Rui Zhao

Rui Zhao, ruizhao@unomaha.edu

Web Security and Privacy, System Security

Rui Zhao received his B.E. degree in Information Countermeasures Technology and M.E. degree in Control Science and Engineering from the Xidian University, China, in 2004 and 2008, respectively, and his Ph.D. degree in Computer Science from the Colorado School of Mines (Mines) in 2016 under the supervision of Dr. Chuan Yue. He worked as a software engineer and a system engineer at ZTE Co. from 2008 to 2011 mainly on the design and development of the operation maintenance center, the element management system, and the operations support system.

Filter By Venue:

Filter By Authorship:

Refereed Journal Papers

[J7] Toward the Flow-centric Detection of Browser Fingerprinting. [PDF]
By Rui Zhao^*.
In Journal of Computers & Security (COMPSEC), Elsevier, 2024.
[J6] Ssdtutor: A Feedback-Driven Intelligent Tutoring System for Secure Software Development. [PDF]
By Dip Kiran Pradhan Newar⁺, Rui Zhao, Harvey Siy, Leen-Kiat Soh, and Myoungkyu Song.
In Journal of Science of Computer Programming, 2023.
[J5] Sensor-based Mobile Web Cross-site Input Inference Attacks and Defenses. [PDF]
By Rui Zhao, Chuan Yue^*, and Qi Han.
In IEEE Transactions on Information Forensics and Security (TIFS), 2019.
[J4] Design and Evaluation of the Highly Insidious Extreme Phishing Attacks. [PDF]
By Rui Zhao, Samantha John, Stacy Karas, Cara Bussell, Jennifer Roberts, Daniel Six, Brandon Gavett, and Chuan Yue^*.
In Journal of Computers & Security (COMPSEC), Elsevier, 2017.
[J3] Phishing Susceptibility in Older and Younger Adults: The Role of Executive Functioning. [PDF]
By Brandon E. Gavett^*, Rui Zhao, Samantha E. John, Cara A. Bussell, Jennifer Roberts, and Chuan Yue^*.
In Journal of PLoS ONE 12(2): e0171620, 2017.
[J2] Toward A Secure and Usable Cloud-based Password Manager for Web Browsers. [PDF]
By Rui Zhao and Chuan Yue^*.
In Journal of Computers & Security (COMPSEC), Elsevier, 46(3): 32--47, 2014.
[J1] Vulnerability and Risk Analysis of Two Commercial Browser and Cloud Based Password Managers.
By Rui Zhao, Chuan Yue^*, and Kun Sun.
In Journal of ASE (Academy of Science and Engineering) Science Journal, 1(4): 1--15, 2013.

Refereed Conference Papers

[C18] CamPass: a Secure Camera-based Password Manager for Kiosk Browsing. [PDF]
By Rui Zhao^*.
In Proceedings of the IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom), 2023.
[C17] Securing Zero Trust Networks: The Decentralized Host-to-Host Authentication Policy Enforcement. [PDF]
By Adam Spanier⁺, Rui Zhao, and Pei-Chi Huang^*.
In Proceedings of the IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom), 2023.
[C16] FProbe: the Flow-centric Detection and a Large-scale Measurement of Browser Fingerprinting. [PDF]
By Rui Zhao^*.
In Proceedings of the IEEE International Conference on Computer Communication and Networks (ICCCN), 2023.
[C15] The Chameleon on the Web: an Empirical Study of the Insidious Proactive Web Defacements. [PDF] [Github]
By Rui Zhao^*.
In Proceedings of the Web Conference (formerly the WWW Conference), 2023.
[C14] An Intelligent Tutoring System for API Misuse Correction by Instant Quality Feedback. [PDF]
By Rui Zhao, Harvey Siy, Chulwoo Pack⁺, Leen-Kiat Soh, and Myoungkyu Song.
In Proceedings of the IEEE Annual Computers, Software, and Applications Conference (COMPSAC), 2022.
[C13] A Feasibility Study of Using Code Clone Detection for Secure Programming Education. [PDF]
By Michael Menard⁺, Tommy Nelson⁺, Milan Shahi⁺, Hugh Morton⁺, Adam DeTavernier⁺, Rui Zhao, Harvey Siy, and Myoungkyu Song.
In Proceedings of the IEEE Annual Computers, Software, and Applications Conference (COMPSAC), 2022.
[C12] FireBugs: Finding and Repairing Cryptography API Misuses in Mobile Applications. [PDF]
By Larry Singleton⁺, Rui Zhao, Harvey Siy, and Myoungkyu Song.
In Proceedings of the IEEE Annual Computers, Software, and Applications Conference (COMPSAC), 2021.
[C11] A Machine-learning based Framework for Detection of Fake Political Speech. [PDF]
By Chinguun Purevdagva⁺, Rui Zhao^*, Pei-Chi Huang, and William Mahoney.
In Proceedings of the IEEE International Conference on Trust, Security and Privacy in Computing and Communication/
IEEE International Conference On Big Data Science and Engineering (TrustCom/BigDataSE), 2020.
[C10] CryptoTutor: Teaching Secure Coding Practices through Misuse Pattern Detection. [PDF]
By Larry Singleton⁺, Rui Zhao, Myoungkyu Song, and Harvey Siy.
In Proceedings of the Annual Conference on IT Education (SIGITE), 2020.
[C9] Traffic-based Automatic Detection of Browser Fingerprinting. [PDF]
By Rui Zhao^*, Edward Chow, and Chunchun Li.
In Proceedings of the EAI International Conference on Security and Privacy in Communication Networks (SecureComm), 2019.
[C8] FireBugs: finding and repairing bugs with security patterns. [PDF]
By Larry Singleton⁺, Rui Zhao, Myoungkyu Song, and Harvey Siy.
In Proceedings of the IEEE/ACM International Conference on Mobile Software Engineering and Systems (MobileSoft), 2019.
[C7] Effective Mobile Web User Fingerprinting via Motion Sensors. [PDF]
By Zhiju Yang, Rui Zhao, and Chuan Yue^*.
In Proceedings of the IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom), 2018.
[C6] Cross-site Input Inference Attacks on Mobile Web Users. [PDF]
By Rui Zhao, Chuan Yue^*, and Qi Han.
In Proceedings of the EAI International Conference on Security and Privacy in Communication Networks (SecureComm), 2017.
[C5] The Highly Insidious Extreme Phishing Attacks. [PDF]
By Rui Zhao, Samantha John, Stacy Karas, Cara Bussell, Jennifer Roberts, Daniel Six, Brandon Gavett, and Chuan Yue^*.
In Proceedings of the IEEE International Conference on Computer Communication and Networks (ICCCN), 2016.
[C4] SafeSky: A Secure Cloud Storage Middleware for End-user Applications. [PDF]
By Rui Zhao, Chuan Yue^*, Byungchul Tak, and Chunqiang Tang.
In Proceedings of the IEEE Symposium on Reliable Distributed Systems (SRDS), 2015.
[C3] Automatic Detection of Information Leakage Vulnerabilities in Browser Extensions. [PDF]
By Rui Zhao, Chuan Yue^*, and Qing Yi.
In Proceedings of the International World Wide Web Conference (WWW), 2015.
[C2] A Security Analysis of Two Commercial Browser and Cloud Based Password Managers. [PDF]
By Rui Zhao, Chuan Yue^*, and Kun Sun.
In Proceedings of the ASE/IEEE International Conference on Social Computing (SocialCom), 2013.
[C1] All Your Browser-saved Passwords Could Belong to Us: a Security Analysis and a Cloud-based New Design. [PDF]
By Rui Zhao and Chuan Yue^*.
In Proceedings of the ACM Conference on Data and Applications Security (CODASPY), 2013.

^* Corresponding author.
⁺ Student author.