publications

* denotes equal contribution.

2026

  1. USENIX Sec ’26
    Raising the Flag: Detecting Missing Permission Controls in Mini-Program APIs
    Zhiao Wei*, Chao Wang*, Haseeb-Ur-Rehman Faheem, and 3 more authors
    In Proceedings of the 35th USENIX Security Symposium (USENIX Security ’26), 2026
    Co-first author
    HTML PDF Code Poster
  2. ACM SaTS ’26
    Beyond the Android Oracle: Characterizing Scopes in Super Apps
    Zhiao Wei and Yousra Aafer
    In 4th Workshop on Security of Agentic and Miniapp Empowered Mobile Apps (SaTS ’26), 2026
    First author · To appear, November 2026
    Code