I am a Tenure-Track Assistant Professor in the Department of Computer Science at Texas Tech University. My research interests include IoT security/privacy and data science. Specifically, my work is focused on exploring the security and privacy of Voice Personal Assistants (VPA), such as Amazon Alexa and Google Assistant.

I earned my Ph.D. from Clemson University, where I had the privilege of working under the guidance of Dr. Long Cheng. Before pursuing my Ph.D., I completed both my bachelor’s and master’s degrees at Xi’an Jiaotong University, where I conducted research at the Institute of Artificial Intelligence and Robotics (IAIR) under the mentorship of Dr. Yuehu Liu.

News

• [Paper] 09/2024: One paper on Acoustic Privacy Notice for Voice Applications was accepted by NDSS 2025.
• [Paper] 07/2024: One paper on understanding Security and Privacy Risks in the RapidAPI Ecosystem was accepted by CCS 2024.
• [Paper] 07/2024: One paper on Voice Assistant Application User Review Analysis was accepted by UbiComp 2024.
• [Paper] 03/2024: One paper on IoT Voice Assistant Applications Analysis was accepted by AsiaCCS 2024.
• [Paper] 01/2024: One paper on Understanding GDPR Non-Compliance in Privacy Policies of Voice Assistant Applications was accepted by WWW 2024.
• [Paper] 05/2023: One paper on Static Code Analysis of Voice Assistant Applications was accepted by CCS 2023.
• [Paper] 05/2023: One paper on Tweet Data Analysis was accepted by KDD 2023.
• [Paper] 08/2021: One paper on Policy-Violation Detection of Voice Assistant Applications was accepted by USENIX Security 2022.
• [Talk] 07/2021: We presented our work on Policy-Violation Detection of Voice Assistant Applications at the FTC's PrivacyCon 2021.
• [Paper] 05/2021: One paper on Privacy Policy Analysis of Voice Assistant Applications was accepted by IEEE Security & Privacy Magazine 2021 (invited).
• [Award] 12/2020: Our paper received Distinguished Paper Award at the ACSAC 2020.
• [Award] 12/2020: Google awarded us an Abuse Research Grant to support our research on abuse risks in Google products.
• [Paper] 09/2020: One paper on Trustworthiness of Skill Certification in Voice Assistant Platforms was accepted by CCS 2020.
• [Paper] 08/2020: One paper on Privacy Policy Analysis of Voice Assistant Applications was accepted by ACSAC 2020.
• [Talk] 08/2020: We presented our work on Trustworthiness of Skill Certification in Voice Personal Assistant Platforms at the FTC's PrivacyCon 2020.
• [Media] 07/2020: The Register and some others reported our work on measuring the ineffectiveness of privacy policies for voice-apps.
• [Award] 07/2020: Google awarded us $5,000 bug bounty for discovering vulnerabilities of Google Actions.
• [Media] 07/2020: The Register, Washington Internet Dail , ZDNet and some others reported our work on measuring the trustworthiness of Alexa's skills certification.