Author

Fang Yu

520 papers · 1980–2026

1980peak 35 in 20252026

Frequent co-authors

Papers

showing 1–25 of 520 RSS

Securing web application code by static analysis and runtime protection

Yao‐Wen Huang, Fang Yu, Christian Hang +3 more

Artificial Intelligence · 17 May 2004 · cited 566× · DOI ↗ · more like this ·

Security remains a major roadblock to universal acceptance of the Web for many kinds of transactions, especially since the recent sharp increase in remotely exploitable vulnerabilities have been attributed to Web application bugs. Many verification tools are discovering previously unknown vulnerabilities in legacy C programs, raising hopes that the same success can be achieved with Web applications. In this paper, we describe a sound and holistic approach to ensuring Web application security. Viewing Web application vulnerabilities as a secure information flow problem, we created a lattice-based static analysis algorithm derived from type systems and typestate, and addressed its soundness. During the analysis, sections of code considered vulnerable are instrumented with runtime guards, thus securing Web applications in the absence of user intervention. With sufficient annotations…

Spamming botnets

Yinglian Xie, Fang Yu, Kannan Achan +3 more

Computer Networks and Communications · ACM SIGCOMM Computer Communication Review · 17 Aug 2008 · cited 341× · DOI ↗ · more like this ·

In this paper, we focus on characterizing spamming botnets by leveraging both spam payload and spam server traffic properties. Towards this goal, we developed a spam signature generation framework called AutoRE to detect botnet-based spam emails and botnet membership. AutoRE does not require pre-classified training data or white lists. Moreover, it outputs high quality regular expression signatures that can detect botnet spam with a low false positive rate. Using a three-month sample of emails from Hotmail, AutoRE successfully identified 7,721 botnet-based spam campaigns together with 340,050 unique botnet host IP addresses. Our in-depth analysis of the identified botnets revealed several interesting findings regarding the degree of email obfuscation, properties of botnet IP addresses, sending patterns, and their correlation with network scanning traffic. We believe these observations…

Knowing your enemy

Zhou Li, Kehuan Zhang, Yinglian Xie +2 more

Information Systems · 15 Oct 2012 · cited 218× · DOI ↗ · more like this ·

With the Internet becoming the dominant channel for marketing and promotion, online advertisements are also increasingly used for illegal purposes such as propagating malware, scamming, click frauds, etc. To understand the gravity of these malicious advertising activities, which we call malvertising, we perform a large-scale study through analyzing ad-related Web traces crawled over a three-month period. Our study reveals the rampancy of malvertising: hundreds of top ranking Web sites fell victims and leading ad networks such as DoubleClick were infiltrated.

Knowledge Sharing, Organizational Climate, and Innovative Behavior: A Cross-Level Analysis of Effects

Chien Yu, Tsai‐Fang Yu, Chin-Cheh Yu

Communication · Social Behavior and Personality An International Journal · February 2013 · cited 179× · DOI ↗ · more like this ·

We investigated individual-level knowledge sharing and innovative behavior of employees, organizational innovation climate, and interactions between the individual level of knowledge sharing and the climate of innovation within the organization as a whole. Employees of public corporations in the Taiwanese finance and insurance industries participated in this study. Hierarchical linear modeling (HLM) indicated a positive association between knowledge sharing and innovative behavior and a positive association between organizational innovation climate and innovative behavior. According to the results of HLM organizational innovation climate did not act as a moderator on the impact of knowledge sharing on innovative behavior.

How dynamic are IP addresses?

Yinglian Xie, Fang Yu, Kannan Achan +3 more

Computer Networks and Communications · 27 Aug 2007 · cited 169× · DOI ↗ · more like this ·

This paper introduces a novel algorithm, UDmap, to identify dynamically assigned IP addresses and analyze their dynamics pattern. UDmap is fully automatic, and relies only on application-level server logs. We applied UDmap to a month-long Hotmail user-login trace and identified a significant number of dynamic IP addresses - more than 102 million. This suggests that the fraction of IP addresses that are dynamic is by no means negligible. Using this information in combination with a three-month Hotmail email server log, we were able to establish that 95.6% of mail servers setup on the dynamic IP addresses in our trace sent out solely spam emails. Moreover, these mail servers sent out a large amount of spam - amounting to 42.2% of all spam emails received by Hotmail. These results highlight the importance of being able to accurately identify dynamic IP addresses for spam filtering. We…

BotGraph: large scale spamming botnet detection

Yao Zhao, Yinglian Xie, Fang Yu +4 more

Computer Networks and Communications · Networked Systems Design and Implementation · 22 Apr 2009 · cited 167× · OpenAlex ↗ · more like this ·

Network security applications often require analyzing huge volumes of data to identify abnormal patterns or activities. The emergence of cloud-computing models opens up new opportunities to address this challenge by leveraging the power of parallel computing. In this paper, we design and implement a novel system called BotGraph to detect a new type of botnet spamming attacks targeting major Web email providers. Bot-Graph uncovers the correlations among botnet activities by constructing large user-user graphs and looking for tightly connected subgraph components. This enables us to identify stealthy botnet users that are hard to detect when viewed in isolation. To deal with the huge data volume, we implement BotGraph as a distributed application on a computer cluster, and explore a number of performance optimization techniques. Applying it to two months of Hotmail log containing over 500…

Mothers and Sons in Chinese Buddhism

Chün‐fang Yü, Alan Cole

Sociology and Political Science · Harvard Journal of Asiatic Studies · June 2000 · cited 136× · DOI ↗ · more like this ·

This dissertation describes the role played by family values in the development of Chinese Buddhism. Buddhist tracts on the family written in China from the fifth to thirteenth century are translated and analyzed to demonstrate that the Buddhists crafted a new form of family values based on a mother-son style of filial piety (xiao), in contrast to the traditional Confucian model of father-son filial piety. In the Buddhist reformulation of filial piety the dominant themes are (1) the son's indebtedness to his mother, (2) her sinful and sexual nature, and (3) the claim that the Buddhist monastic institution can resolve these family problems. Considering twenty texts, trends in Buddhist family ideology are discussed from the point of view of the structure of the Chinese family and the needs of monastic Buddhism. The underlying argument is that by reorienting family values, the Buddhists…

Host Fingerprinting and Tracking on the Web: Privacy and Security Implications.

Ting-Fang Yen, Yinglian Xie, Fang Yu +2 more

Artificial Intelligence · Network and Distributed System Security Symposium · February 2012 · cited 135× · OpenAlex ↗ · more like this ·

Many web services aim to track clients as a basis for analyzing their behavior and providing personalized services. Despite much debate regarding the collection of client information, there have been few quantitative studies that analyze the effectiveness of host-tracking and the associated privacy risks. In this paper, we perform a large-scale study to quantify the amount of information revealed by common host identifiers. We analyze month-long anonymized datasets collected by the Hotmail web-mail service and the Bing search engine, which include millions of hosts across the global IP address space. In this setting, we compare the use of multiple identifiers, including browser information, IP addresses, cookies, and user login IDs. We further demonstrate the privacy and security implications of host-tracking in two contexts. In the first, we study the causes of cookie churn in web…

The impact of Internet celebrity characteristics on followers' impulse purchase behavior: the mediation of attachment and parasocial interaction

Tser‐Yieth Chen, Tsai‐Lien Yeh, Fang Yu Lee

Sociology and Political Science · Journal of Research in Interactive Marketing · 17 Jun 2021 · cited 118× · DOI ↗ · more like this ·

Purpose This study aims to investigate the relationship between Internet celebrity characteristics and the follower's impulse purchase behavior in YouTuber. Attachment and parasocial interaction are mediating variables concerning the impact of Internet celebrity characteristics on followers' impulse purchase behavior. Design/methodology/approach This study conducted an online survey of YouTube users in Taiwan and utilized quota sampling with 500 samples to examine the influence of two types of Internet celebrities on impulse purchase behavior. Findings As to the empirical results, the main path indicated that the self-disclosure Internet celebrity positively affected the attachment, which mainly positively affected the impulse purchase behavior. The second path showed that the expertise-knowledge Internet celebrity positively affected the attachment, which positively affected the…

Lead compounds for the development of SARS-CoV-2 3CL protease inhibitors

Sho Iketani, F. Forouhar, Hengrui Liu +9 more

Computational Theory and Mathematics · Nature Communications · April 2021 · cited 114× · DOI ↗ · more like this ·

We report the identification of three structurally diverse compounds - compound 4, GC376, and MAC-5576 - as inhibitors of the SARS-CoV-2 3CL protease. Structures of each of these compounds in complex with the protease revealed strategies for further development, as well as general principles for designing SARS-CoV-2 3CL protease inhibitors. These compounds may therefore serve as leads for the basis of building effective SARS-CoV-2 3CL protease inhibitors.

Finding the Linchpins of the Dark Web: a Study on Topologically Dedicated Hosts on Malicious Web Infrastructures

Zhou Li, Sumayah Alrwais, Yinglian Xie +2 more

Information Systems · May 2013 · cited 96× · DOI ↗ · more like this ·

Malicious Web activities continue to be a major threat to the safety of online Web users. Despite the plethora forms of attacks and the diversity of their delivery channels, in the back end, they are all orchestrated through malicious Web infrastructures, which enable miscreants to do business with each other and utilize others' resources. Identifying the linchpins of the dark infrastructures and distinguishing those valuable to the adversaries from those disposable are critical for gaining an upper hand in the battle against them. In this paper, using nearly 4 million malicious URL paths crawled from different attack channels, we perform a large-scale study on the topological relations among hosts in the malicious Web infrastructure. Our study reveals the existence of a set of topologically dedicated malicious hosts that play orchestrating roles in malicious activities. They are well…

deSEO: combating search-result poisoning

John P. John, Fang Yu, Yinglian Xie +2 more

Information Systems · USENIX Security Symposium · 8 Aug 2011 · cited 75× · OpenAlex ↗ · more like this ·

We perform an in-depth study of SEO attacks that spread malware by poisoning search results for popular queries. Such attacks, although recent, appear to be both widespread and effective. They compromise legitimate Web sites and generate a large number of fake pages targeting trendy keywords. We first dissect one example attack that affects over 5,000 Web domains and attracts over 81,000 user visits. Further, we develop de-SEO, a system that automatically detects these attacks. Using large datasets with hundreds of billions of URLs, deSEO successfully identifies multiple malicious SEO campaigns. In particular, applying the URL signatures derived from deSEO, we find 36 % of sampled searches to Google and Bing contain at least one malicious link in the top results at the time of our experiment. 1

Privacy-Preserving Association Rule Mining in Cloud Computing

Xun Yi, Fang-Yu Rao, Elisa Bertino +1 more

Artificial Intelligence · RMIT Research Repository (RMIT University Library) · 3 Apr 2015 · cited 74× · DOI ↗ · more like this ·

Recently, the paradigm of data mining-as-a-service in cloud computing environment has been attracting interests. In this paradigm, a company (data owner), lacking data storage, computational resources and expertise, stores its data in the cloud and outsources its mining tasks to the cloud service provider (server). In order to protect the privacy of the outsourced database and the association rules mined, k-anonymity, k-support, and k-privacy techniques have been proposed to perturb the data before it is uploaded to the server. These techniques are computationally expensive. If the data owner has resources to use these techniques, then it is often able to execute association rule mining locally. In this paper, we consider a scenario where a user (data owner) encrypts its data and stores it in the cloud. To mine association rules from its data, the user outsources the task to n (≥ 2)…

The Influence of Artificial Intelligence on Art Design in the Digital Age

Yan Shen, Fang Yu

Computer Graphics and Computer-Aided Design · Scientific Programming · 27 Dec 2021 · cited 72× · DOI ↗ · more like this ·

With the advancement of technology represented by artificial intelligence, art creation is becoming increasingly rich, and content expression is intelligent, interactive, and data-driven, making the relationship between technology, art, and people increasingly close and bringing opportunities for the development of emerging interaction. Artificial intelligence technologies aim to perfectly replicate the human mind by enabling natural responses based on the surrounding environment, decoding emotions, and recognizing human traits within the energy range. Driven by AI technology, interactive art no longer focuses on a single audiovisual sensory experience but rather on integrated artistic expressions that are highly interactive, kinetic, and emotional, based on the study of natural human behavior and integrated senses, combined with intelligence. In this paper, we first sort out the…

Restructured recursive DCT and DST algorithms

PeiZong Lee, Fang‐Yu Huang

Signal Processing · IEEE Transactions on Signal Processing · July 1994 · cited 69× · DOI ↗ · more like this ·

The discrete cosine transform (DCT) and the discrete sine transform (DST) have found wide applications in speech and image processing, as well as telecommunication signal processing for the purpose of data compression, feature extraction, image reconstruction, and filtering. In this paper, we present new recursive algorithms for the DCT and the DST. The proposed method is based on certain recursive properties of the DCT coefficient matrix, and can be generalized to design recursive algorithms for the 2-D DCT and the 2-D DST. These new structured recursive algorithms are able to decompose the DCT and the DST into two balanced lower-order subproblems in comparison to previous research works. Therefore, when converting our algorithms into hardware implementations, we require fewer hardware components than other recursive algorithms. Finally, we propose two parallel algorithms for…

Personality and individual attitudes toward vaccination: a nationally representative survey in the United States

Fang‐Yu Lin, Ching‐Hsing Wang

Health · BMC Public Health · 23 Nov 2020 · cited 63× · DOI ↗ · more like this ·

BACKGROUND: Although past studies have identified factors associated with individual perceptions of vaccination, limited attention has been paid to the role of personality in individual attitudes toward vaccination. This study aimed to evaluate the effect of personality as measured by the Big Five personality traits on individual attitudes toward vaccination using a nationally representative survey in the United States. METHODS: A cross-sectional study was conducted with a sample of 3276 American citizens who were aged 18 and above and lived in 50 U.S. states and Washington D.C. from the American National Election Studies. The survey was collected through face-to-face and online interviews using structured questionnaires in 2016. The multistage stratified cluster sampling procedure was used for face-to-face interview, whereas the USPS DSF was used to select the sample for online…

Privacy-Preserving and Outsourced Multi-User k-Means Clustering

Bharath K. Samanthula, Fang-Yu Rao, Elisa Bertino +2 more

cs.CR · 14 Dec 2014 · cited 58× · arXiv ↗ · more like this ·

Many techniques for privacy-preserving data mining (PPDM) have been investigated over the past decade. Often, the entities involved in the data mining process are end-users or organizations with limited computing and storage resources. As a result, such entities may want to refrain from participating in the PPDM process. To overcome this issue and to take many other benefits of cloud computing, outsourcing PPDM tasks to the cloud environment has recently gained special attention. We consider the scenario where n entities outsource their databases (in encrypted format) to the cloud and ask the cloud to perform the clustering task on their combined data in a privacy-preserving manner. We term such a process as privacy-preserving and outsourced distributed clustering (PPODC). In this paper, we propose a novel and efficient solution to the PPODC problem based on k-means clustering…

Patching vulnerabilities with sanitization synthesis

Fang Yu, Muath Alkhalaf, Tevfik Bultan

Information Systems · 21 May 2011 · cited 58× · DOI ↗ · more like this ·

We present automata-based static string analysis techniques that automatically generate sanitization statements for patching vulnerable web applications. Our approach consists of three phases: Given an attack pattern we first conduct a vulnerability analysis to identify if strings that match the attack pattern can reach the security-sensitive functions. Next, we compute vulnerability signatures that characterize all input strings that can exploit the discovered vulnerability. Given the vulnerability signatures, we then construct sanitization statements that 1) check if a given input matches the vulnerability signature and 2) modify the input in a minimal way so that the modified input does not match the vulnerability signature. Our approach is capable of generating relational vulnerability signatures (and corresponding sanitization statements) for vulnerabilities that are due to more…

SBotMiner

Fang Yu, Yinglian Xie, Qifa Ke

Information Systems · 4 Feb 2010 · cited 58× · DOI ↗ · more like this ·

In this paper, we study search bot traffic from search engine query logs at a large scale. Although bots that generate search traffic aggressively can be easily detected, a large number of distributed, low rate search bots are difficult to identify and are often associated with malicious attacks. We present SBotMiner, a system for automatically identifying stealthy, low-rate search bot traffic from query logs. Instead of detecting individual bots, our approach captures groups of distributed, coordinated search bots. Using sampled data from two different months, SBotMiner identifies over 123 million bot-related pageviews, accounting for 3.8% of total traffic. Our in-depth analysis shows that a large fraction of the identified bot traffic may be associated with various malicious activities such as phishing attacks or vulnerability exploits. This finding suggests that detecting search bot…

EasiEdge: A Novel Global Deep Neural Networks Pruning Method for Efficient Edge Computing

Fang Yu, Li Cui, Pengcheng Wang +3 more

Computer Vision and Pattern Recognition · IEEE Internet of Things Journal · 30 Oct 2020 · cited 56× · DOI ↗ · more like this ·

Deep neural networks (DNNs) have shown tremendous success in many areas, such as signal processing, computer vision, and artificial intelligence. However, the DNNs require intensive computation resources, hindering their practical applications on the edge devices with limited storage and computation resources. Filter pruning has been recognized as a useful technique to compress and accelerate the DNNs, but most existing works tend to prune filters in a layerwise manner, facing some significant drawbacks. First, the layerwise pruning methods require prohibitive computation for per-layer sensitivity analysis. Second, layerwise pruning suffers from the accumulation of pruning errors, leading to performance degradation of pruned networks. To address these challenges, we propose a novel global pruning method, namely, EasiEdge, to compress and accelerate the DNNs for efficient edge computing.…

An adaptive strategy via reinforcement learning for the prisoner dilemma game

Lei Xue, Changyin Sun, Donald C. Wunsch +2 more

Sociology and Political Science · IEEE/CAA Journal of Automatica Sinica · 11 Mar 2017 · cited 54× · DOI ↗ · more like this ·

The iterated prisoner's dilemma (IPD) is an ideal model for analyzing interactions between agents in complex networks. It has attracted wide interest in the development of novel strategies since the success of tit-for-tat in Axelrod's tournament. This paper studies a new adaptive strategy of IPD in different complex networks, where agents can learn and adapt their strategies through reinforcement learning method. A temporal difference learning method is applied for designing the adaptive strategy to optimize the decision making process of the agents. Previous studies indicated that mutual cooperation is hard to emerge in the IPD. Therefore, three examples which based on square lattice network and scale-free network are provided to show two features of the adaptive strategy. First, the mutual cooperation can be achieved by the group with adaptive agents under scale-free network, and once…

Caring for Aging Chinese: Lessons Learned From the United States

Hongwei Wan, Fang Yu, Ann Kolanowski

Sociology and Political Science · Journal of Transcultural Nursing · 31 Jan 2008 · cited 52× · DOI ↗ · more like this ·

After two birth peaks and the "one child per family" policy, China is facing unprecedented challenges with regard to its aging population. This article analyzes the problems associated with three traditional ways of caring for older Chinese, the current health care system, and social supports available to older Chinese. The "4-2-1" family structure and the "empty nest" undermine family support, the prevalence of chronic illnesses and lack of money reduce older adults' selfcare abilities, and insufficient care facilities threaten social support. Lessons learned from the United States show that community-based nursing models, nursing curriculum reforms with a gerontology focus, and reformed health care systems are pivotal for addressing China's crisis.

RELATIONAL STRING VERIFICATION USING MULTI-TRACK AUTOMATA

Fang Yu, Tevfik Bultan, Óscar H. Ibarra

Information Systems · International Journal of Foundations of Computer Science · December 2011 · cited 50× · DOI ↗ · more like this ·

Verification of string manipulation operations is a crucial problem in computer security. In this paper, we present a new relational string verification technique based on multi-track automata. Our approach is capable of verifying properties that depend on relations among string variables. This enables us to prove that vulnerabilities that result from improper string manipulation do not exist in a given program. Our main contributions in this paper can be summarized as follows: (1) We formally characterize the string verification problem as the reachability analysis of string systems and show decidability/undecidability results for several string analysis problems. (2) We develop a sound symbolic analysis technique for string verification that over-approximates the reachable states of a given string system using multi-track automata and summarization. (3) We evaluate the presented…

A practical reconfigurable hardware accelerator for Boolean satisfiability solvers

John D. Davis, Zhangxi Tan, Fang Yu +1 more

Computational Theory and Mathematics · 8 Jun 2008 · cited 49× · DOI ↗ · more like this ·

We present a practical FPGA-based accelerator for solving Boolean Satisfiability problems (SAT). Unlike previous efforts for hardware accelerated SAT solving, our design focuses on accelerating the most time consuming part of the SAT solver --- Boolean Constraint Propagation (BCP), leaving the choices of heuristics such as branching order, restarting policy, and learning and backtracking to software. Our novel approach uses an application-specific architecture instead of an instance-specific one to avoid time-consuming FPGA synthesis for each SAT instance. By avoiding global signal wires and carefully pipelining the design, our BCP accelerator is able to achieve much higher clock frequency than that of previous work. In addition, it can load SAT instances in milliseconds, can handle SAT instances with tens of thousands of variables and clauses using a single FPGA, and can easily scale…

On Network-level Clusters for Spam Detection.

Zhiyun Qian, Z. Morley Mao, Yinglian Xie +1 more

Information Systems · Network and Distributed System Security Symposium · February 2010 · cited 48× · OpenAlex ↗ · more like this ·

IP-based blacklist is an effective way to filter spam emails. However, building and maintaining individual IP addresses in the blacklist is difficult, as new mali-cious hosts continuously appear and their IP addresses may also change over time. To mitigate this problem, researchers have proposed to replace individual IP ad-dresses in the blacklist with IP clusters, e.g., BGP clus-ters. In this paper, we closely examine the accuracy of IP-cluster-based approaches to understand their effec-tiveness and fundamental limitations. Based on such understanding, we propose and implement a new clus-tering approach that considers both network origin and DNS information, and incorporate it with SpamAssas-sin, a popular spam filtering system widely used today. Applying our approach to a 7-month email trace col-lected at a large university department, we can reduce the false negative rate by 50 %…