國立中央大學教師履歷平台

期刊著作

• USBIPS Framework: Protecting Hosts from Malicious USB Peripherals
  Computer Standards and Interfaces, 95, 2025-06-25
  [ USB peripheral,USB firewall,Human interface device,Protocol masquerading,Behavior-based detection ]

• Enhancing Linux System Security: A Kernel-Based Approach to Fileless Malware Detection and Mitigation
  Electronics (Switzerland), 13, 17, 2024-09-01
  [ antivirus,dynamic analysis,fileless malware,memory analysis ]

• MPSD: A Robust Defense Mechanism against Malicious PowerShell Scripts in Windows Systems
  Electronics (Switzerland), 13, 18, 2024-09-01
  [ Antimalware Scan Interface,malware detection,PowerShell commands,VirusTotal,Windows security ]

• A Vehicle Forensics framework with Post-Quantum Cryptography and Blockchain
  Proceedings of the International Symposium on Intelligent Signal Processing and Communication Systems, ISPACS, 2024, 2024-01-01
  [ blockchain,data security,post-quantum cryptography,privacy,vehicle forensics ]

• Defending IoT Devices against Bluetooth Worms with Bluetooth OBEX Proxy
  Information (Switzerland), 14, 10, 2023-10-01
  [ Bluetooth technology,BlueZ’s OBEX service daemon,Internet of Things (IoT),IoT device security,IoT malware ]

• MinerGuard: A Solution to Detect Browser-Based Cryptocurrency Mining through Machine Learning
  Applied Sciences (Switzerland), 12, 19, 2022-10-01
  [ bitcoin,browser-based cryptocurrency mining,cryptojacking,JavaScript miner,machine learning,monero ]

• WPFD: Active User-Side Detection of Evil Twins
  Applied Sciences (Switzerland), 12, 16, 2022-08-01

• IoTD: An approach to identify E-mails sent by IoT devices
  Computer Communications, 179, 62-72, 2021-11-01
  [ Internet of Things,SMTP,Spam,TLS ]

• SMS Observer: A dynamic mechanism to analyze the behavior of SMS-based malware
  Journal of Parallel and Distributed Computing, 156, 25-37, 2021-10-01
  [ Emulation,Information security,Network security,System analysis and design,Unified messaging ]

• DPC:A Dynamic Permission Control Mechanism for Android Third-Party Libraries
  IEEE Transactions on Dependable and Secure Computing, 18, 4, 1751-1761, 2021-07-01

• Ddos flood and destination service changing sensor
  Sensors, 21, 6, 1-17, 2021-03-02
  [ DDoS attack,Live migration,Loadable kernel module,Network security,TCP three-way handshake ]

• Simple and Ingenious Mobile Botnet Covert Network Based on Adjustable Unit (SIMBAIDU)
  Mathematical Problems in Engineering, 2021, 2021-01-01

• A passive user-side solution for evil twin access point detection at public hotspots
  International Journal of Communication Systems, 33, 14, 2020-09-25
  [ evil twin , rogue access point , Wi-Fi , wireless security ]

• A cloud-based real-time mechanism to protect end hosts against malware
  Applied Sciences (Switzerland), 9, 18, 2019-09-01
  [ Antivirus , Cloud system , Malware , Real time detection ]

• A solution to detect the existence of a malicious rogue AP
  Computer Communications, 142-143, 62-68, 2019-06-15
  [ Evil twin , Network security , Rogue access point , Wi-fi , Wireless security ]

• Itus: Behavior-based spamming group detection on Facebook
  Journal of Computers (Taiwan), 29, 4, 69-81, 2018-08-01
  [ Advertisement,Behavior-based approach,Classifer,Facebook Spamming Groups,Social network,SVM ]

• A Cloud-based Protection approach against JavaScript-based attacks to browsers
  Computers and Electrical Engineering, 68, 241-251, 2018-05-01
  [ Cloud-based Protection , Malicious JavaScript , VirusTotal , Web security ]

• Handover: A mechanism to improve the reliability and availability of network services for clients behind a network address translator
  Computers and Electrical Engineering, 67, 159-169, 2018-04-01
  [ DDoS , Live migration , NAT , Three-way handshake , Virtual machine ]

• A client-side detection mechanism for evil twins
  Computers and Electrical Engineering, 59, 76-85, 2017-04-01
  [ Evil twin , Rogue AP , Wi-Fi , Wireless ]

• Detecting Web-Based Botnets Using Bot Communication Traffic Features
  Security and Communication Networks, 2017, 2017-01-01

• VRS: a values-based reputation system for web services
  Security and Communication Networks, 9, 18, 6335-6350, 2016-12-01
  [ recommendation system , reputation system , Sybil attack , web service ]

• TRAP: A Three-way handshake server for TCP connection establishment
  Applied Sciences (Switzerland), 6, 11, 2016-11-16
  [ DDoS , Netfilter , SYN flood attack , TCP , TCP options , Three-way handshake ]

• Data concealments with high privacy in new technology file system
  Journal of Supercomputing, 72, 1, 120-140, 2016-01-01
  [ Anti-forensics , File rootkit , File storage system , NTFS ]

• Defeat scanning worms in cyber warfare
  Security and Communication Networks, 8, 5, 715-726, 2015-03-25
  [ Computer crime , Network security , System security , Worm ]

• Web security in a windows system as PrivacyDefender in private browsing mode
  Multimedia Tools and Applications, 74, 5, 1667-1688, 2015-01-01
  [ Anti-forensics , Malicious , Private browsing , Web security ]

• Bypass cell-phone-verification through a smartphone-based botnet
  Journal of Information Science and Engineering, 31, 3, 1097-1111, 2015-01-01
  [ Cell-phone security , Cell-phone-verification , Smartphone-based botnet ]

• Detect fast-flux domains through response time differences
  IEEE Journal on Selected Areas in Communications, 32, 10, 1947-1956, 2014-10-01

• Image reversibility in data embedding on the basis of blocking-predictions
  Peer-to-Peer Networking and Applications, 7, 4, 723-736, 2014-01-01
  [ Blocking-predictions , Histogram-based , Image quality , Predictions , Reversibility ]

• Visible watermarking with reversibility of multimedia images for ownership declarations
  Journal of Supercomputing, 70, 1, 247-268, 2014-01-01
  [ Histogram , Ownership , Reversibility , Visible , Watermarking ]

• Reversible data hiding using side-match predictions on steganographic images
  Multimedia Tools and Applications, 67, 3, 571-591, 2013-12-01
  [ Histogram , Information hiding , Prediction , Reversible data hiding , Side match ]

• ARMORY: An automatic security testing tool for buffer overflow defect detection
  Computers and Electrical Engineering, 39, 7, 2233-2242, 2013-10-01

• Reversibility of image with balanced fidelity and capacity upon pixels differencing expansion
  Journal of Supercomputing, 66, 2, 812-828, 2013-03-15
  [ Difference expansion , Histogram , Predictor , Reversible data hiding ]

• Message from the TC workshop chairs: The first international workshop on trustworthy computing
  , 2013-01-01

• Antivirus software shield against antivirus terminators
  IEEE Transactions on Information Forensics and Security, 7, 5, 1439-1447, 2012-09-20
  [ Antivirus software , API hooking , malware ]

• Application of neural networks for detecting erroneous tax reports from construction companies
  Automation in Construction, 20, 7, 935-939, 2011-11-01
  [ Construction company , Neural networks , Pattern classification , Tax report ]

• BrowserGuard: A behavior-based solution to drive-by-download attacks
  IEEE Journal on Selected Areas in Communications, 29, 7, 1461-1468, 2011-08-01
  [ drive-by-download attack , heap spray , intrusion detection , malware , system security , Web browser ]

• A reinforcement-learning approach to color quantization
  Journal of Applied Science and Engineering, 14, 2, 141-150, 2011-06-01
  [ Classifier systems , Color quantization , Color reduction , Machine learning , Neuro-Fuzzy systems , Pattern recognition , Reinforcement learning ]

• A robust kernel-based solution to control-hijacking buffer overflow attacks
  Journal of Information Science and Engineering, 27, 3, 869-890, 2011-05-01
  [ AURORA,Buffer overflow attack,Control hijacking boa,Retum-into-libc attack,Stack smashing attack ]

• HSP: A solution against heap sprays
  Journal of Systems and Software, 83, 11, 2227-2236, 2010-11-01
  [ ASLR , Buffer overflow attack , Heap spray , System call ]

• A neural tree and its application to spam e-mail detection
  Expert Systems with Applications, 37, 12, 7976-7985, 2010-01-01
  [ Decision tree , Incremental learning , Neural networks , Neural tree , Pattern classification , Spam detection ]

• A signal-representation-based parser to extract text-based information from the web
  Journal of Advanced Computational Intelligence and Intelligent Informatics, 14, 5, 531-539, 2010-01-01

• Sago: A network resource management system for real-time content distribution
  Proceedings of the International Conference on Parallel and Distributed Systems - ICPADS, 2002-January, 557-562, 2002-01-01
  [ Delay , Fault tolerance , Fault tolerant systems , Internet , IP networks , Multicast algorithms , Network topology , Real time systems , Resource management , Scheduling algorithm ]

研討會著作

• Identifying IoT Devices with SMTP
  2021-01-01
  

• A Kernel Module Based Mechanism to Establish a TCP/IP Connection When Destination Service Changing
  2020-09-28
  

• Keep rogue IoT away: IoT detector based on diversified tls negotiation
  548-555, 2019-08-01
  [ Botnet , HTTPS , IoT , Security , TLS negotiation ]

• Preventing Activity Hijacking Attacks in Android APP
  170-173, 2019-05-01
  [ Activity Hijacking , Android forensics , Android Malware , Instant message , View System ]

• Fake GPS Defender: A Server-side Solution to Detect Fake GPS
  2018-07-22
  [ Fake GPS,Server Side Solution ]

• The bilateral communication-based dynamic extensible honeypot
  263-268, 2016-01-21
  [ bait , bilateral communication , honeynet , honeypot , shellcode , zero-day attack ]

• Hawkeye: Finding spamming accounts
  2014-01-01
  [ Botnet , Compromised account , E-mail , Spam ]

• A QTE-based solution to keylogger attacks
  62-67, 2012-12-01
  [ Authentication , Computer security , Keylogger , Privacy ]

• Dual-watermarking by QR-code applications in image processing
  638-643, 2012-11-28
  [ Data hiding , Histogram , QR cord , Reversible , Watermarking ]

• TransSQL: A translation and validation-based solution for SQL-injection attacks
  248-251, 2011-12-01
  [ LDAP , SQL injection , Web security ]

• The perceptions of cooperative learning in computer-assisted language learning environmnets
  6969-6972, 2011-11-16
  [ Computer-Assisted Language Learning(CALL) , cooperative learning , English learning ]

• Reversible watermarking scheme with visibility using randomize distance
  204-207, 2011-11-09
  [ Copyright protection , Lossless data hiding , Reversible data hiding , Steganography , Watermarking ]

• Improving histogram-based reversible data hiding by tictactoemidlet predictions
  667-670, 2010-12-01
  [ Copyright protection , Lossless data hiding , Reversible data hiding , Steganography , Watermarking ]

• Scalable network-based buffer overflow attack detection
  163-171, 2006-12-01
  [ Buffer overflow attacks , CTCP , Generalized attack signatures , Network-based intrusion detection , Payload bypassing , Return-into-libc attacks ]

• CTCP: A transparent centralized TCP/IP architecture for network security
  335-344, 2004-12-01
  

• A path information caching and aggregation approach to traffic source identification
  332-339, 2003-07-23
  

• RAD: A compile-time solution to buffer overflow attacks
  409-417, 2001-01-01
  

專書

• Smart Innovation, Systems and Technologies
  371-380, 2025-01-01
  [ Attack,Defense,ETW,VirusTotal,Windows registry ]

• Lecture Notes in Networks and Systems
  490-499, 2024-01-01
  [ Browser Extension Development,Consent Management,Deceptive Click Attacks,General Data Protection Regulation (GDPR),Optical Character Recognition (OCR) Technology ]

• Smart Innovation, Systems and Technologies
  153-158, 2023-01-01
  [ Access point,Evil twin,Wi-Fi,Wireless security ]

• Advances in Intelligent Systems and Computing
  35-38, 2020-01-01
  [ Anonymity network,Botnet,Man-in-the-middle attack,Tor ]

• Applied Mechanics and Materials
  916-922, 2014-01-01
  [ Account theft,Phishing,Phishing email,URL ]

• Applied Mechanics and Materials
  923-927, 2014-01-01
  [ Computer crime,Network security,System security,Worm ]

• Applied Mechanics and Materials
  3385-3389, 2013-02-20
  [ Authentication,Computer security,Keylogger,Privacy ]

• Applied Mechanics and Materials
  3454-3458, 2013-02-20
  [ Android,Botnet,SMS ]

• Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
  244-255, 2010-06-25
  [ Active objects,Actors,Garbage collection,Program transformation ]