Yiming Zhang

Publications

• Invade the Walled Garden: Evaluating GTP Security in Cellular Networks,

  [S&P' 25]. Yiming Zhang, Tao Wan, Yaru Yang, Haixin Duan, Yichen Wang, Jianjun Chen, Zixiang Wei, Xiang Li

• Automatic Insecurity: Exploring Email Auto-configuration in the Wild,

  [NDSS' 25]. Shushang Wen, Yiming Zhang, Yuxiang Shen, Bingyu Li, Haixin Duan, Jingqiang Lin

• Cross-Origin Web Attacks via HTTP/2 Server Push and Signed HTTP Exchange,

  [NDSS' 25]. Pinji Chen, Jianjun Chen, Mingming Zhang, Qi Wang, Yiming Zhang, Haixin Duan, Mingwei Xu, Haixin Duan

• Into the Dark: Unveiling Internal Site Search Abused for BlackHat SEO, [USENIX Security' 24]. Yunyi Zhang, Mingxuan Liu, Baojun Liu, Yiming Zhang, Haixin Duan, Min Zhang, Hui Jiang, Yanzhe Li, Fan Shi
• Tickets or Privacy? Understand the Ecosystem of Mobile Ticket Grabbing Apps, [USENIX Security' 24]. Yijing Liu, Yiming Zhang, Baojun Liu, Haixin Duan, Qiang Li, Mingxuan Liu, Ruixuan Li, Jia Yao
• Uncovering Security Vulnerabilities in Real-world Implementation and Deployment of 5G Messaging Services, [WiSec' 24]. Yaru Yang, Yiming Zhang, Tao Wan, Chuhan Wang, Haixin Duan, Jianjun Chen, Yishen Li
• Understanding the Implementation and Security Implications of Protective DNS Services, [NDSS' 24]. Mingxuan Liu, Yiming Zhang, Xiang Li, Chaoyi Lu, Baojun Liu, Haixin Duan, Xiaofeng Zheng
• Detecting and Measuring Security Risks of Hosting-Based Dangling Domains, [SIGMETRICS' 23]. Mingming Zhang, Xiang Li, Baojun Liu, Jianyu Lu, Yiming Zhang, Jianjun Chen, Haixin Duan, Shuang Hao, Xiaofeng Zheng
• Exploring the Characteristics and Security Risks of Emerging Emoji Domain Names, [ESORICS' 22]. Mingxuan Liu, Yiming Zhang, Baojun Liu, Haixin Duan
• Ethics in Security Research: Visions, Reality, and Paths Forward, [EthiCS' 22]. Yiming Zhang, Mingxuan Liu, Mingming Zhang, Chaoyi Lu, Haixin Duan
• Measuring the Deployment of 5G Security Enhancement, [WiSec' 22]. Shiyue Nie, Yiming Zhang, Tao Wan, Haixin Duan, Song Li
• Detecting and Characterizing SMS Spearphising Attacks, [ACSAC' 21]. Mingxuan Liu, Yiming Zhang, Baojun Liu, Zhou Li, Haixin Duan, Donghong Sun
• Rusted Anchors: A National Client-Side View of Hidden Root CAs in the Web PKI Ecosystem, [CCS' 21] [Slides] [Video]. Yiming Zhang, Baojun Liu, Chaoyi Lu, Zhou Li, Haixin Duan, Jiachen Li, Zaifeng Zhang. Media Coverage: [The Register], [Help Net Security], [APNIC BLOG]
• On Evaluating Delegated Digital Signing of Broadcasting Messages in 5G, [Globecom' 21]. Hui Gao, Yiming Zhang, Tao Wan, Jia Zhang, Haixin Duan
• From WHOIS to WHOWAS: A Large-Scale Measurement Study of Domain Registration Privacy under the GDPR, [NDSS' 21]. Chaoyi Lu, Baojun Liu, Yiming Zhang, Zhou Li, Fenglu Zhang, Haixin Duan, Ying Liu, Joann Qiongna Chen, Jinjin Liang, Zaifeng Zhang, Shuang Hao and Min Yang
• Lies in the Air: Characterizing Fake-base-station Spam Ecosystem in China, [CCS' 20]. [Released Dataset] Yiming Zhang, Baojun Liu, Chaoyi Lu, Zhou Li, Haixin Duan, Shuang Hao, Mingxuan Liu, Ying Liu, Dong Wang and Qiang Li
• Argot: Generating Adversarial Readable Chinese Texts, [IJCAI' 20]. Zihan Zhang, Mingxuan Liu, Chao Zhang, Yiming Zhang, Zhou Li, Qi Li, Haixin Duan and Donghong Sun
• TraffickStop: Detecting and Measuring Illicit Traffic Monetization Through Large-scale DNS Analysis, [Euro S&P' 19]. Baojun Liu, Zhou Li, Peiyuan Zong, Chaoyi Lu, Haixin Duan, Ying Liu, Sumayah Alrwais, Xiaofeng Wang, Shuang Hao, Yaoqi Jia, Yiming Zhang, Kai Chen and Zaifeng Zhang

• Automatic Generation of Adversarial Readable Chinese Texts, [TDSC' 22]. Mingxuan Liu, Zihan Zhang, Yiming Zhang, Chao Zhang, Zhou Li, Qi Li, Haixin Duan and Donghong Sun

• 教育类官网推广感染研究,

  通信学报,2018.9, 39(Z1): 78~85. 王郁，张一铭, 张甲，段海新

Services

• ESORICS’18,19; ICICS’19; DSN’20; NDSS'20,22

• Artificial Evaluate Committee, CoNEXT 2023
• Technical Committee, Securecomm 2023