Publications

A list of my peer-reviewed and preprint work, grouped by venue type.

Preprints

• CyberThreat-Eval: Can Large Language Models Automate Real-World Threat Research? Xiangsen Chen, Xuan Feng, Shuo Chen, Sudipto Rakshit, Diana Duvieilh, Ashley Picone, Nan Tang. Transactions on Machine Learning Research, 2025
• Beyond Prompt Content: Enhancing LLM Performance via Content-Format Integrated Prompt Optimization Yuanye Liu, Jiahang Xu, Li Lyna Zhang, Qi Chen, Xuan Feng, Yang Chen, Zhongxin Guo, Yuqing Yang, Peng Cheng. arXiv:2502.04295
• Sigma: Differential Rescaling of Query, Key and Value for Efficient Language Models Zhenghao Lin, Zihao Tang, Xiao Liu, Yeyun Gong, Yi Cheng, Qi Chen, Hang Li, Ying Xin, Ziyue Yang, Kailai Yang, Yu Yan, Xiao Liang, Shuai Lu, Yiming Huang, Zheheng Luo, Lei Qu, Xuan Feng, Yaoxiang Wang, Yuqing Xia, Feiyang Chen, Yuting Jiang, Yasen Hu, Hao Ni, Binyang Li, Guoshuai Zhao, Jui-Hao Chiang, Zhongxin Guo, Chen Lin, Kun Kuang, Wenjie Li, Yelong Shen, Jian Jiao, Peng Cheng, Mao Yang. arXiv:2501.13629
• Harnessing the Power of LLM to Support Binary Taint Analysis Puzhuo Liu, Chengnian Sun, Yaowen Zheng, Xuan Feng, Chuan Qin, Yuncheng Wang, Zhenyang Xu, Zhi Li, Peng Di, Yu Jiang, Limin Sun. arXiv:2310.08275
• Port Forwarding Services Are Forwarding Security Risks Haoyuan Wang, Yue Xue, Xuan Feng, Chao Zhou, Xianghang Mi. arXiv:2403.16060
• Enabling Privacy-Preserving Cyber Threat Detection with Federated Learning Yu Bi, Yekai Li, Xuan Feng, Xianghang Mi. arXiv:2404.05130
• An Internet-Wide Penetration Study on NAT Boxes via TCP/IP Side Channel Xuan Feng, Shuo Chen, Haining Wang. arXiv:2311.17392

Conference Papers

• Understanding and Securing Device Vulnerabilities through Automated Bug Report Analysis Xuan Feng, Xiaojing Liao, XiaoFeng Wang, Haining Wang, Qiang Li, Kai Yang, Hongsong Zhu, Limin Sun. USENIX Security Symposium 2019 (SEC'19), Santa Clara, CA. (CCF-A)
• Acquisitional Rule-based Engine for Discovering Internet-of-Thing Devices Xuan Feng, Qiang Li, Haining Wang, Limin Sun. USENIX Security Symposium 2018 (SEC'18), Baltimore, MD. (CCF-A)
• Resident Evil: Understanding Residential IP Proxy as a Dark Service Xianghang Mi, Xuan Feng, Xiaojing Liao, Baojun Liu, XiaoFeng Wang, Feng Qian, Sumayah Alrwais, Limin Sun, Ying Liu. IEEE Symposium on Security and Privacy (S&P 2019). (CCF-A)
• Dangerous Skills: Understanding and Mitigating Security Risks of Voice-Controlled Third-Party Functions on Virtual Personal Assistant Systems Nan Zhang, Xianghang Mi, Xuan Feng, XiaoFeng Wang, Yuan Tian, Feng Qian. IEEE Symposium on Security and Privacy (S&P 2019). (CCF-A) CSAW'19 Best Paper Award (3rd Place)
• Demystifying Hidden Privacy Settings in Mobile Apps Yi Chen, Mingming Zha, Nan Zhang, Dandan Xu, Qianqian Zhao, Xuan Feng, Kan Yuan, Ya Su, Yuan Tian, Kai Chen, Xiaofeng Wang, Wei Zou. IEEE Symposium on Security and Privacy (S&P 2019). (CCF-A)
• Stealthy Porn: Understanding Real-World Adversarial Images for Illicit Online Promotion Kan Yuan, Di Tang, Xiaojing Liao, XiaoFeng Wang, Xuan Feng, Yi Chen, Menghan Sun, Haoran Lu, Kehuan Zhang. IEEE Symposium on Security and Privacy (S&P 2019).
• Towards Fine-grained Fingerprinting of Firmware in Online Embedded Devices Qiang Li, Xuan Feng, Zhi Li, Haining Wang, Limin Sun. IEEE INFOCOM 2018, Honolulu, HI. (CCF-A)
• Automatic Discovery of Surveillance Devices in the Cyberspace Qiang Li, Xuan Feng, Haining Wang, Limin Sun. ACM Multimedia Systems 2017 (MMSys'17), Taipei, Taiwan.
• Characterizing Industrial Control Equipments on the Internet Xuan Feng, Qiang Li, Haining Wang, Limin Sun. IEEE International Conference on Network Protocols (ICNP'16), Singapore. (CCF-B)
• Identification of Visible Industrial Control Devices at Internet Scale Xuan Feng, Qiang Li, Qi Han, Hongsong Zhu, Yan Liu, Limin Sun. IEEE International Conference on Communications (ICC'16), Kuala Lumpur. (CCF-C)
• Active Profiling of Physical Devices at Internet Scale Xuan Feng, Qiang Li, Qi Han, Hongsong Zhu, Yan Liu, Jie Cui, Limin Sun. IEEE International Conference on Computer Communication and Networks (ICCCN'16), Waikoloa, HI. (CCF-C)

Journal Articles

• A Framework for Searching Internet-wide Devices Qiang Li, Xuan Feng, Lian Zhao, Limin Sun. IEEE Network, 2017. (JCR Q1)
• Understanding the Usage of Industrial Control System Devices on the Internet Qiang Li, Xuan Feng, Haining Wang, Limin Sun. IEEE Internet of Things Journal, vol. 5, no. 3, pp. 2178-2189, June 2018. (JCR Q1)