I am a first second third year Ph.D student in College of Information Sciences & Technology from The Pennsylvania State University. I am co-advised by Dr. Xinyu Xing and Dr. Peng Liu. I received my B.S in Computer Science & Technology from Nanjing University in 2017. I have been awarded the 2020 IBM Ph.D Fellowship.
My research interests include Operating system (OS) Security and Vulnerability Analysis. I am actively working on exploitability assessment, especially for vulnerabilities in infrastructure software systems (e.g., OS kernel and cryptography library).
- News
[ 07/31/2020 ] Symo3 is conditionally accepted to OOPSLA 2020.
[ 06/10/2020 ] Received Black Hat USA Student Scholarship.
[ 03/18/2020 ] Received IBM PhD Fellowship Award.
[ 01/10/2020 ] "Facilitate ... Step by Step" is accepted to Blue Hat IL 2020.
[ 12/09/2019 ] SpecuSym is accepted to ICSE 2020. [ arXiv Preprint ]
[ 12/04/2019 ] Present "Hands off..." at Black Hat Europe 2019. [ Slides ]
[ 11/25/2019 ] Talk about exploitability assessment at Vrije Universiteit Amsterdam. [ Slides ]
[ 11/22/2019 ] Talk about exploitability assessment at University of Oxford.
[ 11/14/2019 ] Present SLAKE at ACM CCS 2019. [ Slides ] [ Video ]
[ 10/09/2019 ] "Hands off..." is accepted to Black Hat Europe 2019.
[ 09/16/2019 ] SLAKE is accepted to ACM CCS 2019.
[ 09/13/2019 ] Invited to talk about security issues in Linux kernel at CLK 2019.
[ 08/16/2019 ] Officially end internship at Baidu X-Lab.
[ 08/15/2019 ] Present VIEM at USENIX Security 2019. [ Slides ] [ Video ]
- Talks
-
Facilitate Linux Kernel Exploitation Step by Step [ Slides ]
Feb 05th, 2020, Tel Aviv, Israel, Blue Hat IL 2020
-
Towards Exploitability Assessment for Linux Kernel Vulnerabilities [ Slides ]
Nov 25th, 2019, Amsterdam, Netherlands, Vrije Universiteit Amsterdam
Nov 22nd, 2019, Oxford, UK, University of Oxford [ Flyer ]
-
Vulnerability Exploitabity Assessment and Mitigation Design Defects in Linux Kernel [ Slides available upon request ]
Oct 19th, 2019, Hangzhou, China, CLK 2019 (中国Linux内核开发者大会)
- Publication
OS Security
Feel free to take an overview of this research thread in my "Towards ..." talk slides
-
Hands Off and Putting SLAB/SLUB Feng Shui in a Blackbox
Yueqi Chen, Xinyu Xing, Jimmy Su
Highly-anticipated Talk at Black Hat Europe 2019
[ Slides ]
[ Video ]
[ Demo1 ]
[ Demo2 ]
-
SLAKE: Facilitating Slab Manipulation for Exploiting Vulnerabilities in the Linux Kernel
Yueqi Chen, Xinyu Xing
The 26th ACM Conference on Computer and Communications Security (ACM CCS 2019)
[ Paper ]
[ Slides ]
[ Repo ]
[ Video ]
-
KEPLER: Facilitating Control-flow Hijacking Primitive Evaluation for Linux Kernel Vulnerabilities
Wei Wu, Yueqi Chen, Xinyu Xing, Wei Zou
The 28th USENIX Security Symposium (USENIX Security 2019)
[ Paper ]
[ Slides ]
[ Repo ]
-
FUZE: Towards Facilitating Exploit Generation for Kernel Use-After-Free Vulnerabilities
Wei Wu, Yueqi Chen, Jun Xu, Xinyu Xing, Wei Zou, Xiaorui Gong
The 27th USENIX Security Symposium (USENIX Security 2018)
[ Paper ]
[ Slides ]
[ Repo ]
Side-channel Detection
-
SpecuSym: Speculative Symbolic Execution for Cache Timing Leak Detection
Shengjian Guo, Yueqi Chen*, Peng Li, Yueqiang Cheng, Huibo Wang, Meng Wu, Zhiqiang Zuo
The 42nd International Conference on Software Engineering (ACM/IEEE ICSE 2020)
[ Paper ]
[ Slides ]
[ Repo ]
[ arXiv Preprint ]
* indicates equal contribution
-
Symo3: Exposing Cache Timing Side-channel Leaks through Out-of-order Symbolic Execution
Shengjian Guo, Yueqi Chen*, Jiyong Yu, Meng Wu, Zhiqiang Zuo, Peng Li, Yueqiang Cheng
The Object-Oriented Programming, Systems, Languages, and Applications (OOPSLA 2020)
[ Paper ]
[ Slides ]
[ Repo ]
* indicates equal contribution
AI for security
-
Towards the Detection of Inconsistencies in Public Security Vulnerability Reports
Ying Dong, Wenbo Guo, Yueqi Chen, Xinyu Xing, Yuqing Zhang, Gang Wang
The 28th USENIX Security Symposium (USENIX Security 2019)
[ Paper ]
[ Slides ]
[ Repo ]
[ Video ]
-
RENN: Efficient Reverse Execution with Neural-Network-assisted Alias Analysis
Dongliang Mu, Wenbo Guo, Alejandro Cuevas, Yueqi Chen, Jinxuan Gai, Xinyu Xing, Bing Mao, Chengyu Song
The 34th IEEE/ACM International Conference on Automated Software Engineering (IEEE/ACM ASE 2019)
[ Paper ]
[ Slides ]
[ Repo ]
- Honor & Award
-
Black Hat USA, Student Scholarship, 2020
-
IBM PhD Fellowship Award, 2020 [ Press ]
-
IST Graduate Student Travel Grant Award, 2019
-
The 28th USENIX Security Symposium, Student Travel Grant Award, 2019
-
FUZE is awarded one of the ten technical events of JD.COM (2018京东集团技术十件大事), 2018
-
DEF CON 26 CTF, Team r3kapig, Final, 2018
-
Black Hat USA, Student Scholarship, 2018
-
The 39th IEEE Symposium on Security and Privacy, Student Travel Grant Award, 2018
-
2017 NSA codebreaker Challenge, Team member, Rank 5, 2017
- Community Services
-
Sub-reviewer of
2020: USENIX Security, ACM CCS, ACSAC
2019: ACM CCS, ESORICS, ACSAC, ISC
2018: ACM AsiaCCS, IEEE CNS
- Teaching
-
Fall 2019, "CYBER 362 - Cyber Analysis Studio", Teaching Assistant
-
Spring 2019, "IST 456 - Information Security Management", Teaching Assistant
-
Fall 2018, "SRA 221 - Overview of Information Security", Teaching Assistant
- Traveling
-
I enjoy traveling. I have visied many U.S. states and countries on earth with my best friends and sometimes alone.
|
