Projects

A project-centric view of my research works

Residential Proxy Ecosystem

2019 -- 2025

The first to systematically uncover and measure the residential proxy (RESIP) ecosystem, revealing how millions of compromised residential hosts are abused as proxy exits for cybercrime — and how mobile devices are silently recruited into proxy networks through malicious SDKs in popular apps.

Datasets

  • RESIP — Millions of residential proxy IPs across 230+ countries
  • ResiFlow — 3TB of residential proxy traffic flows (available to researchers upon request)

Tools

Security of AI Agents

2017 -- 2026

The first to uncover systemic security vulnerabilities in voice assistant ecosystems — including voice squatting, voice masquerading, and command hijacking attacks — and to expose how in-context learning in large language models can be adversarially evaded through black-box attacks.

Datasets

  • IFTTT — All services and applets on the IFTTT trigger-action platform
  • ICL-Evader Data — Benchmark task datasets for evaluating in-context learning evasion attacks and defenses

Tools

  • ICL-Evader — Modular Python framework for zero-query black-box evasion attacks and joint defenses against in-context learning

Awards

  • CSAW'19 Best Paper Award

Detection & Measurement of Online Abuse

2017 -- 2025

Building systematic, data-driven measurement pipelines to discover, measure, and understand diverse online abuse operations at Internet scale — from bulletproof hosting and search poisoning to SMS spam and social media illicit promotion.

Datasets

  • SpamHunter — Largest-ever public SMS spam dataset
  • SearchIPT — 11M illicit promotion texts from search engines
  • xPIP — 12M illicit promotion posts from the X platform

Tools

  • SpamHunter — Continuous discovery of SMS spam from victim reports on social networks
  • IPT Toolchain — Capture and analyze illicit promotional texts from search engines
  • PIP Hunter — Capture posts of illicit promotion from social network platforms

Awards

  • NDSS'19 Distinguished Paper Award

Decentralized Network Infrastructure Security

2023 -- 2026

The first empirical security measurements of emerging decentralized network infrastructures — including decentralized cloud storage, peer-assisted content delivery, and open edge computing platforms — uncovering novel attack surfaces, privacy leaks, and systemic vulnerabilities.

Datasets

Tools