOPSLA): 1–24. 2021.\n \n\n\n\n
\n\n\n\n \n \n \"A paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 3 downloads\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@article{JiaKT21deriv,\n  author    = {Xiaodong Jia and\n               Ashish Kumar and\n               Gang Tan},\n  title     = {A derivative-based parser generator for visibly pushdown grammars},\n  journal   = {Proceedings of the ACM on Programming Languages},\n  volume    = {5},\n  number    = {{OOPSLA}},\n  pages     = {1--24},\n  year      = {2021},\n  url_Paper = {http://www.cse.psu.edu/~gxt29/papers/VPLDerivParsingOopsla21.pdf},\n  keywords  = {Formal Methods -> Parser Assurance}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n SpecSafe: Detecting Cache Side Channels in a Speculative World.\n \n \n \n \n\n\n \n Brotzman, R., Zhang, D., Kandemir, M., & Tan, G.\n\n\n \n\n\n\n Proceedings of the ACM on Programming Languages, 5(OOPSLA): 1–28. 2021.\n \n\n\n\n
\n\n\n\n \n \n \"SpecSafe: paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 2 downloads\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@article{Brotzman21specsafe,\n  author={Robert Brotzman and Danfeng Zhang and Mahmut Kandemir and Gang Tan},\n  title = {{SpecSafe}: Detecting Cache Side Channels in a Speculative World},\n  journal   = {Proceedings of the ACM on Programming Languages},\n  volume    = {5},\n  number    = {{OOPSLA}},\n  pages     = {1--28},\n  year      = {2021},\n  url_Paper = {http://www.cse.psu.edu/~gxt29/papers/SpecSafeOopsla21.pdf},\n  keywords = {Software Security -> Side Channel Mitigation}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n iTOP: Automating Counterfeit Object-Oriented Programming Attacks.\n \n \n \n \n\n\n \n Muntean, P., Viehoever, R., Lin, Z., Tan, G., Grossklags, J., & Eckert, C.\n\n\n \n\n\n\n In International Symposium on Research in Attacks, Intrusions and Defenses (RAID), pages 162–176, 2021. \n \n\n\n\n
\n\n\n\n \n \n \"iTOP: paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{Muntean21itop,\n  author    = {Paul Muntean and Richard Viehoever and Zhiqiang Lin and Gang Tan and Jens Grossklags and Claudia Eckert},\n  title     = {{iTOP}: Automating Counterfeit Object-Oriented Programming Attacks},\n  booktitle = {International Symposium on Research in Attacks, Intrusions and Defenses (RAID)},\n  pages     = {162--176},\n  year      = {2021},\n  url_Paper = {https://dl.acm.org/doi/abs/10.1145/3471621.3471847},\n  keywords = {Software Security -> Attacks}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n PPMCK: Privacy-Preserving Multi-party Computing for K-means Clustering.\n \n \n \n \n\n\n \n Fan, Y., Bai, J., Lei, X., Lin, W., Hu, Q., Wu, G., Guo, J., & Tan, G.\n\n\n \n\n\n\n Journal of Parallel and Distributed Computing, 154: 54–63. 2021.\n \n\n\n\n
\n\n\n\n \n \n \"PPMCK: paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@article{Fan21JPDC,\n  author    = {Yongkai Fan and Jianrong Bai and Xia Lei and Weiguo Lin and Qian Hu and Guodong Wu and Jiaming Guo and Gang Tan},\n  title     = {{PPMCK}: Privacy-Preserving Multi-party Computing for K-means Clustering},\n  journal   = {Journal of Parallel and Distributed Computing},\n  volume    = {154},\n  pages = {54--63},\n  year  = {2021},\n  url_Paper = {https://www.sciencedirect.com/science/article/pii/S0743731521000629},\n  keywords = {ML Security}\n}\n\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Fine-grained Program Partitioning for Security.\n \n \n \n \n\n\n \n Huang, Z., Jaeger, T., & Tan, G.\n\n\n \n\n\n\n In 14th European Workshop on Systems Security (EuroSec), pages 21–26, 2021. \n \n\n\n\n
\n\n\n\n \n \n \"Fine-grained paper\n  \n \n\n \n \n doi\n  \n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 2 downloads\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@INPROCEEDINGS{HuangJT21EuroSec,\nauthor={Zhen Huang and Trent Jaeger and Gang Tan},\ntitle={Fine-grained Program Partitioning for Security},\nbooktitle= {14th European Workshop on Systems Security (EuroSec)},\nyear={2021},\npages     = {21--26},\ndoi = {10.1145/3447852.3458717},\nurl_Paper = {http://www.cse.psu.edu/~gxt29/papers/HuangEuroSec21.pdf},\nkeywords = {Software Security -> Privilege Separation}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Bohemia: A Validator for Parser Frameworks.\n \n \n \n \n\n\n \n Paranjpe, A., & Tan, G.\n\n\n \n\n\n\n In 7th Workshop on Language-Theoretic Security (LangSec), 2021. \n \n\n\n\n
\n\n\n\n \n \n \"Bohemia: paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 2 downloads\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@INPROCEEDINGS{ParanjpeT21LangSec,\nauthor={Anish Paranjpe and Gang Tan},\ntitle={Bohemia: A Validator for Parser Frameworks},\nbooktitle= {7th Workshop on Language-Theoretic Security (LangSec)},\nyear={2021},\nurl_Paper = {http://www.cse.psu.edu/~gxt29/papers/Paranjpe_LangSec21.pdf},\nkeywords = {Formal Methods -> Parser Assurance}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n MazeRunner: Evaluating the Attack Surface of Control-Flow Integrity Policies .\n \n \n \n \n\n\n \n Zeng, D., Niu, B., & Tan, G.\n\n\n \n\n\n\n In 20th IEEE International Conference On Trust, Security And Privacy In Computing And Communications (TrustCom), pages 810–821, 2021. \n \n\n\n\n
\n\n\n\n \n \n \"MazeRunner: paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n \n \n\n\n\n
\n
@InProceedings{ZengNT21Trust,\n  Title = {{MazeRunner}: Evaluating the Attack Surface of Control-Flow Integrity Policies },\n  Author = {Dongrui Zeng and Ben Niu and Gang Tan},\n  Booktitle = {20th IEEE International Conference On Trust, Security And Privacy In Computing And Communications (TrustCom)},\n  Pages = {810--821},\n  Year = {2021},\n  Url_Paper = {http://www.cse.psu.edu/~gxt29/papers/MazeRunner21.pdf},\n  keywords = {Software Security -> Binary Code Analysis, Software Security -> Inlined Reference Monitors (CFI; SFI; etc.)}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Ghost Thread: Effective User-Space Cache Side Channel Protection.\n \n \n \n \n\n\n \n Brotzman, R., Zhang, D., Kandemir, M., & Tan, G.\n\n\n \n\n\n\n In 11th ACM Conference on Data and Application Security and Privacy (CODASPY), pages 233–244, 2021. \n \n\n\n\n
\n\n\n\n \n \n \"Ghost paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 3 downloads\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@InProceedings{Brotzman21codaspy,\n  author={Robert Brotzman and Danfeng Zhang and Mahmut Kandemir and Gang Tan},\n  title     = {Ghost Thread: Effective User-Space Cache Side Channel Protection},\n  booktitle = {11th {ACM} Conference on Data and Application Security and Privacy ({CODASPY})},\n  pages     = {233--244},\n  year      = {2021},\n  Url_Paper = {http://www.cse.psu.edu/~gxt29/papers/ghostthread_codaspy21.pdf},\n  keywords = {Software Security -> Side Channel Mitigation}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Refining Indirect Call Targets at the Binary Level.\n \n \n \n \n\n\n \n Kim, S. H., Sun, C., Zeng, D., & Tan, G.\n\n\n \n\n\n\n In Network and Distributed System Security Symposium (NDSS), 2021. \n \n\n\n\n
\n\n\n\n \n \n \"Refining paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 2 downloads\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@InProceedings{Kim21BPA,\n  Title                    = {Refining Indirect Call Targets at the Binary Level},\n  Author                   = {Sun Hyoung Kim and Cong Sun and Dongrui Zeng and Gang Tan},\n  Booktitle                = {Network and Distributed System Security Symposium (NDSS)},\n  Year                     = {2021},\n  Url_Paper                = {http://www.cse.psu.edu/~gxt29/papers/BPA_NDSS21.pdf},\n  keywords = {Software Security -> Binary Code Analysis}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n SPX64: A Scratchpad Memory for General-purpose Microprocessors.\n \n \n \n \n\n\n \n Singh, A., Dave, S., Zardoshti, P., Brotzman, R., Zhang, C., Guo, X., Shrivastava, A., Tan, G., & Spear, M. F.\n\n\n \n\n\n\n ACM Trans. Archit. Code Optim., 18(1): 14:1–14:26. 2021.\n \n\n\n\n
\n\n\n\n \n \n \"SPX64: paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 3 downloads\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n \n \n\n\n\n
\n
@article{Singh21SPX,\n  author    = {Abhishek Singh and\n               Shail Dave and\n               Pantea Zardoshti and\n               Robert Brotzman and\n               Chao Zhang and\n               Xiaochen Guo and\n               Aviral Shrivastava and\n               Gang Tan and\n               Michael F. Spear},\n  title     = {{SPX64:} {A} Scratchpad Memory for General-purpose Microprocessors},\n  journal   = {{ACM} Trans. Archit. Code Optim.},\n  volume    = {18},\n  number    = {1},\n  pages     = {14:1--14:26},\n  year      = {2021},\n  Url_Paper = {https://dl.acm.org/doi/10.1145/3436730},\n  keywords = {Software Security -> Side Channel Mitigation, Hardware Security}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n One Enhanced Secure Access Scheme for Outsourced Data.\n \n \n \n\n\n \n Fan, Y., Liu, S., Lei, X., Li, K., Lin, W., & Tan, G.\n\n\n \n\n\n\n Information Sciences, 561: 230–242. 2021.\n \n\n\n\n
\n\n\n\n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@article{Fan21IS,\n  author    = {Yongkai Fan and Shengle Liu and Xia Lei and Kuan-Ching Li and Weiguo Lin and Gang Tan},\n  title     = {One Enhanced Secure Access Scheme for Outsourced Data},\n  journal   = {Information Sciences},\n  volume    = {561},\n  pages     = {230--242},\n  year      = {2021},\n  keywords={Systems Security -> Trusted Execution Environment}\n}\n\n
\n
\n\n\n\n
\n\n\n\n\n\n
\n
\n\n
\n
\n  \n 2020\n \n \n (9)\n \n \n
\n
\n \n \n
\n \n\n \n \n \n \n \n Privacy preserving based logistic regression on big data.\n \n \n \n\n\n \n Fan, Y., Bai, J., Lei, X., Zhang, Y., Zhang, B., Li, K., & Tan, G.\n\n\n \n\n\n\n Journal of Network and Computer Applications, 171: 102769. 2020.\n \n\n\n\n
\n\n\n\n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@article{Fan20JNCA,\n  author    = {Yongkai Fan and Jianrong Bai and Xia Lei and Yuqing Zhang and Bin Zhang and Kuan-Ching Li and Gang Tan},\n  title     = {Privacy preserving based logistic regression on big data},\n  journal   = {Journal of Network and Computer Applications},\n  volume    = {171},\n  pages = {102769},\n  year      = {2020},\n  keywords={ML Security}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n rhoFEM: Efficient Backward-edge Protection Using Reversed Forward-edge Mappings.\n \n \n \n \n\n\n \n Muntean, P., Neumayer, M., Lin, Z., Tan, G., Grossklags, J., & Eckert, C.\n\n\n \n\n\n\n In Annual Computer Security Applications Conference (ACSAC), pages 466–479, 2020. \n \n\n\n\n
\n\n\n\n \n \n \"rhoFEM: paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{Muntean20ACSAC,\n  author    = {Paul Muntean and\n               Matthias Neumayer and\n               Zhiqiang Lin and\n               Gang Tan and\n               Jens Grossklags and\n               Claudia Eckert},\n  title     = {rho{FEM}: Efficient Backward-edge Protection Using Reversed Forward-edge Mappings},\n  booktitle = {Annual Computer Security Applications Conference (ACSAC)},\n  pages     = {466--479},\n  year      = {2020},\n  url_Paper = {https://doi.org/10.1145/3427228.3427246},\n  keywords = {Software Security -> Inlined Reference Monitors (CFI; SFI; etc.)}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Using Safety Properties to Generate Vulnerability Patches.\n \n \n \n \n\n\n \n Huang, Z., Lie, D., Tan, G., & Jaeger, T.\n\n\n \n\n\n\n USENIX ;login, 45(4): 23–28. December 2020.\n \n\n\n\n
\n\n\n\n \n \n \"Using paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 2 downloads\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@article{HuangLTJ20login,\n   author = {Zhen Huang and David Lie and Gang Tan and Trent Jaeger},\n   title = {Using Safety Properties to Generate Vulnerability Patches},\n   journal = {USENIX ;login},\n   volume = {45},\n   number = {4},\n   pages = {23--28},\n   month = dec,\n   year = {2020},\n   url_Paper = {http://www.cse.psu.edu/~gxt29/papers/patch_login21.pdf},\n   keywords  = {Software Security -> Automated Program Repairs}\n}\n\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Methodologies for Quantifying (Re-)randomization Security and Timing under JIT-ROP.\n \n \n \n \n\n\n \n Ahmed, M. S., Xiao, Y., Snow, K. Z., Tan, G., Monrose, F., & Yao, D.\n\n\n \n\n\n\n In 26th ACM Conference on Computer and Communications Security (CCS), pages 1803–1820, 2020. \n \n\n\n\n
\n\n\n\n \n \n \"Methodologies paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 2 downloads\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{Ahmed20JITRop,\n  author    = {Md Salman Ahmed and Ya Xiao and Kevin Z. Snow and Gang Tan and\n               Fabian Monrose and Danfeng Yao},\n  title     = {Methodologies for Quantifying (Re-)randomization Security and\n              Timing under {JIT-ROP}},\n  booktitle = {26th ACM Conference on Computer and Communications Security ({CCS})},\n  pages     = {1803--1820},\n  year      = {2020},\n  url_Paper = {https://doi.org/10.1145/3372297.3417248},\n  keywords = {Software Security}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n IoTRepair: Systematically Addressing Device Faults in Commodity IoT.\n \n \n \n \n\n\n \n Norris, M., Celik, Z. B., Venkatesh, P., Zhao, S., McDaniel, P. D., Sivasubramaniam, A., & Tan, G.\n\n\n \n\n\n\n In 5th ACM/IEEE Conference on Internet of Things Design and Implementation (IoTDI), pages 142–148, 2020. \n \n\n\n\n
\n\n\n\n \n \n \"IoTRepair: paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 8 downloads\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{Norris20IoTRepair,\n  author    = {Michael Norris and\n               Z. Berkay Celik and\n               Prasanna Venkatesh and\n               Shulin Zhao and\n               Patrick D. McDaniel and\n               Anand Sivasubramaniam and\n               Gang Tan},\n  title     = {{IoTRepair}: Systematically Addressing Device Faults in Commodity {IoT}},\n  booktitle = {5th ACM/IEEE Conference on Internet of Things Design and Implementation ({IoTDI})},\n  pages     = {142--148},\n  year      = {2020},\n  url_Paper = {http://www.cse.psu.edu/~gxt29/papers/IoTRepair.pdf},\n  keywords = {Software Security -> IoT Security}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n SNPL: One Scheme of Securing Nodes in IoT Perception Layer.\n \n \n \n\n\n \n Fan, Y., Zhao, G., Li, K., Zhang, B., Tan, G., Sun, X., & Xia, F.\n\n\n \n\n\n\n Sensors, 20(4): 1090. 2020.\n \n\n\n\n
\n\n\n\n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@article{Fan20IoT,\n  author    = {Yongkai Fan and\n               Guanqun Zhao and\n               Kuan{-}Ching Li and\n               Bin Zhang and\n               Gang Tan and\n               Xiaofeng Sun and\n               Fanglue Xia},\n  title     = {{SNPL}: One Scheme of Securing Nodes in {IoT} Perception Layer},\n  journal   = {Sensors},\n  volume    = {20},\n  number    = {4},\n  pages     = {1090},\n  year      = {2020},\n  keywords = {Software Security -> IoT Security}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Lightweight Kernel Isolation with Virtualization and VM Functions.\n \n \n \n \n\n\n \n Narayanan, V., Huang, Y., Tan, G., Jaeger, T., & Burtsev, A.\n\n\n \n\n\n\n 16th ACM International Conference on Virtual Execution Environments (VEE),157–171. 2020.\n \n\n\n\n
\n\n\n\n \n \n \"Lightweight paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 2 downloads\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@article{Narayanan20VEE,\n  author = {Vikram Narayanan and Yongzhe Huang and Gang Tan and Trent Jaeger and Anton Burtsev},\n  title     = {Lightweight Kernel Isolation with Virtualization and {VM} Functions},\n  journal   = {16th ACM International Conference on Virtual Execution Environments (VEE)},\n  pages     = {157--171},\n  year      = {2020},\n  award     = {Best paper award},\n  url_Paper = {https://doi.org/10.1145/3381052.3381328},\n  keywords = {Software Security -> Privilege Separation}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Prioritizing Data Flows and Sinks for App Security Transformation.\n \n \n \n \n\n\n \n Tian, K., Tan, G., Yao, D., & Ryder, B.\n\n\n \n\n\n\n Journal of Computers & Security, 92: 101750. 2020.\n \n\n\n\n
\n\n\n\n \n \n \"Prioritizing paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 3 downloads\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@article{Tian20JCS,\n  author = {Ke Tian and Gang Tan and Danfeng Yao and Barbara Ryder},\n  title     = {Prioritizing Data Flows and Sinks for App Security Transformation},\n  journal   = {Journal of Computers \\& Security},\n  volume    = {92},\n  pages     = {101750},\n  year      = {2020},\n  url_Paper = {https://doi.org/10.1016/j.cose.2020.101750},\n  keywords = {Software Security -> Android Security}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Detection of Repackaged Android Malware with Code-Heterogeneity Features.\n \n \n \n \n\n\n \n Tian, K., Yao, D., Rider, B., Tan, G., & Peng, G.\n\n\n \n\n\n\n IEEE Transactions on Dependable and Secure Computing, 17(1): 64–77. 2020.\n \n\n\n\n
\n\n\n\n \n \n \"Detection paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 1 download\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@article{Tian20repack,\n  author    = {Ke Tian and\n               Danfeng Yao and\n               Barbara Rider and Gang Tan and Guojun Peng},\n  title     = {Detection of Repackaged {Android} Malware with Code-Heterogeneity Features},\n  journal   = {IEEE Transactions on Dependable and Secure Computing},\n  volume    = {17},\n  number    = {1},\n  pages     = {64--77},\n  year      = {2020},\n  url_Paper = {https://doi.org/10.1109/TDSC.2017.2745575},\n  keywords = {Software Security -> Android Security}\n}\n\n
\n
\n\n\n\n
\n\n\n\n\n\n
\n
\n\n
\n
\n  \n 2019\n \n \n (13)\n \n \n
\n
\n \n \n
\n \n\n \n \n \n \n \n \n Program-mandering: Quantitative Privilege Separation.\n \n \n \n \n\n\n \n Liu, S., Zeng, D., Huang, Y., Capobianco, F., McCamant, S., Jaeger, T., & Tan, G.\n\n\n \n\n\n\n In 26th ACM Conference on Computer and Communications Security (CCS), pages 1023–1040, 2019. \n \n\n\n\n
\n\n\n\n \n \n \"Program-mandering: paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 4 downloads\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{Liu19PM,\n  author    = {Shen Liu and Dongrui Zeng and Yongzhe Huang and Frank Capobianco and Stephen McCamant and Trent Jaeger and Gang Tan},\n  title     = {Program-mandering: Quantitative Privilege Separation},\n  booktitle = {26th ACM Conference on Computer and Communications Security ({CCS})},\n  pages     = {1023--1040},\n  year      = {2019},\n  url_Paper = {http://www.cse.psu.edu/~gxt29/papers/pm_ccs19.pdf},\n  keywords = {Software Security -> Privilege Separation}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n IVT: an Efficient Method for Sharing Subtype Polymorphic Objects.\n \n \n \n \n\n\n \n Wang, Y., Hu, X., Zou, Z., Tan, W., & Tan, G.\n\n\n \n\n\n\n In ACM Conference on Object-Oriented Programming, Systems, Languages, and Applications (OOPSLA), pages 130:1–130:22, 2019. \n \n\n\n\n
\n\n\n\n \n \n \"IVT: paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{Wang19IVT,\n author = {Yu-Ping Wang and Xu-Qiang Hu and Zi-Xin Zou and Wende Tan and Gang Tan},\n title = {{IVT}: an Efficient Method for Sharing Subtype Polymorphic Objects},\n booktitle = {ACM Conference on Object-Oriented Programming, Systems, Languages, and Applications ({OOPSLA})},\n pages = {130:1--130:22},\n year = {2019},\n url_Paper = {https://doi.org/10.1145/3360556},\n keywords  = {Programming Languages}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n LLVM-CFI: Analyzing Static Control Flow Integrity Protections.\n \n \n \n \n\n\n \n Muntean, P., Neumayer, M., Lin, Z., Tan, G., Grossklags, J., & Eckert, C.\n\n\n \n\n\n\n In Annual Computer Security Applications Conference (ACSAC), pages 584–597, 2019. \n \n\n\n\n
\n\n\n\n \n \n \"LLVM-CFI: paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 3 downloads\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{Muntean19ACSAC,\n  author    = {Paul Muntean and Matthias Neumayer and Zhiqiang Lin and Gang Tan and Jens Grossklags and Claudia Eckert},\n  title     = {{LLVM-CFI}: Analyzing Static Control Flow Integrity Protections},\n  booktitle = {Annual Computer Security Applications Conference (ACSAC)},\n  pages     = {584--597},\n  year      = {2019},\n  url_Paper = {https://doi.org/10.1145/3359789.3359806},\n  keywords = {Software Security -> Inlined Reference Monitors (CFI; SFI; etc.)}\n}\n\n\n\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n A Secure Privacy Preserving Deduplication Scheme for Cloud Computing.\n \n \n \n\n\n \n Fan, Y., Lin, X., Liang, W., Tan, G., & Nanda, P.\n\n\n \n\n\n\n Future Generation Computer Systems, 101: 127–135. 2019.\n \n\n\n\n
\n\n\n\n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@article{Fan19Dudup,\n  author    = {Yongkai Fan and Xiaodong Lin and Wei Liang and Gang Tan and Priyadarsi Nanda},\n  title     = {A Secure Privacy Preserving Deduplication Scheme for Cloud Computing},\n  journal   = {Future Generation Computer Systems},\n  volume    = {101},\n  pages     = {127--135},\n  year      = {2019},\n  keywords={Systems Security -> Trusted Execution Environment}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Verifying Internet of Things Safety and Security in Physical Spaces.\n \n \n \n \n\n\n \n Celik, Z. B., McDaniel, P., Tan, G., Babun, L., & Uluagac, A. S.\n\n\n \n\n\n\n IEEE Security and Privacy, 17(5): 30–37. Sep. 2019.\n \n\n\n\n
\n\n\n\n \n \n \"Verifying paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@ARTICLE{Celik19IoTMag, \nauthor={Z. Berkay Celik and Patrick McDaniel and Gang Tan and Leonardo Babun and A. Selcuk Uluagac}, \njournal={IEEE Security and Privacy}, \ntitle={Verifying Internet of Things Safety and Security in Physical Spaces}, \nyear={2019}, \nmonth={Sep.},\nvolume={17}, \nnumber={5}, \npages={30--37}, \nurl_Paper = {http://www.cse.psu.edu/~gxt29/papers/IoTSP.pdf},\nkeywords={Software Security -> IoT Security}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n One secure data integrity verification scheme for cloud storage.\n \n \n \n \n\n\n \n Fan, Y., Lin, X., Tan, G., Zhang, Y., Dong, W., & Lei, J.\n\n\n \n\n\n\n Future Generation Computer Systems, 96: 376–385. 2019.\n \n\n\n\n
\n\n\n\n \n \n \"One paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@article{Fan19Cloud,\n  author    = {Yongkai Fan and\n               Xiaodong Lin and\n               Gang Tan and\n               Yuqing Zhang and\n               Wei Dong and\n               Jing Lei},\n  title     = {One secure data integrity verification scheme for cloud storage},\n  journal   = {Future Generation Computer Systems},\n  volume    = {96},\n  pages     = {376--385},\n  year      = {2019},\n  url_Paper = {https://www.sciencedirect.com/science/article/abs/pii/S0167739X18311002},\n  keywords = {Systems Security -> Trusted Execution Environment}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Program Analysis of Commodity IoT Applications for Security and Privacy: Opportunities and Challenges.\n \n \n \n \n\n\n \n Celik, Z. B., Fernandes, E., Pauley, E., Tan, G., & McDaniel, P.\n\n\n \n\n\n\n ACM Computing Surveys (CSUR), 52: 74:1–74:30. 2019.\n \n\n\n\n
\n\n\n\n \n \n \"Program paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 10 downloads\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@Article{Celik19CSUR,\n  Title = {Program Analysis of Commodity {IoT} Applications for Security and Privacy: Opportunities and Challenges},\n  Author = {Z. Berkay Celik and Earlence Fernandes and Eric Pauley and Gang Tan and Patrick McDaniel},\n  Journal = {ACM Computing Surveys (CSUR)},\n  volume = {52},\n  issue = {4},\n  pages = {74:1--74:30},\n  url_Paper = {https://dl.acm.org/doi/10.1145/3333501},\n  Year = {2019},\n  keywords = {Software Security -> IoT Security}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Using Safety Properties to Generate Vulnerability Patches.\n \n \n \n \n\n\n \n Huang, Z., Lie, D., Tan, G., & Jaeger, T.\n\n\n \n\n\n\n In IEEE Symposium on Security and Privacy (S&P), pages 539–554, 2019. \n \n\n\n\n
\n\n\n\n \n \n \"Using paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 2 downloads\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@INPROCEEDINGS{HuangLTJ19Senx,\nauthor={Zhen Huang and David Lie and Gang Tan and Trent Jaeger},\ntitle={Using Safety Properties to Generate Vulnerability Patches},\nbooktitle= {IEEE Symposium on Security and Privacy (S\\&P)},\nyear={2019},\npages={539--554},\nurl_Paper = {http://www.cse.psu.edu/~gxt29/papers/Senx-oakland19.pdf},\nkeywords  = {Software Security -> Automated Program Repairs}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Rapidly Mitigating Vulnerabilities with Security Workarounds.\n \n \n \n \n\n\n \n Huang, Z., & Tan, G.\n\n\n \n\n\n\n In Workshop on Binary Analysis Research (BAR), 2019. \n \n\n\n\n
\n\n\n\n \n \n \"Rapidly paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n \n \n\n\n\n
\n
@INPROCEEDINGS{HuangT19Bar,\nauthor={Zhen Huang and Gang Tan},\ntitle={Rapidly Mitigating Vulnerabilities with Security Workarounds},\nbooktitle= {Workshop on Binary Analysis Research (BAR)},\nyear={2019},\nurl_Paper = {http://www.cse.psu.edu/~gxt29/papers/RVM-bar19.pdf},\nkeywords  = {Software Security -> Automated Program Repairs, Software Security -> Binary Code Analysis}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n IoTGuard: Dynamic Enforcement of Security and Safety Policy in Commodity IoT.\n \n \n \n \n\n\n \n Celik, Z. B., Tan, G., & McDaniel, P.\n\n\n \n\n\n\n In Network and Distributed System Security Symposium (NDSS), 2019. \n \n\n\n\n
\n\n\n\n \n \n \"IoTGuard: paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 17 downloads\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@InProceedings{BerkayTM19IoTGuard,\n  Title                    = {{IoTGuard}: Dynamic Enforcement of Security and Safety Policy in Commodity {IoT}},\n  Author                   = {Z. Berkay Celik and Gang Tan and Patrick McDaniel},\n  Booktitle                = {Network and Distributed System Security Symposium (NDSS)},\n  Year                     = {2019},\n  Url_Paper                = {https://www.ndss-symposium.org/wp-content/uploads/2019/02/ndss2019_07A-1_Celik_paper.pdf},\n  keywords = {Software Security -> IoT Security}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n SmartShell: Automated Shell Scripts Synthesis from Natural Language.\n \n \n \n \n\n\n \n Li, H., Wang, Y., Yin, J., & Tan, G.\n\n\n \n\n\n\n International Journal of Software Engineering and Knowledge Engineering, 29(2): 197–220. 2019.\n \n\n\n\n
\n\n\n\n \n \n \"SmartShell: paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n\n\n\n
\n
@article{Li19SmartShell,\n  author    = {Hao Li and\n               Yu{-}Ping Wang and\n               Jie Yin and\n               Gang Tan},\n  title     = {{SmartShell}: Automated Shell Scripts Synthesis from Natural Language},\n  journal   = {International Journal of Software Engineering and Knowledge Engineering},\n  volume    = {29},\n  number    = {2},\n  pages     = {197--220},\n  year      = {2019},\n  Url_Paper = {https://doi.org/10.1142/S0218194019500098}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Debugopt: Debugging fully optimized natively compiled programs using multistage instrumentation.\n \n \n \n \n\n\n \n Yin, J., Tan, G., Li, H., Bai, X., Wang, Y., & Hu, S.\n\n\n \n\n\n\n Science of Computer Programming, 169: 18–32. 2019.\n \n\n\n\n
\n\n\n\n \n \n \"Debugopt: paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 1 download\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@article{Yin19Debugopt,\n  author    = {Jie Yin and\n               Gang Tan and\n               Hao Li and\n               Xiaolong Bai and\n               Yu{-}Ping Wang and\n               Shi{-}Min Hu},\n  title     = {Debugopt: Debugging fully optimized natively compiled programs using\n               multistage instrumentation},\n  journal   = {Science of Computer Programming},\n  volume    = {169},\n  pages     = {18--32},\n  year      = {2019},\n  url_Paper = {https://doi.org/10.1016/j.scico.2018.09.005},\n  keywords  = {Programming Languages}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n CaSym: Cache Aware Symbolic Execution for Side Channel Detection and Mitigation.\n \n \n \n \n\n\n \n Brotzman, R., Liu, S., Zhang, D., Tan, G., & Kandemir, M.\n\n\n \n\n\n\n In IEEE Symposium on Security and Privacy (S&P), pages 364–380, 2019. \n \n\n\n\n
\n\n\n\n \n \n \"CaSym: paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 2 downloads\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n \n \n\n\n\n
\n
@INPROCEEDINGS{Brotzman19Casym,\nauthor={Robert Brotzman and Shen Liu and Danfeng Zhang and Gang Tan and Mahmut Kandemir},\ntitle={{CaSym}: Cache Aware Symbolic Execution for Side Channel Detection and Mitigation},\npages = {364--380},\nbooktitle= {IEEE Symposium on Security and Privacy (S\\&P)},\nyear={2019},\nurl_Paper = {http://www.cse.psu.edu/~gxt29/papers/casym.pdf},\nkeywords={Software Security -> Side Channel Mitigation, Software Security -> Symbolic Execution}\n}\n\n
\n
\n\n\n\n
\n\n\n\n\n\n
\n
\n\n
\n
\n  \n 2018\n \n \n (9)\n \n \n
\n
\n \n \n
\n \n\n \n \n \n \n \n CSCAC: one Constant-size CPABE Access Control scheme in Trusted Execution Environment.\n \n \n \n\n\n \n Fan, Y., Liu, S., Tan, G., & Lin, X.\n\n\n \n\n\n\n International Journal of Computational Science and Engineering,162–168. 2018.\n \n\n\n\n
\n\n\n\n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@article{Fan18IJCSE,\n  author    = {Yongkai Fan and Shengle Liu and Gang Tan and Xiaodong Lin},\n  title     = {{CSCAC}: one Constant-size {CPABE} Access Control scheme in Trusted Execution Environment},\n  journal   = {International Journal of Computational Science and Engineering},\n  volumn = {19},\n  issue = {2},\n  pages = {162--168},\n  year="2018", \n  keywords={Systems Security -> Trusted Execution Environment}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Fine-Grained Access Control Based on Trusted Execution Environment.\n \n \n \n \n\n\n \n Fan, Y., Liu, S., Tan, G., & Qiao, F.\n\n\n \n\n\n\n Future Generation Computer Systems. 2018.\n \n\n\n\n
\n\n\n\n \n \n \"Fine-Grained paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 1 download\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@article{Fan18FGC,\n  author    = {Yongkai Fan and Shengle Liu and Gang Tan and Fei Qiao},\n  title     = {Fine-Grained Access Control Based on Trusted Execution Environment},\n  journal   = {Future Generation Computer Systems},\n  year="2018", \n  url_Paper= {https://doi.org/10.1016/j.future.2018.05.062},\n  keywords={Systems Security -> Trusted Execution Environment}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n tauCFI: Type-Assisted Control Flow Integrity for x86-64 Binaries.\n \n \n \n \n\n\n \n Muntean, P., Fischer, M., Tan, G., Lin, Z., Grossklags, J., & Eckert, C.\n\n\n \n\n\n\n In International Symposium on Research in Attacks, Intrusions and Defenses (RAID), pages 423–444, 2018. \n \n\n\n\n
\n\n\n\n \n \n \"tauCFI: paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n \n \n\n\n\n
\n
@inproceedings{Muntean18tauCFI,\n  author    = {Paul Muntean and Matthias Fischer and Gang Tan and Zhiqiang Lin and Jens Grossklags and Claudia Eckert},\n  title     = {{tauCFI}: Type-Assisted Control Flow Integrity for x86-64 Binaries},\n  booktitle = {International Symposium on Research in Attacks, Intrusions and Defenses (RAID)},\n  pages     = {423--444},\n  year      = {2018},\n  url_Paper = {https://doi.org/10.1007/978-3-030-00470-5_20},\n  keywords = {Software Security -> Binary Code Analysis, Software Security -> Inlined Reference Monitors (CFI; SFI; etc.)}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n One Secure Access Scheme Based on Trusted Execution Environment.\n \n \n \n \n\n\n \n Fan, Y., Liu, S., Tan, G., Lin, X., Zhao, G., & Bai, J.\n\n\n \n\n\n\n In 17th IEEE International Conference On Trust, Security And Privacy In Computing And Communications (TrustCom), pages 16–21, 2018. \n \n\n\n\n
\n\n\n\n \n \n \"One paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@InProceedings{Fan18Trust,\n  Title = {One Secure Access Scheme Based on Trusted Execution Environment},\n  Author = {Yongkai Fan and Shengle Liu and Gang Tan and Xiaodong Lin and Guanqun Zhao and Jianrong Bai},\n  Booktitle = {17th IEEE International Conference On Trust, Security And Privacy In Computing And Communications (TrustCom)},\n  Pages = {16--21},\n  Year = {2018},\n  url_Paper = {https://doi.org/10.1109/TrustCom/BigDataSE.2018.00013},\n  keywords = {Systems Security -> Trusted Execution Environment}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Sensitive Information Tracking in Commodity IoT.\n \n \n \n \n\n\n \n Celik, Z. B., Babun, L., Sikder, A. K., Aksu, H., Tan, G., McDaniel, P., & Uluagac, A. S.\n\n\n \n\n\n\n In 27th Usenix Security Symposium, pages 1687–1704, 2018. \n \n\n\n\n
\n\n\n\n \n \n \"Sensitive paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 8 downloads\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@InProceedings{Celik18Saint,\n  Title = {Sensitive Information Tracking in Commodity {IoT}},\n  Author = {Z. Berkay Celik and Leonardo Babun and Amit K. Sikder and Hidayet Aksu and Gang Tan and Patrick McDaniel and A. Selcuk Uluagac},\n  Booktitle = {27th {Usenix Security} Symposium},\n  Pages = {1687--1704},\n  Year = {2018},\n  url_Paper = {http://www.cse.psu.edu/~gxt29/papers/sec18.pdf},\n  keywords = {Software Security -> IoT Security}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Soteria: Automated IoT Safety and Security Analysis.\n \n \n \n \n\n\n \n Celik, Z. B., McDaniel, P., & Tan, G.\n\n\n \n\n\n\n In USENIX Annual Technical Conference (ATC), pages 147–158, 2018. \n \n\n\n\n
\n\n\n\n \n \n \"Soteria: paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 8 downloads\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@InProceedings{CelikMT18Soteria,\n  Title = {Soteria: Automated {IoT} Safety and Security Analysis},\n  Author = {Z. Berkay Celik and Patrick McDaniel and Gang Tan},\n  Booktitle = {USENIX Annual Technical Conference ({ATC})},\n  Pages = {147--158},\n  Year = {2018},\n  url_Paper = {http://www.cse.psu.edu/~gxt29/papers/atc18.pdf},\n  keywords = {Software Security -> IoT Security}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Protecting Dynamic Code.\n \n \n \n \n\n\n \n Tan, G., & Niu, B.\n\n\n \n\n\n\n In Larsen, P., & Sadeghi, A., editor(s), The Continuing Arms Race, 2, pages 25–60. 2018.\n \n\n\n\n
\n\n\n\n \n \n \"Protecting paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 2 downloads\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n \n \n\n\n\n
\n
@incollection{TanN18CFIBook,\n author = {Gang Tan and Ben Niu},\n title = {Protecting Dynamic Code},\n booktitle = {The Continuing Arms Race},\n editor = {Larsen, Per and Sadeghi, Ahmad-Reza},\n chapter = 2,\n pages = {25--60},\n year = {2018},\n url_Paper={https://dl.acm.org/citation.cfm?id=3129743},\n keywords = {Software Security -> Inlined Reference Monitors (CFI; SFI; etc.), Survey}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n From Debugging-Information Based Binary-Level Type Inference to CFG Generation.\n \n \n \n \n\n\n \n Zeng, D., & Tan, G.\n\n\n \n\n\n\n In 8th ACM Conference on Data and Application Security and Privacy (CODASPY), pages 366–376, 2018. \n \n\n\n\n
\n\n\n\n \n \n \"From paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 2 downloads\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@InProceedings{ZengT18CFGCons,\n  author    = {Dongrui Zeng and Gang Tan},\n  title     = {From Debugging-Information Based Binary-Level Type Inference to {CFG} Generation},\n  booktitle = {8th {ACM} Conference on Data and Application Security and Privacy ({CODASPY})},\n  pages     = {366--376},\n  year      = {2018},\n  award     = {Outstanding paper award},\n  url_Paper = {http://www.cse.psu.edu/~gxt29/papers/cfgConsMeta.pdf},\n  keywords = {Software Security -> Binary Code Analysis}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Bidirectional Grammars for Machine-Code Decoding and Encoding.\n \n \n \n \n\n\n \n Tan, G., & Morrisett, G.\n\n\n \n\n\n\n Journal of Automated Reasoning, 60(3): 257–277. Mar 2018.\n \n\n\n\n
\n\n\n\n \n \n \"Bidirectional paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 3 downloads\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@article{TanM18Jar,\n  author    = {Gang Tan and Greg Morrisett},\n  title     = {Bidirectional Grammars for Machine-Code Decoding and Encoding},\n  journal   = {Journal of Automated Reasoning},\n  year="2018",\n  month="Mar",\n  day="01",\n  volume="60",\n  number="3",\n  pages="257--277",\n  url_Paper = {http://www.cse.psu.edu/~gxt29/papers/bigrammar_jar.pdf},\n  keywords = {Formal Methods -> Parser Assurance}\n}\n\n
\n
\n\n\n\n
\n\n\n\n\n\n
\n
\n\n
\n
\n  \n 2017\n \n \n (4)\n \n \n
\n
\n \n \n
\n \n\n \n \n \n \n \n \n Principles and Implementation Techniques of Software-Based Fault Isolation.\n \n \n \n \n\n\n \n Tan, G.\n\n\n \n\n\n\n Foundations and Trends in Privacy and Security, 1(3): 137–198. 2017.\n \n\n\n\n
\n\n\n\n \n \n \"Principles paper\n  \n \n \n \"Principles slides\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n \n \n\n\n\n
\n
@article{Tan17SFI,\n  author    = {Gang Tan},\n  title     = {Principles and Implementation Techniques of Software-Based Fault Isolation},\n  journal   = {Foundations and Trends in Privacy and Security},\n  volume    = {1},\n  number    = {3},\n  pages     = {137--198},\n  year      = {2017},\n  url_Paper = {http://doi.org/10.1561/3300000013},\n  url_Slides = {http://www.cse.psu.edu/~gxt29/slides/SFI.pptx},\n  keywords = {Software Security -> Inlined Reference Monitors (CFI; SFI; etc.), Survey}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n CFG Construction Soundness in Control-Flow Integrity.\n \n \n \n \n\n\n \n Tan, G., & Jaeger, T.\n\n\n \n\n\n\n In ACM SIGSAC Workshop on Programming Languages and Analysis for Security (PLAS), pages 3–13, 2017. \n \n\n\n\n
\n\n\n\n \n \n \"CFG paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@InProceedings{TanJ17Cfgform,\n  author = {Gang Tan and Trent Jaeger},\n  title = {{CFG} Construction Soundness in Control-Flow Integrity},\n  booktitle = {ACM SIGSAC Workshop on Programming Languages and Analysis for Security (PLAS)},\n  pages = {3--13},\n  year = 2017,\n  url_Paper = {http://www.cse.psu.edu/~gxt29/papers/formalizeCFGCons.pdf},\n  keywords = {Software Security -> Inlined Reference Monitors (CFI; SFI; etc.)}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n ReDroid: Prioritizing Data Flows and Sinks for App Security Transformation.\n \n \n \n \n\n\n \n Tian, K., Tan, G., Yao, D., & Ryder, B.\n\n\n \n\n\n\n In ACM Workshop on Forming an Ecosystem Around Software Transformation (FEAST), pages 35–41, 2017. \n \n\n\n\n
\n\n\n\n \n \n \"ReDroid: paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@InProceedings{Tian17Redroid,\n  author = {Ke Tian and Gang Tan and Danfeng Yao and Barbara Ryder},\n  title = {{ReDroid}: Prioritizing Data Flows and Sinks for App Security Transformation},\n  booktitle = {ACM Workshop on Forming an Ecosystem Around Software Transformation (FEAST)},\n  pages = {35--41},\n  year = 2017,\n  url_Paper = {https://doi.org/10.1145/3141235.3141239},\n  keywords = {Software Security -> Android Security}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n PtrSplit: Supporting General Pointers in Automatic Program Partitioning.\n \n \n \n \n\n\n \n Liu, S., Tan, G., & Jaeger, T.\n\n\n \n\n\n\n In 24th ACM Conference on Computer and Communications Security (CCS), pages 2359–2371, 2017. \n \n\n\n\n
\n\n\n\n \n \n \"PtrSplit: paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{LiuTJ17Ptrsplit,\n  author    = {Shen Liu and Gang Tan and Trent Jaeger},\n  title     = {{PtrSplit}: Supporting General Pointers in Automatic Program Partitioning},\n  booktitle = {24th ACM Conference on Computer and Communications Security ({CCS})},\n  pages     = {2359--2371},\n  year      = {2017},\n  url_Paper = {http://www.cse.psu.edu/~gxt29/papers/ptrsplit.pdf},\n  keywords = {Software Security -> Privilege Separation}\n}\n\n
\n
\n\n\n\n
\n\n\n\n\n\n
\n
\n\n
\n
\n  \n 2016\n \n \n (3)\n \n \n
\n
\n \n \n
\n \n\n \n \n \n \n \n \n Languages Must Expose Memory Heterogeneity.\n \n \n \n \n\n\n \n Guo, X., Shrivastava, A., Spear, M., & Tan, G.\n\n\n \n\n\n\n In Second International Symposium on Memory Systems (MEMSYS), pages 251–256, 2016. \n \n\n\n\n
\n\n\n\n \n \n \"Languages paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{Guo16Memsys,\n  author    = {Xiaochen Guo and\n               Aviral Shrivastava and\n               Michael Spear and\n               Gang Tan},\n  title     = {Languages Must Expose Memory Heterogeneity},\n  booktitle = {Second International Symposium on Memory Systems ({MEMSYS})},\n  pages     = {251--256},\n  year      = {2016},\n  url_Paper = {http://www.cse.psu.edu/~gxt29/papers/memsys.pdf},\n  keywords = {Programming Languages}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Analysis of Code Heterogeneity for High-Precision Classification of Repackaged Malware.\n \n \n \n \n\n\n \n Tian, K., Yao, D., Ryder, B. G., & Tan, G.\n\n\n \n\n\n\n In Workshop on Mobile Security Technologies (MoST), pages 262–271, 2016. \n \n\n\n\n
\n\n\n\n \n \n \"Analysis paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{Tian16Most,\n  author    = {Ke Tian and\n               Danfeng Yao and\n               Barbara G. Ryder and\n               Gang Tan},\n  title     = {Analysis of Code Heterogeneity for High-Precision Classification of\n               Repackaged Malware},\n  booktitle = {Workshop on Mobile Security Technologies (MoST)},\n  pages     = {262--271},\n  year      = {2016},\n  url_Paper = {http://www.cse.psu.edu/~gxt29/papers/Android-partition.pdf},\n  keywords = {Software Security -> Android Security}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Bidirectional Grammars for Machine-Code Decoding and Encoding.\n \n \n \n \n\n\n \n Tan, G., & Morrisett, G.\n\n\n \n\n\n\n In 8th International Conference on Verified Software: Theories, Tools, and Experiments (VSTTE), pages 73–89, 2016. \n \n\n\n\n
\n\n\n\n \n \n \"Bidirectional paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{TanM16Bidir,\n  author    = {Gang Tan and\n               Greg Morrisett},\n  title     = {Bidirectional Grammars for Machine-Code Decoding and Encoding},\n  booktitle = {8th International Conference on Verified Software: Theories, Tools, and Experiments {(VSTTE)}},\n  pages     = {73--89},\n  year      = {2016},\n  url_Paper = {http://www.cse.psu.edu/~gxt29/papers/bigrammar.pdf},\n  keywords = {Formal Methods -> Parser Assurance}\n}\n\n
\n
\n\n\n\n
\n\n\n\n\n\n
\n
\n\n
\n
\n  \n 2015\n \n \n (4)\n \n \n
\n
\n \n \n
\n \n\n \n \n \n \n \n \n WebC: Toward a Portable Framework for Deploying Legacy Code in Web Browsers.\n \n \n \n \n\n\n \n Yin, J., Tan, G., Bai, X., & Hu, S.\n\n\n \n\n\n\n Science China Information Sciences, 58(7): 1–15. 2015.\n \n\n\n\n
\n\n\n\n \n \n \"WebC: paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@article{Yin15WebC,\n  author    = {Jie Yin and\n               Gang Tan and\n               Xiaolong Bai and\n               Shi{-}Min Hu},\n  title     = {{WebC}: Toward a Portable Framework for Deploying Legacy Code in Web Browsers},\n  journal   = {Science China Information Sciences},\n  volume    = {58},\n  number    = {7},\n  pages     = {1--15},\n  year      = {2015},\n  url_Paper = {https://doi.org/10.1007/s11432-015-5285-y},\n  keywords = {Software Security -> Inlined Reference Monitors (CFI; SFI; etc.)}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Per-Input Control-Flow Integrity.\n \n \n \n \n\n\n \n Niu, B., & Tan, G.\n\n\n \n\n\n\n In 22nd ACM Conference on Computer and Communications Security (CCS), pages 914–926, 2015. \n \n\n\n\n
\n\n\n\n \n \n \"Per-Input paper\n  \n \n \n \"Per-Input link\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 2 downloads\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{NiuT15PICFI,\nauthor = "Ben Niu and Gang Tan",\ntitle = "Per-Input Control-Flow Integrity",\nbooktitle = {22nd ACM Conference on Computer and Communications Security ({CCS})},\npages = {914--926},\nyear = "2015",\nurl_Paper = {http://www.cse.psu.edu/~gxt29/papers/picfi.pdf},\nurl_Link = {https://github.com/mcfi},\nkeywords = {Software Security -> Inlined Reference Monitors (CFI; SFI; etc.)}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Producing Hook Placements to Enforce Expected Access Control Policies.\n \n \n \n \n\n\n \n Muthukumaran, D., Talele, N., Jaeger, T., & Tan, G.\n\n\n \n\n\n\n In 7th International Symposium on Engineering Secure Software and Systems (ESSoS), pages 178–195, 2015. \n \n\n\n\n
\n\n\n\n \n \n \"Producing paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 1 download\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{Muthukumaran15Hook,\n  author    = {Divya Muthukumaran and\n               Nirupama Talele and\n               Trent Jaeger and\n               Gang Tan},\n  title     = {Producing Hook Placements to Enforce Expected Access Control Policies},\n  booktitle = {7th International Symposium on Engineering Secure Software and Systems ({ESSoS})},\n  pages     = {178--195},\n  year      = {2015},\n  url_Paper = {http://www.cse.psu.edu/~gxt29/papers/essos15.pdf},\n  keywords = {Software Security -> Inlined Reference Monitors (CFI; SFI; etc.)}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n JNI Light: an Operational Model for the Core JNI.\n \n \n \n \n\n\n \n Tan, G.\n\n\n \n\n\n\n Mathematical Structures in Computer Science, 25(4): 805–840. 2015.\n \n\n\n\n
\n\n\n\n \n \n \"JNI paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 4 downloads\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@article{Tan15JNIModelJournal,\n  author    = {Gang Tan},\n  title     = {{JNI Light}: an Operational Model for the Core {JNI}},\n  journal   = {Mathematical Structures in Computer Science},\n  volume    = {25},\n  number    = {4},\n  pages     = {805--840},\n  year      = {2015},\n  url_Paper = {http://www.cse.psu.edu/~gxt29/papers/jnimodel-mscs.pdf},\n  keywords = {Programming Languages -> Language Interoperation}\n}\n\n
\n
\n\n\n\n
\n\n\n\n\n\n
\n
\n\n
\n
\n  \n 2014\n \n \n (6)\n \n \n
\n
\n \n \n
\n \n\n \n \n \n \n \n \n Assurance for Defense-in-Depth via Retrofitting.\n \n \n \n \n\n\n \n Ganapathy, V., Jaeger, T., Skalka, C., & Tan, G.\n\n\n \n\n\n\n In 8th Layered Assurance Workshop (LAW), December 2014. \n \n\n\n\n
\n\n\n\n \n \n \"Assurance paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{Ganapathy14LA,\n  author    = {Vinod Ganapathy and Trent Jaeger and Chris Skalka and Gang Tan},\n  title     = {Assurance for Defense-in-Depth via Retrofitting},\n  booktitle = {8th Layered Assurance Workshop (LAW)},\n  month = {December},\n  year      = {2014},\n  url_Paper ={http://www.cse.psu.edu/~trj1/papers/law14.pdf},\n  keywords = {Software Security}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Exception Analysis in the Java Native Interface.\n \n \n \n \n\n\n \n Li, S., & Tan, G.\n\n\n \n\n\n\n Science of Computer Programming, 89: 273–297. 2014.\n \n\n\n\n
\n\n\n\n \n \n \"Exception paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 1 download\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@article{LiT14Exn,\n  author    = {Siliang Li and\n               Gang Tan},\n  title     = {Exception Analysis in the {Java Native Interface}},\n  journal   = {Science of Computer Programming},\n  volume    = {89},\n  pages     = {273--297},\n  year      = {2014},\n  url_Paper = {http://www.cse.psu.edu/~gxt29/papers/exnSCP.pdf},\n  keywords = {Programming Languages -> Language Interoperation}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Finding Reference-Counting Errors in Python/C Programs with Affine Analysis.\n \n \n \n \n\n\n \n Li, S., & Tan, G.\n\n\n \n\n\n\n In European Conference on Object-Oriented Programming (ECOOP), pages 80–104, 2014. \n \n\n\n\n
\n\n\n\n \n \n \"Finding paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{LiT14RC,\nauthor = "Siliang Li and Gang Tan",\ntitle = "Finding Reference-Counting Errors in {Python/C} Programs with Affine Analysis",\nbooktitle = {European Conference on Object-Oriented Programming (ECOOP)},\npages     = {80--104},\nyear = "2014",\nurl_Paper = {http://www.cse.psu.edu/~gxt29/papers/refcount.pdf},\nkeywords = {Programming Languages -> Language Interoperation}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Modular Control-Flow Integrity.\n \n \n \n \n\n\n \n Niu, B., & Tan, G.\n\n\n \n\n\n\n In ACM Conference on Programming Language Design and Implementation (PLDI), pages 577–587, 2014. \n \n\n\n\n
\n\n\n\n \n \n \"Modular paper\n  \n \n \n \"Modular link\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{NiuT14MCFI,\nauthor = "Ben Niu and Gang Tan",\ntitle = "Modular Control-Flow Integrity",\nbooktitle = {ACM Conference on Programming Language Design and Implementation ({PLDI})},\npages = {577--587},\nyear = "2014",\nurl_Paper = {http://www.cse.psu.edu/~gxt29/papers/mcfi.pdf},\nurl_Link = {https://github.com/mcfi},\nkeywords = {Software Security -> Inlined Reference Monitors (CFI; SFI; etc.)}\n}\n \n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n RockJIT: Securing Just-In-Time Compilation Using Modular Control-Flow Integrity.\n \n \n \n \n\n\n \n Niu, B., & Tan, G.\n\n\n \n\n\n\n In 21st ACM Conference on Computer and Communications Security (CCS), pages 1317–1328, 2014. \n \n\n\n\n
\n\n\n\n \n \n \"RockJIT: paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{NiuT14RockJIT,\nauthor = "Ben Niu and Gang Tan",\ntitle = "{RockJIT}: Securing Just-In-Time Compilation Using Modular Control-Flow Integrity",\nbooktitle = {21st ACM Conference on Computer and Communications Security ({CCS})},\npages = {1317--1328},\nyear = "2014",\nurl_Paper = {http://www.cse.psu.edu/~gxt29/papers/rockjit.pdf},\nkeywords = {Software Security -> Inlined Reference Monitors (CFI; SFI; etc.)}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n NativeGuard: Protecting Android Applications from Third-Party Native Libraries.\n \n \n \n \n\n\n \n Sun, M., & Tan, G.\n\n\n \n\n\n\n In 7th ACM Conference on Security & Privacy in Wireless and Mobile Networks (WiSec), pages 165–176, 2014. \n \n\n\n\n
\n\n\n\n \n \n \"NativeGuard: paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{SunT14NG,\n  author    = {Mengtao Sun and\n               Gang Tan},\n  title     = {{NativeGuard}: Protecting {Android} Applications from Third-Party Native\n               Libraries},\n  booktitle = {7th {ACM} Conference on Security {\\&} Privacy in Wireless and\n               Mobile Networks ({WiSec})},\n  pages     = {165--176},\n  year      = {2014},\n  url_Paper = {http://www.cse.psu.edu/~gxt29/papers/nativeguard.pdf},\n  keywords = {Software Security -> Android Security}\n}\n\n
\n
\n\n\n\n
\n\n\n\n\n\n
\n
\n\n
\n
\n  \n 2013\n \n \n (4)\n \n \n
\n
\n \n \n
\n \n\n \n \n \n \n \n \n Bringing Java's Wild Native World Under Control.\n \n \n \n \n\n\n \n Sun, M., Tan, G., Siefers, J., Zeng, B., & Morrisett, G.\n\n\n \n\n\n\n ACM Transactions on Information and System Security (TISSEC), 16(3): 9:1–9:28. 2013.\n \n\n\n\n
\n\n\n\n \n \n \"Bringing paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 2 downloads\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n \n \n\n\n\n
\n
@article{Sun13Tissec,\n  author    = {Mengtao Sun and\n               Gang Tan and\n               Joseph Siefers and\n               Bin Zeng and\n               Greg Morrisett},\n  title     = {Bringing {Java}'s Wild Native World Under Control},\n  journal   = {{ACM} Transactions on Information and System Security (TISSEC)},\n  volume    = {16},\n  number    = {3},\n  pages     = {9:1--9:28},\n  year      = {2013},\n  url_Paper = {http://www.cse.psu.edu/~gxt29/papers/tissec13.pdf},\n  keywords = {Programming Languages -> Language Interoperation, Software Security -> Inlined Reference Monitors (CFI; SFI; etc.)}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Strato: A Retargetable Framework for Low-Level Inlined-Reference Monitors.\n \n \n \n \n\n\n \n Zeng, B., Tan, G., & Erlingsson, Ú.\n\n\n \n\n\n\n In 22nd Usenix Security Symposium, pages 369–382, 2013. \n \n\n\n\n
\n\n\n\n \n \n \"Strato: paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{Zeng13Strato,\nauthor = "Bin Zeng and Gang Tan and {\\'U}lfar Erlingsson",\ntitle = "Strato: A Retargetable Framework for Low-Level Inlined-Reference Monitors",\nbooktitle = {22nd {Usenix Security} Symposium},\npages = {369--382},\nyear = "2013",\nurl_Paper = {http://www.cse.psu.edu/~gxt29/papers/strato.pdf},\nkeywords = {Software Security -> Inlined Reference Monitors (CFI; SFI; etc.)}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Monitor Integrity Protection with Space Efficiency and Separate Compilation.\n \n \n \n \n\n\n \n Niu, B., & Tan, G.\n\n\n \n\n\n\n In 20th ACM Conference on Computer and Communications Security (CCS), pages 199–210, 2013. \n \n\n\n\n
\n\n\n\n \n \n \"Monitor paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{NiuT13MIP,\nauthor = "Ben Niu and Gang Tan",\ntitle = "Monitor Integrity Protection with Space Efficiency and Separate Compilation",\nbooktitle = {20th ACM Conference on Computer and Communications Security ({CCS})},\npages = {199--210},\nyear = "2013",\nurl_Paper = {http://www.cse.psu.edu/~gxt29/papers/mip.pdf},\nkeywords = {Software Security -> Inlined Reference Monitors (CFI; SFI; etc.)}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Efficient User-Space Information Flow Control.\n \n \n \n \n\n\n \n Niu, B., & Tan, G.\n\n\n \n\n\n\n In 8th ACM Symposium on Information, Computer and Communications Security (ASIACCS), pages 131–142, 2013. \n \n\n\n\n
\n\n\n\n \n \n \"Efficient paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{NiuT13Dupro,\n  author    = {Ben Niu and\n               Gang Tan},\n  title     = {Efficient User-Space Information Flow Control},\n  booktitle = {8th ACM Symposium on Information, Computer and Communications Security (ASIACCS)},\n  year      = {2013},\n  pages     = {131--142},\n  url_Paper = {http://www.cse.psu.edu/~gxt29/papers/dupro.pdf},\n  keywords = {Software Security -> Privilege Separation}\n}\n\n
\n
\n\n\n\n
\n\n\n\n\n\n
\n
\n\n
\n
\n  \n 2012\n \n \n (5)\n \n \n
\n
\n \n \n
\n \n\n \n \n \n \n \n \n Smartphone Dual Defense Protection Framework: Detecting Malicious Applications in Android Markets.\n \n \n \n \n\n\n \n Su, X., Chuah, M., & Tan, G.\n\n\n \n\n\n\n In 8th International Conference on Mobile Ad-hoc and Sensor Networks, pages 153–160, 2012. \n \n\n\n\n
\n\n\n\n \n \n \"Smartphone paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{Su12MSN,\n  author = {Xin Su and Mooi-Choo Chuah and Gang Tan},\n  title = {Smartphone Dual Defense Protection Framework: Detecting Malicious Applications in {Android} Markets},\n  booktitle = {8th International Conference on  Mobile Ad-hoc and Sensor Networks},\n  year = {2012},\n  pages = {153--160},\n  url_Paper ={https://doi.org/10.1109/MSN.2012.43},\n  keywords = {Software Security -> Android Security}\n} \n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Enforcing User-Space Privilege Separation with Declarative Architectures.\n \n \n \n \n\n\n \n Niu, B., & Tan, G.\n\n\n \n\n\n\n In Proceedings of the Sixth ACM Workshop on Scalable Trusted Computing (STC), pages 9–20, 2012. \n \n\n\n\n
\n\n\n\n \n \n \"Enforcing paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{NiuT12STC,\n author = "Ben Niu and Gang Tan",\n title = "Enforcing User-Space Privilege Separation with Declarative Architectures",\n booktitle = {Proceedings of the Sixth ACM Workshop on Scalable Trusted Computing (STC)},\n pages = {9--20},\n year = {2012},\n url_Paper = {http://www.cse.psu.edu/~gxt29/papers/upro.pdf},\n keywords = {Software Security -> Privilege Separation}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n JATO: Native Code Atomicity for Java.\n \n \n \n \n\n\n \n Li, S., Liu, D. Y., & Tan, G.\n\n\n \n\n\n\n In Asian Symposium on Programming Languages and Systems (APLAS), pages 2–17, 2012. \n \n\n\n\n
\n\n\n\n \n \n \"JATO: paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 2 downloads\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{LiLT12JATO,\n author = "Siliang Li and David Yu Liu and Gang Tan",\n title = "{JATO}: Native Code Atomicity for {Java}",\n booktitle = {Asian Symposium on Programming Languages and Systems (APLAS)},\n pages = {2--17},\n year = {2012},\n url_Paper = {http://www.cse.psu.edu/~gxt29/papers/jato.pdf},\n keywords = {Programming Languages -> Language Interoperation}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n JVM-Portable Sandboxing of Java's Native Libraries.\n \n \n \n \n\n\n \n Sun, M., & Tan, G.\n\n\n \n\n\n\n In 17th European Symposium on Research in Computer Security (ESORICS), pages 842–858, 2012. \n \n\n\n\n
\n\n\n\n \n \n \"JVM-Portable paper\n  \n \n \n \"JVM-Portable link\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{SunT12Arabica,\nauthor = "Mengtao Sun and Gang Tan",\ntitle = "{JVM}-Portable Sandboxing of {Java}'s Native Libraries",\nbooktitle = {17th European Symposium on Research in Computer Security (ESORICS)},\npages= {842--858},\nyear = "2012",\nurl_Paper = {http://www.cse.psu.edu/~gxt29/papers/arabica.pdf},\nurl_Link = {http://www.cse.psu.edu/~gxt29/projects/gonative/},\nkeywords = {Programming Languages -> Language Interoperation}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n RockSalt: Better, Faster, Stronger SFI for the x86.\n \n \n \n \n\n\n \n Morrisett, G., Tan, G., Tassarotti, J., Tristan, J., & Gan, E.\n\n\n \n\n\n\n In ACM Conference on Programming Language Design and Implementation (PLDI), pages 395–404, 2012. \n \n\n\n\n
\n\n\n\n \n \n \"RockSalt: paper\n  \n \n \n \"RockSalt: link\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 2 downloads\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n \n \n\n\n\n
\n
@inproceedings{Morrisett12RockSalt,\nauthor = "Greg Morrisett and Gang Tan and Joseph Tassarotti and Jean-Baptiste Tristan and Edward Gan",\ntitle = "RockSalt: Better, Faster, Stronger {SFI} for the x86",\nbooktitle = {ACM Conference on Programming Language Design and Implementation ({PLDI})},\npages= {395--404},\nyear = "2012",\nurl_Paper = {http://www.cse.psu.edu/~gxt29/papers/rocksalt.pdf},\nurl_Link = {https://github.com/gangtan/CPUmodels},\nkeywords = {Software Security -> Inlined Reference Monitors (CFI; SFI; etc.), Formal Methods -> Parser Assurance}\n}\n\n
\n
\n\n\n\n
\n\n\n\n\n\n
\n
\n\n
\n
\n  \n 2011\n \n \n (6)\n \n \n
\n
\n \n \n
\n \n\n \n \n \n \n \n \n FDTL: a unified flash memory and hard disk translation layer.\n \n \n \n \n\n\n \n Bai, S., Yin, J., Tan, G., Wang, Y., & Hu, S.\n\n\n \n\n\n\n IEEE Transactions on Consumer Electronics, 57(4): 1719–1727. 2011.\n \n\n\n\n
\n\n\n\n \n \n \"FDTL: paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 1 download\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n\n\n\n
\n
@article{Bai11FDTL,\n  author    = {Shi Bai and\n               Jie Yin and\n               Gang Tan and\n               Yu{-}Ping Wang and\n               Shi{-}Min Hu},\n  title     = {{FDTL}: a unified flash memory and hard disk translation layer},\n  journal   = {{IEEE} Transactions on Consumer Electronics},\n  volume    = {57},\n  number    = {4},\n  pages     = {1719--1727},\n  year      = {2011},\n  url_Paper = {https://doi.org/10.1109/TCE.2011.6131146}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Combining Control-Flow Integrity and Static Analysis for Efficient and Validated Data Sandboxing.\n \n \n \n \n\n\n \n Zeng, B., Tan, G., & Morrisett, G.\n\n\n \n\n\n\n In 18th ACM Conference on Computer and Communications Security (CCS), pages 29–40, 2011. \n \n\n\n\n
\n\n\n\n \n \n \"Combining paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 2 downloads\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{ZengTM11CFI,\nauthor = "Bin Zeng and Gang Tan and Greg Morrisett",\ntitle = "Combining Control-Flow Integrity and Static Analysis for Efficient and Validated Data Sandboxing",\nbooktitle = {18th ACM Conference on Computer and Communications Security ({CCS})},\npages={29--40},\nyear = "2011",\nurl_Paper = {http://www.cse.psu.edu/~gxt29/papers/cfiDataSandboxing.pdf},\nkeywords = {Software Security -> Inlined Reference Monitors (CFI; SFI; etc.)}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n JET: Exception Checking in the Java Native Interface.\n \n \n \n \n\n\n \n Li, S., & Tan, G.\n\n\n \n\n\n\n In ACM Conference on Object-Oriented Programming, Systems, Languages, and Applications (OOPSLA), pages 345–358, 2011. \n \n\n\n\n
\n\n\n\n \n \n \"JET: paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 2 downloads\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{LiT11OOPSLA,\n author = "Siliang Li and Gang Tan",\n title = "{JET}: Exception Checking in the {Java Native Interface}",\n booktitle = {ACM Conference on Object-Oriented Programming, Systems, Languages, and Applications ({OOPSLA})},\n pages = {345--358},\n year = {2011},\n url_Paper = {http://www.cse.psu.edu/~gxt29/papers/jet.pdf},\n keywords = {Programming Languages -> Language Interoperation}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Weak Updates and Separation Logic.\n \n \n \n \n\n\n \n Tan, G., Shao, Z., Feng, X., & Cai, H.\n\n\n \n\n\n\n New Generation Compting, 29(1): 3–29. 2011.\n \n\n\n\n
\n\n\n\n \n \n \"Weak paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 3 downloads\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@article{Tan11WUSL,\n author = "Gang Tan and Zhong Shao and Xinyu Feng and Hongxu Cai",\n title = "Weak Updates and Separation Logic",\n journal = "New Generation Compting",\n volume = {29},\n number = {1},\n year = {2011},\n pages = {3--29},\n publisher = {Ohmsha, Ltd. and Springer},\n address = {Japan},\n url_Paper = {http://www.cse.psu.edu/~gxt29/papers/WUSL_journal.pdf},\n keywords = {Formal Methods -> Program Verification}\n }\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Detection and Classification of Different Botnet C&C Channels.\n \n \n \n \n\n\n \n Fedynyshyn, G., Chuah, M. C., & Tan, G.\n\n\n \n\n\n\n In 8th International Conference on Autonomic and Trusted Computing (ATC), pages 228–242, 2011. \n \n\n\n\n
\n\n\n\n \n \n \"Detection paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{FedynyshynCT11ATC,\n  author    = {Gregory Fedynyshyn and\n               Mooi Choo Chuah and\n               Gang Tan},\n  title     = {Detection and Classification of Different Botnet {C{\\&}C} Channels},\n  booktitle = {8th International Conference on Autonomic and Trusted Computing (ATC)},\n  pages     = {228--242},\n  year      = {2011},\n  url_Paper = {https://doi.org/10.1007/978-3-642-23496-5_17},\n  keywords = {Systems Security}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Markup SVG: An Online Content-Aware Image Abstraction and Annotation Tool.\n \n \n \n \n\n\n \n Kim, E., Huang, X., & Tan, G.\n\n\n \n\n\n\n IEEE Transactions on Multimedia, 13(5): 993–1006. 2011.\n \n\n\n\n
\n\n\n\n \n \n \"Markup paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n\n\n\n
\n
@article{KimHT11,\n  author    = {Edward Kim and\n               Xiaolei Huang and\n               Gang Tan},\n  title     = {Markup {SVG}: An Online Content-Aware Image Abstraction and\n               Annotation Tool},\n  journal   = {IEEE Transactions on Multimedia},\n  volume    = {13},\n  number    = {5},\n  year      = {2011},\n  pages     = {993--1006},\n  url_Paper = {https://doi.org/10.1109/TMM.2011.2161275}\n}\n\n
\n
\n\n\n\n
\n\n\n\n\n\n
\n
\n\n
\n
\n  \n 2010\n \n \n (4)\n \n \n
\n
\n \n \n
\n \n\n \n \n \n \n \n \n JNI Light: An Operational Model for the Core JNI.\n \n \n \n \n\n\n \n Tan, G.\n\n\n \n\n\n\n In Asian Symposium on Programming Languages and Systems (APLAS), pages 114–130, 2010. \n \n\n\n\n
\n\n\n\n \n \n \"JNI paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 1 download\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{Tan10JNIModel,\n title = "{JNI Light}: An Operational Model for the Core {JNI}",\n author = "Gang Tan",\n booktitle = {Asian Symposium on Programming Languages and Systems (APLAS)},\n pages={114--130},\n year = {2010},\n url_Paper = {https://doi.org/10.1007/978-3-642-17164-2_9},\n  keywords = {Programming Languages -> Language Interoperation}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n A Hierarchical SVG Image Abstraction Layer for Medical Imaging.\n \n \n \n \n\n\n \n Kim, E., Huang, X., Tan, G., Long, L. R., & Antani, S. K.\n\n\n \n\n\n\n In SPIE Medical Imaging: Advanced PACS-based Imaging Informaticsand Therapeutic Applications, volume 7628, 2010. \n \n\n\n\n
\n\n\n\n \n \n \"A paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n\n\n\n
\n
@inproceedings{Kim10SPIE,\n title = {A Hierarchical {SVG} Image Abstraction Layer for Medical Imaging},\n author = "Edward Kim and Xiaolei Huang and Gang Tan and L. Rodney Long and Sameer K. Antani",\n booktitle = {{SPIE} Medical Imaging: Advanced PACS-based Imaging Informaticsand Therapeutic Applications},\n volume={7628},\n year = {2010},\n url_Paper = {https://doi.org/10.1117/12.844502}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Robusta: Taming the Native Beast of the JVM.\n \n \n \n \n\n\n \n Siefers, J., Tan, G., & Morrisett, G.\n\n\n \n\n\n\n In 17th ACM Conference on Computer and Communications Security (CCS), pages 201–211, 2010. \n \n\n\n\n
\n\n\n\n \n \n \"Robusta: paper\n  \n \n \n \"Robusta: link\n  \n \n \n \"Robusta: slides\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 1 download\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n \n \n\n\n\n
\n
@inproceedings{SiefersTM10Robusta,\n author = "Joseph Siefers and Gang Tan and Greg Morrisett",\n title = "Robusta: Taming the Native Beast of the {JVM}",\n booktitle = {17th ACM Conference on Computer and Communications Security ({CCS})},\n pages={201--211},\n year = {2010},\n url_Paper = {http://www.cse.psu.edu/~gxt29/papers/robusta.pdf},\n url_Link = {http://www.cse.psu.edu/~gxt29/projects/gonative/},\n url_Slides = {http://www.cse.psu.edu/~gxt29/slides/RobustaCCS2010.pdf},\n keywords = {Programming Languages -> Language Interoperation, Software Security -> Inlined Reference Monitors (CFI; SFI; etc.)}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Semantic Foundations for Typed-Assembly Languages.\n \n \n \n \n\n\n \n Ahmed, A., Appel, A., Richards, C., Swadi, K., Tan, G., & Wang, D.\n\n\n \n\n\n\n ACM Transactions on Programming Languages and Systems (TOPLAS), 32(3): 1-67. March 2010.\n \n\n\n\n
\n\n\n\n \n \n \"Semantic paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@article{FPCC10TOPLAS,\nauthor="Amal Ahmed and Andrew Appel and Chris Richards and Kedar Swadi and Gang Tan and Daniel Wang",\ntitle="Semantic Foundations for Typed-Assembly Languages",\njournal={ACM Transactions on Programming Languages and Systems (TOPLAS)},\nvolume=32, number=3, pages="1-67", month=mar, year=2010,\nurl_Paper = {http://www.cse.psu.edu/~gxt29/papers/sftal.pdf},\nkeywords = {Formal Methods -> Program Verification}\n}\n\n
\n
\n\n\n\n
\n\n\n\n\n\n
\n
\n\n
\n
\n  \n 2009\n \n \n (4)\n \n \n
\n
\n \n \n
\n \n\n \n \n \n \n \n \n Weak Updates and Separation Logic.\n \n \n \n \n\n\n \n Tan, G., Shao, Z., Feng, X., & Cai, H.\n\n\n \n\n\n\n In Asian Symposium on Programming Languages and Systems (APLAS), pages 178–193, 2009. \n \n\n\n\n
\n\n\n\n \n \n \"Weak paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{Tan09APLAS,\n author = "Gang Tan and Zhong Shao and Xinyu Feng and Hongxu Cai",\n title = "Weak Updates and Separation Logic",\n booktitle = {Asian Symposium on Programming Languages and Systems (APLAS)},\n pages={178--193},\n year = {2009},\n url_Paper = {https://doi.org/10.1007/978-3-642-10672-9_14},\n keywords = {Formal Methods -> Program Verification}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n The New Jersey Voting-Machine Lawsuit and the AVC Advantage DRE Voting Machine.\n \n \n \n \n\n\n \n Appel, A. W., Ginsburg, M., Hursti, H., Kernighan, B. W., Richards, C. D., Tan, G., & Venetis, P.\n\n\n \n\n\n\n In Conference on Electronic Voting Technology/Workshop on Trustworthy Elections (EVT/WOTE), 2009. \n \n\n\n\n
\n\n\n\n \n \n \"The paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{Appel09Voting,\n author = {Appel, Andrew W. and Ginsburg, Maia and Hursti, Harri and Kernighan, Brian W. and Richards, Christopher D. and Tan, Gang and Venetis, Penny},\n title = {The {New Jersey} Voting-Machine Lawsuit and the {AVC} Advantage {DRE} Voting Machine},\n booktitle = {Conference on Electronic Voting Technology/Workshop on Trustworthy Elections (EVT/WOTE)},\n year = {2009},\n url_Paper = {https://www.usenix.org/legacy/events/evtwote09/tech/full_papers/appel.pdf},\n keywords = {Systems Security -> Voting Machine Security}\n} \n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n Document Analysis Support for the Manual Auditing of Elections.\n \n \n \n\n\n \n Lopresti, D. P., Zhou, X., Huang, X., & Tan, G.\n\n\n \n\n\n\n In 10th International Conference on Document Analysis and Recognition (ICDAR), pages 733–737, 2009. \n \n\n\n\n
\n\n\n\n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{Lopresti09ICDAR,\n  author    = {Daniel P. Lopresti and\n               Xiang Zhou and\n               Xiaolei Huang and\n               Gang Tan},\n  title     = {Document Analysis Support for the Manual Auditing of Elections},\n  booktitle = {10th International Conference on Document Analysis and Recognition (ICDAR)},\n  pages     = {733--737},\n  year      = {2009},\n  keywords = {Systems Security -> Voting Machine Security}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Finding Bugs in Exceptional Situations of JNI Programs.\n \n \n \n \n\n\n \n Li, S., & Tan, G.\n\n\n \n\n\n\n In 16th ACM Conference on Computer and Communications Security (CCS), pages 442–452, 2009. \n \n\n\n\n
\n\n\n\n \n \n \"Finding paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 3 downloads\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{LiT09CCS,\n author = "Siliang Li and Gang Tan",\n title = "Finding Bugs in Exceptional Situations of {JNI} Programs",\n booktitle = {16th ACM Conference on Computer and Communications Security ({{CCS}})},\n pages={442--452},\n year = {2009},\n url_Paper = {http://www.cse.psu.edu/~gxt29/papers/exnBugCCS09.pdf},\n keywords = {Programming Languages -> Language Interoperation}\n}\n\n
\n
\n\n\n\n
\n\n\n\n\n\n
\n
\n\n
\n
\n  \n 2008\n \n \n (2)\n \n \n
\n
\n \n \n
\n \n\n \n \n \n \n \n \n An Empirical Security Study of the Native Code in the JDK.\n \n \n \n \n\n\n \n Tan, G., & Croft, J.\n\n\n \n\n\n\n In 17th Usenix Security Symposium, pages 365–377, 2008. \n [\\hrefhttp://www.cse.psu.edu/ gxt29/papers/jdksecurity_tr.pdftech report]\n\n\n\n
\n\n\n\n \n \n \"An paper\n  \n \n \n \"An slides\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 4 downloads\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{TanC08Security,\n   author = {Gang Tan and Jason Croft},\n   title = {An Empirical Security Study of the Native Code in the {JDK}},\n   booktitle = {17th {Usenix Security} Symposium},\n   pages={365--377},\n   year = {2008},\n   url_Paper = {http://www.cse.psu.edu/~gxt29/papers/jdksecurity.pdf},\n   url_Slides = {http://www.cse.psu.edu/~gxt29/slides/jdksecurity.pdf},\n   note = {[\\href{http://www.cse.psu.edu/~gxt29/papers/jdksecurity_tr.pdf}{tech report}]},\n   keywords = {Programming Languages -> Language Interoperation}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Insecurities and Inaccuracies of the Sequoia AVC Advantage 9.00H DRE Voting Machine.\n \n \n \n \n\n\n \n Appel, A. W., Ginsburg, M., Hursti, H., Kernighan, B. W., Richards, C. D., & Tan, G.\n\n\n \n\n\n\n October 2008.\n \n\n\n\n
\n\n\n\n \n \n \"Insecurities paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@unpublished{Appe08VotingReport,\nauthor="Andrew W. Appel and Maia Ginsburg and Harri Hursti and Brian W. Kernighan and Christopher D. Richards and Gang Tan",\ntitle="Insecurities and Inaccuracies of the {Sequoia AVC Advantage} 9.00H {DRE} Voting Machine",\nmonth=Oct,\nyear=2008,\nurl_Paper="\\url{http://citp.princeton.edu/voting/advantage/}{[paper]}",\nkeywords = {Systems Security -> Voting Machine Security}\n}\n\n
\n
\n\n\n\n
\n\n\n\n\n\n
\n
\n\n
\n
\n  \n 2007\n \n \n (1)\n \n \n
\n
\n \n \n
\n \n\n \n \n \n \n \n \n ILEA: Inter-Language Analysis across Java and C.\n \n \n \n \n\n\n \n Tan, G., & Morrisett, G.\n\n\n \n\n\n\n In ACM Conference on Object-Oriented Programming, Systems, Languages, and Applications (OOPSLA), pages 39–56, 2007. \n \n\n\n\n
\n\n\n\n \n \n \"ILEA: paper\n  \n \n \n \"ILEA: slides\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 5 downloads\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{TanM07ILEA,\ntitle="{ILEA}: Inter-Language Analysis across {Java} and {C}",\nauthor="Gang Tan and Greg Morrisett",\nbooktitle= {ACM Conference on Object-Oriented Programming, Systems, Languages, and Applications ({OOPSLA})},\nyear = 2007,\npages = {39--56},\nurl_Paper = {http://www.cse.psu.edu/~gxt29/papers/ilea.pdf},\nurl_Slides = {http://www.cse.psu.edu/~gxt29/slides/ILEA.pdf},\nkeywords = {Programming Languages -> Language Interoperation}\n}\n\n
\n
\n\n\n\n
\n\n\n\n\n\n
\n
\n\n
\n
\n  \n 2006\n \n \n (4)\n \n \n
\n
\n \n \n
\n \n\n \n \n \n \n \n \n Delayed and Controlled Failures in Tamper-Resistant Software.\n \n \n \n \n\n\n \n Tan, G., Chen, Y., & Jakubowski, M. H.\n\n\n \n\n\n\n In 8th International Workshop on Information Hiding (IH), pages 216–231, 2006. \n \n\n\n\n
\n\n\n\n \n \n \"Delayed paper\n  \n \n \n \"Delayed slides\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{TanCJ06Delayed,\n  author    = {Gang Tan and\n               Yuqun Chen and\n               Mariusz H. Jakubowski},\n  title     = {Delayed and Controlled Failures in Tamper-Resistant Software},\n  booktitle = {8th International Workshop on Information Hiding (IH)},\n  pages     = {216--231},\n  year      = {2006},\n  url_Paper = {http://www.cse.psu.edu/~gxt29/papers/delayedfailure.pdf},\n  url_Slides = {http://www.cse.psu.edu/~gxt29/slides/IH06.pdf},\n  keywords = {Software Security}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Safe Java Native Interface.\n \n \n \n \n\n\n \n Tan, G., Appel, A., Chakradhar, S., Raghunathan, A., Ravi, S., & Wang, D.\n\n\n \n\n\n\n In IEEE International Symposium on Secure Software Engineering, pages 97–106, 2006. \n \n\n\n\n
\n\n\n\n \n \n \"Safe paper\n  \n \n \n \"Safe slides\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n  \n \n 2 downloads\n \n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{Tan06SafeJNI,\n  author    = {Gang Tan and Andrew Appel and Srimat Chakradhar\n               and Anand Raghunathan and Srivaths Ravi and Daniel Wang},\n  title     = {Safe {Java Native Interface}},\n  booktitle = {IEEE International Symposium on Secure Software Engineering},\n  year      = {2006},\n  pages     = {97--106},\n  url_Paper = {http://www.cse.psu.edu/~gxt29/papers/safejni.pdf},\n  url_Slides = {http://www.cse.psu.edu/~gxt29/slides/safejni.pdf},\n  keywords = {Programming Languages -> Language Interoperation}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n A Compositional Logic for Control Flow.\n \n \n \n \n\n\n \n Tan, G., & Appel, A.\n\n\n \n\n\n\n In International Conference on Verification, Model Checking, and Abstract Interpretation (VMCAI), pages 80–94, 2006. \n \n\n\n\n
\n\n\n\n \n \n \"A paper\n  \n \n \n \"A slides\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{TanA06ControlLogic,\n  author    = {Gang Tan and\n               Andrew Appel},\n  title     = {A Compositional Logic for Control Flow},\n  booktitle = {International Conference on Verification, Model Checking, and Abstract Interpretation (VMCAI)},\n  year      = {2006},\n  pages     = {80--94},\n  url_Paper = {http://www.cse.psu.edu/~gxt29/papers/controllogic.pdf},\n  url_Slides = {http://www.cse.psu.edu/~gxt29/slides/controllogic.pdf},\n  keywords = {Formal Methods -> Program Verification}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n Mechanized Metatheory for User-Defined Type Extensions.\n \n \n \n\n\n \n Marino, D., Chin, B., Millstein, T., Tan, G., Simmons, R. J., & Walker, D.\n\n\n \n\n\n\n In Workshop on Mechanizing Metatheory, September 2006. \n \n\n\n\n
\n\n\n\n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{Marino06MM,\n  author    = {Daniel Marino and Brian Chin and Todd Millstein and Gang Tan and Robert J. Simmons and David Walker},\n  title     = {Mechanized Metatheory for User-Defined Type Extensions},\n  booktitle = {Workshop on Mechanizing Metatheory},\n  month = sep,\n  year      = {2006},\n  keywords = {Programming Languages}\n}\n\n
\n
\n\n\n\n
\n\n\n\n\n\n
\n
\n\n
\n
\n  \n 2005\n \n \n (1)\n \n \n
\n
\n \n \n
\n \n\n \n \n \n \n \n A Compositional Logic for Control Flow and its Application to Foundational Proof-Carrying Code.\n \n \n \n\n\n \n Tan, G.\n\n\n \n\n\n\n Ph.D. Thesis, PU, Princeton, NJ, August 2005.\n Tech Report CS-TR-731-05\n\n\n\n
\n\n\n\n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@phdthesis{Tan05PhD,\nauthor="Gang Tan",\ntitle="A Compositional Logic for Control Flow and its Application to Foundational Proof-Carrying Code",\nschool=PU,\naddress="Princeton, NJ",\nyear="2005",month=aug,\nnote="Tech Report CS-TR-731-05",\nkeywords = {Formal Methods -> Program Verification}\n}\n\n
\n
\n\n\n\n
\n\n\n\n\n\n
\n
\n\n
\n
\n  \n 2004\n \n \n (2)\n \n \n
\n
\n \n \n
\n \n\n \n \n \n \n \n \n Construction of a Semantic Model for a Typed Assembly Language.\n \n \n \n \n\n\n \n Tan, G., Appel, A., Swadi, K., & Wu, D.\n\n\n \n\n\n\n In International Conference on Verification, Model Checking, and Abstract Interpretation (VMCAI), pages 30–43, January 2004. \n \n\n\n\n
\n\n\n\n \n \n \"Construction paper\n  \n \n \n \"Construction slides\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@InProceedings{TanASWVMCAI04,\n  author       = "Gang Tan and Andrew Appel and Kedar Swadi\n                  and Dinghao Wu",\n  title\t       = "Construction of a Semantic Model for a Typed\n                  Assembly Language",\n  booktitle    = {International Conference on Verification, Model Checking, and Abstract Interpretation (VMCAI)},\n  pages\t       = "30--43",\n  year\t       = 2004,\n  month\t       = jan,\n  url_Paper    = {http://www.cse.psu.edu/~gxt29/papers/stplus.pdf},\n  url_Slides   = {http://www.cse.psu.edu/~gxt29/slides/vmcai04.pdf},\n  keywords = {Formal Methods -> Program Verification}\n}\n\n
\n
\n\n\n\n
\n\n\n
\n \n\n \n \n \n \n \n \n Dynamic Typing with Dependent Types.\n \n \n \n \n\n\n \n Ou, X., Tan, G., Mandelbaum, Y., & Walker, D.\n\n\n \n\n\n\n In Proceedings of IFIP 3rd International Conference on Theoretical Computer Science, pages 437–450, 2004. \n \n\n\n\n
\n\n\n\n \n \n \"Dynamic paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{Ou04DynamicTyping,\n  author    = {Xinming Ou and\n               Gang Tan and\n               Yitzhak Mandelbaum and\n               David Walker},\n  title     = {Dynamic Typing with Dependent Types.},\n  booktitle = {Proceedings of IFIP 3rd International Conference on\n               Theoretical Computer Science},\n  year      = {2004},\n  pages     = {437--450},\n  url_Paper = {http://www.cse.psu.edu/~gxt29/papers/dynamic.pdf},\n  keywords = {Programming Languages}\n}\n\n
\n
\n\n\n\n
\n\n\n\n\n\n
\n
\n\n
\n
\n  \n 2003\n \n \n (1)\n \n \n
\n
\n \n \n
\n \n\n \n \n \n \n \n \n Enforcing Resource Usage Protocols via Scoped Methods.\n \n \n \n \n\n\n \n Tan, G., Ou, X., & Walker, D.\n\n\n \n\n\n\n In Proceedings of 10th International Workshop on Foundations of Object-Oriented Languages (FOOL), 2003. \n \n\n\n\n
\n\n\n\n \n \n \"Enforcing paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n \n \n\n\n\n
\n
@inproceedings{TanOWFOOL03,\n  author    = {Gang Tan and Xinming Ou and David Walker},\n  title     = {Enforcing Resource Usage Protocols via Scoped Methods.},\n  booktitle = {Proceedings of 10th International Workshop on Foundations of Object-Oriented Languages (FOOL)},\n  year      = {2003},\n  url_Paper = {http://www.cse.psu.edu/~gxt29/papers/scope.pdf},\n  keywords = {Programming Languages}\n}\n\n
\n
\n\n\n\n
\n\n\n\n\n\n
\n
\n\n
\n
\n  \n 2002\n \n \n (1)\n \n \n
\n
\n \n \n
\n \n\n \n \n \n \n \n \n Braille to print translations for Chinese.\n \n \n \n \n\n\n \n Jiang, M., Zhu, X., Gielen, G. G. E., Drábek, E., Xia, Y., Tan, G., & Bao, T.\n\n\n \n\n\n\n Information & Software Technology, 44(2): 91–100. 2002.\n \n\n\n\n
\n\n\n\n \n \n \"Braille paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n\n\n\n
\n
@article{Jiang02Braille,\n  author    = {Minghu Jiang and\n               Xiaoyan Zhu and\n               Georges G. E. Gielen and\n               Elliott Dr{\\'{a}}bek and\n               Ying Xia and\n               Gang Tan and\n               Ta Bao},\n  title     = {Braille to print translations for {Chinese}},\n  journal   = {Information {\\&} Software Technology},\n  volume    = {44},\n  number    = {2},\n  pages     = {91--100},\n  year      = {2002},\n  url_Paper = {https://doi.org/10.1016/S0950-5849(01)00220-8}\n}\n\n
\n
\n\n\n\n
\n\n\n\n\n\n
\n
\n\n
\n
\n  \n 2000\n \n \n (1)\n \n \n
\n
\n \n \n
\n \n\n \n \n \n \n \n \n Segmentation of Mandarin Braille Word and Braille Translation Based on Multi-knowledge.\n \n \n \n \n\n\n \n Jiang, M., Zhu, X., Xia, Y., Tan, G., Yuan, B., & Tang, X.\n\n\n \n\n\n\n In 5th International Conference on Signal Processing (ICSP), pages 2070–2073, 2000. \n \n\n\n\n
\n\n\n\n \n \n \"Segmentation paper\n  \n \n\n \n\n \n link\n  \n \n\n bibtex\n \n\n \n\n \n\n \n \n \n \n \n \n \n\n  \n \n \n\n\n\n
\n
@inproceedings{Jiang00ICSP,\n  author    = {Minghu Jiang and\n               Xiaoyan Zhu and\n               Ying Xia and\n               Gang Tan and Baozong Yuan and Xiaofang Tang},\n  title     = {Segmentation of Mandarin Braille Word and Braille Translation Based on Multi-knowledge},\n  booktitle = {5th International Conference on Signal Processing (ICSP)},\n  pages     = {2070--2073},\n  year      = {2000},\n  url_Paper = {https://doi.org/10.1109/ICOSP.2000.893513}\n}\n
\n
\n\n\n\n
\n\n\n\n\n\n
\n
\n\n\n\n\n
\n\n\n \n\n \n \n \n \n\n
\n"}; document.write(bibbase_data.data);