Publications

(^# Equal contribution, ^* Corresponding author)

[P1] Flow Sensitivity without Control Flow Graph: An Efficient Andersen-Style Flow-Sensitive Pointer Analysis
Jiahao Zhang^#, Xiao Cheng^#, Yuxiang Lei.
arXiv PDF

2026 {{o26 ? '▾' : '▸'}}

[C14] PUFFERDOS: Efficient and Effective Attack String Generation for Regular Expression Denial of Service Vulnerabilities CORE-A* CCF-A
Shangzhi Xu, Ziqi Ding, Xiao Cheng^*, Yuekang Li, Nan Sun, Benjamin Turnbull, Shuangxiang Kan, Siqi Ma^*.
S&P '26 (acceptance rate: 135/1070=12.62%) PDF Slides
[C13] TLR: Codebase-Level C Memory Management Error Repair with Large Language Models CORE-A* CCF-A
Xiao Cheng^#, Zhihao Guo^#, Huan Huo, Yulei Sui.
FSE '26 (acceptance rate: 87/920=9.46%) PDF Slides
[C12] MUTATO: Enhancing Fuzz Drivers with Adaptive API Option Mutation CORE-A* CCF-A
Shuangxiang Kan, Xiao Cheng^*, Yuekang Li.
NDSS '26 PDF Slides
[C11] SpecGuru: Hierarchical LLM-Driven API Points-to Specification Generation with Self-Validation CORE-A* CCF-A
Shuangxiang Kan, Yuekang Li, Xiao Cheng^*, Yulei Sui.
ICSE '26 PDF Slides BIB

2025 {{o25 ? '▾' : '▸'}}

[C10] Efficient Abstract Interpretation via Selective Widening CORE-A CCF-A
Jiawei Wang^#, Xiao Cheng^#, Yulei Sui.
OOPSLA '25 PDF Slides BIB
[C9] Taming and Dissecting Recursions through Interprocedural Weak Topological Ordering CORE-A CCF-B
Jiawei Yang^#, Xiao Cheng^#, Bor-Yuh Evan Chang, Xiapu Luo, Yulei Sui.
ECOOP '25 PDF Slides BIB
[C8] Mitigating Emergent Malware Label Noise in DNN-Based Android Malware Detection CORE-A* CCF-A
Haodong Li^#, Xiao Cheng^#, Guohan Zhang^*, Guosheng Xu, Guoai Xu and Haoyu Wang^*.
FSE '25 (acceptance rate: 70/612=11.44%) PDF Slides BIB
[C7] Understanding Model Weaknesses: A Path to Strengthening DNN-Based Android Malware Detection CORE-A* CCF-A
Haodong Li, Xiao Cheng^*, Yanjie Zhao, Guosheng Xu, Guoai Xu and Haoyu Wang^*.
ISSTA '25 (acceptance rate: 23/553=4.16%) PDF Slides BIB

2024 {{o24 ? '▾' : '▸'}}

[J3] Dynamic Transitive Closure-Based Static Analysis through the Lens of Quantum Search CORE-A* CCF-A
Jiawei Ren, Yulei Sui, Xiao Cheng, Yuan Feng and Jianjun Zhao
TOSEM PDF BIB
[C6] Fast Graph Simplification for Path-Sensitive Typestate Analysis through Tempo-Spatial Multi-Point Slicing CORE-A* CCF-A ACM SIGSOFT Distinguished Paper AWARD
Xiao Cheng, Jiawei Ren, Yulei Sui
FSE '24 PDF Slides BIB
[C5] Precise Sparse Abstract Execution via Cross-Domain Interaction CORE-A* CCF-A
Xiao Cheng, Jiawei Wang, Yulei Sui
ICSE '24 PDF Slides BIB

2023 {{o23 ? '▾' : '▸'}}

[C4] Vulnerability Detection via Typestate-Guided Code Representation Learning CCF-C
Xiao Cheng
ICFEM '23 PDF BIB

2022 {{o22 ? '▾' : '▸'}}

[J2] How About Bug-Triggering Paths? - Understanding and Characterizing Learning-Based Vulnerability Detectors CORE-A* CCF-A
Xiao Cheng, Xu Nie, Ningke Li, Haoyu Wang, Zheng Zheng, Yulei Sui
TDSC PDF BIB
[C3] Path-Sensitive Code Embedding via Contrastive Learning for Software Vulnerability Detection CORE-A* CCF-A
Xiao Cheng, Guanqin Zhang, Haoyu Wang and Yulei Sui
ISSTA '22 PDF Slides BIB

2020 - 2021 {{o20 ? '▾' : '▸'}}

[J1] DeepWukong: Statically Detecting Software Vulnerabilities using Deep Graph Neural Network CORE-A* CCF-A
Xiao Cheng, Haoyu Wang^*, Jiayi Hua, Guoai Xu^* and Yulei Sui
TOSEM PDF BIB
[C2] Flow2Vec: Value-Flow-Based Precise Code Embedding CORE-A* CCF-A ACM SIGPLAN Distinguished Paper AWARD
Yulei Sui, Xiao Cheng, Guanqin Zhang and Haoyu Wang
OOPSLA '20 PDF BIB

2019 {{o19 ? '▾' : '▸'}}

[C1] Static Detection of Control-Flow-Related Vulnerabilities Using Graph Embedding CORE-A CCF-C
Xiao Cheng, Haoyu Wang^*, Jiayi Hua, Miao Zhang, Guoai Xu, Li Yi^* and Yulei Sui
ICECCS '19 PDF BIB