Chenxiong Qian

About Me

I am a sixth year Ph.D. student at School of Computer Science, Georgia Tech, advised by Wenke Lee and Bill Harris. I have also worked with Daniel Xiapu Luo from 2013 to 2015. My research interests are System Security and Program Analysis.

News:

I will join the CS Department of The University of Hong Kong as an Assistant Professor in Fall, 2021! I am currently looking for motivated students interested in working with me on software security and system security.

[ CV ] [ Google Scholar ]

Selected Publications

• Slimium: Debloating the Chromium Browser with Feature Subsetting, 27th ACM Conference on Computer and Communications Security (CCS 2020). Chenxiong Qian, Hyungjoon Koo, ChangSeok Oh, Taesoo Kim, and Wenke Lee.
  
  
• Razor: A Framework for Post-deployment Software Debloating, 28th USENIX Security Symposium (USENIX 2019). Chenxiong Qian, Hong Hu, Mansour Alharthi, Pak Ho Chung, Taesoo Kim, Wenke Lee.
  
  
• Enforcing Unique Code Target Property for Control-Flow Integrity, 25th ACM Conference on Computer and Communications Security (CCS 2018). Hong Hu, Chenxiong Qian, Carter Yagemann, Simon Pak Ho Chung, William R Harris, Taesoo Kim, Wenke Lee.
  
  
• Rampart: Protecting Web Applications from CPU-Exhaustion Denial-of-Service Attacks, 27th USENIX Security Symposium (USENIX 2018). Wei Meng, Chenxiong Qian, Shuang Hao, Kevin Borgolte, Giovanni Vigna, Christopher Kruegel and Wenke Lee.
  
  
• Precise and Scalable Detection of Double-Fetch Bugs in OS Kernels, 39th IEEE Symposium on Security and Privacy (Oakland 2018). Meng Xu, Chenxiong Qian, Kangjie Lu, Michael Backes, and Taesoo Kim.
  
  
• Efficient Protection of Path-Sensitive Control Security, 26th USENIX Security Symposium (USENIX 2017). Ren Ding, Chenxiong Qian, Chengyu Song, Bill Harris, Taesoo Kim, and Wenke Lee.
  
  
• Cloak and Dagger: From Two Permissions to Complete Control of the UI Feedback Loop, 38th IEEE Symposium on Security and Privacy (Oakland 2017). Yanick Fratantonio, Chenxiong Qian, Pak Chung, and Wenke Lee. (Distinguished Practical Paper award!)
  
  

Other Publications

• NDroid: Toward Tracking Information Flows Across Multiple Android Contexts, IEEE Transactions on Information Forensics and Security (2018). Lei Xue, Chenxiong Qian, Hao Zhou, Xiapu Luo, Yajin Zhou, Yuru Shao, Alvin TS Chan.
  
  
• Cloak and Dagger: From Two Permissions to Complete Control of the UI Feedback Loop, (BlackHat 2017). Yanick Fratantonio, Chenxiong Qian, Pak Chung, and Wenke Lee.
  
  
• Enhancing the Description-to-Behavior Fidelity in Android Apps with Privacy Policy, IEEE Transactions on Software Engineering (2017). Le Yu, Xiapu Luo, Chenxiong Qian, Shuai Wang, Hareton KN Leung.
  
  
• Toward Engineering a Secure Android Ecosystem: A Survey of Existing Techniques, ACM Computing Surveys (CSUR) (2016). Meng Xu, Chengyu Song, Yang Ji, Ming-Wei Shih, Kangjie Lu, Cong Zheng, Ruian Duan, Yeongjin Jang, Byoungyoung Lee, Chenxiong Qian, Sangho Lee, Taesoo Kim.
  
  
• Revisiting the Description-to-Behavior Fidelity in Android Applications, 2016 IEEE 23rd International Conference on Software Analysis, Evolution, and Reengineering (SANER 2016). Le Yu, Xiapu Luo, Chenxiong Qian, Shuai Wang.
  
  
• AndroidPerf: A Cross-layer Profiling System for Android Applications, 2015 IEEE 23rd International Symposium on Quality of Service (IWQoS 2015). Lei Xue, Chenxiong Qian, Xiapu Luo.
  
  
• VulHunter: Toward Discovering Vulnerabilities in Android Applications, IEEE Micro (2015). Chenxiong Qian, Xiapu Luo, Yu Le, Guofei Gu.
  
  
• Towards a Scalable Resource-driven Approach for Detecting Repackaged Android Applications, Proceedings of the 30th Annual Computer Security Applications Conference (2014). Yuru Shao, Xiapu Luo, Chenxiong Qian, Pengfei Zhu, Lei Zhang.
  
  
• On Measuring One-Way Path Metrics from a Web Server, 2014 IEEE 22nd International Conference on Network Protocols (ICNP 2014). Xiapu Luo, Lei Xue, Cong Shi, Yuru Shao, Chenxiong Qian, Edmond WW Chan.
  
  
• On Tracking Information Flows through JNI in Android Applications, 2014 44th Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN 2014). Chenxiong Qian, Xiapu Luo, Yuru Shao, Alvin TS Chan.
  
  
• RootGuard: Protecting Rooted Android Phones, Computer (2014). Yuru Shao, Xiapu Luo, Chenxiong Qian.