About
I am a PhD student in Computer Science at Arizona State University, advised by Dr. Ruoyu Wang. I received my bachelor's degree in Cybersecurity from Sichuan University in 2023. I am also a member of the Shellphish CTF team.
My research interests include decompilation, binary analysis, LLM for security, and vulnerability discovery.
News
- [Mar 2026] One paper accepted at IEEE S&P 2026!
- [Aug 2023] Started my PhD at Arizona State University.
- [Jun 2023] Graduated from Sichuan University with a B.S. in Cybersecurity.
Publications
-
Oxidizer: Toward Concise and High-fidelity Rust DecompilationIEEE Symposium on Security and Privacy (S&P), 2026 To appear
-
BuildBench: Benchmarking LLM Agents on Compiling Real-World Open-Source SoftwarearXiv preprint, 2025
-
TYGR: Type Inference on Stripped Binaries using Graph Neural Networks33rd USENIX Security Symposium (USENIX Security), 2024
-
Fuzz to the Future: Uncovering Occluded Future Vulnerabilities via Robust FuzzingACM SIGSAC Conference on Computer and Communications Security (CCS), 2024
-
Towards Precise Reporting of Cryptographic MisusesNetwork and Distributed System Security Symposium (NDSS), 2024
Experience
Shellphish
Aug 2023 - Present- Participated as a reverse engineer in international CTF competitions, including the DEF CON CTF Finals.
Chinese University of Hong Kong
Aug 2022 - Dec 2022- Studied security-critical API misuses in firmware and their implications for software security.
- Evaluated state-of-the-art static analysis tools and identified significant inaccuracies and usability limitations.
0x401 Team
Oct 2020 - Jun 2023- Participated as a reverse engineer in regional and national CTF competitions.
Projects
Oxidizer
Dec 2023 - PresentA Rust-oriented decompiler. Conducted an empirical study of Rust-specific decompilation challenges and designed a novel Rust decompilation pipeline with multiple techniques to address these challenges.
Pluto
Jun 2021 - Jan 2024An LLVM-based obfuscator that converts source code into functionally equivalent but much more complicated form at compile-time. Features include string encryption, control flow flattening, bogus control flow, MBA obfuscation, and indirect call obfuscation.