Published in NDSS'24, 2024
This paper is about the deserialization defense for Java applications.
Recommended citation: Quan Zhang, Yiwen Xu, Zijing Yin, Chijin Zhou, and Yu Jiang. "Automatic Policy Synthesis and Enforcement for Protecting Untrusted Deserialization." Network and Distributed System Security Symposium (NDSS'24). http://ZQ-Struggle.github.io/files/Deseriguard.pdf
Published in OOPSLA'23, 2023
This paper aims to fuzz browsers with a context sensitive grammar.
Recommended citation: Chijin Zhou, Quan Zhang, Lihua Guo, Mingzhe Wang, Yu Jiang, Qing Liao, Zhiyong Wu, Shanshan Li, Bin Gu. "Towards Better Semantics Exploration for Browser Fuzzing." Object-Oriented Programming, Systems, Languages & Applications (OOPSLA'23). http://wingtecher.com/themes/WingTecherResearch/assets/papers/oopsla23-browser-preprint.pdf
Published in OOPSLA'23, 2023
This paper aims to build a dynamic system call sandbox for vulnerable applications.
Recommended citation: Quan Zhang, Chijin Zhou, Yiwen Xu, Zijing Yin, Mingzhe Wang, Zhuo Su, Chengnian Sun, Yu Jiang, and Jiaguang Sun. "Building Dynamic System Call Sandbox with Partial Order Analysis." Object-Oriented Programming, Systems, Languages & Applications (OOPSLA'23). http://ZQ-Struggle.github.io/files/DynBox.pdf
Published in ISSTA'23, 2023
This paper aims to enhance the robustness of DL system with a cooperative enhancement technique.
Recommended citation: Quan Zhang, Yongqiang Tian, Yifeng Ding, Shanshan Li, Chengnian Sun, Yu Jiang, and Jiaguang Sun. "CoopHance: Cooperative Enhancement for Robustness of Deep Learning Systems." The ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA'23). http://ZQ-Struggle.github.io/files/CoopHance.pdf
Published in S&P'23, 2023
This paper aims to reveal a potential threat of imitation-based ransomware.
Recommended citation: Chijin Zhou, Lihua Guo, Yiwei Hou, Zhenya Ma, Quan Zhang, Mingzhe Wang, Zhe Liu, and Yu Jiang. "Limits of I/O Based Ransomware Detection: An Imitation Based Attack." IEEE Symposium on Security and Privacy (S&P'23). http://wingtecher.com/themes/WingTecherResearch/assets/papers/animagus-SP23.pdf
Published in ESEC/FSE'22, 2022
This paper test browsers with api sequences construced based on mod-ref relations.
Recommended citation: Chijin Zhou, Quan Zhang, Mingzhe Wang, Lihua Guo, Jie Liang, Zhe Liu, Mathias Payer, Yu Jiang. "Minerva: Browser API Fuzzing with Dynamic Mod-Ref Analysis." The ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering (ESEC/FSE'22). http://wingtecher.com/themes/WingTecherResearch/assets/papers/FSE22_Minerva.pdf
Published in TSE, 2021
This paper test browsers with api sequences construced based on mod-ref relations.
Recommended citation: Jianmin Guo, Quan Zhang, Yue Zhao, Heyuan Shi, Yu Jiang and Jiaguang Sun. "RNN-Test: Towards Adversarial Testing for Recurrent Neural Network Systems." IEEE Transactions on Software Engineering (TSE). http://wingtecher.com/themes/WingTecherResearch/assets/papers/RNN-Test-final.pdf
Published in ISSTA'21, 2021
This paper test browsers with api sequences construced based on mod-ref relations.
Recommended citation: Quan Zhang, Yifeng Ding, Yongqiang Tian, Jianmin Guo, Min Yuan, Yu Jiang. "AdvDoor: Adversarial Backdoor Attack of Deep Learning System." The ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA'21). http://ZQ-Struggle.github.io/files/AdvDoor.pdf