教育工作经历
- 中国人民大学讲师、副教授、教授
- 清华大学博士后
- 中国科学院软件研究所博士
社会兼职
- 中国电子学会软件定义推进委员会委员
- 中国计算机学会软件工程专委委员
- GSP政府安全计划微软源代码查看授权专家
研究方向
- 软件系统安全性分析：软件智能分析、缺陷漏洞检测、模糊测试；
- 人工智能安全：针对人工智能/机器学习系统的攻击与防御方法研究；
- 移动安全：移动应用分析、移动安全攻防、新型威胁识别；
- 系统软件安全机制：主要研究以操作系统为代表的系统软件中的安全增强机制。
讲授课程
- 网络空间安全导论（本科）
- 程序设计安全（本科）
- 软件安全分析与测试（研究生）
对学生的培养要求
-
研究生将从事的科研工作：
面向当前重大安全需求，选择有挑战性的研究问题，开发创新性系统，发表高水平论文。 -
对学生的培养要求：
切实提高信息安全实际技能，锻炼独立分析、解决问题的科研能力，培养勇于担当、坚韧不拔的科研气质
荣誉奖励
- 2021年中国计算机学会自然科学一等奖（高精度智能化的软件分析与测试方法）
- 中国人民大学十大教学标兵
科研项目
- 国家自然科学基金通用技术基础研究联合基金重点支持项目：漏洞相关数据集中的知识发现及在漏洞检测中的应用（项目负责人）
- 国家科技重大专项课题 ******（项目负责人）;
- 国家自然科学基金重点项目分课题：软件安全性分析的关键技术与工具（项目负责人）；
- “核高基”重大专项课题任务：新一代Android应用安全性分析（项目负责人）；
- “核高基”重大专项课题任务：浏览器执行环境安全（项目负责人）；
- “核高基”重大专项课题任务：Android缺陷检测及攻击验证（项目负责人）；
- “核高基”重大专项课题任务：Android/Linux及Chrome/Chromium新型桌面/浏览器的安全性分析（项目负责人）；
- 国家自然科学基金项目：动态污点分析中的隐式信息流分析方法研究（项目负责人）；
- 国家自然科学基金项目：基于数据挖掘的安全漏洞静态检测方法研究（项目负责人）；
- 国家自然科学基金项目：结合系统结构特征的系统软件安全脆弱性静态检测方法研究（项目负责人）；
- 北京市自然科学基金项目：基于静态检测的Web信息系统安全漏洞发掘方法研究（项目负责人）；
- ...
主要论文
-
A Good Fishman Knows All the Angles: A Critical Evaluation of Google's Phishing Page Classifiers
Changqing Miao, Jianan Feng, Wei You, Wenchang Shi, Jianjun Huang*, Bin Liang*
Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security (CCS 2023) (CCF A) -
Scalably Detecting Third-Party Android Libraries With Two-Stage Bloom Filtering
Jianjun Huang, Bo Xue, Jiasheng Jiang, Wei You, Bin Liang*, Jingzheng Wu, Yanjun Wu
IEEE Transactions on Software Engineering, vol. 49, issue 4, pp. 2272-2284, 01 Apr. 2023. (TSE 2023) (CCF A) -
Precise Dynamic Symbolic Execution for Nonuniform Data Access in Smart Contracts
Jianjun Huang, Jiasheng Jiang, Wei You, Bin Liang*
IEEE Transactions on Computers, vol. 71, no. 7, pp. 1551-1563, 01 Jul. 2022. (TC 2022) (CCF A) -
Hunting Bugs with Accelerated Optimal Graph Vertex Matching
Xiaohui Zhang, Yuanjun Gong, Bin Liang*, Jianjun Huang, Wei You, Wenchang Shi, Jian Zhang
The 31st ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA 2022) (CCF A) -
Detecting Adversarial Image Examples in Deep Neural Networks with Adaptive Noise Reduction
Bin Liang, Hongcheng Li, Miaoqiang Su, Xirong Li, Wenchang Shi, Xiaofeng Wang
IEEE Transactions on Dependable and Secure Computing (TDSC). vol. 18, no. 01, pp. 72-85, 2021 (TDSC 2021) (CCF A) -
Hunting Vulnerable Smart Contracts via Graph Embedding Based Bytecode Matching
Jianjun Huang, Songming Han, Wei You, Wenchang Shi, Bin Liang*, Jingzheng Wu, Yanjun Wu
IEEE Transactions on Information Forensics and Security, vol. 16, pp. 2144-2156. (TIFS 2021) (CCF A) -
Detecting the Capacitance-based Gamepad for Protecting Mobile Game Fairness
Shilei Bai, Bin Liang*, Jianjun Huang, Wei You, Jiachun Li, Yaping Li, Wenchang Shi
IEEE Transactions on Computers (ToC). vol. 70, no. 9, pp. 1374-1386, 2021 (TC 2021) (Online) (CCF A) -
Precise Dynamic Symbolic Execution for Nonuniform Data Access in Smart Contracts
Jianjun Huang, Jiasheng Jiang, Wei You, Bin Liang*
IEEE Transactions on Computers (Online) (TC2021) (CCF A) -
SinkFinder: Harvesting Hundreds of Unknown Interesting Function Pairs with Just One Seed
Pan Bian, Bin Liang*, Jianjun Huang, Wenchang Shi, Xidong Wang, Jian Zhang
Proceedings of the 28th ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering (ESEC/FSE 2020) (CCF A) -
Multiple-Entry Testing of Android Applications by Constructing Activity Launching Contexts
Jiwei Yan, Hao Liu, Linjie Pan, Jun Yan, Jian Zhang, Bin Liang
42nd International Conference on Software Engineering (ICSE 2020) (CCF A) -
TaintMan: An ART-Compatible Dynamic Taint Analysis Framework on Unmodified and Non-Rooted Android Devices
Wei You, Bin Liang*, Wenchang Shi, Peng Wang, Xiangyu Zhang
IEEE Transactions on Dependable and Secure Computing (TDSC), vol. 17, no. 1, pp. 209-222, 1 Jan.-Feb. 2020. (TDSC 2020) (CCF A) -
Identifying Parasitic Malware as Outliers by Code Clustering
Hongcheng Li, Jianjun Huang, Bin Liang, Wenchang Shi, Yifang Wu, Shilei Bai
Journal of Computer Security, vol.28, no.2, pp.157-189. Jan. 2020. (JCS) (CCF B) -
Do Not Jail My App: Detecting the Android Plugin Environments by Time Lag Contradiction
Yifang Wu, Jianjun Huang, Bin Liang, Wenchang Shi
Journal of Computer Security, vol.28, no.2, pp.269-293. Jan. 2020. (JCS) (CCF B) -
Detecting Bugs by Discovering Expectations and Their Violations
Pan Bian, Bin Liang*, Yan Zhang, Chaoqun Yang, Wenchang Shi, Yan Cai
IEEE Transactions on Software Engineering (TSE), vol. 45, no. 10, pp. 984-1001, 1 Oct. 2019. (TSE 2019) (CCF A) -
SLF: Fuzzing without Valid Seed Inputs
Wei You, Xuwei Liu, Shiqing Ma, David Perry, Xiangyu Zhang, Bin Liang
In Proceedings of the 41st International Conference on Software Engineering (ICSE 2019) (CCF A) -
ProFuzzer: On-the-fly Input Type Probing for Better Zero-day Vulnerability Detection
Wei You, Xueqiang Wang, Shiqing Ma, Jianjun Huang, Xiangyu Zhang, XiaoFeng Wang, Bin Liang
In Proceedings of the 40th IEEE Symposium on Security and Privacy (S&P 2019) (CCF A) -
Detecting Concurrency Memory Corruption Vulnerabilities
Yan Cai, Biyun Zhu, Ruijie Meng, Hao Yun, Liang He, Purui Su, Bin Liang
Proceedings of the 2019 27th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering (ESEC/FSE 2019) (CCF A) -
Recent Progress in Program Analysis
Zhang J, Zhang C, Xuan JF, Xiong YF, Wang QX, Liang B, Li L, Dou WS, Chen ZB, Chen LQ, Cai Y
Journal of Software, 2019, 30(1): 80-109(in Chinese) -
Deep Text Classification Can be Fooled
Bin Liang, Hongcheng Li, Miaoqiang Su, Pan Bian, Xirong Li, Wenchang Shi
The 27th International Joint Conference on Artificial Intelligence (IJCAI 2018) (CCF A) -
Fooling Image Search Engine
Yuanjun Gong, Bin Liang*, Jianjun Huang
DEF CON, China. 2018. -
Approach of Leveraging Patches to Discover Unknown Vulnerabilities
LI Zan, BIAN Pan, SHI Wen-Chang, LIANG Bin*
Journal of Software, 2018,29(5):1199-1212(in Chinese) -
NAR-Miner: Discovering Negative Association Rules from Code for Bug Detection
Pan Bian, Bin Liang*, Wenchang Shi, Jianjun Huang， Yan Cai
The 26th ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering (ESEC/FSE 2018) (CCF A) -
SemFuzz: Semantics-based Automatic Generation of Proof-of-Concept Exploits
Wei You, Peiyuan Zong, Kai Chen, XiaoFeng Wang, Xiaojing Liao, Pan Bian, Bin Liang
Proceedings of the 24th ACM Conference on Computer and Communications Security (CCS 2017) (CCF A) -
AntMiner: Mining More Bugs by Reducing Noise Interference
Bin Liang, Pan Bian, Yan Zhang, Wenchang Shi, Wei You, Yan Cai
International Conference on Software Engineering (ICSE 2016) (CCF A) -
Reference Hijacking: Patching, Protecting and Analyzing on Unmodified and Non-Rooted Android Devices
Wei You, Bin Liang*, Wenchang Shi, Shuyang Zhu, Peng Wang, Sikefu Xie, Xiangyu Zhang
International Conference on Software Engineering (ICSE 2016) (CCF A) -
Cracking Classifiers for Evasion: A Case Study on the Google's Phishing Pages Filter
Bin Liang, Miaoqiang Su, Wei You, Wenchang Shi, Gang Yang
International Conference of World Wide Web (WWW 2016) (CCF A) -
Android Implicit Information Flow Demystified
Wei You, Bin Liang*, Jingzhe Li, Wenchang Shi, Xiangyu Zhang
ACM Symposium on Information, Computer and Communications Security (AsiaCCS 2015) (CCF C) -
Scriptless Timing Attacks on Web Browser Privacy
Bin Liang, Wei You, Liangkun Liu, Wenchang Shi, Mario Heiderich
IEEE/IFIP International Conference on Dependable Systems and Networks (DSN 2014) (CCF B) -
AsDroid: Detecting Stealthy Behaviors in Android Applications by User Interface and Program Behavior Contradiction
Jianjun Huang, Xiangyu Zhang, Lin Tan, Peng Wang, Bin Liang
International Conference on Software Engineering (ICSE 2014) (CCF A) -
Detecting stealthy malware with inter-structure and imported signatures
Bin Liang, Wei You, Wenchang Shi, Zhaohui Liang
ACM Symposium on Information, Computer and Communications Security (ASIACCS 2011) (CCF C)
主要专利
- 梁彬, 李红程. 一种深度神经网络图像对抗样本检测方法和系统. CN202010111521.X
- 梁彬, 韩松明, 黄建军, 石文昌. 一种以太坊智能合约漏洞检测方法及装置. CN201911316138.1
- 梁彬, 白石磊, 黄建军, 游伟, 李佳纯, 石文昌. 一种电容游戏手柄的检测方法和系统. CN201911323783.6
- 梁彬，李赞，边攀，石文昌. 一种利用补丁信息进行未知漏洞发现的相似性检测方法. ZL201810047837.X
- 梁彬, 游伟, 李赞, 石文昌. 一种基于动态污点分析的按需跟踪方法及装置. ZL201510802094.9.
- ...