I am a Full Professor in the School of Cyber Science and Engineering at Huazhong University of Science and Technology (HUST). Before joining HUST in January 2022, I was an Associate Professor (BUPT "1551 Young Talent Plan") in the School of Computer Science at Beijing University of Posts and Telecommunications (BUPT). I received my PhD degree in Computer Science from Peking University in 2016. I was a Visiting PhD Student at Carnegie Mellon University (2014-2015) and a Visiting Professor at The Hong Kong Polytechnic University (2019).

I am leading the SECURITY PRIDE Research Group (Security, Privacy, and Dependability in Emerging Software Systems). My research covers a wide range of topics in Software Analysis, Privacy and Security, eCrime, Internet/System Measurement, and AI Security.

My recent research projects are mainly focused on:
1) Security, privacy and underground market of the mobile app ecosystem
2) Web3/Blockchain Security
3) AI + Program Analysis, LLM Security

I have published over 100 peer-reviewed papers, including 79 full papers published in top-tier venues (68 CCF-A Papers, and 65 CSRankings Papers). My research usually targets top-tier Software Engineering Venues (ICSE/FSE/ASE/ISSTA), Security Venues (CCS/NDSS/Oakland/USENIXSec), Web and Measurement Venues (WWW/IMC/SIGMETRICS). I have been awarded five best/distinguished paper awards, including WWW 2020 Best Student Paper Award (the first award from China), ACM OOPSLA 2020 Distinguished Paper Award, and ISSTA 2023 Distinguished Paper Award.

My group has released a number of tools and datasets, including BREWasm, LibRadar (LibRadar++), WuKong, CHAMP, and RMVDroid, etc. They have been widely used by the research community and the industry. My research has been covered by over 20 media outlets all around the world, including CoinDesk, Yahoo Finance, Coin Geek, Publish0x, nasdaq.com, Cryptonews CoinGenius, etc.

Selected Recent Publications (Full List)

Web3/Blockchain Security

---

• Miracle or Mirage? A Measurement Study of NFT Rug Pulls
  Jintao Huang^(s), Ningyu He^(s), Kai Ma^(s), Jiang Xiao, Haoyu Wang*
  SIGMETRICS 2024 PDF
  

• Abusing the Ethereum Smart Contract Verification Services for Fun and Profit
  Pengxiang Ma^(s)#, Ningyu He^(s)#, Yuhua Huang, Haoyu Wang*, Xiapu Luo
  NDSS 2024 PDF
  

• Challenges in Decentralized Name Management: The Case of ENS
  Pengcheng Xia^(s), Haoyu Wang*, Zhou Yu^(s), Xinyu Liu^(s), Xiapu Luo, Guoai Xu, and Gareth Tyson
  The 2022 ACM Internet Measurement Conference (IMC'22) PDF
  





Mobile Security, Mobile App Ecosystem Analysis

---

• Exploring Covert Third-party Identifiers through External Storage in the Android New Era
  Zikan Dong^(s)#, Tianming Liu^(s)#, Jiapeng Deng^(s), Haoyu Wang*, Li Li, Minghui Yang, Meng Wang, Guosheng Xu, Guoai Xu
  USENIX Security 2024 PDF
  

• MalRadar: Demystifying Android Malware in the New Era
  Liu Wang^(s), Haoyu Wang*, Ren He^(s), Ran Tao^(s), Guozhu Meng, Xiapu Luo, Xuanzhe Liu
  ACM SIGMETRICS 2022 PDF
  

• Mobile App Squatting
  Yangyu Hu^(s), Haoyu Wang*, Ren He^(s), Li Li, Gareth Tyson, Ignacio Castro, Yao Guo, Lei Wu and Guoai Xu.
  Proceedings of the Web Conference 2020 (WWW'20) PDF BEST STUDENT PAPER AWARD





AI Security, AI + Program Analysis

---

• Path-Sensitive Code Embedding via Contrastive Learning for Software Vulnerability Detection
  Xiao Cheng, Guanqin Zhang, Haoyu Wang, Yulei Sui
  The 31st ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA '22) PDF
  

• DeepWukong: Statically Detecting Software Vulnerabilities using Deep Graph Neural Network
  Xiao Cheng^(s),Haoyu Wang*, Jiayi Hua^(s), Guoai Xu and Yulei Sui.
  Proceedings of ACM Transactions on Software Engineering and Methodology (TOSEM) PDF

• DeepBackdoor: Black-box Backdoor Attack on Deep Learning Models through Neural Payload Injection
  Yuanchun Li, Jiayi Hua^(s), Haoyu Wang*, Chunyang Chen and Yunxin Liu.
  Proceedings of the 43rd ACM/IEEE International Conference on Software Engineering (ICSE 2021) PDF