Page Not Found
Page not found. Your pixels are in another canvas.
- Pages
- Posts
- Collection: hacking
- Collection: people
- Collection: projects
- Collection: publications
A Framework to Eliminate Backdoors from Response-Computable Authentication
A Framework to Eliminate Backdoors from Response-Computable Authentication
Practical Control Flow Integrity & Randomization for Binary Executables
Practical Control Flow Integrity & Randomization for Binary Executables
JITScope: Protecting Web Users from Control-Flow Hijacking Attacks
JITScope: Protecting Web Users from Control-Flow Hijacking Attacks
αDiff: Cross-Version Binary Code Similarity Detection with DNN
αDiff: Cross-Version Binary Code Similarity Detection with DNN
Revery: from Proof-of-Concept to Exploitable (One Step towards Automatic Exploit Generation)
Revery: from Proof-of-Concept to Exploitable (One Step towards Automatic Exploit Generation)
The CrossPath Attack: Disrupting the SDN Control Channel via Shared Link
The CrossPath Attack: Disrupting the SDN Control Channel via Shared Link
Certificate Transparency in the Wild: Exploring the Reliability of Monitors
Certificate Transparency in the Wild: Exploring the Reliability of Monitors
Detecting Fake Accounts in Online Social Networks at the Time of Registrations
Detecting Fake Accounts in Online Social Networks at the Time of Registrations
On the origin of Zhuge’s clan by the method of historical geography
A Market in Dream: the Rapid Development of Anonymous Cybercrime
A Market in Dream: the Rapid Development of Anonymous Cybercrime
A Survey of Security Vulnerability Analysis, Discovery, Detection, and Mitigation on IoT Devices
A Survey of Security Vulnerability Analysis, Discovery, Detection, and Mitigation on IoT Devices
When Match Fields Do Not Need to Match: Buffered Packets Hijacking in SDN
When Match Fields Do Not Need to Match: Buffered Packets Hijacking in SDN
Poseidon: Mitigating Volumetric DDoS Attacks with Programmable Switches
Poseidon: Mitigating Volumetric DDoS Attacks with Programmable Switches
CDN Backfired: Amplification Attacks Based on HTTP Range Requests
CDN Backfired: Amplification Attacks Based on HTTP Range Requests
A Large-Scale Empirical Study on Vulnerability Distribution within Projects and the Lessons Learned
A Large-Scale Empirical Study on Vulnerability Distribution within Projects and the Lessons Learned
DRAMD: Detect Advanced DRAM-based Stealthy Communication Channels with Neural Networks
DRAMD: Detect Advanced DRAM-based Stealthy Communication Channels with Neural Networks
FANS: Fuzzing Android Native System Services via Automated Interface Analysis
FANS: Fuzzing Android Native System Services via Automated Interface Analysis
Poison Over Troubled Forwarders: A Cache Poisoning Attack Targeting DNS Forwarding Devices
Poison Over Troubled Forwarders: A Cache Poisoning Attack Targeting DNS Forwarding Devices
Finding Cracks in Shields: On the Security of Control Flow Integrity Mechanisms
Finding Cracks in Shields: On the Security of Control Flow Integrity Mechanisms
Talking with Familiar Strangers: An Empirical Study on HTTPS Context Confusion Attacks
Talking with Familiar Strangers: An Empirical Study on HTTPS Context Confusion Attacks
POP and PUSH: Demystifying and Defending against (Mach) Port-Oriented Programming
POP and PUSH: Demystifying and Defending against (Mach) Port-Oriented Programming
Weak Links in Authentication Chains: A Large-scale Analysis of Email Sender Spoofing Attacks
Weak Links in Authentication Chains: A Large-scale Analysis of Email Sender Spoofing Attacks
iDEV: Exploring and Exploiting Semantic Deviations in ARM Instruction Processing
iDEV: Exploring and Exploiting Semantic Deviations in ARM Instruction Processing
RAProducer: Efficiently Diagnose and Reproduce Data Race Bugs for Binaries via Trace Analysis
RAProducer: Efficiently Diagnose and Reproduce Data Race Bugs for Binaries via Trace Analysis
Sharing More and Checking Less: Leveraging Common Input Keywords to Detect Bugs in Embedded Systems
Sharing More and Checking Less: Leveraging Common Input Keywords to Detect Bugs in Embedded Systems
ZKCPlus: Optimized Fair-exchange Protocol Supporting Practical and Flexible Data Exchange
ZKCPlus: Optimized Fair-exchange Protocol Supporting Practical and Flexible Data Exchange
ROLoad: Securing Sensitive Operations with Pointee Integrity
ROLoad: Securing Sensitive Operations with Pointee Integrity
An Empirical Study on Implicit Constraints in Smart Contract Static Analysis
An Empirical Study on Implicit Constraints in Smart Contract Static Analysis
PrIntFuzz: Fuzzing Linux Drivers via Automated Virtual Device Simulation
StateFuzz: System Call-Based State-Aware Linux Driver Fuzzing
StateFuzz: System Call-Based State-Aware Linux Driver Fuzzing
PG-VulNet: Detect Supply Chain Vulnerabilities in IoT Devices using Pseudo-code and Graphs
PG-VulNet: Detect Supply Chain Vulnerabilities in IoT Devices using Pseudo-code and Graphs
KextFuzz: Fuzzing macOS Kernel EXTensions on Apple Silicon via Exploiting Mitigations
KextFuzz: Fuzzing macOS Kernel EXTensions on Apple Silicon via Exploiting Mitigations
- Collection: seminars
Detecting TCP/IP Connections via IPID Hash Collisions (PETS’19)
Detecting TCP/IP Connections via IPID Hash Collisions (PETS’19)
Automated Cross-Platform Reverse Engineering of CAN Bus Commands From Mobile Apps (NDSS’20)
Automated Cross-Platform Reverse Engineering of CAN Bus Commands From Mobile Apps (NDSS’20)
Into the Deep Web: Understanding E-commerce Fraud from Autonomous Chat with Cybercriminals (NDSS’20)
Into the Deep Web: Understanding E-commerce Fraud from Autonomous Chat with Cybercriminals (NDSS’20)
Bobtail: Improved Blockchain Security with Low-Variance Mining (NDSS’20)
Bobtail: Improved Blockchain Security with Low-Variance Mining (NDSS’20)
FANS: Fuzzing Android Native System Services via Automated Interface Analysis
FANS: Fuzzing Android Native System Services via Automated Interface Analysis
A Longitudinal Study of PII Leaks Across Android App Versions (NDSS 2018)
A Longitudinal Study of PII Leaks Across Android App Versions (NDSS 2018)
CDN Backfired: Amplification Attacks Based on HTTP Range Requests (DSN 2020)
CDN Backfired: Amplification Attacks Based on HTTP Range Requests (DSN 2020)
USBFuzz: A Framework for Fuzzing USB Drivers by Device Emulation (Usenix Sec 2020)
USBFuzz: A Framework for Fuzzing USB Drivers by Device Emulation (Usenix Sec 2020)
FuzzGuard: Filtering out Unreachable Inputs in Directed Grey-box Fuzzing through Deep Learning
FuzzGuard: Filtering out Unreachable Inputs in Directed Grey-box Fuzzing through Deep Learning
You Are What You Broadcast: Identification of Mobile and IoT Devices from (Public) WiFi
You Are What You Broadcast: Identification of Mobile and IoT Devices from (Public) WiFi
Fuzzing Error Handling Code using Context-Sensitive Software Fault Injection
Fuzzing Error Handling Code using Context-Sensitive Software Fault Injection
Composition Kills: A Case Study of Email Sender Authentication
Composition Kills: A Case Study of Email Sender Authentication
UNIFUZZ: A Holistic and Pragmatic Metrics-Driven Platform for Evaluating Fuzzers
UNIFUZZ: A Holistic and Pragmatic Metrics-Driven Platform for Evaluating Fuzzers
SoK: Understanding the Prevailing Security Vulnerabilities in TrustZone-assisted TEE Systems
SoK: Understanding the Prevailing Security Vulnerabilities in TrustZone-assisted TEE Systems
iDEA: Static Analysis on the Security of Apple Kernel Drivers
iDEA: Static Analysis on the Security of Apple Kernel Drivers
HVLearn: Automated Black-box Analysis of Hostname Verification in SSL/TLS Implementations
HVLearn: Automated Black-box Analysis of Hostname Verification in SSL/TLS Implementations
KUBO: Precise and Scalable Detection of User-triggerable Undefined Behavior Bugs in OS Kernel
KUBO: Precise and Scalable Detection of User-triggerable Undefined Behavior Bugs in OS Kernel
Accurately Measuring Global Risk of Amplication Attacks using AmpMap
Accurately Measuring Global Risk of Amplication Attacks using AmpMap
NXNSAttack: Recursive DNS Inefficiencies and Vulnerabilities
NXNSAttack: Recursive DNS Inefficiencies and Vulnerabilities
Zoom on the Keystrokes: Exploiting Video Calls for Keystroke Inference Attacks
Zoom on the Keystrokes: Exploiting Video Calls for Keystroke Inference Attacks
WINNIE: Fuzzing Windows Applications with Harness Synthesis and Fast Cloning
WINNIE: Fuzzing Windows Applications with Harness Synthesis and Fast Cloning
NtFuzz: Enabling Type-Aware Kernel Fuzzing on Windows with Static Binary Analysis
NtFuzz: Enabling Type-Aware Kernel Fuzzing on Windows with Static Binary Analysis
TextShield: Robust Text Classification Based on Multimodal Embedding and Neural Machine Translation
TextShield: Robust Text Classification Based on Multimodal Embedding and Neural Machine Translation
Classifying Sequences of Extreme Length with Constant Memory Applied to Malware Detection
Classifying Sequences of Extreme Length with Constant Memory Applied to Malware Detection
Your Phone is My Proxy: Detecting and Understanding Mobile Proxy Networks
Your Phone is My Proxy: Detecting and Understanding Mobile Proxy Networks
New Security Threats Caused by IMS-based SMS Service in 4G LTE Networks
New Security Threats Caused by IMS-based SMS Service in 4G LTE Networks
- Collection: talks
Revisited AI Security: From Adversarial Attacks to Application and Foundation
On Manually Reverse Engineering Communication Protocols of Linux Based IoT Systems
- Collection: teaching
Sitemap
A list of all the posts and pages found on the site. For you robots out there is an XML version available for digesting as well.
Pages
NISL at Tsinghua University
About NISL
Network and Information Security Lab @ Tsinghua University
Homepage of NISL
清华大学网络与信息安全实验室
NISL 主页
Page not in menu
This is a page not in th emain menu
Posts
Collection: hacking
Collection: people
刘保证 (Baozheng Liu)
3 年级硕士生
清华大学 FIT 楼 1-213
uromise # gmail.com
清华大学 FIT 楼 1-213
uromise # gmail.com
Baozheng Liu (刘保证)
Third-year master since 2017.
FIT 1-213 Tsinghua University, Beijing, China 100084
uromise # gmail.com
FIT 1-213 Tsinghua University, Beijing, China 100084
uromise # gmail.com
Kun Du
清华大学网络与信息安全实验室，2015级博士研究生
清华大学 FIT楼1-213
清华大学 FIT楼1-213
Kun Du
Network and Information Security Lab
Institute for Network Science and Cyberspace, Tsinghua University, Beijing
FIT 1-213 Tsinghua University, Beijing, China 100084
Institute for Network Science and Cyberspace, Tsinghua University, Beijing
FIT 1-213 Tsinghua University, Beijing, China 100084
高辉 (Hui Gao)
清华大学网络与信息安全实验室，2019级硕士研究生 清华大学FIT楼1-213 [email protected]
Hui Gao (高辉)
Tsinghua University, Network and Information Security Lab, Master candidate in 2019 Tsinghua University FIT Building 1-213 [email protected]
Kaiwen Shen (沈凯文)
Tsinghua University, Network and Information Security Lab, Ph.D.17, PhD candidate
Tsinghua University FIT Building 1-213
[email protected]
Network and Information Security Lab (NISL)
Institute for Network Science and Cyberspace
CTFer in #Redbud#, #Bluelotus# and #Tea Deliverers#
李冠成 (Atum)
Atum 腾讯安全玄武实验室 高级研究员
北京市 海淀区 腾讯北京总部大厦
lgcpku#gmail.com https://github.com/A7um
北京市 海淀区 腾讯北京总部大厦
lgcpku#gmail.com https://github.com/A7um
Guancheng Li (李冠成)
Atum
Senior reseacher, Tencent Security Xuanwu Lab, Tencent Inc.
Tencent Beijing headquarters building, Haidian District, Beijing
lgcpku#gmail.com
https://github.com/A7um
Senior reseacher, Tencent Security Xuanwu Lab, Tencent Inc.
Tencent Beijing headquarters building, Haidian District, Beijing
lgcpku#gmail.com
https://github.com/A7um
李贺 (He Li)
安全研究, 北京市 海淀区
lihe1337 # gmail.com
lihe1337 # gmail.com
He Li (李贺)
Security reseacher, Beijing
lihe1337 # gmail.com
lihe1337 # gmail.com
刘煜堃 (Yukun Liu)
阿里巴巴 云智能安全 高级安全工程师
浙江省 杭州市 西湖区 阿里巴巴-飞天园区
eadom666 # gmail#com
浙江省 杭州市 西湖区 阿里巴巴-飞天园区
eadom666 # gmail#com
Yukun Liu (刘煜堃)
Security Engineer II, Cloud Computing Security Department, Alibaba Inc.
Apsara Park, Xihu District, Hangzhou, Zhejiang
eadom666 # gmail#com
Apsara Park, Xihu District, Hangzhou, Zhejiang
eadom666 # gmail#com
Weizhong Li (李伟中)
Tsinghua University, Network and Information Security Lab, a Master candidate in 2017.
[email protected], blog, repo
[email protected], blog, repo
裴中煜 (Zhongyu Pei)
阿里巴巴 猎户座实验室 安全研究员
北京市 朝阳区 阿里中心-望京A座
brieflyx # gmail.com
北京市 朝阳区 阿里中心-望京A座
brieflyx # gmail.com
Zhongyu Pei (裴中煜)
Security reseacher, Orion Security Lab, Alibaba Inc.
Building 9, Block 4, Wangjing East Park, Chaoyang District, Beijing
brieflyx # gmail.com
Building 9, Block 4, Wangjing East Park, Chaoyang District, Beijing
brieflyx # gmail.com
Shisong Qin (秦世松)
2019 Master student of Tsinghua University
FIT 4-204 Tsinghua University, Beijing, China 100084
[email protected]
FIT 4-204 Tsinghua University, Beijing, China 100084
[email protected]
王琰 (Yan Wang)
华为 未然实验室 安全研究员
北京市 海淀区 实创科技示范园-Q21
wangy0129 # gmail
北京市 海淀区 实创科技示范园-Q21
wangy0129 # gmail
Yan Wang (王琰)
Security reseacher, WeiRan Lab, Huawei Inc.
Building 21, No.156 Beiqing Road, Haidian District, Beijing
wangy0129 # gmail
Building 21, No.156 Beiqing Road, Haidian District, Beijing
wangy0129 # gmail
Dayu Wang (王大宇)
2019 Master student of Tsinghua University
FIT 1-213 Tsinghua University, Beijing, China 100084
[email protected]
FIT 1-213 Tsinghua University, Beijing, China 100084
[email protected]
Huikai Xu (徐绘凯)
2019 Master student, Network and Information Security Lab, Tsinghua University.
FIT 4-204, Tsinghua University, Beijing 100084, P.R.China
[email protected]
FIT 4-204, Tsinghua University, Beijing 100084, P.R.China
[email protected]
杨萌萌 (Mengmeng )
创业者 安全开发
北京市 海淀区 上地科技园
youngtala # gmail.com
北京市 海淀区 上地科技园
youngtala # gmail.com
Mengmeng Yang (杨萌萌)
Entrepreneur in Cyber Security
Shangdi Tech Park, Haidian District, Beijing
youngtala # gmail.com
Shangdi Tech Park, Haidian District, Beijing
youngtala # gmail.com
Li Yue (岳力)
2018 master student of Tsinghua University
FIT 4-204 Tsinghua University, Beijing, China 100084
[email protected]
FIT 4-204 Tsinghua University, Beijing, China 100084
[email protected]
曾皓辰 (Haochen Zeng)
加州大学河滨分校, 博士生
465 Winston Chung Hall, Department of Computer Science and Engineering, University of California, Riverside
haochen.zeng10 # gmail.com
https://github.com/sgzeng
465 Winston Chung Hall, Department of Computer Science and Engineering, University of California, Riverside
haochen.zeng10 # gmail.com
https://github.com/sgzeng
Haochen Zeng (曾皓辰)
PhD student, University of California, Riverside.
465 Winston Chung Hall, Department of Computer Science and Engineering, University of California, Riverside
haochen.zeng10 # gmail.com
https://www.linkedin.com/in/haochen-z-a8109439
https://github.com/sgzeng
465 Winston Chung Hall, Department of Computer Science and Engineering, University of California, Riverside
haochen.zeng10 # gmail.com
https://www.linkedin.com/in/haochen-z-a8109439
https://github.com/sgzeng
张少杰 (evilhex)
自由职业者
北京市 海淀区
zsjevilhex # gmail.com
北京市 海淀区
zsjevilhex # gmail.com
Evilhex (张少杰)
Security reseacher, Orion Security Lab, Alibaba Inc.
Haidian District, Beijing
zsjevilhex # gmail.com
Haidian District, Beijing
zsjevilhex # gmail.com
Zhiyuan lv (吕志远)
2015 PHD student of Tsinghua University
FIT 4-104 Tsinghua University, Beijing, China 100084
[email protected]
FIT 4-104 Tsinghua University, Beijing, China 100084
[email protected]
Zihan Zhang (张子晗)
2019 Master student of Tsinghua University
FIT 4-204 Tsinghua University, Beijing, China 100084
[email protected]
FIT 4-204 Tsinghua University, Beijing, China 100084
[email protected]
Baojun Liu (刘保君)
清华大学 网络研究院 助理教授 博士生导师
国家级高层次青年人才，重点研发计划青年科学家项目负责人
清华大学 FIT楼 4-204室
lbj [at] tsinghua -dot- edu -dot- cn
国家级高层次青年人才，重点研发计划青年科学家项目负责人
清华大学 FIT楼 4-204室
lbj [at] tsinghua -dot- edu -dot- cn
Baojun Liu (刘保君)
Assistant Professor
FIT 4-204, Tsinghua University, Beijing, China 100084
(+86) 130~5153~7959
lbj [at] tsinghua -dot- edu -dot- cn
FIT 4-204, Tsinghua University, Beijing, China 100084
(+86) 130~5153~7959
lbj [at] tsinghua -dot- edu -dot- cn
Chao Zhang (张超)
清华大学 网络研究院副院长 长聘副教授/博导
清华大学 华为冠名副教授，CCF杰出会员
清华大学FIT楼3-209
chaoz # tsinghua.edu.cn
清华大学 华为冠名副教授，CCF杰出会员
清华大学FIT楼3-209
chaoz # tsinghua.edu.cn
Chao Zhang (张超)
Tenured Associate Professor
Huawei Endowed Professor
FIT 3-209 Tsinghua University, Beijing, China 100084
chaoz # tsinghua.edu.cn
Huawei Endowed Professor
FIT 3-209 Tsinghua University, Beijing, China 100084
chaoz # tsinghua.edu.cn
Haixin Duan (段海新)
教授
+86-10-62603220
duanhx [at] tsinghua.edu.cn
清华大学FIT大楼3-211
+86-10-62603220
duanhx [at] tsinghua.edu.cn
清华大学FIT大楼3-211
Haixin Duan (段海新)
Professor of the Institute for Network Sciences and Cyberspace, Tsinghua University.
Email: duanhx [AT] tsinghua dot edu dot cn
Office: FIT Building, Room 3-211, Tsinghua University.
Email: duanhx [AT] tsinghua dot edu dot cn
Office: FIT Building, Room 3-211, Tsinghua University.
Jianjun Chen ( 陈建军)
清华大学 副教授、博士生导师
国家级高层次青年人才
清华大学FIT楼1-213
jianjun [AT] tsinghua.edu.cn
国家级高层次青年人才
清华大学FIT楼1-213
jianjun [AT] tsinghua.edu.cn
Jianjun Chen ( 陈建军)
Associate Professor, Tsinghua University
FIT 1-213 Tsinghua University, Beijing, China 100084
jianjun [AT] tsinghua.edu.cn
FIT 1-213 Tsinghua University, Beijing, China 100084
jianjun [AT] tsinghua.edu.cn
Jia Zhang (张甲)
副研究员
北京市海淀区清华大学FIT楼4-204，邮编：100084
zhangjia # cernet.edu.cn
北京市海淀区清华大学FIT楼4-204，邮编：100084
zhangjia # cernet.edu.cn
Jia Zhang (张甲)
Associate Research Professor
FIT 4-204 Tsinghua University, Beijing, China 100084
zhangjia # cernet.edu.cn
FIT 4-204 Tsinghua University, Beijing, China 100084
zhangjia # cernet.edu.cn
Kanghong Cangyong (仓永康弘)
Master(2022), Network and Information Security Lab, Tsinghua University
Room 1-213, FIT Building, Tsinghua University
cykh22 @ mails.tsinghua.edu.cn
Room 1-213, FIT Building, Tsinghua University
cykh22 @ mails.tsinghua.edu.cn
邓楚云 (Chuyun Deng)
清华大学 网络与信息安全实验室；硕士研究生（2020级）
清华大学 FIT楼 1-213
dengcy20 # mails.tsinghua.edu.cn
清华大学 FIT楼 1-213
dengcy20 # mails.tsinghua.edu.cn
Chuyun Deng (邓楚云)
Master (2020); Network and Information Security Lab, Tsinghua University
1-213 Room, FIT Building, Tsinghua University
dengcy20 # mails.tsinghua.edu.cn
1-213 Room, FIT Building, Tsinghua University
dengcy20 # mails.tsinghua.edu.cn
付卓群 (Zhuoqun Fu)
Tsinghua University, Network and Information Security Lab, Master candidate in 2020
Tsinghua University FIT Building 1-213
[email protected]
Tsinghua University FIT Building 1-213
[email protected]
Minglei Guo (郭明磊)
Tsinghua University, Network and Information Security Lab, a Master candidate in 2020.
Tsinghua University FIT Building 1-213
gml # [email protected]
Tsinghua University FIT Building 1-213
gml # [email protected]
梁越嘉 (Yuejia Liang)
清华大学 网络与信息安全实验室；硕士研究生（2021级）
清华大学 FIT楼 4-204
liangyj21 # mails.tsinghua.edu.cn
清华大学 FIT楼 4-204
liangyj21 # mails.tsinghua.edu.cn
Yuejia Liang (梁越嘉)
Master(2021), Network and Information Security Lab, Tsinghua University
Room 4-204, FIT Building, Tsinghua University
liangyj21 # mails.tsinghua.edu.cn
Room 4-204, FIT Building, Tsinghua University
liangyj21 # mails.tsinghua.edu.cn
Jiachen Li (李家琛)
Master(2020), Network and Information Security Lab, Tsinghua University
Room 1-213, FIT Building, Tsinghua University
[email protected]
Room 1-213, FIT Building, Tsinghua University
[email protected]
李岩 (Yan Li)
清华大学 网络与信息安全实验室；硕士研究生（2021级）
清华大学 FIT楼 4-206
li-yan21 # mails.tsinghua.edu.cn
清华大学 FIT楼 4-206
li-yan21 # mails.tsinghua.edu.cn
Yan Li (李岩)
Master (2021); Network and Information Security Lab, Tsinghua University
4-206 Room, FIT Building, Tsinghua University
li-yan21 # mails.tsinghua.edu.cn
4-206 Room, FIT Building, Tsinghua University
li-yan21 # mails.tsinghua.edu.cn
Keran Mu (穆柯橪)
Master student (2022), Network and Information Security Laboratory (NISL), Tsinghua University
Room 1-213, FIT Building, Tsinghua University
[email protected]
Room 1-213, FIT Building, Tsinghua University
[email protected]
Shangru Song (宋尚儒)
Master student (2022), Network and Information Security Laboratory (NISL), Tsinghua University
Room 1-213, FIT Building, Tsinghua University
[email protected]
Room 1-213, FIT Building, Tsinghua University
[email protected]
Wende Tan
清华大学 计算机科学与技术系 硕士研究生
北京市清华大学信息科学技术大楼（FIT楼）1-213
twd2 $ 163.com
北京市清华大学信息科学技术大楼（FIT楼）1-213
twd2 $ 163.com
Wende Tan
Department of Computer Science and Technology, Tsinghua University
FIT 1-213 Tsinghua University, Beijing, China 100084
twd2 $ 163.com
FIT 1-213 Tsinghua University, Beijing, China 100084
twd2 $ 163.com
薛镇青 (Zhenqing Xue)
清华大学 网络与信息安全实验室；硕士研究生（2022级）
清华大学 FIT楼 1-213
xuezq22 # mails.tsinghua.edu.cn
清华大学 FIT楼 1-213
xuezq22 # mails.tsinghua.edu.cn
Zhenqing Xue (薛镇青)
Master(2022), Network and Information Security Lab, Tsinghua University
Room 1-213, FIT Building, Tsinghua University
xuezq22 # mails.tsinghua.edu.cn
Room 1-213, FIT Building, Tsinghua University
xuezq22 # mails.tsinghua.edu.cn
许威 (Wei Xu)
清华大学 网络与信息安全实验室；硕士研究生（2021级）
清华大学 FIT楼 4-206
xu-w21 # mails.tsinghua.edu.cn
清华大学 FIT楼 4-206
xu-w21 # mails.tsinghua.edu.cn
Wei Xu (许威)
Master(2021), Network and Information Security Lab, Tsinghua University
Room 4-206, FIT Building, Tsinghua University
xu-w21 # mails.tsinghua.edu.cn
Room 4-206, FIT Building, Tsinghua University
xu-w21 # mails.tsinghua.edu.cn
倪远东 (Yuandong Ni)
清华大学 清华大学网络与信息安全实验室 17级硕士研究生
清华大学FIT楼4-204
nyd17#mails.tsinghua.edu.cn
清华大学FIT楼4-204
nyd17#mails.tsinghua.edu.cn
Yuandong Ni (倪远东)
2017 master student of Tsinghua University
FIT 4-204 Tsinghua University, Beijing, China 100084
nyd17 # mails.tsinghua.edu.cn
FIT 4-204 Tsinghua University, Beijing, China 100084
nyd17 # mails.tsinghua.edu.cn
郑林楷 (Linkai Zheng)
- 清华大学 网络与信息安全实验室 21 级硕士研究生
- 清华大学 FIT 楼 1-213
- zhenglj21 # mails.tsinghua.edu.cn
- Redbud / Tea Deliverers / Water Paddler 成员
Linkai Zheng (郑林楷)
- Tsinghua University, Network and Information Security Lab, Master candidate. 2021
- Tsinghua University FIT Building 1-213
- zhenglj21 # mails.tsinghua.edu.cn
- CTFer in Redbud / Tea Deliverers / Water Paddler
Zhenrui Zhang (张镇睿)
Tsinghua University, Network and Information Security Lab, Master candidate in 2021
Tsinghua University FIT Building 3-206
[email protected]
Tsinghua University FIT Building 3-206
[email protected]
汪嘉来 (Jialai Wang)
清华大学 清华大学网络与信息安全实验室 19级硕士研究生
清华大学 清华大学网络与信息安全实验室 22级博士研究生
清华大学FIT楼4-204
[email protected]
[email protected]
个人主页: https://wjl123wjl.github.io/
清华大学 清华大学网络与信息安全实验室 22级博士研究生
清华大学FIT楼4-204
[email protected]
[email protected]
个人主页: https://wjl123wjl.github.io/
Jialai Wang (汪嘉来)
2019 MASTER student of Tsinghua University
2022 PHD candidate student of Tsinghua University
FIT 4-204 Tsinghua University, Beijing, China 100084
[email protected]
[email protected]
My personal website: https://wjl123wjl.github.io/
2022 PHD candidate student of Tsinghua University
FIT 4-204 Tsinghua University, Beijing, China 100084
[email protected]
[email protected]
My personal website: https://wjl123wjl.github.io/
Bodong Zhao (赵博栋)
2017 PHD student of Tsinghua University
FIT 4-204 Tsinghua University, Beijing, China 100084
[email protected]
FIT 4-204 Tsinghua University, Beijing, China 100084
[email protected]
Kaixiang Chen (陈凯翔)
2018 PHD student of Tsinghua University
FIT 4-206 Tsinghua University, Beijing, China 100084
[email protected]
FIT 4-206 Tsinghua University, Beijing, China 100084
[email protected]
Xingman Chen (陈星曼)
2016 Ph.D student of Tsinghua University
FIT 4-204 Tsinghua University, Beijing, China 100084
[email protected]
FIT 4-204 Tsinghua University, Beijing, China 100084
[email protected]
Run Guo
Network and Information Security Lab Institute for Network Science and Cyberspace, Tsinghua University, Beijing 2015 PHD candidate student of Tsinghua University supervised by Prof. Jianpin Wu and Prof. Haixin Duan FIT 1-213 Tsinghua University, Beijing, China 100084
Hao Wang (王皓)
2020 PHD candidate student of Tsinghua University
FIT 4-206 Tsinghua University, Beijing, China 100084
[email protected]
FIT 4-206 Tsinghua University, Beijing, China 100084
[email protected]
靳子豪 (Zihao Jin)
清华大学计算机科学与技术系 博士研究生
北京市 海淀区 清华大学
北京市 海淀区 清华大学
Zihao Jin (靳子豪)
PhD student, Tsinghua University
Tsinghua University, Beijing 100084, P.R.China
Tsinghua University, Beijing 100084, P.R.China
郎峙煜 (Zhiyu Lang)
清华大学 网络与信息安全实验室；硕士研究生（2022级）
清华大学 FIT楼 1-213
langsy22 # mails.tsinghua.edu.cn
清华大学 FIT楼 1-213
langsy22 # mails.tsinghua.edu.cn
Zhiyu Lang (郎峙煜)
Master(2022), Network and Information Security Lab, Tsinghua University
Room 1-213, FIT Building, Tsinghua University
langsy22 # mails.tsinghua.edu.cn
Room 1-213, FIT Building, Tsinghua University
langsy22 # mails.tsinghua.edu.cn
陆超逸 (Chaoyi Lu)
清华大学 网络科学与网络空间研究院 博士后
北京市 海淀区 清华大学 FIT楼4-204室
个人主页：https://chaoyi.lu
邮箱：luchaoyi [at] tsinghua.edu.cn
北京市 海淀区 清华大学 FIT楼4-204室
个人主页：https://chaoyi.lu
邮箱：luchaoyi [at] tsinghua.edu.cn
Chaoyi Lu（陆超逸）
Postdoctoral researcher, Tsinghua University
FIT 4-204, Tsinghua University, Beijing 100084, China
Website: https://chaoyi.lu
Email: luchaoyi [at] tsinghua.edu.cn
FIT 4-204, Tsinghua University, Beijing 100084, China
Website: https://chaoyi.lu
Email: luchaoyi [at] tsinghua.edu.cn
刘明烜 (Mingxuan Liu)
清华大学网络科学与网络空间研究院，网络与信息安全实验室，2018级博士研究生
北京市 海淀区 清华大学 FIT楼4-206
liumx18 # mails.tsinghua.edu.cn
[个人主页](https://www.liumx.net/)
北京市 海淀区 清华大学 FIT楼4-206
liumx18 # mails.tsinghua.edu.cn
[个人主页](https://www.liumx.net/)
Mingxuan Liu (刘明烜)
Ph.D student, Institute for Network Sciences and Cyberspace, Network and Information Security Lab, Tsinghua University.
FIT 4-206, Tsinghua University, Beijing 100084, P.R.China
liumx18 # mails.tsinghua.edu.cn
[Personal Homepage](https://www.liumx.net/)
FIT 4-206, Tsinghua University, Beijing 100084, P.R.China
liumx18 # mails.tsinghua.edu.cn
[Personal Homepage](https://www.liumx.net/)
Yuan Li (李媛)
2018 PHD student of Tsinghua University
FIT 4-206 Tsinghua University, Beijing, China 100084
[email protected]
FIT 4-206 Tsinghua University, Beijing, China 100084
[email protected]
Yun Li (李贇)
2019 PHD student of Tsinghua University
FIT 4-206 Tsinghua University, Beijing, China 100084
[email protected]
FIT 4-206 Tsinghua University, Beijing, China 100084
[email protected]
Xiang Li (李想)
2019 Ph.D. candidate, Tsinghua University
FIT 4-204, Tsinghua University, Beijing 100084, P.R.China
Website: https://lixiang521.com
[email protected]
FIT 4-204, Tsinghua University, Beijing 100084, P.R.China
Website: https://lixiang521.com
[email protected]
Tingting Yin (殷婷婷)
PHD student of Tsinghua University
FIT 4-206 Tsinghua University, Beijing, China 100084
[email protected]
FIT 4-206 Tsinghua University, Beijing, China 100084
[email protected]
王楚涵 (Chuhan Wang)
清华大学 清华大学网络与信息安全实验室 19级博士研究生
北京市 海淀区 清华大学 FIT楼1-213
wch22 [AT] mails.tsinghua.edu.cn
CTF战队Redbud 成员
北京市 海淀区 清华大学 FIT楼1-213
wch22 [AT] mails.tsinghua.edu.cn
CTF战队Redbud 成员
Chuhan Wang (王楚涵)
2019 Ph.D. Candidate, Network and Information Security Lab, Tsinghua University.
FIT 1-213, Tsinghua University, Beijing 100084, P.R.China
wch22 [AT] mails.tsinghua.edu.cn
CTFer in Redbud
FIT 1-213, Tsinghua University, Beijing 100084, P.R.China
wch22 [AT] mails.tsinghua.edu.cn
CTFer in Redbud
王一航 (Yihang Wang)
清华大学 网络与信息安全实验室 22级博士研究生
北京市 海淀区 双清路 30 号 清华大学 FIT 楼 1-213 室
Yihang Wang (王一航)
PhD student supervised by Prof. Haixin Duan and Prof. Jianjun Chen
Network and Information Security Laboratory (NISL), Tsinghua University
Room 1-213, FIT Building, Tsinghua University, Beijing, China
Songtao Yang (杨松涛)
2018 PHD student of Tsinghua University
FIT 1-213 Tsinghua University, Beijing, China 100084
[email protected]
FIT 1-213 Tsinghua University, Beijing, China 100084
[email protected]
Computer Science and Technology
Ming Yuan (原铭)
2018 PHD student of Tsinghua University
FIT 4-206 Tsinghua University, Beijing, China 100084
[email protected]
FIT 4-206 Tsinghua University, Beijing, China 100084
[email protected]
Yishun Zeng (曾贻顺)
2019 PHD student of Tsinghua University
FIT 4-206 Tsinghua University, Beijing, China 100084
[email protected]
FIT 4-206 Tsinghua University, Beijing, China 100084
[email protected]
张丰露 (Fenglu Zhang)
清华大学 网络科学与网络空间研究院 20级博士研究生
个人主页：https://zhangfenglu.me/zh/
联系邮箱：[email protected]
Redbud/Bluelotus/Tea-Devliverers 成员
个人主页：https://zhangfenglu.me/zh/
联系邮箱：[email protected]
Redbud/Bluelotus/Tea-Devliverers 成员
Fenglu Zhang (张丰露)
Tsinghua University, PhD. candidate in 2020
Personal website: https://zhangfenglu.me/
Email: [email protected]
CTFer in Redbud, Bluelotus and Tea Deliverers
Personal website: https://zhangfenglu.me/
Email: [email protected]
CTFer in Redbud, Bluelotus and Tea Deliverers
李哲铭 (Li Zheming)
清华大学 清华大学网络与信息安全实验室 20级博士研究生
清华大学FIT楼1-213
lizm20 #at mails.tsinghua.edu.cn
清华大学FIT楼1-213
lizm20 #at mails.tsinghua.edu.cn
Li Zheming (李哲铭)
2020 Ph.D candidate of Tsinghua University
FIT 2-204 Tsinghua University, Beijing, China 100084
lizm20 #at mails.tsinghua.edu.cn
FIT 2-204 Tsinghua University, Beijing, China 100084
lizm20 #at mails.tsinghua.edu.cn
Wenyu Zhu (朱文宇)
2019 PHD student of Tsinghua University
FIT 1-213 Tsinghua University, Beijing, China 100084
[email protected]
FIT 1-213 Tsinghua University, Beijing, China 100084
[email protected]
Mingming Zhang (张明明)
PhD student, Tsinghua University
FIT 4-206, Tsinghua University, Beijing 100084, P.R.China
[email protected]
FIT 4-206, Tsinghua University, Beijing 100084, P.R.China
[email protected]
张一铭 (Yiming Zhang)
清华大学 网络研究院 博士后
北京市 海淀区 清华大学 FIT楼4-204
zhangyiming # tsinghua.edu.cn
北京市 海淀区 清华大学 FIT楼4-204
zhangyiming # tsinghua.edu.cn
Yiming Zhang (张一铭)
Postdoc, Institute for Network Sciences and Cyberspace, Tsinghua University
FIT 4-204, Tsinghua University, Beijing 100084, P.R.China
zhangyiming # tsinghua.edu.cn
FIT 4-204, Tsinghua University, Beijing 100084, P.R.China
zhangyiming # tsinghua.edu.cn
Qi Li (李琦)
清华大学 副教授
清华大学FIT大楼1-213
清华大学FIT大楼1-213
Qi Li (李琦)
Associate Professor, Tsinghua University
FIT 1-213 Tsinghua University, Beijing, China 100084
FIT 1-213 Tsinghua University, Beijing, China 100084
Jianwei Zhuge (诸葛建伟)
博士, 副研究员, CCF杰出会员
FIT 4-204, 清华大学, 北京市海淀区, 100084
zhugejw [at] tsinghua -dot- edu -dot- cn
FIT 4-204, 清华大学, 北京市海淀区, 100084
zhugejw [at] tsinghua -dot- edu -dot- cn
Jianwei Zhuge (诸葛建伟)
Associate Research Professor, CCF Distinguished Member
FIT 4-204, Tsinghua University, Beijing, China 100084
FIT 4-204, Tsinghua University, Beijing, China 100084
Collection: projects
网络扫描器：XMap
Published:
摘要
XMap: The Internet Scanner
Published:
Abstract
XMap is a fast network scanner designed for performing Internet-wide IPv6 & IPv4 network research scanning.教育网挖矿木马安全态势监测
Published:
摘要
教育网挖矿木马安全态势监测，基于CERNET国内互联节点采集的Netflow流量，对教育网环境内的挖矿木马活跃态势进行监测，对其影响与分布进行可视化。 页面功能主要包括：教育网内每日矿池通信连接规模变化，各高校挖矿行为态势统计以及全球矿池地理位置分布等。 我们将长期关注挖矿木马的安全态势，持续更新此页面，为维护教育网的安全积极贡献力量。Mining Trojan Monitoring of CERNET
Published:
Abstract
Mining Trojan Monitoring of CERNET, by analyzing NetFlow data from CERNET network node, we managed to monitor the network traffic of mining trojans in CERNET, and build a visual monitoring system that can track the distribution of mining behaviors in CERNET. This system provides the geographical distribution of global mining pool addresses, the daily monitoring of mining traffic and the statistics of the mining behaviors of schools and institutions in CERNET. We will pay close attention and continue to update this page for a long time, and actively contribute to the maintenance of the network security of the education network.Collection: publications
A Framework to Eliminate Backdoors from Response-Computable Authentication
a framework to mitigate backdoor threats
A Framework to Eliminate Backdoors from Response-Computable Authentication
a framework to mitigate backdoor threats
Practical Control Flow Integrity & Randomization for Binary Executables
a control flow integrity (CFI) solution for binaries
Practical Control Flow Integrity & Randomization for Binary Executables
a control flow integrity (CFI) solution for binaries
Exploiting and Protecting Dynamic Code Generation
a control flow integrity (CFI) solution for JIT code
Exploiting and Protecting Dynamic Code Generation
a control flow integrity (CFI) solution for JIT code
VTint: Protecting Virtual Function Tables’ Integrity
protecting virtual function calls for binaries
VTint: Protecting Virtual Function Tables’ Integrity
protecting virtual function calls for binaries
JITScope: Protecting Web Users from Control-Flow Hijacking Attacks
a control flow integrity (CFI) solution for JIT code
JITScope: Protecting Web Users from Control-Flow Hijacking Attacks
a control flow integrity (CFI) solution for JIT code
VTrust: Regaining Trust on Virtual Calls
protecting virtual function calls for programs with source code
VTrust: Regaining Trust on Virtual Calls
protecting virtual function calls for programs with source code
Towards Efficient Heap Overflow Discovery
Detect heap overflow vulnerabilities thoroughly with symbolic execution.
Towards Efficient Heap Overflow Discovery
Detect heap overflow vulnerabilities thoroughly with symbolic execution.
CollAFL: Path Sensitive Fuzzing
Improve fuzzing efficiency with high accuracy control flow information.
CollAFL: Path Sensitive Fuzzing
Improve fuzzing efficiency with high accuracy control flow information.
αDiff: Cross-Version Binary Code Similarity Detection with DNN
Detect binary code similarity with DNN.
αDiff: Cross-Version Binary Code Similarity Detection with DNN
Detect binary code similarity with DNN.
Revery: from Proof-of-Concept to Exploitable (One Step towards Automatic Exploit Generation)
Generate exploits for POCs that do not crash.
Revery: from Proof-of-Concept to Exploitable (One Step towards Automatic Exploit Generation)
Generate exploits for POCs that do not crash.
The CrossPath Attack: Disrupting the SDN Control Channel via Shared Link
Shared channels in SDN: attacks and defense
The CrossPath Attack: Disrupting the SDN Control Channel via Shared Link
Shared channels in SDN: attacks and defenses
MOPT: Optimized Mutation Scheduling for Fuzzers
A fuzzing mutation scheduling strategy based on PSO.
MOPT: Optimized Mutation Scheduling for Fuzzers
A fuzzing mutation scheduling strategy based on PSO.
Certificate Transparency in the Wild: Exploring the Reliability of Monitors
Exploring the Reliability of CT Monitors
Certificate Transparency in the Wild: Exploring the Reliability of Monitors
Exploring the Reliability of CT Monitors
Detecting Fake Accounts in Online Social Networks at the Time of Registrations
Fake account detection for WeChat
Detecting Fake Accounts in Online Social Networks at the Time of Registrations
Fake account detection for WeChat
以历史地理学方法考证诸葛氏之起源
以历史地理学方法考证诸葛氏之起源，发表于2019年诸葛亮研究会年会
On the origin of Zhuge’s clan by the method of historical geography
On the origin of Zhuge’s clan by the method of historical geography
A Market in Dream: the Rapid Development of Anonymous Cybercrime
Measurement of a darknet market - dream market.
A Market in Dream: the Rapid Development of Anonymous Cybercrime
Measurement of a darknet market - dream market.
A Survey of Security Vulnerability Analysis, Discovery, Detection, and Mitigation on IoT Devices
A Survey of Security Vulnerability Analysis, Discovery, Detection, and Mitigation on IoT Devices. Selected as the journal issue cover Paper.
A Survey of Security Vulnerability Analysis, Discovery, Detection, and Mitigation on IoT Devices
A Survey of Security Vulnerability Analysis, Discovery, Detection, and Mitigation on IoT Devices. Selected as the journal issue cover Paper.
CDN Judo: Breaking the CDN DoS Protection with Itself
abuse CDN for DDoS attacks
CDN Judo: Breaking the CDN DoS Protection with Itself
abuse CDN for DDoS attacks
When Match Fields Do Not Need to Match: Buffered Packets Hijacking in SDN
Packet Hijacking in SDN
When Match Fields Do Not Need to Match: Buffered Packets Hijacking in SDN
Packet Hijacking in SDN
Poseidon: Mitigating Volumetric DDoS Attacks with Programmable Switches
Mitigating DDoS Attacks with P4
Poseidon: Mitigating Volumetric DDoS Attacks with Programmable Switches
Mitigating DDoS Attacks with P4
CDN Backfired: Amplification Attacks Based on HTTP Range Requests
Amplification Attacks Based on HTTP Range Requests
CDN Backfired: Amplification Attacks Based on HTTP Range Requests
Amplification Attacks Based on HTTP Range Requests
A Large-Scale Empirical Study on Vulnerability Distribution within Projects and the Lessons Learned
Empirical Study on Vulnerability Distribution within Projects.
A Large-Scale Empirical Study on Vulnerability Distribution within Projects and the Lessons Learned
Empirical Study on Vulnerability Distribution within Projects.
DRAMD: Detect Advanced DRAM-based Stealthy Communication Channels with Neural Networks
AI-based Side Channel and Covert Channel Detection.
DRAMD: Detect Advanced DRAM-based Stealthy Communication Channels with Neural Networks
AI-based Side Channel and Covert Channel Detection.
FANS: Fuzzing Android Native System Services via Automated Interface Analysis
Fuzzing Android Binder services with automated interface analysis.
FANS: Fuzzing Android Native System Services via Automated Interface Analysis
Fuzzing Android Binder services with automated interface analysis.
GREYONE: Data Flow Sensitive Fuzzing
Improve fuzzing efficiency with lightweight data flow analysis.
GREYONE: Data Flow Sensitive Fuzzing
Improve fuzzing efficiency with lightweight data flow analysis.
Poison Over Troubled Forwarders: A Cache Poisoning Attack Targeting DNS Forwarding Devices
A cache poisoning attack targeting DNS forwarders.
Poison Over Troubled Forwarders: A Cache Poisoning Attack Targeting DNS Forwarding Devices
A cache poisoning attack targeting DNS forwarders.
Finding Cracks in Shields: On the Security of Control Flow Integrity Mechanisms
Measurement of CFI solutions’ security
Finding Cracks in Shields: On the Security of Control Flow Integrity Mechanisms
Measurement of CFI solutions’ security
Talking with Familiar Strangers: An Empirical Study on HTTPS Context Confusion Attacks
HTTPS MITM attacks based on the shared TLS certificates as HTTPS Context Confusion Attack (SCC Attack)
Talking with Familiar Strangers: An Empirical Study on HTTPS Context Confusion Attacks
HTTPS MITM attacks based on the shared TLS certificates as HTTPS Context Confusion Attack (SCC Attack)
Argot: Generating Adversarial Readable Chinese Texts
Generate adversarial Chinese texts with Glyph and Pinyin mutation.
Argot: Generating Adversarial Readable Chinese Texts
Generate adversarial Chinese texts with Glyph and Pinyin mutation.
From Exposed to Exploited: Drawing the Picture of Industrial Control Systems Security Status in the Internet Age
we design and implement ICScope, a passive vulnerability assessment system based on device search engines.
From Exposed to Exploited: Drawing the Picture of Industrial Control Systems Security Status in the Internet Age
we design and implement ICScope, a passive vulnerability assessment system based on device search engines.
POP and PUSH: Demystifying and Defending against (Mach) Port-Oriented Programming
Mitigate port-oriented programming attacks for macOS
POP and PUSH: Demystifying and Defending against (Mach) Port-Oriented Programming
Mitigate port-oriented programming attacks for macOS
Adapting to local conditions: Similarities and differences in anonymous online market between Chinese and English Speaking Communities
Similarities and differences in anonymous online market between Chinese and English Speaking Communities
Adapting to local conditions: Similarities and differences in anonymous online market between Chinese and English Speaking Communities
Similarities and differences in anonymous online market between Chinese and English Speaking Communities
Code is the (F)Law: Demystifying and Mitigating Blockchain Inconsistency AttacksCaused by Software Bugs
Exploit vulnerabilities in blockchains
Code is the (F)Law: Demystifying and Mitigating Blockchain Inconsistency AttacksCaused by Software Bugs
Exploit vulnerabilities in blockchains
Weak Links in Authentication Chains: A Large-scale Analysis of Email Sender Spoofing Attacks
This work explored the vulnerabilities of the chain-based authentication structure in the email ecosystem. We conducted a large-scale analysis of 30 popular email services and 23 email clients.
Weak Links in Authentication Chains: A Large-scale Analysis of Email Sender Spoofing Attacks
This work explored the vulnerabilities of the chain-based authentication structure in the email ecosystem. We conducted a large-scale analysis of 30 popular email services and 23 email clients.
iDEV: Exploring and Exploiting Semantic Deviations in ARM Instruction Processing
discovering inconsistencies in ARM instruction processing
iDEV: Exploring and Exploiting Semantic Deviations in ARM Instruction Processing
discovering inconsistencies in ARM instruction processing
RAProducer: Efficiently Diagnose and Reproduce Data Race Bugs for Binaries via Trace Analysis
diagnosing data race bugs
RAProducer: Efficiently Diagnose and Reproduce Data Race Bugs for Binaries via Trace Analysis
diagnosing data race bugs
MAZE: Towards Automated Heap Feng Shui
Manipulate heap layouts automatically.
MAZE: Towards Automated Heap Feng Shui
Manipulate heap layouts automatically.
Sharing More and Checking Less: Leveraging Common Input Keywords to Detect Bugs in Embedded Systems
Finding vulnerabilities in embedded systems
Sharing More and Checking Less: Leveraging Common Input Keywords to Detect Bugs in Embedded Systems
Finding vulnerabilities in embedded systems
VScape: Assessing and Escaping Virtual Call Protections
Bypass virtual protections towards AEG.
VScape: Assessing and Escaping Virtual Call Protections
Bypass virtual protections towards AEG.
Igor: Crash Deduplication Through Root-Cause Clustering
deduplicate crash samples
Igor: Crash Deduplication Through Root-Cause Clustering
deduplicate crash samples
ZKCPlus: Optimized Fair-exchange Protocol Supporting Practical and Flexible Data Exchange
An optimized fair-exchange protocol
ZKCPlus: Optimized Fair-exchange Protocol Supporting Practical and Flexible Data Exchange
An optimized fair-exchange protocol
ROLoad: Securing Sensitive Operations with Pointee Integrity
Protect sensitive operations with hardware support.
ROLoad: Securing Sensitive Operations with Pointee Integrity
Protect sensitive operations with hardware support.
An Empirical Study on Implicit Constraints in Smart Contract Static Analysis
Smart contracts static vulnerability detection
An Empirical Study on Implicit Constraints in Smart Contract Static Analysis
Smart contracts static vulnerability detection
PrIntFuzz: Fuzzing Linux Drivers via Automated Virtual Device Simulation
driver fuzzing based on virtual device simulation
StateFuzz: System Call-Based State-Aware Linux Driver Fuzzing
state-aware fuzzing
StateFuzz: System Call-Based State-Aware Linux Driver Fuzzing
state-aware fuzzing
PG-VulNet: Detect Supply Chain Vulnerabilities in IoT Devices using Pseudo-code and Graphs
we design and implement PG-VulNet, a tool for detecting Supply Chain Vulnerabilities in IoT Devices using Pseudo-code and Graphs.
PG-VulNet: Detect Supply Chain Vulnerabilities in IoT Devices using Pseudo-code and Graphs
we design and implement PG-VulNet, a tool for detecting Supply Chain Vulnerabilities in IoT Devices using Pseudo-code and Graphs.
HTFuzz: Heap Operation Sequence Sensitive Fuzzing
heap temporal vulnerability fuzzing
KextFuzz: Fuzzing macOS Kernel EXTensions on Apple Silicon via Exploiting Mitigations
macOS closed-source driver fuzzing
KextFuzz: Fuzzing macOS Kernel EXTensions on Apple Silicon via Exploiting Mitigations
macOS closed-source driver fuzzing
Collection: seminars
Detecting TCP/IP Connections via IPID Hash Collisions (PETS’19)
Abstract:
描述了一种新的基于侧信道的TCP连接检测方案。Detecting TCP/IP Connections via IPID Hash Collisions (PETS’19)
Abstract:
The paper presents a novel attack for detecting the presence of an active TCP connection between a remote Linux server and an arbitrary client machine.Breif Talk on Represent Learning
Abstract:
知识表示学习综述。Breif Talk on Represent Learning
Abstract:
A Breif Talk on Represent Learning.对抗文本研究综述
Abstract:
对抗文本研究综述。Adversarial Text Generation
Abstract:
A survey on existing adversarial text generation solutions and defense solutions.Spectre Attack and Defense Mechanism
Abstract:
Spectre攻击及防御综述。Spectre Attack and Defense Mechanism
Abstract:
A survey on Spectre attack variants and defense solutions.Breaking LTE on Layer Two (Oakland’19)
Abstract:
分析了LTE协议栈数据链路层存在的漏洞，描述了3种攻击方式。Breaking LTE on Layer Two (Oakland’19)
Abstract:
The paper analyzes LTE layer-two security and presents three attacks.HYPER-CUBE: High-Dimensional Hypervisor Fuzzing (NDSS’20)
Abstract:
提出了一种新的针对Hypervisor的高效fuzzing方案。HYPER-CUBE: High-Dimensional Hypervisor Fuzzing (NDSS’20)
Abstract:
A novel fuzzer that aims at testing hypervisors in an efficient, effective, and precise way.Automated Cross-Platform Reverse Engineering of CAN Bus Commands From Mobile Apps (NDSS’20)
Abstract:
提出了一种自动化逆向CAN总线命令的系统CANHUNTER。Automated Cross-Platform Reverse Engineering of CAN Bus Commands From Mobile Apps (NDSS’20)
Abstract:
The paper proposes a cost-effective (no real car needed) and automatic (no human intervention required) solution CANHUNTER to reverse engineer CAN bus commands via analyzing mobile apps associated with cars.Into the Deep Web: Understanding E-commerce Fraud from Autonomous Chat with Cybercriminals (NDSS’20)
Abstract:
提出了第一个黑产聊天机器人Aubrey。Into the Deep Web: Understanding E-commerce Fraud from Autonomous Chat with Cybercriminals (NDSS’20)
Abstract:
The paper presents the first chatbot, called Aubrey, to actively collect intelligence through autonomous chats with real-world e-commerce miscreants.The Broken Broker - MQTT安全研究报告
Abstract:
MQTT安全研究。The Broken Broker - MQTT
Abstract:
Security research on MQTT.Bobtail: Improved Blockchain Security with Low-Variance Mining (NDSS’20)
Abstract:
本篇论文提出了一种具有较低出块时间方差的PoW替代算法。Bobtail: Improved Blockchain Security with Low-Variance Mining (NDSS’20)
Abstract:
The paper proposes an alternative process for PoW-based block discovery that results in an inter-block time with lower variance.Burglars’IoT Paradise: Understanding and Mitigating Security Risks of General Messaging Protocols on IoT Clouds (Oakland’20)
Abstract:
本篇论文研究了MQTT协议在IoT云端的安全问题。Burglars’IoT Paradise: Understanding and Mitigating Security Risks of General Messaging Protocols on IoT Clouds (Oakland’20)
Abstract:
Security of MQTT protocol in IoT cloud.ParmeSan: Sanitizer-guided Greybox Fuzzing (Usenix Sec’20)
Abstract:
本篇论提出了sanitizer引导的定向Fuzzer——ParmeSan。ParmeSan: Sanitizer-guided Greybox Fuzzing (Usenix Sec’20)
Abstract:
The paper presented ParmeSan, a sanitizer-guided greybox fuzzing pipeline.基于搜索引擎的漏洞分布测量
Abstract:
近年关于借助搜索引擎实现网络空间已知漏洞评估的相关研究综述。Measuring Vulnerability Distribution via Search Engines
Abstract:
Researches on vulnerability assessment via device search engines.NativeX: Native Executioner Freezes Android (ASIACCS’20)
Abstract:
Android Native进程管理机制的缺陷。NativeX: Native Executioner Freezes Android (ASIACCS’20)
Abstract:
Android native process can exhaustively monopolize the system resources or the device computing resources in an unconfined manner.差分隐私简介和研究综述
Abstract:
关于差分隐私的简单介绍和相关研究的介绍。Survey on Differential Privacy
Abstract:
Brief introduction to differential privacy and related research.EcoFuzz: Adaptive Energy-Saving Greybox Fuzzing as a Variant of the Adversarial Multi-Armed Bandit (USENIX’20)
Abstract:
用一个多臂老虎机模型的变种来给灰盒fuzz建模，给出了在一定执行次数情况下路径探索效率最大化的方法。EcoFuzz: Adaptive Energy-Saving Greybox Fuzzing as a Variant of the Adversarial Multi-Armed Bandit (USENIX’20)
Abstract:
This paper proposed an energy-saving graybox fuzzing method using VAMAB Model.FuzzGen: Automatic Fuzzer Generation (USENIX’20)
Abstract:
本论文提出了一个自动化地为library生成fuzzer，且能够满足library function之间的依赖关系的方案。FuzzGen: Automatic Fuzzer Generation (USENIX’20)
Abstract:
This paper proposes a tool for automatically synthesising fuzzers for complex libraries in a given environment.IPv6地址发现相关研究
Abstract:
IPv6地址发现相关安全问题介绍及研究。Research on Network Reconnaissance in IPv6 Networks
Abstract:
Introduction to Network Reconnaissance in IPv6 Networks.基于深度学习的恶意流量检测
Abstract:
基于深度学习的恶意流量检测综述。Research on Deep Learning-based Traffic Detection
Abstract:
Introduction to the research about deep learning-based traffic detection.分布式拒绝服务攻击研究综述
Abstract:
近年DDoS攻击研究综述。Research on DDoS Attacks
Abstract:
Introduction to DDoS Attacks.内核中的原子性漏洞
Abstract:
介绍内核中一些不常见的原子性漏洞。Research on Atomic Bugs in Kernel
Abstract:
Introduction to some uncommon types of atomic bugs in kernel.FANS: Fuzzing Android Native System Services via Automated Interface Analysis
Abstract:
基于自动化接口分析的方式来测试Android原生系统服务。FANS: Fuzzing Android Native System Services via Automated Interface Analysis
Abstract:
Fuzzing Android Native System Services via Automated Interface Analysis.Certificate Ecosystem研究综述
Abstract:
近年关于Certificate Ecosystem的研究综述。An Overview of TLS Certificate Measurement
Abstract:
Introduction to TLS Certificate Measurement.A Longitudinal Study of PII Leaks Across Android App Versions (NDSS 2018)
Abstract:
对移动APP用户隐私泄露现象的检测及测量分析。A Longitudinal Study of PII Leaks Across Android App Versions (NDSS 2018)
Abstract:
The paper conducted a large-scale privacy analysis across multiple apps and app versions.Squirrel: Testing Database Management Systems with Language Validity and Coverage Feedback (CCS 2020)
Abstract:
对DBMS进行模糊测试，生成语言有效性的测试用例，并使用覆盖率反馈提高测试效果。Squirrel: Testing Database Management Systems with Language Validity and Coverage Feedback (CCS 2020)
Abstract:
The paper proposed Sqirrel, a novel fuzzing framework that considers both language validity and coverage feedback to test DBMSs.CDN Backfired: Amplification Attacks Based on HTTP Range Requests (DSN 2020)
Abstract:
HTTP范围请求机制在CDN环境中所导致的安全问题。CDN Backfired: Amplification Attacks Based on HTTP Range Requests (DSN 2020)
Abstract:
The paper presented a novel class of HTTP amplification attack, Range-based Amplification (RangeAmp) Attack.USBFuzz: A Framework for Fuzzing USB Drivers by Device Emulation (Usenix Sec 2020)
Abstract:
通过虚拟usb设备对usb驱动代码进行模糊测试。USBFuzz: A Framework for Fuzzing USB Drivers by Device Emulation (Usenix Sec 2020)
Abstract:
The paper presented USBFuzz, a portable, flexible, and modular framework for fuzz testing USB drivers.Cached and Confused: Web Cache Deception in the Wild
Abstract:
针对2017年提出的WCD漏洞的一次大规模自动化测量。Cached and Confused: Web Cache Deception in the Wild
Abstract:
A large-scale automated measurement of the WCD attack proposed in 2017.FuzzGuard: Filtering out Unreachable Inputs in Directed Grey-box Fuzzing through Deep Learning
Abstract:
这篇工作使用深度学习的方法在执行一个输入前去预测该种子文件对定向的测试目标是否可达，帮助定向灰盒fuzzing来过滤无效的种子来提高fuzzing的效率FuzzGuard: Filtering out Unreachable Inputs in Directed Grey-box Fuzzing through Deep Learning
Abstract:
This paper proposed a deep-learning-based approach to predict the reachability of inputs before executing the target program, helping DGF filtering out the unreachable ones to boost the performance of fuzzing.You Are What You Broadcast: Identification of Mobile and IoT Devices from (Public) WiFi
Abstract:
利用广播/组播字段特征进行设备识别和恶意行为检测You Are What You Broadcast: Identification of Mobile and IoT Devices from (Public) WiFi
Abstract:
We present a novel mobile/IoT device identification and abnormal device detection mechanism named OWL. OWL extracts features from structural and textual information embedded in the BC/MC packets.Machine Unlearning
Abstract:
提出了针对深度神经网络的遗忘训练方法Machine Unlearning
Abstract:
SISA training, a framework designed to achieve the largest improvements for stateful algorithms like stochastic gradient descent for deep neural networks, reduces the computational overhead associated with unlearning.IMP4GT: IMPersonation Attacks in 4G NeTworks
Abstract:
利用LTE网络中用户层面流量未被完整性保护的缺陷，可以任意伪造用户设备或者LTE网络进行通信IMP4GT: IMPersonation Attacks in 4G NeTworks
Abstract:
A novel IMP4GT attack that completely breaks the mutual authentication of LTE network aim on the user plane.Fuzzing Error Handling Code using Context-Sensitive Software Fault Injection
Abstract:
使用上下文敏感的软件错误注入（SFI）方法对程序中的错误处理函数进行FuzzFuzzing Error Handling Code using Context-Sensitive Software Fault Injection
Abstract:
Use the context-sensitive software fault injection (SFI) method to Fuzz the error handling functions in the tested programRust: Security and Efficiency
Abstract:
对 Rust 编程语言的特点、使用场景、基本语言设计以及其实现编译期内存安全和线程安全的方法进行介绍Rust: Security and Efficiency
Abstract:
Introduction to Rust programming languageSunrise to Sunset: Analyzing the End-to-end Life Cycle and Effectiveness of Phishing Attacks at Scale
Abstract:
通过对大规模钓鱼攻击的端对端生命周期测量来隔离和识别钓鱼探测的真空期。Sunrise to Sunset: Analyzing the End-to-end Life Cycle and Effectiveness of Phishing Attacks at Scale
Abstract:
Isolates and identifies detection gaps by measuring the end-to-end life cycle of large-scale phishing attacks.Composition Kills: A Case Study of Email Sender Authentication
Abstract:
在目前邮件生态中，如何绕过现有防御措施进行邮件伪造攻击Composition Kills: A Case Study of Email Sender Authentication
Abstract:
In the current email ecosystem, how to bypass existing defense measures to conduct email spoofing attacksUNIFUZZ: A Holistic and Pragmatic Metrics-Driven Platform for Evaluating Fuzzers
Abstract:
提出一个指标驱动的fuzzer评估平台UNIFUZZ: A Holistic and Pragmatic Metrics-Driven Platform for Evaluating Fuzzers
Abstract:
A new metrics-driven platform for evaluating fuzzersEthical Considerations in Network Security Research
Abstract:
针对目前网络安全研究中的道德规范问题进行综述分享Ethical Considerations in Network Security Research
Abstract:
To share an overview of ethical issues in current cybersecurity researchSoK: Understanding the Prevailing Security Vulnerabilities in TrustZone-assisted TEE Systems
Abstract:
对主流TrustZone-assisted的TEE系统安全性分析SoK: Understanding the Prevailing Security Vulnerabilities in TrustZone-assisted TEE Systems
Abstract:
A security analysis of popular TrustZone-assisted TEE systemsTopic: Automata Learning
Abstract:
分享一些利用模型学习对网络协议形式化分析的方法Topic: Automata Learning
Abstract:
To simply share an overview of model learning on protocol state fuzzingTopic: CFG-based Binary Code Similarity Comparison
Abstract:
分析15篇基于控制流图来分析二进制代码相似性的工作Topic: CFG-based Binary Code Similarity Comparison
Abstract:
To analyze 15 binary code similarity approaches based on CFG.英文论文写作技巧
Abstract:
介绍一些个人常用的英文论文写作技巧Tips for Academic Paper Writing
Abstract:
Some small tips on writing a technical paperPrivacy Risks of General-Purpose Language Models
Abstract:
通用语言模型中的文本嵌入从纯文本中捕获了大量的敏感信息，可以通过逆向工程来披露受害者的敏感信息，以便进一步骚扰。Privacy Risks of General-Purpose Language Models
Abstract:
Text embedding from the General Purpose Language Model captures a lot of sensitive information from plain text, which can be reverse-engineered to disclose sensitive information about the victim for further harassment.Cupid: Automatic Fuzzer Selection for Collaborative Fuzzing
Abstract:
利用简单的概率模型选择EnFuzz的互补性最强的基模糊测试器Cupid: Automatic Fuzzer Selection for Collaborative Fuzzing
Abstract:
Select the most complementary base fuzzers for EnFuzz through a simple probabilistic modelHVLearn: Automated Black-box Analysis of Hostname Verification in SSL/TLS Implementations
Abstract:
利用自动机的方式自动化地分析SSL implementation中关于hostname验证逻辑问题KUBO: Precise and Scalable Detection of User-triggerable Undefined Behavior Bugs in OS Kernel
Abstract:
KUBO，一个可扩展性和精度兼备的Linux内核Undefined Behavior静态检测工具KUBO: Precise and Scalable Detection of User-triggerable Undefined Behavior Bugs in OS Kernel
Abstract:
A novel static UB detector for Linux kernel, called KUBO which simultaneously achieves high precision and whole- kernel scalability域名流行度相关论文综述
Abstract:
对域名流行度排名的研究工作进行综述域名流行度相关论文综述
Abstract:
An overview of domain popularity ranking studies.Accurately Measuring Global Risk of Amplication Attacks using AmpMap
Abstract:
系统性地测量了UDP放大攻击的触发条件和影响规模Accurately Measuring Global Risk of Amplication Attacks using AmpMap
Abstract:
Designing a platform, AmpMap, to measure and discover Amplification attacks.A talk about DNS measurement
Abstract:
三篇关于DNS测量的工作介绍（IMC）A talk about DNS measurement
Abstract:
An introduction of three DNS measurement papers (IMC)WeepingCAN: A Stealthy CAN Bus-off Attack
Abstract:
改进的CAN总线上Bus-Off攻击。WeepingCAN: A Stealthy CAN Bus-off Attack
Abstract:
An Improved Bus-Off Attack on CAN Bus.Introduction to Secure Multi-party Computation
Abstract:
对多方安全计算的简单介绍Introduction to Secure Multi-party Computation
Abstract:
An informal introduction to Secure Multi-party ComputationNXNSAttack: Recursive DNS Inefficiencies and Vulnerabilities
Abstract:
作者提出了一种新型的 DNS DoS 漏洞及对应的攻击，NXNSAttack，即不存在的 NS 记录，比已有的 NXDomain 攻击（Negative cache）危害更大。攻击者通过控制一个 authority，回复不存在 glue 记录的 NS referral 包，将 referral 指向受害者域名，利用 resolver 发起众多的查询来造成放大攻击。NXNSAttack: Recursive DNS Inefficiencies and Vulnerabilities
Abstract:
This paper exposes a new vulnerability and introduces a corresponding attack, the NoneXistent Name Server Attack (NXNSAttack).Detecting Probe-resistant Proxies
Abstract:
对隐蔽代理进行探测与测量Detecting Probe-resistant Proxies
Abstract:
Detecting Probe-resistant ProxiesFuzzing Hardware Like Software
Abstract:
将RTL转化为软件模型进行FuzzFuzzing Hardware Like Software
Abstract:
Translate RTL hardware to a software model and fuzz that modelIntroduction to Defi—DEx part
Abstract:
去中心化金融和去中心化交易所的介绍Introduction to Defi—DEx part
Abstract:
A introduction to defi and dexZoom on the Keystrokes: Exploiting Video Calls for Keystroke Inference Attacks
Abstract:
介绍一种侧信道攻击，通过敲击键盘输入时的手臂移动，推断远程视频会议的参与者的私密输入内容Zoom on the Keystrokes: Exploiting Video Calls for Keystroke Inference Attacks
Abstract:
Side channel attack: infer keystrokes during remote video calls based on movements of arms during typingTopic：NLP-related Security Papers
Abstract:
对网络安全领域利用NLP技术进行相关研究的简要分享Topic：NLP-related Security Papers
Abstract:
WINNIE: Fuzzing Windows Applications with Harness Synthesis and Fast Cloning
Abstract:
本文介绍了一种Fuzz Windows应用程序的工具WINNIE: Fuzzing Windows Applications with Harness Synthesis and Fast Cloning
Abstract:
This article introduces a tool for fuzzing Windows applicationsNtFuzz: Enabling Type-Aware Kernel Fuzzing on Windows with Static Binary Analysis
Abstract:
本文介绍了一种对 Windows 内核进行模糊测试的方案NtFuzz: Enabling Type-Aware Kernel Fuzzing on Windows with Static Binary Analysis
Abstract:
This paper proposes a novel framework for fuzzing Windows kernelTextShield: Robust Text Classification Based on Multimodal Embedding and Neural Machine Translation
Abstract:
通过机器翻译和多模型融合防御文本对抗攻击。TextShield: Robust Text Classification Based on Multimodal Embedding and Neural Machine Translation
Abstract:
Robust Text Classification Based on Multimodal Embedding and Neural Machine TranslationClassifying Sequences of Extreme Length with Constant Memory Applied to Malware Detection
Abstract:
本文提出了一种训练大尺寸恶意软件的方法；并提出了一种新的模型结构来检测恶意软件。Classifying Sequences of Extreme Length with Constant Memory Applied to Malware Detection
Abstract:
This paper proposes a method for training malware with large size; and proposes a new model structure to detect malware.Understanding the Growth and Security Considerations of ECS
Abstract:
本文对DNS的一个扩展协议——ECS进行了测量。Understanding the Growth and Security Considerations of ECS
Abstract:
This paper excuted a measurement on ECS, which is an extension of DNS.TLS 1.3 in Practice How TLS 1.3 Contributes to the Internet + On the Origin of Scanning- The Impact of Location on Internet-Wide Scans
Abstract:
对于一项TLS 1.3测量工作，以及“ipv4 扫描”方法本身准确性的讨论。TLS 1.3 in Practice How TLS 1.3 Contributes to the Internet + On the Origin of Scanning- The Impact of Location on Internet-Wide Scans
Abstract:
A discussion of a TLS 1.3 measurement paper and the accuracy of the “ipv4 scanning” itself.Your Phone is My Proxy: Detecting and Understanding Mobile Proxy Networks
Abstract:
本文对移动代理网络进行了测量分析Your Phone is My Proxy: Detecting and Understanding Mobile Proxy Networks
Abstract:
A measurement on mobile proxy networksNew Security Threats Caused by IMS-based SMS Service in 4G LTE Networks
Abstract:
SIP协议部署安全性分析，提出了几种攻击并给出缓解措施。（值得一提的是，虽然文章是16年的，【RCS】 或者叫【5G消息】仍是基于SIP的）New Security Threats Caused by IMS-based SMS Service in 4G LTE Networks
Abstract:
SIP Protocol security & Uncover its security vulnerabilities and exploit them to devise four SMS attacks: silent SMS abuse, SMS spoofing, SMS client DoS, and SMS spammingCollection: talks
Security Protocols: Model Checking Standards
Abstract:
The design of security protocols is typically approached as an art, rather than a science, and often with disastrous consequences. But this need not be so! I have been working for ca. 20 years on foundations, methods, and tools, both for developing protocols that are correct by construction and for the post-hoc verification of existing designs. In this talk I will introduce my work in this area and describe my experience analyzing, improving, and contributing to different industry standards, both existing and upcoming.Security Risks in Zero Knowledge Proof Cryptocurrencies
Abstract:
零知识证明技术目前被广泛应用于包括以太坊、门罗币、Zcash等多个区块链项目中。但其在实际应用中的安全和隐私隐患并不被大众所熟知。本议题主要通过对门罗币、Zcash上一些安全事件和漏洞的分析，和分享我们发现的一些零知识证明具体实现中的漏洞和隐患，来介绍零知识证明技术在区块链应用中存在的一些安全和隐私问题。Thoughts on Applying Machine Learning in Security
Abstract:
机器学习学科融合了数学中的多个领域，包括统计学、概率论、以及线性代数。机器学习能够深入挖掘大数据价值，被广泛用于电影推荐、饮食及产品购买推荐等各方面。众多大型互联网公司也运用机器学习来改进其产品及服务。将机器学习应用到网络安全已成为近年来安全领域的研究热点，为人们在决策制定、任务执行方面提供建议对策与技术支持，将专业分析人员从复杂度高且耗时巨大的工作中释放。但是，安全领域具有自己独特的数据，场景和应用特征，本次分享主要介绍机器学习在网络安全中的实际应用以及应用过程中我们需要注意的问题。Attack XNU via Userspace Library Hijacking
Abstract:
内存破坏时至今日仍然是漏洞利用的主流战场，而操作系统为了提升安全性也引入了随机化等缓解措施来提高利用门槛。本议题另辟蹊径，仅靠用户态代码劫持的逻辑漏洞，完全避开通用缓解措施，在 macOS High Sierra 上实现 100% 稳定内核提权。更为有趣的是，系统重要的安全机制 sandbox 在这里变成了漏洞利用至关重要的帮凶。iOS/macOS 漏洞挖掘经验谈之温故知新
Abstract:
iOS/macOS系统的漏洞挖掘是当前业界的热点。这个议题里我将分享自己在iOS/macOS 安全研究工作中的一些经验和心得，回顾我们在公开报告中埋藏过的一些彩蛋，希望对刚刚进入iOS/macOS系统漏洞挖掘领域的同学有所帮助和启发。Revisited AI Security: From Adversarial Attacks to Application and Foundation
Abstract:
Recently, AI security has drawn significant attention from the academia and industry. Various kinds of adversarial attacks and defenses spring up like bamboo shoots. Now, considering more and more AI systems have been deployed and are being deployed, it is the time to comprehensively understand what is the performance of the attacks against real world systems? Furthermore, in security-critical applications, in addition to empirical evaluation, how to understand/quantify the security space of deep models is also important. In this talk, based on our previous research, I will introduce some AI security projects, as well as some recent interesting results from the adversarial example transferability and robustness quantification perspectives.软件漏洞挖掘方法探索
Abstract:
模糊测试近年来成为安全研究人员的必备的漏洞挖掘工具。实践中最有效的模糊测试工具通常包含种子测试例生成、选择、变异、测试、评估、反馈等多个环节，每个环节都可以被优化改进以提升漏洞挖掘效率。我们通过改进经典模糊测试方案，提出了多个新的漏洞挖掘方案，在四大安全会议发表多篇论文，取得了不错的效果。本次报告中，演讲者将与大家分享其部分研究成果。PeX: A Permission Check Analysis Framework for Linux Kernel
Abstract:
Permission checks play an essential role in operating system security by providing access control to privileged functionalities. However, it is particularly challenging for kernel developers to correctly apply new permission checks and to scalably verify the soundness of existing checks due to the large code base and complexity of the kernel. In fact, Linux kernel contains millions of lines of code with hundreds of permission checks, and even worse its complexity is fast-growing.On Manually Reverse Engineering Communication Protocols of Linux Based IoT Systems
Abstract:
IoT security and privacy has raised grave concerns. Efforts have been made to design tools to identify and understand vulnerabilities of IoT systems. Most of the existing protocol security analysis techniques rely on a well understanding of the underlying communication protocols. In this talk, we systematically present the first manual reverse engineering framework for discovering communication protocols of embedded Linux based IoT systems. We have successfully applied our framework to reverse engineer a number of IoT systems. The discovered protocols expose severe design flaws that allow attackers to control or deny the service of victim IoT devices. Our manual reverse engineering framework is generic and can be applied to both read-only and writable Embedded Linux filesystems.软件供应链视角下的漏洞攻防
Abstract:
漏洞攻防是软件安全领域的经典研究主题。然而，随着软件行业的飞速发展，软件的研发过程已经演进为上下游紧密依赖的软件供应链模式。在软件供应链生态中，下游软件系统的漏洞管理和防护非常重要，但是却存在诸多挑战。本次报告将从漏洞的修复评估方法出发，系统性的介绍软件供应链视角下漏洞攻防研究面临的若干困难并分享目前已取得的一些初步进展。软硬协同的系统隔离机制
Abstract:
CPU厂商不断推出新的硬件安全与隔离的特性，Intel在最近6年发布的相关特性数量已经超过了之前的总和，利用好这些特性需要软硬件协同的设计。本次报告首先介绍了系统隔离机制作为信息产业基础设施，在云端、移动端等场景下对故障隔离和数据保护的基础性作用，然后介绍底层相关软硬件的发展现状、面临的挑战与机遇，最后介绍我们应对这些挑战所作的一些研究工作，包括已开源的RISC-V平台Enclave系统——“蓬莱”等。实用型可搜索加密被动式攻击方法
Abstract:
实用型可搜索加密在允许一定信息泄露的前提下实现了对存储在云端密态数据的高效搜索。当前实用型密态数据搜索应用系统（如ShadowCrypt等）的构建主要基于一种名为“efficiently deployable, efficiently searchable encryption”(EDESE)的可搜索加密方案。针对EDESE方案所泄露的信息，本报告将介绍一种针对此类信息泄露的新型被动式攻击方法，进一步揭露了实用型可搜索加密信息泄露的危害。Collection: teaching
程序分析与测试
课程主要内容包括：
Software Analysis and Testing
This course covers the following topics:
漏洞挖掘与利用
课程主要内容包括：
Vulnerability Analysis
This course covers the following topics:
数据安全
课程主要内容包括：
Data Security
This course is covers the following topics:
系统安全前沿研究
课程主要内容包括：
Seminars on System Security
This course covers the following topics:
高级网络攻防实践
课程主要内容包括：
Advanced Cyber Attack and Defense Practice
This course covers the following topics:
Web安全
课程主要内容包括：
Web Security
This course is covers the following topics: