About

I am a postdoctoral researcher in the School of Cyber Science and Engineering at Huazhong University of Science and Technology (HUST), where I work in the Security PRIDE Research Group led by Prof. Haoyu Wang, my collaborating supervisor. I received my Ph.D. from Monash University in 2025, under the supervision of Prof. Li Li. Prior to that, I received my bachelor's and master's degrees from Beijing University of Posts and Telecommunications (BUPT) in 2017 and 2020, respectively.

My research interests lie at the intersection of software security and software engineering, with a particular focus on mobile security. I am especially interested in mobile app security, including app analysis, compliance checking, and ecosystem-wide characterization; as well as the emerging area of mobile agent security, including its attack surfaces and defenses. My work aims to improve the security, privacy, and trustworthiness of the mobile ecosystem at scale.

If you would like to reach me, please send an email to tmliu@hust.edu.cn

Publications

[^# Co-first Author, * Corresponding Author, ^(s) Student I advised/co-advised during the work]

1. One Resource to Break Them All: Exploiting Malformed Resources for Permanent Denial-of-Service in Android
   Sheng Cao, Hao Zhou, Yanjie Zhao, Tianming Liu, Songzhou Shi, Haoyu Wang
   CCS 2026
2. NotDec: WebAssembly Decompilation With Inter-Procedural Type Recovery
   Jikai Wang, Ningyu He, Tianming Liu, Junhai Wang, Haoyu Wang
   ICSE 2026PDFDOI
3. Mobile App Analysis in the New Era: Challenges and the Road Ahead
   Jiale Wu^(s)#, Tianming Liu^#, Yanjie Zhao, Haoyu Wang
   TOSEM 2026PDFDOI
4. Doxing-as-a-Service: Demystifying the Chinese Online Doxing Ecosystem
   Yiran Gao^(s), Pengcheng Xia, Liu Wang*, Tianming Liu*, Haoyu Wang
   WWW 2026PDFDOI
5. An Empirical Study of Security Risks in the Android Push Notification Ecosystem
   Shilong Hu^(s), Zikan Dong, Chao Wang, Tianming Liu*, Haoyu Wang
   ASE 2026 Industry TrackPDF
6. An Empirical Analysis of Rust Integration in Android Open Source Project
   Yinte Fan, Chao Wang, Zikan Dong, Tianming Liu, Haoyu Wang
   FSE 2026 Industry TrackPDFDOI
7. Reproducing UI Contexts Described in App Reviews with Large Language Models
   Ran Jin^(s)#, Tianming Liu^#, Jun Chen, Yanjie Zhao, Xiao Chen, Xiaoning Du, Li Li, Haoyu Wang
   ASE Journal 2026PDFDOI
8. LLMDroid: Enhancing Automated Mobile App GUI Testing Coverage with Large Language Model Guidance
   Chenxu Wang^(s)#, Tianming Liu^#, Yanjie Zhao, Minghui Yang, Haoyu Wang
   FSE 2025PDFDOI
9. Walls Have Ears: Demystifying Notification Listener Usage in Android Apps
   Jiapeng Deng^(s)#, Tianming Liu^#, Yanjie Zhao, Chao Wang, Lin Zhang, Haoyu Wang
   ISSTA 2025PDFDOI
10. Beyond App Markets: Demystifying Underground Mobile App Distribution Via Telegram
    Yanhui Guo, Dong Wang^(s), Liu Wang, Yongsheng Fang^(s), Chao Wang, Minghui Yang, Tianming Liu*, Haoyu Wang*
    SIGMETRICS 2025PDFDOI
11. Are iOS Apps Immune to Abusive Advertising Practices?
    Tianming Liu, Jiapeng Deng^(s), Yanjie Zhao, Xiao Chen, Xiaoning Du, Li Li, Haoyu Wang
    FSE 2025 Industry TrackPDFDOI
12. The Arts and Crafts of Android Adware Across a Decade
    Chao Wang^(s)#, Tianming Liu^#, Yanjie Zhao, Lin Zhang, Xiaoning Du, Li Li, Haoyu Wang
    ASE Journal 2025PDFDOI
13. Exploring Covert Third-party Identifiers through External Storage in the Android New Era
    Zikan Dong^#, Tianming Liu^#, Jiapeng Deng, Haoyu Wang, Li Li, Minghui Yang, Meng Wang, Guosheng Xu, Guoai Xu
    USENIX Security 2024PDFPublisher
14. Same App, Different Behaviors: Uncovering Device-specific Behaviors in Android Apps
    Zikan Dong, Yanjie Zhao, Tianming Liu, Chao Wang, Guosheng Xu, Guoai Xu, Lin Zhang, Haoyu Wang
    ASE 2024 Industry TrackPDFDOI
15. Towards Demystifying Android Adware: Dataset and Payload Location
    Chao Wang^(s)#, Tianming Liu^#, Yanjie Zhao, Lin Zhang, Xiaoning Du, Li Li, Haoyu Wang
    A-Mobile 2024 @ ASEPDFDOI
16. A First Look at LLM-powered Smartphones
    Liangxuan Wu, Yanjie Zhao, Chao Wang, Tianming Liu, Haoyu Wang
    A-Mobile 2024 @ ASEPDFDOI
17. ChatGPT Chats Decoded: Uncovering Prompt Patterns for Superior Solutions in Software Development Lifecycle
    Liangxuan Wu, Yanjie Zhao, Xinyi Hou, Tianming Liu, Haoyu Wang
    MSR 2024 Mining ChallengePDFDOI
18. WalletRadar: Towards Automating the Detection of Vulnerabilities in Browser-based Cryptocurrency Wallets
    P. Xia, Y. Guo, Z. Lin, J. Wu, P. Duan, N. He, K. Wang, Tianming Liu, Y. Yue, G. Xu, H. Wang
    ASE Journal 2024PDFDOI
19. Are Mobile Advertisements in Compliance with App's Age Group?
    Yanjie Zhao^#, Tianming Liu^#, Haoyu Wang, Yepang Liu, John Grundy, Li Li
    WWW 2023PDFDOI
20. Promal: Precise Window Transition Graphs for Android via Synergy of Program Analysis and Machine Learning
    Changlin Liu, Hanlin Wang, Tianming Liu, Diandian Gu, Yun Ma, Haoyu Wang, Xusheng Xiao
    ICSE 2022PDFDOI
21. ATVHunter: Reliable Version Detection of Third-party Libraries for Vulnerability Identification in Android Applications
    Xian Zhan, Lingling Fan, Sen Chen, Feng Wu, Tianming Liu, Xiapu Luo, Yang Liu
    ICSE 2021🏅 ACM SIGSOFT Distinguished Paper AwardPDFDOI
22. Research on Third-party Libraries in Android Apps: A Taxonomy and Systematic Literature Review
    Xian Zhan, Tianming Liu, Lingling Fan, Li Li, Sen Chen, Xiapu Luo, Yang Liu
    TSE 2021PDFDOI
23. A Systematic Assessment on Android Third-party Library Detection Tools
    Xian Zhan, Tianming Liu, Yepang Liu, Yang Liu, Li Li, Haoyu Wang, Xiapu Luo
    TSE 2021PDFDOI
24. MadDroid: Characterising and Detecting Devious Ad Content for Android Apps
    Tianming Liu, Haoyu Wang, Li Li, Xiapu Luo, Feng Dong, Yao Guo, Liu Wang, Tegawendé F. Bissyandé, Jacques Klein
    WWW 2020PDFDOI
25. Automated Third-party Library Detection for Android Applications: Are We There Yet?
    Xian Zhan, Lingling Fan, Tianming Liu, Sen Chen, Li Li, Haoyu Wang, Yifei Xu, Xiapu Luo, Yang Liu
    ASE 2020PDFDOI
26. DaPanda: Detecting Aggressive Push Notification in Android Apps
    Tianming Liu, Haoyu Wang, Li Li, Guangdong Bai, Yao Guo, Guoai Xu
    ASE 2019PDFDOI
27. FraudDroid: Automated Ad Fraud Detection for Android Apps
    Feng Dong, Haoyu Wang, Li Li, Yao Guo, Tegawendé F. Bissyandé, Tianming Liu, Guoai Xu, Jacques Klein
    ESEC/FSE 2018PDFDOI

The electronic versions of the papers listed on this webpage are provided for personal use. Copyright is owned by the respective publishers or persons, and should be included explicitly in any distribution of the papers.