Haixin Duan

Weak Links in Authentication Chains: A Large-scale Analysis of Email Sender Spoofing Attacks

2020 · arXiv (Cornell University)

As a fundamental communicative service, email is playing an important role in both individual and corporate communications, which also makes it one of the most frequently attack vectors. An email's authenticity is based on an …

Automatic Generation of Adversarial Readable Chinese Texts

2022 · IEEE Transactions on Dependable and Secure Computing

Natural language processing (NLP) models are known vulnerable to adversarial examples, similar to image processing models. Studying adversarial texts is an essential step to improve the robustness of NLP models. However, existing studies mainly focus …

An Extensive Study of Residential Proxies in China

2022 · Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security

We carry out the first in-depth characterization of residential proxies (RESIPs) in China, for which little is studied in previous works. Our study is made possible through a semantic-based classifier to automatically capture RESIP services. …

Inbox Invasion: Exploiting MIME Ambiguities to Evade Email Attachment Detectors

2024

Email attachments have become a favored delivery vector for malware campaigns. In response, email attachment detectors are widely deployed to safeguard email security. However, an emerging threat arises when adversaries exploit parsing discrepancies between email …

You Can't Eat Your Cake and Have It Too: The Performance Degradation of LLMs with Jailbreak Defense

2025 · arXiv (Cornell University)

With the rise of generative large language models (LLMs) like LLaMA and ChatGPT, these models have significantly transformed daily life and work by providing advanced insights. However, as jailbreak attacks continue to circumvent built-in safety …