Home   

Yueqi (Lewis) Chen, 陈越琦 [ CV ]
Ph.D Student
College of Information Sciences & Technology
The Pennsylvania State University

Contact
Westgate Building, E343
State College, PA 16803
ychen AT ist DOT psu DOT edu


I am a 1st/2nd/3rd  4th year Ph.D student in College of Information Sciences & Technology from The Pennsylvania State University. I am co-advised by Dr. Xinyu Xing and Dr. Peng Liu. I received my B.S in Computer Science & Technology from Nanjing University in 2017. I am awarded the 2020 IBM Ph.D Fellowship (1/24 globally).

My research interests include Operating system (OS) Security and Vulnerability Analysis. I am actively working on exploitability assessment, especially for vulnerabilities in infrastructure software systems (e.g., OS kernel and cryptography library).

- News

    [ 09/08/2020 ] ELOISE is accepted to ACM CCS 2020.
    [ 08/18/2020 ] A talk about kernel data leakage is accepted to LSS Europe 2020.
    [ 07/31/2020 ] Symo3 is conditionally accepted to OOPSLA 2020.
    [ 06/10/2020 ] Received Black Hat USA Student Scholarship.
    [ 03/18/2020 ] Received IBM PhD Fellowship Award.
    [ 01/10/2020 ] "Facilitate ... Step by Step" is accepted to Blue Hat IL 2020.
    [ 12/09/2019 ] SpecuSym is accepted to ICSE 2020. [ arXiv Preprint ]
    [ 12/04/2019 ] Present "Hands off..." at Black Hat Europe 2019. [ Slides ]
    [ 11/25/2019 ] Talk about exploitability assessment at Vrije Universiteit Amsterdam. [ Slides ]
    [ 11/22/2019 ] Talk about exploitability assessment at University of Oxford.
    [ 11/14/2019 ] Present SLAKE at ACM CCS 2019. [ Slides ] [ Video ]
    [ 10/09/2019 ] "Hands off..." is accepted to Black Hat Europe 2019.
    [ 09/16/2019 ] SLAKE is accepted to ACM CCS 2019.


- Talks

  1. Facilitate Linux Kernel Exploitation Step by Step [ Slides ]
    Feb 05th, 2020, Tel Aviv, Israel, Blue Hat IL 2020

  2. Towards Exploitability Assessment for Linux Kernel Vulnerabilities [ Slides ]
    Nov 25th, 2019, Amsterdam, Netherlands, Vrije Universiteit Amsterdam
    Nov 22nd, 2019, Oxford, UK, University of Oxford [ Flyer ]

  3. Vulnerability Exploitabity Assessment and Mitigation Design Defects in Linux Kernel [ Slides available upon request ]
    Oct 19th, 2019, Hangzhou, China, CLK 2019 (中国Linux内核开发者大会)

- Publication

OS Security
Feel free to take an overview of this research thread in my "Towards ..." talk slides

  1. (ELOISE) A Systematic Study of Elastic Objects in Kernel Exploitation
    Yueqi Chen, Zhenpeng Lin, Xinyu Xing
    The 27th ACM Conference on Computer and Communications Security (ACM CCS 2020)
    [ Paper ] [ Slides ] [ Repo]

  2. Hands Off and Putting SLAB/SLUB Feng Shui in a Blackbox
    Yueqi Chen, Xinyu Xing, Jimmy Su
    Highly-anticipated Talk at Black Hat Europe 2019
    [ Slides ] [ Video ] [ Demo1 ] [ Demo2 ]

  3. SLAKE: Facilitating Slab Manipulation for Exploiting Vulnerabilities in the Linux Kernel
    Yueqi Chen, Xinyu Xing
    The 26th ACM Conference on Computer and Communications Security (ACM CCS 2019)
    [ Paper ] [ Slides ] [ Repo ] [ Video ]

  4. KEPLER: Facilitating Control-flow Hijacking Primitive Evaluation for Linux Kernel Vulnerabilities
    Wei Wu, Yueqi Chen, Xinyu Xing, Wei Zou
    The 28th USENIX Security Symposium (USENIX Security 2019)
    [ Paper ] [ Slides ] [ Repo ]

  5. FUZE: Towards Facilitating Exploit Generation for Kernel Use-After-Free Vulnerabilities
    Wei Wu, Yueqi Chen, Jun Xu, Xinyu Xing, Wei Zou, Xiaorui Gong
    The 27th USENIX Security Symposium (USENIX Security 2018)
    [ Paper ] [ Slides ] [ Repo ]

Side-channel Detection

  1. (Symo3) Exposing Cache Timing Side-channel Leaks through Out-of-order Symbolic Execution
    Shengjian Guo, Yueqi Chen*, Jiyong Yu, Meng Wu, Zhiqiang Zuo, Peng Li, Yueqiang Cheng
    The Object-Oriented Programming, Systems, Languages, and Applications (OOPSLA 2020)
    [ Paper ] [ Slides ] [ Repo ]
    * indicates equal contribution

  2. SpecuSym: Speculative Symbolic Execution for Cache Timing Leak Detection
    Shengjian Guo, Yueqi Chen*, Peng Li, Yueqiang Cheng, Huibo Wang, Meng Wu, Zhiqiang Zuo
    The 42nd International Conference on Software Engineering (ACM/IEEE ICSE 2020)
    [ Paper ] [ Slides ] [ Repo ] [ arXiv Preprint ]
    * indicates equal contribution

AI for security

  1. Towards the Detection of Inconsistencies in Public Security Vulnerability Reports
    Ying Dong, Wenbo Guo, Yueqi Chen, Xinyu Xing, Yuqing Zhang, Gang Wang
    The 28th USENIX Security Symposium (USENIX Security 2019)
    [ Paper ] [ Slides ] [ Repo ] [ Video ]

  2. RENN: Efficient Reverse Execution with Neural-Network-assisted Alias Analysis
    Dongliang Mu, Wenbo Guo, Alejandro Cuevas, Yueqi Chen, Jinxuan Gai, Xinyu Xing, Bing Mao, Chengyu Song
    The 34th IEEE/ACM International Conference on Automated Software Engineering (IEEE/ACM ASE 2019)
    [ Paper ] [ Slides ] [ Repo ]

- Honor & Award

  • Black Hat USA, Student Scholarship, 2020
  • IBM PhD Fellowship Award, 2020, one out of 24 globally [ Press ]
  • IST Graduate Student Travel Grant Award, 2019
  • The 28th USENIX Security Symposium, Student Travel Grant Award, 2019
  • FUZE is awarded one of the ten technical events of JD.COM (2018京东集团技术十件大事), 2018
  • DEF CON 26 CTF, Team r3kapig, Final, 2018
  • Black Hat USA, Student Scholarship, 2018
  • The 39th IEEE Symposium on Security and Privacy, Student Travel Grant Award, 2018
  • 2017 NSA codebreaker Challenge, Team member, Rank 5, 2017

- Community Services

  • Sub-reviewer of
    2020: USENIX Security, ACM CCS, ACSAC
    2019: ACM CCS, ESORICS, ACSAC, ISC
    2018: ACM AsiaCCS, IEEE CNS

- Teaching

  • Fall 2019, "CYBER 362 - Cyber Analysis Studio", Teaching Assistant
  • Spring 2019, "IST 456 - Information Security Management", Teaching Assistant
  • Fall 2018, "SRA 221 - Overview of Information Security", Teaching Assistant

- Traveling

  • I enjoy traveling. I have visied many U.S. states and countries on earth with my best friends and sometimes alone.