Qiang Zeng

I am an Assistant Professor in the Department of Computer Science and Engineering at University of South Carolina. I received my Ph.D. from Penn State University, and my Bachelor's and Master's degrees from Beihang University. The easiest way to contact me is through email at zeng1 (at) cse.sc.edu.

My main research interest is Software and Systems Security, with a focus on Internet of Things and Mobile Computing. I also work on the security aspect of machine learning. Through wide collaborations, my research work built the first non-blocking concurrent heap integrity scanner (PLDI’11, NDSS’12), the first calling context encoding technique for both procedural and object-oriented programming (CGO’14), and the first scheme for autonomous information sharing in multi-party distributed database systems (TKDE’14). My dissertation presents an automatic online defense generation technique that defeats attacks exploiting heap bugs, such as Heartbleed, by evolving program modules automatically (DSN’15). I have rich industry experience and have worked in the IBM T.J. Watson Research Center, the NEC Lab America, Symantec and Yahoo.

Our lab is recruiting PhD, Master and Undergraduate students.

10/31/17 Our work that builds resilient repackaging-detection capability into mobile apps through binary code instrumentation is accepted to CGO'18.

06/19/17 We have opensourced our tool for Symbolic Execution of Android Framework (presented in MobiSys'17).

02/25/17 Symbolic Execution of Android Framework for Vulnerability Discovery and Exploit Generation is accepted to MobiSys'17.

01/22/16 SolMiner, which automatically mines distinct solutions from programs, is accepted to ICSE'16.

02/25/15 HeapTherapy, which detects, diagnoses, and prevents HeartBleed on the fly, is accepted to DSN'15.

08/11/14 A Safe Scheme for information sharing in multi-party distributed database systems is to appear in TKDE.

11/16/13 DeltaPath: Precise and Scalable Calling Context Encoding is accepted to CGO'14.

10/19/11 Kruiser, a concurrent kernel heap monitor, is accepted to NDSS'12.

02/02/11 Cruiser, a lock-free user-space heap monitor, is accepted to PLDI'11.