arXiv subjects

Lihua Xu

Publications and source records attributed to Lihua Xu.

10 recordsLinked to original sources

arXiv2022

Spatio-Temporal Self-Attention Network for Video Saliency Prediction

3D convolutional neural networks have achieved promising results for video tasks in computer vision, including video saliency prediction that is explored in this paper. However, 3D convolution encodes visual representation merely on fixed local spacetime according to its kernel size, while human attention is always attracted by relational visual features at different time. To overcome this limitation, we propose a novel Spatio-Temporal Self-Attention 3D Network (STSANet) for video saliency prediction, in which multiple Spatio-Temporal Self-Attention (STSA) modules are employed at different levels of 3D convolutional backbone to directly capture long-range relations between spatio-temporal features of different time steps. Besides, we propose an Attentional Multi-Scale Fusion (AMSF) module to integrate multi-level features with the perception of context in semantic and spatio-temporal subspaces. Extensive experiments demonstrate the contributions of key components of our method, and the results on DHF1K, Hollywood-2, UCF, and DIEM benchmark datasets clearly prove the superiority of the proposed model compared with all state-of-the-art models.

cs.CV↗

arXiv2021

Proton dynamics in water confined at the interface of the graphene-MXene heterostructure

Heterostructures of 2D materials offer a fertile ground to study ion transport and charge storage. Here we employ ab initio molecular dynamics to examine the proton-transfer/diffusion and redox behavior in a water layer confined in the graphene-Ti3C2O2 heterostructure. We find that in comparison with the similar interface of water confined between Ti3C2O2 layers, proton redox rate in the dissimilar interface of graphene-Ti3C2O2 is much higher, owning to the very different interfacial structure as well as the interfacial electric field induced by an electron transfer in the latter. Water molecules in the dissimilar interface of the graphene-Ti3C2O2 heterostructure form a denser hydrogen-bond network with a preferred orientation of water molecules, leading to an increase of proton mobility with proton concentration in the graphene-Ti3C2O2 interface. As the proton concentration further increases, proton mobility deceases, due to increasingly more frequent surface redox events that slow down proton mobility due to binding with surface O atoms. Our work provides important insights into how the dissimilar interface and their associated interfacial structure and properties impact proton transfer and redox in the confined space.

physics.chem-ph↗

arXiv2021

Interfacial charge transfer and interaction in the MXene/TiO2 heterostructures

Hybrid materials of MXenes (2D carbides and nitrides) and transition-metal oxides (TMOs) have shown great promise in electrical energy storage and 2D heterostructures have been proposed as the next-generation electrode materials to expand the limits of current technology. Here we use first principles density functional theory to investigate the interfacial structure, energetics, and electronic properties of the heterostructures of MXenes (Tin+1CnT2; T=terminal groups) and anatase TiO2. We find that the greatest work-function differences are between OH-terminated-MXene (1.6 eV) and anatase TiO2(101) (6.4 eV), resulting in the largest interfacial electron transfer (~0.9 e/nm2 across the interface) from MXene to the TiO2 layer. This interface also has the strongest adhesion and further strengthened by hydrogen bond formation. For O-, F-, or mixed O-/F- terminated Tin+1Cn MXenes, electron transfer is minimal and interfacial adhesion is weak for their heterostructures with TiO2. The strong dependence of the interfacial properties of the MXene/TiO2 heterostructures on the surface chemistry of the MXenes will be useful to tune the heterostructures for electric-energy-storage applications.

cond-mat.mtrl-sci↗

arXiv2020

An Empirical Assessment of Security Risks of Global Android Banking Apps

Mobile banking apps, belonging to the most security-critical app category, render massive and dynamic transactions susceptible to security risks. Given huge potential financial loss caused by vulnerabilities, existing research lacks a comprehensive empirical study on the security risks of global banking apps to provide useful insights and improve the security of banking apps. Since data-related weaknesses in banking apps are critical and may directly cause serious financial loss, this paper first revisits the state-of-the-art available tools and finds that they have limited capability in identifying data-related security weaknesses of banking apps. To complement the capability of existing tools in data-related weakness detection, we propose a three-phase automated security risk assessment system, named AUSERA, which leverages static program analysis techniques and sensitive keyword identification. By leveraging AUSERA, we collect 2,157 weaknesses in 693 real-world banking apps across 83 countries, which we use as a basis to conduct a comprehensive empirical study from different aspects, such as global distribution and weakness evolution during version updates. We find that apps owned by subsidiary banks are always less secure than or equivalent to those owned by parent banks. In addition, we also track the patching of weaknesses and receive much positive feedback from banking entities so as to improve the security of banking apps in practice. To date, we highlight that 21 banks have confirmed the weaknesses we reported. We also exchange insights with 7 banks, such as HSBC in UK and OCBC in Singapore, via in-person or online meetings to help them improve their apps. We hope that the insights developed in this paper will inform the communities about the gaps among multiple stakeholders, including banks, academic researchers, and third-party security companies.

cs.CR↗

arXiv2019

StoryDroid: Automated Generation of Storyboard for Android Apps

Mobile apps are now ubiquitous. Before developing a new app, the development team usually endeavors painstaking efforts to review many existing apps with similar purposes. The review process is crucial in the sense that it reduces market risks and provides inspiration for app development. However, manual exploration of hundreds of existing apps by different roles (e.g., product manager, UI/UX designer, developer) in a development team can be ineffective. For example, it is difficult to completely explore all the functionalities of the app in a short period of time. Inspired by the conception of storyboard in movie production, we propose a system, StoryDroid, to automatically generate the storyboard for Android apps, and assist different roles to review apps efficiently. Specifically, StoryDroid extracts the activity transition graph and leverages static analysis techniques to render UI pages to visualize the storyboard with the rendered pages. The mapping relations between UI pages and the corresponding implementation code (e.g., layout code, activity code, and method hierarchy) are also provided to users. Our comprehensive experiments unveil that StoryDroid is effective and indeed useful to assist app development. The outputs of StoryDroid enable several potential applications, such as the recommendation of UI design and layout code.

cs.SE↗

arXiv2019

A Large-Scale Empirical Study on Industrial Fake Apps

While there have been various studies towards Android apps and their development, there is limited discussion of the broader class of apps that fall in the fake area. Fake apps and their development are distinct from official apps and belong to the mobile underground industry. Due to the lack of knowledge of the mobile underground industry, fake apps, their ecosystem and nature still remain in mystery. To fill the blank, we conduct the first systematic and comprehensive empirical study on a large-scale set of fake apps. Over 150,000 samples related to the top 50 popular apps are collected for extensive measurement. In this paper, we present discoveries from three different perspectives, namely fake sample characteristics, quantitative study on fake samples and fake authors' developing trend. Moreover, valuable domain knowledge, like fake apps' naming tendency and fake developers' evasive strategies, is then presented and confirmed with case studies, demonstrating a clear vision of fake apps and their ecosystem.

cs.CR↗

arXiv2018

Efficiently Manifesting Asynchronous Programming Errors in Android Apps

Android, the #1 mobile app framework, enforces the single-GUI-thread model, in which a single UI thread manages GUI rendering and event dispatching. Due to this model, it is vital to avoid blocking the UI thread for responsiveness. One common practice is to offload long-running tasks into async threads. To achieve this, Android provides various async programming constructs, and leaves developers themselves to obey the rules implied by the model. However, as our study reveals, more than 25% apps violate these rules and introduce hard-to-detect, fail-stop errors, which we term as aysnc programming errors (APEs). To this end, this paper introduces APEChecker, a technique to automatically and efficiently manifest APEs. The key idea is to characterize APEs as specific fault patterns, and synergistically combine static analysis and dynamic UI exploration to detect and verify such errors. Among the 40 real-world Android apps, APEChecker unveils and processes 61 APEs, of which 51 are confirmed (83.6% hit rate). Specifically, APEChecker detects 3X more APEs than the state-of-art testing tools (Monkey, Sapienz and Stoat), and reduces testing time from half an hour to a few minutes. On a specific type of APEs, APEChecker confirms 5X more errors than the data race detection tool, EventRacer, with very few false alarms.

cs.SE↗

arXiv2018

Information Encoding with Optical Dielectric Metasurface via Independent Multichannels

Information encryption and security is a prerequisite for information technology which can be realized by optical metasurface owing to its arbitrary manipulation over the wavelength, polarization, phase and amplitude of light. So far information encoding can be implemented by the metasurface in one dimensional (1D) mode (either wavelength or polarization) only with several combinations of independent channels. Here we successfully apply dielectric metasurfaces in a 2D mode (both wavelength and polarization) with far more combinations of independent channels to encrypt information, which therefore enhances the encryption security dramatically. Six independent channels by two circular polarization states (RCP and LCP) and three visible wavelengths (633 nm, 532 nm and 473 nm) in 2D mode can produce 63 combinations available to information encoding, in sharp contrast with 7 combinations by 3 independent channels in 1D mode. This 2D mode encoding strategy paves a novel pathway for escalating the security level of information in multichannel information encryption, anti-counterfeiting, optical data storage, and information processing.

physics.optics↗

arXiv2018

Large-Scale Analysis of Framework-Specific Exceptions in Android Apps

Mobile apps have become ubiquitous. For app developers, it is a key priority to ensure their apps' correctness and reliability. However, many apps still suffer from occasional to frequent crashes, weakening their competitive edge. Large-scale, deep analyses of the characteristics of real-world app crashes can provide useful insights to guide developers, or help improve testing and analysis tools. However, such studies do not exist -- this paper fills this gap. Over a four-month long effort, we have collected 16,245 unique exception traces from 2,486 open-source Android apps, and observed that framework-specific exceptions account for the majority of these crashes. We then extensively investigated the 8,243 framework-specific exceptions (which took six person-months): (1) identifying their characteristics (e.g., manifestation locations, common fault categories), (2) evaluating their manifestation via state-of-the-art bug detection techniques, and (3) reviewing their fixes. Besides the insights they provide, these findings motivate and enable follow-up research on mobile apps, such as bug detection, fault localization and patch generation. In addition, to demonstrate the utility of our findings, we have optimized Stoat, a dynamic testing tool, and implemented ExLocator, an exception localization tool, for Android apps. Stoat is able to quickly uncover three previously-unknown, confirmed/fixed crashes in Gmail and Google+; ExLocator is capable of precisely locating the root causes of identified exceptions in real-world apps. Our substantial dataset is made publicly available to share with and benefit the community.

cs.SE↗

arXiv2017

Automated Poisoning Attacks and Defenses in Malware Detection Systems: An Adversarial Machine Learning Approach

The evolution of mobile malware poses a serious threat to smartphone security. Today, sophisticated attackers can adapt by maximally sabotaging machine-learning classifiers via polluting training data, rendering most recent machine learning-based malware detection tools (such as Drebin, DroidAPIMiner, and MaMaDroid) ineffective. In this paper, we explore the feasibility of constructing crafted malware samples; examine how machine-learning classifiers can be misled under three different threat models; then conclude that injecting carefully crafted data into training data can significantly reduce detection accuracy. To tackle the problem, we propose KuafuDet, a two-phase learning enhancing approach that learns mobile malware by adversarial detection. KuafuDet includes an offline training phase that selects and extracts features from the training set, and an online detection phase that utilizes the classifier trained by the first phase. To further address the adversarial environment, these two phases are intertwined through a self-adaptive learning scheme, wherein an automated camouflage detector is introduced to filter the suspicious false negatives and feed them back into the training phase. We finally show that KuafuDet can significantly reduce false negatives and boost the detection accuracy by at least 15%. Experiments on more than 250,000 mobile applications demonstrate that KuafuDet is scalable and can be highly effective as a standalone system.

cs.CR↗