Baojun Liu - Publications

2027 2026 2025 2024 2023 2022 2021 2020 2019 2018 2017

2027

80
Marketplace Chameleons: Demystifying the Scam Ecosystem of Second-Hand Online Platforms
Yijing Liu, Zilong Lin, XiaoFeng Wang, Baojun Liu, Haixin Duan

Network and Distributed System Security Symposium (NDSS)

March 2027 • Seoul, Republic of Korea
81
Standards-to-Surface: A Comprehensive Evaluation of Windows Code-Signing (Non)Compliance
Hanqing Zhao, Yiming Zhang, Lingyun Ying, Zi-Quan You, Baojun Liu, Haixin Duan, Shuhao Zhang, Huquan Jin

Network and Distributed System Security Symposium (NDSS)

March 2027 • Seoul, Republic of Korea
82
Tracking the Shadows: A Longitudinal, End-to-End Analysis of the Criminal Ecosystem for Email Account Compromise
Ruixuan Li, Liying Duan, Yunyi Zhang, Mingxuan Liu, Baojun Liu, Qingfeng Pan

Network and Distributed System Security Symposium (NDSS)

March 2027 • Seoul, Republic of Korea

2026

63
Should I Trust You? Rethinking the Principle of Zone-Based Isolation DNS Bailiwick Checking
Yuxiao Wu, Yunyi Zhang, Chaoyi Lu, Baojun Liu

33rd Annual Network and Distributed System Security Symposium (NDSS)

February 2026 • San Diego, CA, USA

NDSS Distinguished Paper Award
64
CoordMail: Exploiting SMTP Timeout and Command Interaction to Coordinate Email Middleware for Convergence Amplification Attack
Ruixuan Li, Chaoyi Lu, Baojun Liu, Yanzhong Lin, Qingfeng Pan, Jun Shao

33rd Annual Network and Distributed System Security Symposium (NDSS)

February 2026 • San Diego, CA, USA
65
Understanding the Status and Strategies of the Code Signing Abuse Ecosystem
Hanqing Zhao, Yiming Zhang, Lingyun Ying, Mingming Zhang, Baojun Liu, Haixin Duan, Zi-Quan You, Shuhao Zhang

33rd Annual Network and Distributed System Security Symposium (NDSS)

February 2026 • San Diego, CA, USA
66
Beyond Jailbreak: Unveiling Risks in LLM Applications Arising from Blurred Capability Boundaries
Yunyi Zhang, Shibo Cui, Baojun Liu, Jingkai Yu, Min Zhang, Fan Shi, Han Zheng

33rd Annual Network and Distributed System Security Symposium (NDSS)

February 2026 • San Diego, CA, USA
67
One Email, Many Faces: A Deep Dive into Identity Confusion in Email Aliases
Mengying Wu, Geng Hong, Jiatao Chen, Mingxuan Liu, Baojun Liu, Min Yang

33rd Annual Network and Distributed System Security Symposium (NDSS)

February 2026 • San Diego, CA, USA

NDSS Distinguished Paper Award

— IEEE S&P —

68
Breaking Free from Ivory Tower: Evaluating and Enhancing Real-world Chinese Underground Adversarial Jargon Detection
Zhifan Jiang, Mingxuan Liu, Yue Qin, Baojun Liu

IEEE Symposium on Security and Privacy (S&P)

May 2026 • San Francisco, CA, USA

— WWW —

69
Characterizing Iran's Phased National Internet Shutdown in 2025: A Progressive and Distributed Action
Shibo Cui, Mingxuan Liu, Baojun Liu, Haixin Duan, Ruixuan Li, Chaoyi Lu, Jin Zhang, Zhicheng Wang, Jinghua Bai

The ACM Web Conference (WWW)

June 2026 (TBD) • Dubai, UAE
70
Unveiling the Resilience of LLM-Enhanced Search Engines Against Black-Hat SEO Manipulation
Pei Chen, Geng Hong, Xinyi Wu, Mengying Wu, Zixuan Zhu, Mingxuan Liu, Baojun Liu, Mi Zhang, Min Yang

The ACM Web Conference (WWW)

June 2026 (TBD) • Dubai, UAE

— USENIX Security —

71
Alias Equals Zone? Large-Scale and Stealthy Takeover of Domain Hosting Service via CNAME-Following Cross-Domain Verification
Ruixuan Li, Xingyu Zhao, Yunyi Zhang, Baojun Liu, Jun Shao

35th USENIX Security Symposium (USENIX Security)

August 2026 • Seattle, WA, USA
72
Shielding QR Codes: Unveiling the Real-World Illicit Promotion Behind Adversarial QR Code
Lijie Wu, Xiaoping Zhang, Mingxuan Liu, Yue Qin, Baojun Liu, Geng Hong, Zhenrui Zhang, Chenghui Wu, Hui Jiang

35th USENIX Security Symposium (USENIX Security)

August 2026 • Seattle, WA, USA
73
Cracks in the Walled Garden: Dissecting the Gray-Market of Unauthorized iOS App Distribution via Ad Hoc Sideloading
Yijing Liu, Yiming Zhang, Baojun Liu, Haixin Duan

35th USENIX Security Symposium (USENIX Security)

August 2026 • Seattle, WA, USA

— ACM CCS —

74
Good Cache, BAD Cache: Exploiting DNSSEC Validation Failures for DNS Cache Poisoning Attacks
Shiming Liu, Yunyi Zhang, Chaoyi Lu, Baojun Liu, Shuhan Zhang, Donghong Sun, Yong Ma, Linjian Song

ACM SIGSAC Conference on Computer and Communications Security (CCS)

October 2026 • Salt Lake City, UT, USA
75
The Trade-off Between Performance and Security: Exploring Vulnerabilities in DNS Task Queue Scheduling
Shiming Liu, Yunyi Zhang, Ruixuan Li, Shiyao Guo, Baojun Liu, Donghong Sun, Yong Ma, Linjian Song

ACM SIGSAC Conference on Computer and Communications Security (CCS)

October 2026 • Salt Lake City, UT, USA

— ACM IMC —

76
When Delivery Meets Error: Exploring Email Delivery Retry Strategies and Defects
Ruixuan Li, Enlong Li, Mingxuan Liu, Baojun Liu, Haixin Duan, Qingfeng Pan

ACM Internet Measurement Conference (IMC)

October 2026 • Karlsruhe, Germany
77
Unintended Revelations and Risks: Understanding Cellular DNS Leakage on the Public Internet
Yiming Zhang, Hang Zhou, Tao Wan, Haixin Duan, Liqian Hao, Baojun Liu, Chaoyi Lu, Jingying Zhou

ACM Internet Measurement Conference (IMC)

October 2026 • Karlsruhe, Germany

— ACM CCS —

78
One Click to Leak: Characterizing the Real-World Usage and Threat Impact of MNO-based Single Sign-On Websites
Jiasheng Huang, Mingxuan Liu, Pei Chen, Baojun Liu, Yiming Zhang, Geng Hong, Zhenrui Zhang, Hai Yang, Haixin Duan, Hui Jiang

ACM SIGSAC Conference on Computer and Communications Security (CCS)

November 2026 • The Hague, The Netherlands

— IEEE/ACM ToN (Journal) —

79
Traffic Shadowing: A Global Investigation of Internet Traffic Observation and User Data Reutilization
Yunpeng Xing, Chaoyi Lu, Baojun Liu, Ruixuan Li, Haixin Duan

IEEE Transactions on Networking

Volume 34 • 2026

2025

48
HADES Attack: Understanding and Evaluating Manipulation Risks of Email Blocklists
Ruixuan Li, Chaoyi Lu, Baojun Liu, Yunyi Zhang, Geng Hong, Haixin Duan, Yanzhong Lin, Qingfeng Pan, Min Yang, Jun Shao

32nd Annual Network and Distributed System Security Symposium (NDSS)

February 2025 • San Diego, CA, USA
49
Revealing the Black Box of Device Search Engine: Scanning Assets, Strategies, and Ethical Consideration
Mengying Wu, Geng Hong, Jinsong Chen, Qi Liu, Shujun Tang, Youhao Li, Baojun Liu, Haixin Duan, Min Yang

32nd Annual Network and Distributed System Security Symposium (NDSS)

February 2025 • San Diego, CA, USA

— WWW —

50
You Can't Eat Your Cake and Have It Too: The Performance Degradation of LLMs with Jailbreak Defense
Wuyuao Mai, Geng Hong, Pei Chen, Xudong Pan, Baojun Liu, Yuan Zhang, Haixin Duan, Min Yang

ACM Web Conference (WWW)

May 2025 • Sydney, Australia

— IEEE/IFIP DSN —

51
Decoding DNS Centralization: Measuring and Identifying NS Domains Across Hosting Providers
Qihang Peng, Mingming Zhang, Deliang Chang, Jia Zhang, Baojun Liu, Haixin Duan

55th Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN)

June 2025 • Naples, Italy

— USENIX Security —

52
Beyond Exploit Scanning: A Functional Change-Driven Approach to Remote Software Version Identification
Jinsong Chen, Mengying Wu, Geng Hong, Baichao An, Mingxuan Liu, Lei Zhang, Baojun Liu, Haixin Duan, Min Yang

USENIX Security Symposium

August 2025 • Seattle, WA, USA
53
Your Shield is My Sword: A Persistent Denial-of-Service Attack via the Reuse of Unvalidated Caches in DNSSEC Validation
Shuhan Zhang, Shuai Wang, Li Chen, Dan Li, Baojun Liu

34th USENIX Security Symposium (USENIX Security)

August 2025 • Seattle, WA, USA

USENIX Security Honorable Mention
54
NOKEScam: Understanding and Rectifying Non-Sense Keywords Spear Scam in Search Engines
Mingxuan Liu, Yunyi Zhang, Lijie Wu, Baojun Liu, Geng Hong, Yinming Zhang, Hui Jiang, Jia Zhang, Haixin Duan, Min Zhang, Wei Guan, Fan Shi, Min Yang

USENIX Security Symposium

August 2025 • Seattle, WA, USA
55
Misty Registry: An Empirical Study of Flawed Domain Registry Operation
Mingming Zhang, Yunyi Zhang, Baojun Liu, Haixin Duan, Min Zhang, Fan Shi, Chengxi Xu

USENIX Security Symposium

August 2025 • Seattle, WA, USA

— ESORICS —

56
Email Cloaking: Deceiving Users and Spam Email Detectors with Invisible HTML Settings
Bingyang Guo, Mingxuan Liu, Yihui Ma, Ruixuan Li, Fan Shi, Min Zhang, Baojun Liu, Chengxi Xu, Haixin Duan, Geng Hong, Min Yang, Qingfeng Pan

European Symposium on Research in Computer Security (ESORICS)

September 2025 • Toulouse, France

— ACM CCS —

57
Exploring and Analyzing Cross Layer DoS Attack Against UDP-based Services on Linux
Dashuai Wu, Yunyi Zhang, Baojun Liu, Xiang Li, Eihal Alowaisheq, Haixin Duan

ACM Conference on Computer and Communications Security (CCS)

October 2025 • Taipei, Taiwan, China
58
RebirthDay Attack: Reviving DNS Cache Poisoning with the Birthday Paradox
Xiang Li, Mingming Zhang, Zuyao Xu, Fasheng Miao, Yuqi Qiu, Baojun Liu, Jia Zhang, Xiaofeng Zhang, Haixin Duan, Zheli Liu, Yunhai Zhang, Dunqiu Fan

ACM Conference on Computer and Communications Security (CCS)

October 2025 • Taipei, Taiwan, China

— ACM IMC —

59
Understanding and Characterizing Intermediate Paths of Email Delivery: The Hidden Dependencies
Ruixuan Li, Chaoyi Lu, Baojun Liu, Yanzhong Lin, Haixin Duan, Qingfeng Pan, Jun Shao

ACM Internet Measurement Conference (IMC)

October 2025 • Madison, Wisconsin, USA
60
Analyzing Compliance and Complications of Integrating Internationalized X.509 Certificates
Mingming Zhang, Jinfeng Guo, Yiming Zhang, Shenglin Zhang, Baojun Liu, Hanqing Zhao, Xiang Li, Haixin Duan

ACM Internet Measurement Conference (IMC)

October 2025 • Madison, Wisconsin, USA
61
Chaos in the Chain: Evaluate Deployment and Construction Compliance of Web PKI Certificate Chain
Jia Yao, Yiming Zhang, Baojun Liu, Zhan Liu, Mingming Zhang, Haixin Duan

ACM Internet Measurement Conference (IMC)

October 2025 • Madison, Wisconsin, USA
62
Dive into the cloud: Unveiling the (Ab)usage of Serverless Cloud Function in the Wild
Yijing Liu, Mingxuan Liu, Yiming Zhang, Baojun Liu, Jia Zhang, Geng Hong, Haixin Duan, Min Yang

ACM Internet Measurement Conference (IMC)

October 2025 • Madison, Wisconsin, USA

2024

37
Understanding the Implementation and Security Implications of Protective DNS Services
Mingxuan Liu, Yiming Zhang, Xiang Li, Chaoyi Lu, Baojun Liu, Haixin Duan, Xiaofeng Zheng

31st Annual Network and Distributed System Security Symposium (NDSS)

February 2024 • San Diego, CA

— IEEE S&P —

38
TuDoor Attack: Systematically Exploring and Exploiting Logic Vulnerabilities in DNS Response Pre-processing with Malformed Packets
Xiang Li, Wei Xu, Baojun Liu, Mingming Zhang, Zhou Li, Jia Zhang, Deliang Chang, Xiaofeng Zheng, Chuhan Wang, Jianjun Chen, Haixin Duan, Qi Li

IEEE Symposium on Security and Privacy (SP)

May 2024 • San Francisco, CA

— WWW —

39
A Worldwide View on the Reachability of Encrypted DNS Services
Ruixuan Li, Baojun Liu, Chaoyi Lu, Haixin Duan, Jun Shao

ACM Web Conference (WWW)

May 2024 • Singapore

— IEEE/IFIP DSN —

40
ChatScam: Unveiling the Rising Impact of ChatGPT on Domain Name Abuse
Mingxuan Liu, Zhenglong Jin, Jiahai Yang, Baojun Liu, Haixin Duan, Ying Liu, Ximeng Liu, Shujun Tang

54th Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN)

June 2024 • Brisbane, Australia

— USENIX Security —

41
Tickets or Privacy? Understand the Ecosystem of Chinese Ticket Grabbing Apps
Yijing Liu, Yiming Zhang, Baojun Liu, Haixin Duan, Qiang Li, Mingxuan Liu, Ruixuan Li, Jia Yao

USENIX Security Symposium

August 2024 • Philadelphia, PA
42
Rethinking the Security Threats of Stale DNS Glue Records
Yunyi Zhang, Baojun Liu, Haixin Duan, Min Zhang, Xiang Li, Fan Shi, Chengxi Xu, Eihal Alowaisheq

USENIX Security Symposium

August 2024 • Philadelphia, PA
43
Into the Dark: Unveiling Internal Site Search Abused for Black Hat SEO
Yunyi Zhang, Mingxuan Liu, Baojun Liu, Yiming Zhang, Haixin Duan, Min Zhang, Hui Jiang, Yanzhe Li, Fan Shi

USENIX Security Symposium

August 2024 • Philadelphia, PA
44
Cross the Zone: Toward a Covert Domain Hijacking via Shared DNS Infrastructure
Yunyi Zhang, Mingming Zhang, Baojun Liu, Zhan Liu, Jia Zhang, Haixin Duan, Min Zhang, Fan Shi, Chengxi Xu

USENIX Security Symposium

August 2024 • Philadelphia, PA

— ACM IMC —

45
Yesterday Once More: Global Measurement of Internet Traffic Shadowing Behaviors
Yunpeng Xing, Chaoyi Lu, Baojun Liu, Haixin Duan, Junzhe Sun, Zhou Li

ACM Internet Measurement Conference (IMC)

November 2024 • Madrid, Spain
46
Bounce in the Wild: A Deep Dive into Email Delivery Failures from a Large Email Service Provider
Ruixuan Li, Shaodong Xiao, Baojun Liu, Yanzhong Lin, Haixin Duan, Qingfeng Pan, Jianjun Chen, Jia Zhang, Ximeng Liu, Xiuqi Lu, Jun Shao

ACM Internet Measurement Conference (IMC)

November 2024 • Madrid, Spain

— IEEE TDSC (Journal) —

47
Investigating Deployment Issues of DNS Root Server Instances From a China-Wide View
Fenglu Zhang, Baojun Liu, Chaoyi Lu, Yunpeng Xing, Haixin Duan, Ying Liu, Liyuan Chang

*IEEE Transactions on Dependable and Secure Computing*

Volume 21, Issue 6 • November 2024

2023

28
Ghost Domain Reloaded: Vulnerable Links in Domain Name Delegation and Revocation
Xiang Li, Baojun Liu, Xuesong Bai, Mingming Zhang, Qifan Zhang, Zhou Li, Haixin Duan, Qi Li

30th Annual Network and Distributed System Security Symposium (NDSS)

February 2023 • San Diego, CA

— SIGMETRICS —

29
Detecting and Measuring Security Risks of Hosting-Based Dangling Domains
Mingming Zhang, Xiang Li, Baojun Liu, Jianyu Lu, Yiming Zhang, Jianjun Chen, Haixin Duan, Shuang Hao, Xiaofeng Zheng

ACM SIGMETRICS International Conference on Measurement and Modeling of Computer Systems (SIGMETRICS)

June 2023 • Orlando, FL, USA

— TURC —

30
Silence is not Golden: Disrupting the Load Balancing of Authoritative DNS Servers
Fenglu Zhang, Baojun Liu, Eihal Alowaisheq, Jianjun Chen, Chaoyi Lu, Linjian Song, Yong Ma, Ying Liu, Haixin Duan, Min Yang

ACM Turing Award Celebration Conference - China (TURC)

July 2023 • Wuhan, China

— USENIX Security —

31
The Maginot Line: Attacking the Boundary of DNS Caching Protection
Xiang Li, Chaoyi Lu, Baojun Liu, Qifan Zhang, Zhou Li, Haixin Duan, Qi Li

32nd USENIX Security Symposium (USENIX Security)

August 2023 • Anaheim, CA, USA
32
Temporal CDN-Convex Lens: A CDN-Assisted Practical Pulsing DDoS Attack
Run Guo, Jianjun Chen, Yihang Wang, Keran Mu, Baojun Liu, Xiang Li, Chao Zhang, Haixin Duan, Jianping Wu

32nd USENIX Security Symposium (USENIX Security)

August 2023 • Anaheim, CA, USA

— ACM IMC —

33
Wolf in Sheep's Clothing: Evaluating Security Risks of the Undelegated Record on DNS Hosting Services
Fenglu Zhang, Yunyi Zhang, Baojun Liu, Eihal Alowaisheq, Lingyun Ying, Xiang Li, Zaifeng Zhang, Ying Liu, Haixin Duan, Min Zhang

ACM Internet Measurement Conference (IMC)

October 2023 • Montreal, QC, Canada

— ACM CCS —

34
Silence is not Golden: Disrupting the Load Balancing of Authoritative DNS Servers
Fenglu Zhang, Baojun Liu, Eihal Alowaisheq, Jianjun Chen, Chaoyi Lu, Linjian Song, Yong Ma, Ying Liu, Haixin Duan, Min Yang

ACM SIGSAC Conference on Computer and Communications Security (CCS)

November 2023 • Copenhagen, Denmark

ACM CCS Distinguished Paper Award
35
TsuKing: Coordinating DNS Resolvers and Queries into Potent DoS Amplifiers
Wei Xu, Xiang Li, Chaoyi Lu, Baojun Liu, Haixin Duan, Jia Zhang, Jianjun Chen, Tao Wan

ACM Conference on Computer and Communications Security (CCS)

November 2023 • Copenhagen, Denmark
36
Under the Dark: A Systematical Study of Stealthy Mining Pools (Ab)use in the Wild
Zhenrui Zhang, Geng Hong, Xiang Li, Zhuoqun Fu, Jia Zhang, Mingxuan Liu, Chuhan Wang, Jianjun Chen, Baojun Liu, Haixin Duan, Chao Zhang, Min Yang

ACM Conference on Computer and Communications Security (CCS)

November 2023 • Copenhagen, Denmark

2022

22
Measuring the Practical Effect of DNS Root Server Instances: A China-Wide Case Study
Fenglu Zhang, Chaoyi Lu, Baojun Liu, Haixin Duan, Ying Liu

Passive and Active Measurement (PAM) Conference

March 2022 • Virtual Event

— NDSS —

23
PMTUD is not Panacea: Revisiting IP Fragmentation Attacks against TCP
Xuewei Feng, Qi Li, Kun Sun, Ke Xu, Baojun Liu, Xiaofeng Zheng, Qiushi Yang, Haixin Duan, Zhiyun Qian

29th Annual Network and Distributed System Security Symposium (NDSS)

April 2022 • San Diego, CA

— Euro S&P —

24
Trampoline Over the Air: Breaking in IoT Devices Through MQTT Brokers
Huikai Xu, Miao Yu, Yanhao Wang, Yue Liu, Qinsheng Hou, Zhenbang Ma, Haixin Duan, Jianwei Zhuge, Baojun Liu

7th IEEE European Symposium on Security and Privacy (EuroS&P)

June 2022 • Genoa, Italy

— USENIX Security —

25
Building an Open, Robust, and Stable Voting-Based Domain Top List
Qinge Xie, Shujun Tang, Xiaofeng Zheng, Qingran Lin, Baojun Liu, Haixin Duan, Frank Li

31st USENIX Security Symposium (USENIX Security)

August 2022 • Boston, MA, USA
26
A Large-scale and Longitudinal Measurement Study of DKIM Deployment
Chuhan Wang, Kaiwen Shen, Minglei Guo, Yuxuan Zhao, Mingming Zhang, Jianjun Chen, Baojun Liu, Xiaofeng Zheng, Haixin Duan, Yanzhong Lin, Qingfeng Pan

31st USENIX Security Symposium (USENIX Security)

August 2022 • Boston, MA, USA

— ESORICS —

27
Exploring the Characteristics and Security Risks of Emerging Emoji Domain Names
Mingxuan Liu, Yiming Zhang, Baojun Liu, Haixin Duan

27th European Symposium on Research in Computer Security (ESORICS)

September 2022 • Copenhagen, Denmark

2021

16
From WHOIS to WHOWAS: A Large-Scale Measurement Study of Domain Name Registration Privacy
Chaoyi Lu, Baojun Liu, Yiming Zhang, Zhou Li, Fenglu Zhang, Haixin Duan, Ying Liu, Joann Qiongna Chen, Jinjin Liang, Zaifeng Zhang, Shuang Hao, Min Yang

28th Annual Network and Distributed System Security Symposium (NDSS)

February 2021 • Virtual Event

— IEEE/IFIP DSN —

17
Fast IPv6 Network Periphery Discovery and Security Implications
Xiang Li, Baojun Liu, Xiaofeng Zheng, Haixin Duan, Qi Li, Youjun Huang

51st Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN)

June 2021 • Taipei, Taiwan, China

— USENIX Security —

18
Weak Links in Authentication Chains: A Large-scale Analysis of Email Sender Authentication
Kaiwen Shen, Chuhan Wang, Xiaofeng Zheng, Minglei Guo, Chaoyi Lu, Baojun Liu, Yuxuan Zhao, Shuang Hao, Haixin Duan, Qingfeng Pan, Min Yang

30th USENIX Security Symposium (USENIX Security)

August 2021 • Virtual Event

— ACM CCS —

19
Rusted Anchors: A National Client-Side View of Hidden Root CAs in the Web PKI Ecosystem
Yiming Zhang, Baojun Liu, Chaoyi Lu, Zhou Li, Haixin Duan, Jiachen Li, Zaifeng Zhang

ACM Conference on Computer and Communications Security (CCS)

November 2021 • Virtual Event, Republic of Korea

— ACSAC —

20
Detecting and Characterizing SMS Spearphishing Attacks
Mingxuan Liu, Yiming Zhang, Baojun Liu, Zhou Li, Haixin Duan, Donghong Sun

Annual Computer Security Applications Conference (ACSAC)

December 2021 • Virtual Event, USA

— IEEE Access —

21
DNSWeight: Quantifying Country-Wise Importance of Domain Name System
Deliang Chang, Shanshan Hao, Zhou Li, Baojun Liu, Xing Li

*IEEE Access*

Volume 9 • March 2021

2020

11
CDN Judo: Breaking the CDN DoS Protection with Itself
Run Guo, Weizhong Li, Baojun Liu, Shuang Hao, Jia Zhang, Haixin Duan, Kaiwen Shen, Jianjun Chen, Ying Liu

Network and Distributed System Security Symposium (NDSS)

February 2020 • Virtual Event, USA

— IEEE/IFIP DSN —

12
CDN Backfired: Amplification Attacks Based on HTTP Range Requests
Weizhong Li, Kaiwen Shen, Run Guo, Baojun Liu, Jia Zhang, Haixin Duan, Shuang Hao, Xiarun Chen, Yao Wang

IEEE/IFIP International Conference on Dependable Systems and Networks (DSN)

June 2020 • Virtual Event, USA

IEEE/IFIP DSN Best Paper Award

— USENIX Security —

13
Poison Over Troubled Forwarders: A Cache Poisoning Attack Targeting DNS Forwarding Devices
Xiaofeng Zheng, Chaoyi Lu, Jian Peng, Qiushi Yang, Dongjie Zhou, Baojun Liu, Keyu Man, Shuang Hao, Haixin Duan, Zhiyun Qian

USENIX Security Symposium

August 2020 • Virtual Event, USA

— ACM CCS —

14
Lies in the Air: Characterizing Fake-base-station Spam Ecosystem
Yiming Zhang, Baojun Liu, Chaoyi Lu, Zhou Li, Haixin Duan, Shuang Hao, Mingxuan Liu, Ying Liu, Dong Wang, Qiang Li

ACM SIGSAC Conference on Computer and Communications Security (CCS)

November 2020 • Virtual Event, USA
15
Talking with Familiar Strangers: An Empirical Study on HTTPS Context Confusion Attacks
Mingming Zhang, Xiaofeng Zheng, Kaiwen Shen, Ziqiao Kong, Chaoyi Lu, Yu Wang, Haixin Duan, Shuang Hao, Baojun Liu, Min Yang

ACM SIGSAC Conference on Computer and Communications Security (CCS)

November 2020 • Virtual Event, USA

2019

6
Cracking the Wall of Confinement: Understanding and Analyzing Malicious Domain Take-downs
Eihal Alowaisheq, Peng Wang, Sumayah Alrwais, Xiaojing Liao, Xiaofeng Wang, Tasneem Alowaisheq, Xianghang Mi, Siyuan Tang, Baojun Liu

Network and Distributed System Security Symposium (NDSS)

February 2019 • San Diego, CA, USA

NDSS Best Paper Award

— IEEE S&P —

7
Resident Evil: Understanding Residential IP Proxy as a Dark Service
Xianghang Mi, Xuan Feng, Xiaojing Liao, Baojun Liu, Xiaofeng Wang, Feng Qian, Zhou Li, Sumayah Alrwais, Limin Sun, Ying Liu

IEEE Symposium on Security and Privacy (S&P)

May 2019 • San Francisco, CA, USA

— Euro S&P —

8
TraffickStop: Detecting and Measuring Illicit Traffic Monetization Through Large-Scale DNS Log Analysis
Baojun Liu, Zhou Li, Peiyuan Zong, Chaoyi Lu, Haixin Duan, Ying Liu, Sumayah Alrwais, Xiaofeng Wang, Shuang Hao, Yaoqi Jia, Yiming Zhang, Kai Chen, Zaifeng Zhang

IEEE European Symposium on Security and Privacy (EuroS&P)

June 2019 • Stockholm, Sweden

— SecureComm —

9
TL;DR Hazard: A Comprehensive Study of Levelsquatting Scams
Kun Du, Hao Yang, Zhou Li, Haixin Duan, Shuang Hao, Baojun Liu, Yuxiao Ye, Mingxuan Liu, Xiaodong Su, Guang Liu, Zhifeng Geng, Zaifeng Zhang, Jinjin Liang

International Conference on Security and Privacy in Communication Networks (SecureComm)

October 2019 • Orlando, FL, USA

— ACM IMC —

10
An End-to-End, Large-Scale Measurement of DNS-over-Encryption: How Far Have We Come?
Chaoyi Lu, Baojun Liu, Zhou Li, Shuang Hao, Haixin Duan, Mingming Zhang, Chunying Leng, Ying Liu, Zaifeng Zhang, Jianping Wu

ACM Internet Measurement Conference (IMC)

October 2019 • Amsterdam, Netherlands

ISOC Applied Networking Research Award (ANRP) 2020

ACM IMC Best Paper Award Nominee

ACM IMC Community Contribution Award Nominee

2018

2
A Reexamination of Internationalized Domain Names: the Good, the Bad and the Ugly
Baojun Liu, Chaoyi Lu, Zhou Li, Ying Liu, Haixin Duan, Shuang Hao, Zaifeng Zhang

IEEE/IFIP International Conference on Dependable Systems and Networks (DSN)

June 2018 • Luxembourg City, Luxembourg

— USENIX Security —

3
Who is answering my queries: Understanding and Characterizing Interception of the DNS Resolution Path
Baojun Liu, Chaoyi Lu, Haixin Duan, Ying Liu, Zhou Li, Shuang Hao, Min Yang

USENIX Security Symposium

August 2018 • Baltimore, MD, USA

— FOCI —

4
Measuring Privacy Threats in China-Wide Mobile Networks
Mingming Zhang, Baojun Liu, Chaoyi Lu, Jia Zhang, Shuang Hao, Haixin Duan

USENIX Workshop on Free and Open Communications on the Internet (FOCI)

August 2018 • Baltimore, MD, USA

— SRDS —

5
Abusing CDNs for Fun and Profit: Security Issues in CDNs' Origin Validation
Run Guo, Jianjun Chen, Baojun Liu, Jia Zhang, Chao Zhang, Haixin Duan, Tao Wan, Jian Jiang, Shuang Hao, Yaoqi Jia

IEEE International Symposium on Reliable Distributed Systems (SRDS)

October 2018 • Salvador, Brazil

2017

1
Don't Let One Rotten Apple Spoil the Whole Barrel: Towards Automated Detection of Shadowed Domains
Daiping Liu, Zhou Li, Kun Du, Haining Wang, Baojun Liu, Haixin Duan

ACM SIGSAC Conference on Computer and Communications Security (CCS)

October 2017 • Dallas, TX, USA