中国人民大学信息学院
智能软件安全研究团队

简介

中国人民大学信息学院智能软件安全研究团队（Smart Software Security Research Group），长期致力于进行有实际影响力的高质量安全技术研究，重点关注软件安全性分析和新型安全攻防对抗技术研究，聚焦于软件漏洞缺陷检测、人工智能安全、移动安全、Web安全等安全研究领域。近年来，团队共承担了数十项相关科研项目，有着丰富的研究积累，在主流系统中发现了数百个已确认的漏洞/缺陷。团队成员近年来已在A类顶级学术会议/期刊上发表数十篇相关论文，多次荣获“杰出论文奖”，并荣获2021年度“中国计算机学会科学技术奖”自然科学一等奖（“高精度智能化的软件分析与测试方法”）。

欢迎加盟

欢迎感兴趣的同学（本科/硕士/博士）加入团队，参与到实验室科研工作中来，面向当前重大安全需求，选择有挑战性的研究问题，开发创新性系统，发表高水平论文。也欢迎海内外博士加入我们团队，联系邮件：liangb or hjj or youwei at {ruc/edu/cn}

研究方向

• 软件安全分析: 软件智能分析、缺陷漏洞检测、模糊测试……
• 人工智能安全: 针对人工智能系统的攻击与防御方法研究……
• 移动安全：移动应用分析、移动安全攻防、系统安全加固……
• Web安全：Web应用分析、浏览器安全、Web隐私……

成员

梁彬

教授 团队负责人

黄建军

讲师

游伟

副教授

主要论文

• CodeArt: Better Code Models by Attention Regularization When Symbols Are Lacking
  Zian Su, Xiangzhe Xu, Ziyang Huang, Zhuo Zhang, Yapeng Ye, Jianjun Huang*, Xiangyu Zhang
  Proceedings of the 2024 ACM International Conference on the Foundations of Software Engineering (FSE 2024) (CCF A)
• Define-Use Guided Path Exploration for Better Forced Execution
  Dongnan He, Dongchen Xie, Yujie Wang, Wei You*, Bin Liang, Jianjun Huang, Wenchang Shi, Zhuo Zhang, Xiangyu Zhang
  Proceedings of the 33rd ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA 2024) (CCF A)
• Raisin: Identifying Rare Sensitive Functions for Bug Detection
  Jianjun Huang, Jianglei Nie, Yuanjun Gong, Wei You, Bin Liang*, Pan Bian
  Proceedings of the 46th International Conference on Software Engineering (ICSE 2024) (CCF A)
• FuzzInMem: Fuzzing Programs via In-memory Structures
  Xuwei Liu, Wei You, Yapeng Ye, Zhuo Zhang, Jianjun Huang*, Xiangyu Zhang
  Proceedings of the 46th International Conference on Software Engineering (ICSE 2024) (CCF A)
• SICode: Embedding-Based Subgraph Isomorphism Identification for Bug Detection
  Yuanjun Gong, Jianglei Nie, Wei You, Wenchang Shi, Jianjun Huang*, Bin Liang*, Jian Zhang
  Proceedings of the 32nd IEEE/ACM International Conference on Program Comprehension (ICPC 2024) (CCF B)
• Operand-Variation-Oriented Differential Analysis for Fuzzing Binding Calls in PDF Readers
  Suyue Guo, Xinyu Wan, Wei You*, Bin Liang, Wenchang Shi, Yiwei Zhang, Jianjun Huang, Jian Zhang
  Proceedings of the 45th ACM/IEEE International Conference on Software Engineering (ICSE 2023) (CCF A)
• A Good Fishman Knows All the Angles: A Critical Evaluation of Google's Phishing Page Classifiers
  Changqing Miao, Jianan Feng, Wei You, Wenchang Shi, Jianjun Huang*, Bin Liang*
  Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security (CCS 2023) (CCF A)
• Scalably Detecting Third-Party Android Libraries With Two-Stage Bloom Filtering
  Jianjun Huang, Bo Xue, Jiasheng Jiang, Wei You, Bin Liang*, Jingzheng Wu, Yanjun Wu
  IEEE Transactions on Software Engineering, vol. 49, issue 4, pp. 2272-2284, 01 Apr. 2023. (TSE 2023) (CCF A)
• Precise Dynamic Symbolic Execution for Nonuniform Data Access in Smart Contracts
  Jianjun Huang, Jiasheng Jiang, Wei You, Bin Liang*
  IEEE Transactions on Computers, vol. 71, no. 7, pp. 1551-1563, 01 Jul. 2022. (TC 2022) (CCF A)
• Hunting Bugs with Accelerated Optimal Graph Vertex Matching
  Xiaohui Zhang, Yuanjun Gong, Bin Liang*, Jianjun Huang, Wei You, Wenchang Shi, Jian Zhang
  Proceedings of the 31st ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA 2022) (CCF A)
• TensileFuzz: Facilitating Seed Input Generation in Fuzzing via String Constraint Solving
  Xuwei Liu, Wei You*, Zhuo Zhang, Xiangyu Zhang
  Proceedings of the 31st ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA 2022) (CCF A)
• Detecting Adversarial Image Examples in Deep Neural Networks with Adaptive Noise Reduction
  Bin Liang, Hongcheng Li, Miaoqiang Su, Xirong Li, Wenchang Shi, Xiaofeng Wang
  IEEE Transactions on Dependable and Secure Computing, vol. 18, pp. 72-85, 15 Jan. 2021. (TDSC 2021) (CCF A)
• Hunting Vulnerable Smart Contracts via Graph Embedding Based Bytecode Matching
  Jianjun Huang, Songming Han, Wei You, Wenchang Shi, Bin Liang*, Jingzheng Wu, Yanjun Wu
  IEEE Transactions on Information Forensics and Security, vol. 16, pp. 2144-2156. (TIFS 2021) (CCF A)
• Detecting the Capacitance-based Gamepad for Protecting Mobile Game Fairness
  Shilei Bai, Bin Liang*, Jianjun Huang, Wei You, Jiachun Li, Yaping Li, Wenchang Shi
  IEEE Transactions on Computers, vol. 70, no. 9, pp. 1374-1387, 01 Sept. 2021. (TC 2021) (CCF A)
• OSPREY: Recovery of Variable and Data Structure via Probabilistic Analysis for Stripped Binary
  Zhuo Zhang, Yapeng Ye, Wei You*, Guanghong Tao, Wen-chuan Lee, Yonghwi Kwon, Yousra Aafer, Xiangyu Zhang
  Proceedings of the 42nd IEEE Symposiums on Security and Privacy (S&P 2021) (CCF A)
• STOCHFUZZ: Sound and Cost-effective Fuzzing of Stripped Binaries by Incremental and Stochastic Rewriting
  Zhuo Zhang, Wei You*, Guanghong Tao, Yousra Aafer, Xuwei Liu, Xiangyu Zhang
  Proceedings of the 42nd IEEE Symposiums on Security and Privacy (S&P 2021) (CCF A)
• Android SmartTVs Vulnerability Discovery via Log-guided Fuzzing
  Yousra Aafer, Wei You*, Yi Sun, Yu Shi, Xiangyu Zhang, Heng Yin
  Proceedings of the 30th Usenix Security Symposium (SECURITY 2021) (CCF A)
• SinkFinder: Harvesting Hundreds of Unknown Interesting Function Pairs with Just One Seed
  Pan Bian, Bin Liang*, Jianjun Huang, Wenchang Shi, Xidong Wang, Jian Zhang
  Proceedings of the 28th ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering (ESEC/FSE 2020) (CCF A)
• PMP: Cost-effective Forced Execution with Probabilistic Memory Pre-planning
  Wei You, Zhuo Zhang, Yonghwi Kwon, Yousra Aafer, Fei Peng, Yu Shi, Carson Harmon, Xiangyu Zhang
  Proceedings of the 41st IEEE Symposiums on Security and Privacy (S&P 2020) (CCF A)
• Finding Client-side Business Flow Tampering Vulnerabilities
  I Luk Kim, Yunhui Zheng, Hogun Park, Weihang Wang, Wei You, Yousra Aafer, Xiangyu Zhang
  Proceedings of the 42nd ACM/IEEE Internatinoal Conference on Software Engineering (ICSE 2020) (CCF A)
• TaintMan: An ART-Compatible Dynamic Taint Analysis Framework on Unmodified and Non-Rooted Android Devices
  Wei You, Bin Liang*, Wenchang Shi, Peng Wang, Xiangyu Zhang
  IEEE Transactions on Dependable and Secure Computing, vol. 17, no. 1, pp. 209-222, 1 Jan.-Feb. 2020. (TDSC 2020) (CCF A)
• Identifying Parasitic Malware as Outliers by Code Clustering
  Hongcheng Li, Jianjun Huang, Bin Liang, Wenchang Shi, Yifang Wu, Shilei Bai
  Journal of Computer Security, vol.28, no.2, pp.157-189. Jan. 2020. (JCS) (CCF B)
• Do Not Jail My App: Detecting the Android Plugin Environments by Time Lag Contradiction
  Yifang Wu, Jianjun Huang, Bin Liang, Wenchang Shi
  Journal of Computer Security, vol.28, no.2, pp.269-293. Jan. 2020. (JCS) (CCF B)
• Multiple-Entry Testing of Android Applications by Constructing Activity Launching Contexts
  Jiwei Yan, Hao Liu, Linjie Pan, Jun Yan, Jian Zhang, Bin Liang
  42nd International Conference on Software Engineering (ICSE 2020) (CCF A)
• Detecting Bugs by Discovering Expectations and Their Violations
  Pan Bian, Bin Liang*, Yan Zhang, Chaoqun Yang, Wenchang Shi, Yan Cai
  IEEE Transactions on Software Engineering (TSE), vol. 45, no. 10, pp. 984-1001, 1 Oct. 2019. (TSE 2019) (CCF A)
• BDA: Practical Dependence Analysis for Binary Executables by Unbiased Whole-program Path Sampling and Per-path Abstract Interpretation
  Zhuo Zhang, Wei You *, Guanhong Tao, Guannan Wei, Yonghwi Kwon, Xiangyu Zhang
  Proceedings of the 34th ACM Conference on Object-Oriented Programming Systems, Languages and Applications (OOPSLA 2019) (CCF A)
• SLF: Fuzzing without Valid Seed Inputs
  Wei You, Xuwei Liu, Shiqing Ma, David Perry, Xiangyu Zhang, Bin Liang
  In Proceedings of the 41st International Conference on Software Engineering (ICSE 2019) (CCF A)
• ProFuzzer: On-the-fly Input Type Probing for Better Zero-day Vulnerability Detection
  Wei You, Xueqiang Wang, Shiqing Ma, Jianjun Huang, Xiangyu Zhang, XiaoFeng Wang, Bin Liang
  In Proceedings of the 40th IEEE Symposium on Security and Privacy (S&P 2019) (CCF A)
• Detecting Concurrency Memory Corruption Vulnerabilities
  Yan Cai, Biyun Zhu, Ruijie Meng, Hao Yun, Liang He, Purui Su, Bin Liang
  Proceedings of the 2019 27th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering (ESEC/FSE 2019) (CCF A)
• Recent Progress in Program Analysis
  Zhang J, Zhang C, Xuan JF, Xiong YF, Wang QX, Liang B, Li L, Dou WS, Chen ZB, Chen LQ, Cai Y
  Journal of Software, 2019, 30(1): 80-109(in Chinese)
• NAR-Miner: Discovering Negative Association Rules from Code for Bug Detection
  Pan Bian, Bin Liang*, Wenchang Shi, Jianjun Huang， Yan Cai
  The 26th ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering (ESEC/FSE 2018) (CCF A)
• Deep Text Classification Can be Fooled
  Bin Liang, Hongcheng Li, Miaoqiang Su, Pan Bian, Xirong Li, Wenchang Shi
  The 27th International Joint Conference on Artificial Intelligence (IJCAI 2018) (CCF A)
• Fooling Image Search Engine
  Yuanjun Gong, Bin Liang*, Jianjun Huang
  DEF CON, China. 2018.
• Precise Android API Protection Mapping Derivation and Reasoning
  Yousra Aafer, Guanhong Tao, Jianjun Huang, Xiangyu Zhang, Ninghui Li
  The ACM Conference on Computer and Communications Security (CCS 2018) (CCF A)
• AceDroid: Normalizing Diverse Android Access Control Checks for Inconsistency Detection
  Yousra Aafer, Jianjun Huang, Yi Sun, Xiangyu Zhang, Ninghui Li, Chen Tian
  Network and Distributed Systems Securit Symposium (NDSS 2018) (CCF B)
• Approach of Leveraging Patches to Discover Unknown Vulnerabilities
  LI Zan, BIAN Pan, SHI Wen-Chang, LIANG Bin*
  Journal of Software, 2018,29(5):1199-1212(in Chinese)
• UI Driven Android Application Reduction
  Jianjun Huang, Yousra Aafer, David Perry, Xiangyu Zhang, Chen Tian
  IEEE/ACM International Conference on Automated Software Engineering (ASE 2017) (CCF A)
• SemFuzz: Semantics-based Automatic Generation of Proof-of-Concept Exploits
  Wei You, Peiyuan Zong, Kai Chen, XiaoFeng Wang, Xiaojing Liao, Pan Bian, Bin Liang
  Proceedings of the 24th ACM Conference on Computer and Communications Security (CCS 2017) (CCF A)
• Mass Discovery of Android Traffic Imprints through Instantiated Partial Execution
  Yi Chen, Wei You, Yeonjoon Lee, Kai Chen, XiaoFeng Wang, Wei Zou
  Proceedings of the 24th ACM Conference on Computer and Communications Security (CCS 2017) (CCF A)
• Detecting Sensitive Data Disclosure via Bi-directional Text Correlation Analysis
  Jianjun Huang, Xiangyu Zhang, Lin Tan
  Proceedings of the 24th ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering (ESEC/FSE 2016) (CCF A)
• Automatic Model Generation from Documentation for Java API Functions
  Juan Zhai, Jianjun Huang, Shiqing Ma, Xiangyu Zhang, Lin Tan, Jianhua Zhao, Feng Qin
  International Conference on Software Engineering (ICSE 2016) (CCF A)
• AntMiner: Mining More Bugs by Reducing Noise Interference
  Bin Liang, Pan Bian, Yan Zhang, Wenchang Shi, Wei You, Yan Cai
  International Conference on Software Engineering (ICSE 2016) (CCF A)
• Reference Hijacking: Patching, Protecting and Analyzing on Unmodified and Non-Rooted Android Devices
  Wei You, Bin Liang*, Wenchang Shi, Shuyang Zhu, Peng Wang, Sikefu Xie, Xiangyu Zhang
  International Conference on Software Engineering (ICSE 2016) (CCF A)
• Cracking Classifiers for Evasion: A Case Study on the Google's Phishing Pages Filter
  Bin Liang, Miaoqiang Su, Wei You, Wenchang Shi, Gang Yang
  International Conference of World Wide Web (WWW 2016) (CCF A)
• SUPOR: Precise and Scalable Sensitive User Input Detection for Android Apps
  Jianjun Huang, Zhichun Li, Xusheng Xiao, Zhenyu Wu, Kangjie Lu, Xiangyu Zhang, Guofei Jiang
  ACM Symposium on Information, Computer and Communications Security (SECURITY 2015) (CCF A)
• Android Implicit Information Flow Demystified
  Wei You, Bin Liang*, Jingzhe Li, Wenchang Shi, Xiangyu Zhang
  ACM Symposium on Information, Computer and Communications Security (AsiaCCS 2015) (CCF C)
• Scriptless Timing Attacks on Web Browser Privacy
  Bin Liang, Wei You, Liangkun Liu, Wenchang Shi, Mario Heiderich
  IEEE/IFIP International Conference on Dependable Systems and Networks (DSN 2014) (CCF B)
• AsDroid: Detecting Stealthy Behaviors in Android Applications by User Interface and Program Behavior Contradiction
  Jianjun Huang, Xiangyu Zhang, Lin Tan, Peng Wang, Bin Liang
  International Conference on Software Engineering (ICSE 2014) (CCF A)
• Detecting stealthy malware with inter-structure and imported signatures
  Bin Liang, Wei You, Wenchang Shi, Zhaohui Liang
  ACM Symposium on Information, Computer and Communications Security (ASIACCS 2011) (CCF C)