I am an Assistant Professor in the College of Computing at Michigan Technological University. I received my Ph.D. in Information Technology from George Mason University, advised by Dr. Kun Sun. Before that, I earned my M.S. in Cyberspace Security and B.S. in Information Security from Wuhan University, advised by Dr. Fei Yan. My research lies in Software and Systems Security, with a focus on Automated Program Repair (APR), Sanitization Optimization, and Container Security.
In the era of LLMs, I focus on leveraging LLMs and agentic AI to advance the end-to-end pipeline of software and systems security, including vulnerability detection, reasoning, patch generation, and verification.
I am currently looking for highly motivated Ph.D. students to join my research group. Positions are fully funded through research assistantships (RAs), covering tuition and providing a competitive stipend. If you are interested, please feel free to email me your CV and transcript.
What’s New?
- [NDSS 2027 TPC] In August 2026, invited to serve in the TPC for NDSS 2027.
- [Best Paper Award] In July 2026, our paper “ConfigWiz: Automating Privilege Configuration for Containerized Applications” won the Best Paper Award in SecureComm 2026.
- [SecureComm 2026] In March 2026, one paper “ConfigWiz: Automating Privilege Configuration for Containerized Applications” accepted by SecureComm 2026.
- [DIMVA 2025] In April 2025, one paper “An Empirical Study of Multi-Language Security Patches in Open Source Software” accepted by DIMVA 2025.
- [Summer Research Assistantship] In March 2025, the Summer Research Assistantship of George Mason University awarded.
- [USENIX Security 2025] In February 2025, one paper “DISPATCH: Unraveling Security Patches from Entangled Code Changes” accepted by USENIX Security 2025.
- [CSAW 2024] In October 2024, our paper “What IF Is Not Enough? Fixing Null Pointer Dereference With Contextual Check” selected as one of the 15 finalists of the CSAW 2024 Applied Research Competition.
- [USENIX Security 2024] In September 2023, one paper “What IF Is Not Enough? Fixing Null Pointer Dereference With Contextual Check” accepted by USENIX Security 2024.