Email / LinkedIn / CV
💡 My research models the security problems in programming languages and web applications. I aim to ignite a beacon for vulnerability discovery in the sea of program execution paths.
- DSFuzz: Detecting Deep State Bugs with Dependent State Exploration
- Acquirer: A Hybrid Approach to Detecting Algorithmic Complexity Vulnerabilities [PDF]
- Understanding and Detecting Performance Bugs in Markdown Compilers [PDF/Code]
- Revealer: Detecting and Exploiting Regular Expression Denial-of-Service Vulnerabilities [PDF/Code/Talk]
- Interpretable Anomaly Detection in Variable-Length Co-Evolving Rhythmic Sequences [PDF]
- Local Group Anomaly Detection for Multiple Time Series with Synchronization Errors [PDF]