Shuo Chen

Senior Principal Researcher

论文与出版物

查看方式：

- CyberThreat-Eval: Can Large Language Models Automate Real-World Threat Research?
  
  Xiangsen Chen, Xuan Feng (xuafeng), Shuo Chen, Sudipto Rakshit, Diana Duvieilh, Ashley Picone, Nan Tang
  
  Transactions on Machine Learning Research | December 2025
  
  Publication
- RepDL: Bit-level Reproducible Deep Learning Training and Inference
  
  Peichen Xie, Xian Zhang, Shuo Chen
  
  October 2025
  
  Publication
- Can We Count on LLMs? The Fixed-Effect Fallacy and Claims of GPT-4 Capabilities
  
  Thomas Ball, Shuo Chen, Cormac Herley
  
  September 2024
  
  Preprint
- A Security Study about Electron Applications and a Programming Methodology to Tame DOM Functionalities
  
  Zihao Jin, Shuo Chen, Yang Chen, Haixin Duan, Jianjun Chen, Jianping Wu
  
  Symposium on Network and Distributed System Security (NDSS) | March 2023
  
  Publication
- Timing-Based Browsing Privacy Vulnerabilities Via Site Isolation
  
  Zihao Jin, Ziqiao Kong, Shuo Chen, Haixin Duan
  
  IEEE Symposium on Security and Privacy (Oakland) | May 2022
  
  Publication
- Forerunner: Constraint-based Speculative Transaction Execution for Ethereum
  
  Yang Chen, Zhongxin Guo, Runhuai Li, Shuo Chen, Lidong Zhou, Yajin Zhou, Xian Zhang
  
  SOSP 2021 | October 2021
  
  Publication Author's Version DOI
- Argus: A Fully Transparent Incentive System for Anti-Piracy Campaigns
  
  Xian Zhang, Xiaobing Guo, Zixuan Zeng, Wenyan Liu, Zhongxin Guo, Yang Chen, Shuo Chen, Qiufeng Yin, Mao Yang
  
  The 40th International Symposium on Reliable Distributed Systems (SRDS) | September 2021
  
  Publication
- Agatha: Smart Contract for DNN Computation
  
  Zihan Zheng, Peichen Xie, Xian Zhang, Shuo Chen, Yang Chen, Xiaobing Guo, Guangzhong Sun, Guangyu Sun, Lidong Zhou
  
  May 2021
  
  Publication
- Characterizing Ethereum’s Mining Power Decentralization at a Deeper Level
  
  Liyi Zeng, Yang Chen, Shuo Chen, Xian Zhang, Zhongxin Guo, Wei Xu, Thomas Moscibroda
  
  IEEE Conference on Computer Communications (INFOCOM) | May 2021
  
  Publication
- Formal Verification of Workflow Policies for Smart Contracts in Azure Blockchain
  
  Yuepeng Wang, Shuvendu Lahiri, Shuo Chen, Rong Pan, Isil Dillig, Cody Born, Immad Naseer, Kostas Ferles
  
  Verified Software: Theories, Tools and Experiments | September 2019
  
  Publication 项目
- We Still Don’t Have Secure Cross-Domain Requests: an Empirical Study of CORS
  
  Jianjun Chen, Jian Jiang, Haixin Duan, Tao Wan, Shuo Chen, Vern Paxson, Min Yang
  
  Proceedings of USENIX Security Symposium | August 2018
  
  Publication
- SVAuth – A Single-Sign-On Integration Solution with Runtime Verification (tool paper)
  
  Shuo Chen, Matt McCutchen, Phuong Cao, Shaz Qadeer, Ravishankar K. Iyer
  
  International Conference on Runtime Verification 2017 | September 2017
  
  Publication
- Swords and Shields – A Study of Mobile Game Hacks and Existing Defenses
  
  Yuan Tian, Eric Chen, Xiaojun Ma, Shuo Chen, Xiao Wang, Patrick Tague
  
  Annual Computer Security Applications Conference (ACSAC) 2016 | December 2016
  
  论文与出版物
- Self-Verifying Execution (Position Paper)
  
  Matt McCutchen, Daniel Song, Shuo Chen, Shaz Qadeer
  
  Proceedings of the IEEE Cybersecurity Development Conference (SecDev) | November 2016
  
  Proceedings of the IEEE Cybersecurity Development Conference (SecDev)
  
  论文与出版物
- The “Web/Local” Boundary Is Fuzzy: A Security Study of Chrome’s Process-based Sandboxing
  
  Yaoqi Jia, Zheng Leong Chua, Hong Hu, Shuo Chen, Prateek Saxena, Zhenkai Liang
  
  Proceedings of the ACM Conference on Computer and Communications Security (CCS) | October 2016
  
  论文与出版物
- Uncovering Bugs in Distributed Storage Systems during Testing (not in Production!)
  
  Pantazis Deligiannis, Matt McCutchen, Paul Thomson, Shuo Chen, Alastair F. Donaldson, John Erickson, Cheng Huang, Akash Lal, Rashmi Mudduluru, Shaz Qadeer, Wolfram Schulte
  
  14th USENIX Conference on File and Storage Technologies (FAST) | February 2016
  
  Publication 项目项目
- Enlightening Ph.D. Students with the Elegance of Logic — My personal memory about Prof. Jose Meseguer
  
  Shuo Chen
  
  Proceedings of the Festschrift Symposium in Honor of Jose Meseguer (LNCS 9200) | September 2015
  
  Publication
- Cookies Lack Integrity: Real-World Implications
  
  Xiaofeng Zheng, Jian Jiang, Jinjin Liang, Haixin Duan, Shuo Chen, Tao Wan
  
  Proceedings of USENIX Security Symposium | August 2015
  
  论文与出版物
- Securing Multiparty Online Services via Certification of Symbolic Transactions
  
  Eric Chen, Shuo Chen, Shaz Qadeer, Rui Wang
  
  Proceedings of the IEEE Symposium on Security and Privacy (Oakland) | May 2015
  
  test test
  
  论文与出版物论文与出版物项目
- OAuth Demystified for Mobile Application Developers
  
  Eric Chen, Yutong Pei, Shuo Chen, Yuan Tian, Robert Kotcher, Patrick Tague
  
  Proceedings of the ACM Conference on Computer and Communications Security (CCS) | November 2014
  
  论文与出版物论文与出版物
- Brahmastra: Driving Apps to Test the Security of Third-Party Components
  
  Ravi Bhoraskar, Seungyeop Han, Jinseong Jeon, Tanzirul Azim, Shuo Chen, Suman Nath, Rui Wang, David Wetherall, Jaeyeon Jung
  
  USENIX Security Symposium | August 2014
  
  论文与出版物
- Unauthorized Origin Crossing on Mobile Platforms: Threats and Mitigation
  
  Rui Wang, Luyi Xing, XiaoFeng Wang, Shuo Chen
  
  Proceedings of the ACM Conference on Computer and Communications Security (CCS) | November 2013
  
  Publication
- Explicating SDKs: Uncovering Assumptions Underlying Secure Authentication and Authorization
  
  Rui Wang, Yuchen Zhou, Shuo Chen, Shaz Qadeer, David Evans, Yuri Gurevich,
  
  Proceedings of the USENIX Security Symposium | August 2013
  
  论文与出版物论文与出版物
- InteGuard: Toward Automatic Protection of Third-Party Web Service Integrations
  
  Luyi Xing, Yangyi Chen, XiaoFeng Wang, Shuo Chen
  
  Network & Distributed System Security Symposium (NDSS) | February 2013
  
  Network & Distributed System Security Symposium (NDSS)
  
  论文与出版物论文与出版物
- Signing Me onto Your Accounts through Facebook and Google: a Traffic-Guided Security Study of Commercially Deployed Single-Sign-On Web Services
  
  Rui Wang, Shuo Chen, XiaoFeng Wang
  
  Proceedings of the IEEE Symposium on Security and Privacy (Oakland) | May 2012
  
  论文与出版物
- How to Shop for Free Online – Security Analysis of Cashier-as-a-Service Based Web Stores
  
  Rui Wang, Shuo Chen, XiaoFeng Wang, Shaz Qadeer
  
  Proceedings of the IEEE Symposium on Security and Privacy (Oakland) (Best Practical Paper award) | May 2011
  
  Proceedings of the IEEE Symposium on Security and Privacy (Oakland) (Best Practical Paper award)
  
  论文与出版物论文与出版物
- Sidebuster: Automated Detection and Quantification of Side-Channel Leaks in Web Application Development
  
  Kehuan Zhang, Zhou Li, Rui Wang, XiaoFeng Wang, Shuo Chen
  
  Proceedings of the ACM Conference on Computer and Communications Security (CCS) | October 2010
  
  论文与出版物论文与出版物
- Side-Channel Leaks in Web Applications: a Reality Today, a Challenge Tomorrow
  
  Shuo Chen, Rui Wang, XiaoFeng Wang, Kehuan Zhang
  
  Proceedings of the IEEE Symposium on Security and Privacy (Oakland) | May 2010
  
  论文与出版物论文与出版物
- Residue Objects: A Challenge to Web Browser Security
  
  Shuo Chen, Hong Chen, Manuel Caballero
  
  Proceedings of EuroSys | April 2010
  
  PDF
- Pretty-Bad-Proxy: An Overlooked Adversary in Browsers’ HTTPS Deployments
  
  Shuo Chen, Ziqing Mao, Yi-Min Wang, Ming Zhang
  
  Proceedings of the IEEE Symposium on Security and Privacy (Oakland) | May 2009
  
  Proceedings of the IEEE Symposium on Security and Privacy (Oakland)
  
  论文与出版物论文与出版物论文与出版物
- An Analysis of Browser Domain-Isolation Bugs and A Light-Weight Transparent Defense Mechanism
  
  Shuo Chen, David Ross, Yi-Min Wang
  
  Proceedings of the ACM Conference on Computer and Communications Security (CCS) | October 2007
  
  Proceedings of the ACM Conference on Computer and Communications Security (CCS)
  
  论文与出版物
- Automatically Segregating Greedy and Malicious Internet Flows
  
  Jose Brustoloni, Shuo Chen
  
  Proceedings of IEEE International Conference on Communications | June 2007
  
  论文与出版物
- A Systematic Approach to Uncover Security Flaws in GUI Logic
  
  Shuo Chen, Ralf Sasse, Jose Meseguer, Helen Wang, Yi-Min Wang
  
  Proceedings of the IEEE Symposium on Security and Privacy (Oakland) | May 2007
  
  Proceedings of the IEEE Symposium on Security and Privacy (Oakland)
  
  论文与出版物论文与出版物
- Non-Control-Data Attacks Are Realistic Threats
  
  Shuo Chen, Jun Xu, Emre C. Sezer, Prachi Gauriar, Ravishankar K. Iyer
  
  Proceedings of USENIX Security Symposium | August 2005
  
  Source code of attack programs can be obtained from the attached txt file.
  
  Publication Publication Publication
- Defeating Memory Corruption Attacks via Pointer Taintedness Detection
  
  Shuo Chen, Jun Xu, Nithin Nakka, Zbigniew Kalbarczyk, Ravishankar K. Iyer
  
  Proceedings of IEEE International Conference on Dependable Systems and Networks | June 2005
  
  论文与出版物
- A Black-Box Tracing Technique to Identify Causes of Least-Privilege Incompatibilities
  
  Shuo Chen, John Dunagan, Chad Verbowski, Yi-Min Wang
  
  Proceedings of Network and Distributed System Security Symposium (NDSS) | February 2005
  
  Proceedings of Network and Distributed System Security Symposium (NDSS)
  
  论文与出版物
- Formal Reasoning of Various Categories of Widely Exploited Security Vulnerabilities Using Pointer Taintedness Semantics
  
  Shuo Chen, Karthik Pattabiraman, Zbigniew Kalbarczyk, Ravishankar K. Iyer
  
  Proceedings of IFIP International Information Security Conference | August 2004
  
  Toulouse, France
  
  论文与出版物
- A Data-Driven Finite State Machine Model for Analyzing Security Vulnerabilities
  
  Shuo Chen, Ravishankar K. Iyer, Jun Xu, Zbigniew Kalbarczyk
  
  IEEE International Conference on Dependable Systems and Networks | June 2003
  
  论文与出版物

- CyberThreat-Eval: Can Large Language Models Automate Real-World Threat Research?
  
  Xiangsen Chen, Xuan Feng (xuafeng), Shuo Chen, Sudipto Rakshit, Diana Duvieilh, Ashley Picone, Nan Tang
  
  Transactions on Machine Learning Research | December 2025
  
  Publication
- A Security Study about Electron Applications and a Programming Methodology to Tame DOM Functionalities
  
  Zihao Jin, Shuo Chen, Yang Chen, Haixin Duan, Jianjun Chen, Jianping Wu
  
  Symposium on Network and Distributed System Security (NDSS) | March 2023
  
  Publication
- Timing-Based Browsing Privacy Vulnerabilities Via Site Isolation
  
  Zihao Jin, Ziqiao Kong, Shuo Chen, Haixin Duan
  
  IEEE Symposium on Security and Privacy (Oakland) | May 2022
  
  Publication
- Argus: A Fully Transparent Incentive System for Anti-Piracy Campaigns
  
  Xian Zhang, Xiaobing Guo, Zixuan Zeng, Wenyan Liu, Zhongxin Guo, Yang Chen, Shuo Chen, Qiufeng Yin, Mao Yang
  
  The 40th International Symposium on Reliable Distributed Systems (SRDS) | September 2021
  
  Publication
- Agatha: Smart Contract for DNN Computation
  
  Zihan Zheng, Peichen Xie, Xian Zhang, Shuo Chen, Yang Chen, Xiaobing Guo, Guangzhong Sun, Guangyu Sun, Lidong Zhou
  
  May 2021
  
  Publication
- Characterizing Ethereum’s Mining Power Decentralization at a Deeper Level
  
  Liyi Zeng, Yang Chen, Shuo Chen, Xian Zhang, Zhongxin Guo, Wei Xu, Thomas Moscibroda
  
  IEEE Conference on Computer Communications (INFOCOM) | May 2021
  
  Publication
- We Still Don’t Have Secure Cross-Domain Requests: an Empirical Study of CORS
  
  Jianjun Chen, Jian Jiang, Haixin Duan, Tao Wan, Shuo Chen, Vern Paxson, Min Yang
  
  Proceedings of USENIX Security Symposium | August 2018
  
  Publication
- SVAuth – A Single-Sign-On Integration Solution with Runtime Verification (tool paper)
  
  Shuo Chen, Matt McCutchen, Phuong Cao, Shaz Qadeer, Ravishankar K. Iyer
  
  International Conference on Runtime Verification 2017 | September 2017
  
  Publication
- Swords and Shields – A Study of Mobile Game Hacks and Existing Defenses
  
  Yuan Tian, Eric Chen, Xiaojun Ma, Shuo Chen, Xiao Wang, Patrick Tague
  
  Annual Computer Security Applications Conference (ACSAC) 2016 | December 2016
  
  论文与出版物
- Self-Verifying Execution (Position Paper)
  
  Matt McCutchen, Daniel Song, Shuo Chen, Shaz Qadeer
  
  Proceedings of the IEEE Cybersecurity Development Conference (SecDev) | November 2016
  
  Proceedings of the IEEE Cybersecurity Development Conference (SecDev)
  
  论文与出版物
- The “Web/Local” Boundary Is Fuzzy: A Security Study of Chrome’s Process-based Sandboxing
  
  Yaoqi Jia, Zheng Leong Chua, Hong Hu, Shuo Chen, Prateek Saxena, Zhenkai Liang
  
  Proceedings of the ACM Conference on Computer and Communications Security (CCS) | October 2016
  
  论文与出版物
- Enlightening Ph.D. Students with the Elegance of Logic — My personal memory about Prof. Jose Meseguer
  
  Shuo Chen
  
  Proceedings of the Festschrift Symposium in Honor of Jose Meseguer (LNCS 9200) | September 2015
  
  Publication
- Cookies Lack Integrity: Real-World Implications
  
  Xiaofeng Zheng, Jian Jiang, Jinjin Liang, Haixin Duan, Shuo Chen, Tao Wan
  
  Proceedings of USENIX Security Symposium | August 2015
  
  论文与出版物
- Securing Multiparty Online Services via Certification of Symbolic Transactions
  
  Eric Chen, Shuo Chen, Shaz Qadeer, Rui Wang
  
  Proceedings of the IEEE Symposium on Security and Privacy (Oakland) | May 2015
  
  test test
  
  论文与出版物论文与出版物项目
- OAuth Demystified for Mobile Application Developers
  
  Eric Chen, Yutong Pei, Shuo Chen, Yuan Tian, Robert Kotcher, Patrick Tague
  
  Proceedings of the ACM Conference on Computer and Communications Security (CCS) | November 2014
  
  论文与出版物论文与出版物
- Brahmastra: Driving Apps to Test the Security of Third-Party Components
  
  Ravi Bhoraskar, Seungyeop Han, Jinseong Jeon, Tanzirul Azim, Shuo Chen, Suman Nath, Rui Wang, David Wetherall, Jaeyeon Jung
  
  USENIX Security Symposium | August 2014
  
  论文与出版物
- Unauthorized Origin Crossing on Mobile Platforms: Threats and Mitigation
  
  Rui Wang, Luyi Xing, XiaoFeng Wang, Shuo Chen
  
  Proceedings of the ACM Conference on Computer and Communications Security (CCS) | November 2013
  
  Publication
- Explicating SDKs: Uncovering Assumptions Underlying Secure Authentication and Authorization
  
  Rui Wang, Yuchen Zhou, Shuo Chen, Shaz Qadeer, David Evans, Yuri Gurevich,
  
  Proceedings of the USENIX Security Symposium | August 2013
  
  论文与出版物论文与出版物
- InteGuard: Toward Automatic Protection of Third-Party Web Service Integrations
  
  Luyi Xing, Yangyi Chen, XiaoFeng Wang, Shuo Chen
  
  Network & Distributed System Security Symposium (NDSS) | February 2013
  
  Network & Distributed System Security Symposium (NDSS)
  
  论文与出版物论文与出版物
- Side-Channel Leaks in Web Applications: a Reality Today, a Challenge Tomorrow
  
  Shuo Chen, Rui Wang, XiaoFeng Wang, Kehuan Zhang
  
  Proceedings of the IEEE Symposium on Security and Privacy (Oakland) | May 2010
  
  论文与出版物论文与出版物
- Pretty-Bad-Proxy: An Overlooked Adversary in Browsers’ HTTPS Deployments
  
  Shuo Chen, Ziqing Mao, Yi-Min Wang, Ming Zhang
  
  Proceedings of the IEEE Symposium on Security and Privacy (Oakland) | May 2009
  
  Proceedings of the IEEE Symposium on Security and Privacy (Oakland)
  
  论文与出版物论文与出版物论文与出版物
- An Analysis of Browser Domain-Isolation Bugs and A Light-Weight Transparent Defense Mechanism
  
  Shuo Chen, David Ross, Yi-Min Wang
  
  Proceedings of the ACM Conference on Computer and Communications Security (CCS) | October 2007
  
  Proceedings of the ACM Conference on Computer and Communications Security (CCS)
  
  论文与出版物
- A Systematic Approach to Uncover Security Flaws in GUI Logic
  
  Shuo Chen, Ralf Sasse, Jose Meseguer, Helen Wang, Yi-Min Wang
  
  Proceedings of the IEEE Symposium on Security and Privacy (Oakland) | May 2007
  
  Proceedings of the IEEE Symposium on Security and Privacy (Oakland)
  
  论文与出版物论文与出版物
- Non-Control-Data Attacks Are Realistic Threats
  
  Shuo Chen, Jun Xu, Emre C. Sezer, Prachi Gauriar, Ravishankar K. Iyer
  
  Proceedings of USENIX Security Symposium | August 2005
  
  Source code of attack programs can be obtained from the attached txt file.
  
  Publication Publication Publication
- Defeating Memory Corruption Attacks via Pointer Taintedness Detection
  
  Shuo Chen, Jun Xu, Nithin Nakka, Zbigniew Kalbarczyk, Ravishankar K. Iyer
  
  Proceedings of IEEE International Conference on Dependable Systems and Networks | June 2005
  
  论文与出版物
- Formal Reasoning of Various Categories of Widely Exploited Security Vulnerabilities Using Pointer Taintedness Semantics
  
  Shuo Chen, Karthik Pattabiraman, Zbigniew Kalbarczyk, Ravishankar K. Iyer
  
  Proceedings of IFIP International Information Security Conference | August 2004
  
  Toulouse, France
  
  论文与出版物
- A Data-Driven Finite State Machine Model for Analyzing Security Vulnerabilities
  
  Shuo Chen, Ravishankar K. Iyer, Jun Xu, Zbigniew Kalbarczyk
  
  IEEE International Conference on Dependable Systems and Networks | June 2003
  
  论文与出版物
- RepDL: Bit-level Reproducible Deep Learning Training and Inference
  
  Peichen Xie, Xian Zhang, Shuo Chen
  
  October 2025
  
  Publication
- Can We Count on LLMs? The Fixed-Effect Fallacy and Claims of GPT-4 Capabilities
  
  Thomas Ball, Shuo Chen, Cormac Herley
  
  September 2024
  
  Preprint
- Timing-Based Browsing Privacy Vulnerabilities Via Site Isolation
  
  Zihao Jin, Ziqiao Kong, Shuo Chen, Haixin Duan
  
  IEEE Symposium on Security and Privacy (Oakland) | May 2022
  
  Publication
- Forerunner: Constraint-based Speculative Transaction Execution for Ethereum
  
  Yang Chen, Zhongxin Guo, Runhuai Li, Shuo Chen, Lidong Zhou, Yajin Zhou, Xian Zhang
  
  SOSP 2021 | October 2021
  
  Publication Author's Version DOI
- Agatha: Smart Contract for DNN Computation
  
  Zihan Zheng, Peichen Xie, Xian Zhang, Shuo Chen, Yang Chen, Xiaobing Guo, Guangzhong Sun, Guangyu Sun, Lidong Zhou
  
  May 2021
  
  Publication
- OAuth Demystified for Mobile Application Developers
  
  Eric Chen, Yutong Pei, Shuo Chen, Yuan Tian, Robert Kotcher, Patrick Tague
  
  Proceedings of the ACM Conference on Computer and Communications Security (CCS) | November 2014
  
  论文与出版物论文与出版物
- Brahmastra: Driving Apps to Test the Security of Third-Party Components
  
  Ravi Bhoraskar, Seungyeop Han, Jinseong Jeon, Tanzirul Azim, Shuo Chen, Suman Nath, Rui Wang, David Wetherall, Jaeyeon Jung
  
  USENIX Security Symposium | August 2014
  
  论文与出版物
- InteGuard: Toward Automatic Protection of Third-Party Web Service Integrations
  
  Luyi Xing, Yangyi Chen, XiaoFeng Wang, Shuo Chen
  
  Network & Distributed System Security Symposium (NDSS) | February 2013
  
  Network & Distributed System Security Symposium (NDSS)
  
  论文与出版物论文与出版物
- Signing Me onto Your Accounts through Facebook and Google: a Traffic-Guided Security Study of Commercially Deployed Single-Sign-On Web Services
  
  Rui Wang, Shuo Chen, XiaoFeng Wang
  
  Proceedings of the IEEE Symposium on Security and Privacy (Oakland) | May 2012
  
  论文与出版物
- How to Shop for Free Online – Security Analysis of Cashier-as-a-Service Based Web Stores
  
  Rui Wang, Shuo Chen, XiaoFeng Wang, Shaz Qadeer
  
  Proceedings of the IEEE Symposium on Security and Privacy (Oakland) (Best Practical Paper award) | May 2011
  
  Proceedings of the IEEE Symposium on Security and Privacy (Oakland) (Best Practical Paper award)
  
  论文与出版物论文与出版物
- Sidebuster: Automated Detection and Quantification of Side-Channel Leaks in Web Application Development
  
  Kehuan Zhang, Zhou Li, Rui Wang, XiaoFeng Wang, Shuo Chen
  
  Proceedings of the ACM Conference on Computer and Communications Security (CCS) | October 2010
  
  论文与出版物论文与出版物
- Side-Channel Leaks in Web Applications: a Reality Today, a Challenge Tomorrow
  
  Shuo Chen, Rui Wang, XiaoFeng Wang, Kehuan Zhang
  
  Proceedings of the IEEE Symposium on Security and Privacy (Oakland) | May 2010
  
  论文与出版物论文与出版物
- Pretty-Bad-Proxy: An Overlooked Adversary in Browsers’ HTTPS Deployments
  
  Shuo Chen, Ziqing Mao, Yi-Min Wang, Ming Zhang
  
  Proceedings of the IEEE Symposium on Security and Privacy (Oakland) | May 2009
  
  Proceedings of the IEEE Symposium on Security and Privacy (Oakland)
  
  论文与出版物论文与出版物论文与出版物
- Automatically Segregating Greedy and Malicious Internet Flows
  
  Jose Brustoloni, Shuo Chen
  
  Proceedings of IEEE International Conference on Communications | June 2007
  
  论文与出版物
- A Systematic Approach to Uncover Security Flaws in GUI Logic
  
  Shuo Chen, Ralf Sasse, Jose Meseguer, Helen Wang, Yi-Min Wang
  
  Proceedings of the IEEE Symposium on Security and Privacy (Oakland) | May 2007
  
  Proceedings of the IEEE Symposium on Security and Privacy (Oakland)
  
  论文与出版物论文与出版物
- Non-Control-Data Attacks Are Realistic Threats
  
  Shuo Chen, Jun Xu, Emre C. Sezer, Prachi Gauriar, Ravishankar K. Iyer
  
  Proceedings of USENIX Security Symposium | August 2005
  
  Source code of attack programs can be obtained from the attached txt file.
  
  Publication Publication Publication
- A Black-Box Tracing Technique to Identify Causes of Least-Privilege Incompatibilities
  
  Shuo Chen, John Dunagan, Chad Verbowski, Yi-Min Wang
  
  Proceedings of Network and Distributed System Security Symposium (NDSS) | February 2005
  
  Proceedings of Network and Distributed System Security Symposium (NDSS)
  
  论文与出版物
- Formal Verification of Workflow Policies for Smart Contracts in Azure Blockchain
  
  Yuepeng Wang, Shuvendu Lahiri, Shuo Chen, Rong Pan, Isil Dillig, Cody Born, Immad Naseer, Kostas Ferles
  
  Verified Software: Theories, Tools and Experiments | September 2019
  
  Publication 项目
- SVAuth – A Single-Sign-On Integration Solution with Runtime Verification (tool paper)
  
  Shuo Chen, Matt McCutchen, Phuong Cao, Shaz Qadeer, Ravishankar K. Iyer
  
  International Conference on Runtime Verification 2017 | September 2017
  
  Publication
- Self-Verifying Execution (Position Paper)
  
  Matt McCutchen, Daniel Song, Shuo Chen, Shaz Qadeer
  
  Proceedings of the IEEE Cybersecurity Development Conference (SecDev) | November 2016
  
  Proceedings of the IEEE Cybersecurity Development Conference (SecDev)
  
  论文与出版物
- Uncovering Bugs in Distributed Storage Systems during Testing (not in Production!)
  
  Pantazis Deligiannis, Matt McCutchen, Paul Thomson, Shuo Chen, Alastair F. Donaldson, John Erickson, Cheng Huang, Akash Lal, Rashmi Mudduluru, Shaz Qadeer, Wolfram Schulte
  
  14th USENIX Conference on File and Storage Technologies (FAST) | February 2016
  
  Publication 项目项目
- Enlightening Ph.D. Students with the Elegance of Logic — My personal memory about Prof. Jose Meseguer
  
  Shuo Chen
  
  Proceedings of the Festschrift Symposium in Honor of Jose Meseguer (LNCS 9200) | September 2015
  
  Publication
- Securing Multiparty Online Services via Certification of Symbolic Transactions
  
  Eric Chen, Shuo Chen, Shaz Qadeer, Rui Wang
  
  Proceedings of the IEEE Symposium on Security and Privacy (Oakland) | May 2015
  
  test test
  
  论文与出版物论文与出版物项目
- An Analysis of Browser Domain-Isolation Bugs and A Light-Weight Transparent Defense Mechanism
  
  Shuo Chen, David Ross, Yi-Min Wang
  
  Proceedings of the ACM Conference on Computer and Communications Security (CCS) | October 2007
  
  Proceedings of the ACM Conference on Computer and Communications Security (CCS)
  
  论文与出版物
- Residue Objects: A Challenge to Web Browser Security
  
  Shuo Chen, Hong Chen, Manuel Caballero
  
  Proceedings of EuroSys | April 2010
  
  PDF
- An Analysis of Browser Domain-Isolation Bugs and A Light-Weight Transparent Defense Mechanism
  
  Shuo Chen, David Ross, Yi-Min Wang
  
  Proceedings of the ACM Conference on Computer and Communications Security (CCS) | October 2007
  
  Proceedings of the ACM Conference on Computer and Communications Security (CCS)
  
  论文与出版物

- CyberThreat-Eval: Can Large Language Models Automate Real-World Threat Research?
  
  Xiangsen Chen, Xuan Feng (xuafeng), Shuo Chen, Sudipto Rakshit, Diana Duvieilh, Ashley Picone, Nan Tang
  
  Transactions on Machine Learning Research | December 2025
  
  Publication
- RepDL: Bit-level Reproducible Deep Learning Training and Inference
  
  Peichen Xie, Xian Zhang, Shuo Chen
  
  October 2025
  
  Publication
- Can We Count on LLMs? The Fixed-Effect Fallacy and Claims of GPT-4 Capabilities
  
  Thomas Ball, Shuo Chen, Cormac Herley
  
  September 2024
  
  Preprint
- Agatha: Smart Contract for DNN Computation
  
  Zihan Zheng, Peichen Xie, Xian Zhang, Shuo Chen, Yang Chen, Xiaobing Guo, Guangzhong Sun, Guangyu Sun, Lidong Zhou
  
  May 2021
  
  Publication
- A Security Study about Electron Applications and a Programming Methodology to Tame DOM Functionalities
  
  Zihao Jin, Shuo Chen, Yang Chen, Haixin Duan, Jianjun Chen, Jianping Wu
  
  Symposium on Network and Distributed System Security (NDSS) | March 2023
  
  Publication
- Timing-Based Browsing Privacy Vulnerabilities Via Site Isolation
  
  Zihao Jin, Ziqiao Kong, Shuo Chen, Haixin Duan
  
  IEEE Symposium on Security and Privacy (Oakland) | May 2022
  
  Publication
- Forerunner: Constraint-based Speculative Transaction Execution for Ethereum
  
  Yang Chen, Zhongxin Guo, Runhuai Li, Shuo Chen, Lidong Zhou, Yajin Zhou, Xian Zhang
  
  SOSP 2021 | October 2021
  
  Publication Author's Version DOI
- Argus: A Fully Transparent Incentive System for Anti-Piracy Campaigns
  
  Xian Zhang, Xiaobing Guo, Zixuan Zeng, Wenyan Liu, Zhongxin Guo, Yang Chen, Shuo Chen, Qiufeng Yin, Mao Yang
  
  The 40th International Symposium on Reliable Distributed Systems (SRDS) | September 2021
  
  Publication
- Characterizing Ethereum’s Mining Power Decentralization at a Deeper Level
  
  Liyi Zeng, Yang Chen, Shuo Chen, Xian Zhang, Zhongxin Guo, Wei Xu, Thomas Moscibroda
  
  IEEE Conference on Computer Communications (INFOCOM) | May 2021
  
  Publication
- Formal Verification of Workflow Policies for Smart Contracts in Azure Blockchain
  
  Yuepeng Wang, Shuvendu Lahiri, Shuo Chen, Rong Pan, Isil Dillig, Cody Born, Immad Naseer, Kostas Ferles
  
  Verified Software: Theories, Tools and Experiments | September 2019
  
  Publication 项目
- We Still Don’t Have Secure Cross-Domain Requests: an Empirical Study of CORS
  
  Jianjun Chen, Jian Jiang, Haixin Duan, Tao Wan, Shuo Chen, Vern Paxson, Min Yang
  
  Proceedings of USENIX Security Symposium | August 2018
  
  Publication
- SVAuth – A Single-Sign-On Integration Solution with Runtime Verification (tool paper)
  
  Shuo Chen, Matt McCutchen, Phuong Cao, Shaz Qadeer, Ravishankar K. Iyer
  
  International Conference on Runtime Verification 2017 | September 2017
  
  Publication
- Swords and Shields – A Study of Mobile Game Hacks and Existing Defenses
  
  Yuan Tian, Eric Chen, Xiaojun Ma, Shuo Chen, Xiao Wang, Patrick Tague
  
  Annual Computer Security Applications Conference (ACSAC) 2016 | December 2016
  
  论文与出版物
- Self-Verifying Execution (Position Paper)
  
  Matt McCutchen, Daniel Song, Shuo Chen, Shaz Qadeer
  
  Proceedings of the IEEE Cybersecurity Development Conference (SecDev) | November 2016
  
  Proceedings of the IEEE Cybersecurity Development Conference (SecDev)
  
  论文与出版物
- The “Web/Local” Boundary Is Fuzzy: A Security Study of Chrome’s Process-based Sandboxing
  
  Yaoqi Jia, Zheng Leong Chua, Hong Hu, Shuo Chen, Prateek Saxena, Zhenkai Liang
  
  Proceedings of the ACM Conference on Computer and Communications Security (CCS) | October 2016
  
  论文与出版物
- Uncovering Bugs in Distributed Storage Systems during Testing (not in Production!)
  
  Pantazis Deligiannis, Matt McCutchen, Paul Thomson, Shuo Chen, Alastair F. Donaldson, John Erickson, Cheng Huang, Akash Lal, Rashmi Mudduluru, Shaz Qadeer, Wolfram Schulte
  
  14th USENIX Conference on File and Storage Technologies (FAST) | February 2016
  
  Publication 项目项目
- Enlightening Ph.D. Students with the Elegance of Logic — My personal memory about Prof. Jose Meseguer
  
  Shuo Chen
  
  Proceedings of the Festschrift Symposium in Honor of Jose Meseguer (LNCS 9200) | September 2015
  
  Publication
- Cookies Lack Integrity: Real-World Implications
  
  Xiaofeng Zheng, Jian Jiang, Jinjin Liang, Haixin Duan, Shuo Chen, Tao Wan
  
  Proceedings of USENIX Security Symposium | August 2015
  
  论文与出版物
- Securing Multiparty Online Services via Certification of Symbolic Transactions
  
  Eric Chen, Shuo Chen, Shaz Qadeer, Rui Wang
  
  Proceedings of the IEEE Symposium on Security and Privacy (Oakland) | May 2015
  
  test test
  
  论文与出版物论文与出版物项目
- OAuth Demystified for Mobile Application Developers
  
  Eric Chen, Yutong Pei, Shuo Chen, Yuan Tian, Robert Kotcher, Patrick Tague
  
  Proceedings of the ACM Conference on Computer and Communications Security (CCS) | November 2014
  
  论文与出版物论文与出版物
- Brahmastra: Driving Apps to Test the Security of Third-Party Components
  
  Ravi Bhoraskar, Seungyeop Han, Jinseong Jeon, Tanzirul Azim, Shuo Chen, Suman Nath, Rui Wang, David Wetherall, Jaeyeon Jung
  
  USENIX Security Symposium | August 2014
  
  论文与出版物
- Unauthorized Origin Crossing on Mobile Platforms: Threats and Mitigation
  
  Rui Wang, Luyi Xing, XiaoFeng Wang, Shuo Chen
  
  Proceedings of the ACM Conference on Computer and Communications Security (CCS) | November 2013
  
  Publication
- Explicating SDKs: Uncovering Assumptions Underlying Secure Authentication and Authorization
  
  Rui Wang, Yuchen Zhou, Shuo Chen, Shaz Qadeer, David Evans, Yuri Gurevich,
  
  Proceedings of the USENIX Security Symposium | August 2013
  
  论文与出版物论文与出版物
- InteGuard: Toward Automatic Protection of Third-Party Web Service Integrations
  
  Luyi Xing, Yangyi Chen, XiaoFeng Wang, Shuo Chen
  
  Network & Distributed System Security Symposium (NDSS) | February 2013
  
  Network & Distributed System Security Symposium (NDSS)
  
  论文与出版物论文与出版物
- Signing Me onto Your Accounts through Facebook and Google: a Traffic-Guided Security Study of Commercially Deployed Single-Sign-On Web Services
  
  Rui Wang, Shuo Chen, XiaoFeng Wang
  
  Proceedings of the IEEE Symposium on Security and Privacy (Oakland) | May 2012
  
  论文与出版物
- How to Shop for Free Online – Security Analysis of Cashier-as-a-Service Based Web Stores
  
  Rui Wang, Shuo Chen, XiaoFeng Wang, Shaz Qadeer
  
  Proceedings of the IEEE Symposium on Security and Privacy (Oakland) (Best Practical Paper award) | May 2011
  
  Proceedings of the IEEE Symposium on Security and Privacy (Oakland) (Best Practical Paper award)
  
  论文与出版物论文与出版物
- Sidebuster: Automated Detection and Quantification of Side-Channel Leaks in Web Application Development
  
  Kehuan Zhang, Zhou Li, Rui Wang, XiaoFeng Wang, Shuo Chen
  
  Proceedings of the ACM Conference on Computer and Communications Security (CCS) | October 2010
  
  论文与出版物论文与出版物
- Side-Channel Leaks in Web Applications: a Reality Today, a Challenge Tomorrow
  
  Shuo Chen, Rui Wang, XiaoFeng Wang, Kehuan Zhang
  
  Proceedings of the IEEE Symposium on Security and Privacy (Oakland) | May 2010
  
  论文与出版物论文与出版物
- Residue Objects: A Challenge to Web Browser Security
  
  Shuo Chen, Hong Chen, Manuel Caballero
  
  Proceedings of EuroSys | April 2010
  
  PDF
- Pretty-Bad-Proxy: An Overlooked Adversary in Browsers’ HTTPS Deployments
  
  Shuo Chen, Ziqing Mao, Yi-Min Wang, Ming Zhang
  
  Proceedings of the IEEE Symposium on Security and Privacy (Oakland) | May 2009
  
  Proceedings of the IEEE Symposium on Security and Privacy (Oakland)
  
  论文与出版物论文与出版物论文与出版物
- An Analysis of Browser Domain-Isolation Bugs and A Light-Weight Transparent Defense Mechanism
  
  Shuo Chen, David Ross, Yi-Min Wang
  
  Proceedings of the ACM Conference on Computer and Communications Security (CCS) | October 2007
  
  Proceedings of the ACM Conference on Computer and Communications Security (CCS)
  
  论文与出版物
- Automatically Segregating Greedy and Malicious Internet Flows
  
  Jose Brustoloni, Shuo Chen
  
  Proceedings of IEEE International Conference on Communications | June 2007
  
  论文与出版物
- A Systematic Approach to Uncover Security Flaws in GUI Logic
  
  Shuo Chen, Ralf Sasse, Jose Meseguer, Helen Wang, Yi-Min Wang
  
  Proceedings of the IEEE Symposium on Security and Privacy (Oakland) | May 2007
  
  Proceedings of the IEEE Symposium on Security and Privacy (Oakland)
  
  论文与出版物论文与出版物
- Non-Control-Data Attacks Are Realistic Threats
  
  Shuo Chen, Jun Xu, Emre C. Sezer, Prachi Gauriar, Ravishankar K. Iyer
  
  Proceedings of USENIX Security Symposium | August 2005
  
  Source code of attack programs can be obtained from the attached txt file.
  
  Publication Publication Publication
- Defeating Memory Corruption Attacks via Pointer Taintedness Detection
  
  Shuo Chen, Jun Xu, Nithin Nakka, Zbigniew Kalbarczyk, Ravishankar K. Iyer
  
  Proceedings of IEEE International Conference on Dependable Systems and Networks | June 2005
  
  论文与出版物
- A Black-Box Tracing Technique to Identify Causes of Least-Privilege Incompatibilities
  
  Shuo Chen, John Dunagan, Chad Verbowski, Yi-Min Wang
  
  Proceedings of Network and Distributed System Security Symposium (NDSS) | February 2005
  
  Proceedings of Network and Distributed System Security Symposium (NDSS)
  
  论文与出版物
- Formal Reasoning of Various Categories of Widely Exploited Security Vulnerabilities Using Pointer Taintedness Semantics
  
  Shuo Chen, Karthik Pattabiraman, Zbigniew Kalbarczyk, Ravishankar K. Iyer
  
  Proceedings of IFIP International Information Security Conference | August 2004
  
  Toulouse, France
  
  论文与出版物
- A Data-Driven Finite State Machine Model for Analyzing Security Vulnerabilities
  
  Shuo Chen, Ravishankar K. Iyer, Jun Xu, Zbigniew Kalbarczyk
  
  IEEE International Conference on Dependable Systems and Networks | June 2003
  
  论文与出版物

Shuo Chen

论文与出版物

CyberThreat-Eval: Can Large Language Models Automate Real-World Threat Research?

RepDL: Bit-level Reproducible Deep Learning Training and Inference

Can We Count on LLMs? The Fixed-Effect Fallacy and Claims of GPT-4 Capabilities

A Security Study about Electron Applications and a Programming Methodology to Tame DOM Functionalities

Timing-Based Browsing Privacy Vulnerabilities Via Site Isolation

Forerunner: Constraint-based Speculative Transaction Execution for Ethereum

Argus: A Fully Transparent Incentive System for Anti-Piracy Campaigns

Agatha: Smart Contract for DNN Computation

Characterizing Ethereum’s Mining Power Decentralization at a Deeper Level

Formal Verification of Workflow Policies for Smart Contracts in Azure Blockchain

We Still Don’t Have Secure Cross-Domain Requests: an Empirical Study of CORS

SVAuth – A Single-Sign-On Integration Solution with Runtime Verification (tool paper)

Swords and Shields – A Study of Mobile Game Hacks and Existing Defenses

Self-Verifying Execution (Position Paper)

The “Web/Local” Boundary Is Fuzzy: A Security Study of Chrome’s Process-based Sandboxing

Uncovering Bugs in Distributed Storage Systems during Testing (not in Production!)

Enlightening Ph.D. Students with the Elegance of Logic — My personal memory about Prof. Jose Meseguer

Cookies Lack Integrity: Real-World Implications

Securing Multiparty Online Services via Certification of Symbolic Transactions

OAuth Demystified for Mobile Application Developers

Brahmastra: Driving Apps to Test the Security of Third-Party Components

Unauthorized Origin Crossing on Mobile Platforms: Threats and Mitigation

Explicating SDKs: Uncovering Assumptions Underlying Secure Authentication and Authorization

InteGuard: Toward Automatic Protection of Third-Party Web Service Integrations

Signing Me onto Your Accounts through Facebook and Google: a Traffic-Guided Security Study of Commercially Deployed Single-Sign-On Web Services

How to Shop for Free Online – Security Analysis of Cashier-as-a-Service Based Web Stores

Sidebuster: Automated Detection and Quantification of Side-Channel Leaks in Web Application Development

Side-Channel Leaks in Web Applications: a Reality Today, a Challenge Tomorrow

Residue Objects: A Challenge to Web Browser Security

Pretty-Bad-Proxy: An Overlooked Adversary in Browsers’ HTTPS Deployments

An Analysis of Browser Domain-Isolation Bugs and A Light-Weight Transparent Defense Mechanism

Automatically Segregating Greedy and Malicious Internet Flows

A Systematic Approach to Uncover Security Flaws in GUI Logic

Non-Control-Data Attacks Are Realistic Threats

Defeating Memory Corruption Attacks via Pointer Taintedness Detection

A Black-Box Tracing Technique to Identify Causes of Least-Privilege Incompatibilities

Formal Reasoning of Various Categories of Widely Exploited Security Vulnerabilities Using Pointer Taintedness Semantics

A Data-Driven Finite State Machine Model for Analyzing Security Vulnerabilities

CyberThreat-Eval: Can Large Language Models Automate Real-World Threat Research?

A Security Study about Electron Applications and a Programming Methodology to Tame DOM Functionalities

Timing-Based Browsing Privacy Vulnerabilities Via Site Isolation

Argus: A Fully Transparent Incentive System for Anti-Piracy Campaigns

Agatha: Smart Contract for DNN Computation

Characterizing Ethereum’s Mining Power Decentralization at a Deeper Level

We Still Don’t Have Secure Cross-Domain Requests: an Empirical Study of CORS

SVAuth – A Single-Sign-On Integration Solution with Runtime Verification (tool paper)

Swords and Shields – A Study of Mobile Game Hacks and Existing Defenses

Self-Verifying Execution (Position Paper)

The “Web/Local” Boundary Is Fuzzy: A Security Study of Chrome’s Process-based Sandboxing

Enlightening Ph.D. Students with the Elegance of Logic — My personal memory about Prof. Jose Meseguer

Cookies Lack Integrity: Real-World Implications

Securing Multiparty Online Services via Certification of Symbolic Transactions

OAuth Demystified for Mobile Application Developers

Brahmastra: Driving Apps to Test the Security of Third-Party Components

Unauthorized Origin Crossing on Mobile Platforms: Threats and Mitigation

Explicating SDKs: Uncovering Assumptions Underlying Secure Authentication and Authorization

InteGuard: Toward Automatic Protection of Third-Party Web Service Integrations

Side-Channel Leaks in Web Applications: a Reality Today, a Challenge Tomorrow

Pretty-Bad-Proxy: An Overlooked Adversary in Browsers’ HTTPS Deployments

An Analysis of Browser Domain-Isolation Bugs and A Light-Weight Transparent Defense Mechanism

A Systematic Approach to Uncover Security Flaws in GUI Logic

Non-Control-Data Attacks Are Realistic Threats

Defeating Memory Corruption Attacks via Pointer Taintedness Detection

Formal Reasoning of Various Categories of Widely Exploited Security Vulnerabilities Using Pointer Taintedness Semantics

A Data-Driven Finite State Machine Model for Analyzing Security Vulnerabilities

RepDL: Bit-level Reproducible Deep Learning Training and Inference

Can We Count on LLMs? The Fixed-Effect Fallacy and Claims of GPT-4 Capabilities

Timing-Based Browsing Privacy Vulnerabilities Via Site Isolation

Forerunner: Constraint-based Speculative Transaction Execution for Ethereum

Agatha: Smart Contract for DNN Computation

OAuth Demystified for Mobile Application Developers

Brahmastra: Driving Apps to Test the Security of Third-Party Components

InteGuard: Toward Automatic Protection of Third-Party Web Service Integrations

Signing Me onto Your Accounts through Facebook and Google: a Traffic-Guided Security Study of Commercially Deployed Single-Sign-On Web Services

How to Shop for Free Online – Security Analysis of Cashier-as-a-Service Based Web Stores

Sidebuster: Automated Detection and Quantification of Side-Channel Leaks in Web Application Development

Side-Channel Leaks in Web Applications: a Reality Today, a Challenge Tomorrow

Pretty-Bad-Proxy: An Overlooked Adversary in Browsers’ HTTPS Deployments