Publications

IoT Security

Don’t Bite Off More than You Can Chew: Investigating Excessive Permission Requests in Trigger-Action Integrations.
Liuhuo Wan, Kailong Wang, Kulani Mahadewa, Haoyu Wang, Guangdong Bai. The Web Conference. WWW‘24

SATB: A Testbed of IoT-Based Smart Agriculture Network for Dataset Generation.
Liuhuo Wan, Yanjun Zhang, Ruiqing Li, Ryan Ko, Louw Hoffman, Guangdong Bai. International Conference on Advanced Data Mining and Applications. ADMA‘22. Best Paper Runner Up Award

Web Security

Is It Safe to Share Your Files? An Empirical Security Analysis of Google Workspace.
Liuhuo Wan, Kailong Wang, Haoyu Wang, Guangdong Bai. The Web Conference. WWW‘24

Analyzing Excessive Permission Requests in Google Workspace Add-Ons.
Liuhuo Wan, Chuan Yan, Mark Huasong Meng, Kailong Wang, Haoyu Wang. International Conference on Engineering of Complex Computer Systems. ICECCS‘24

ChatGPT App security

Understanding and Detecting File Knowledge Leakage in GPT App Ecosystem.
Chuan Yan, Bowei Guan, Yazhi Li, Mark Huasong Meng, Liuhuo Wan, Guangdong Bai. The ACM Web Conference 2025. WWW‘25

Exploring ChatGPT App Ecosystem: Distribution, Deployment and Security.
Chuan Yan, Ruomai Ren, Mark Huasong Meng, Liuhuo Wan, Tian Yang Ooi, Guangdong Bai. International Conference on Automated Software Engineering. ASE‘24. ACM SIGSOFT Distinguished Paper Award

Mobile Security

WinSpy: Cross-window Side-channel Attacks on Android’s Multi-window Mode.
Zeng Li, Chuan Yan, Liuhuo Wan, Hui Zhuang, Pengfei Hu, Guangdong Bai, Yiran Shen. International Conference on Mobile Computing and Networking. MobiCom‘25