Research

Google Scholar • dblp • Re­search­Gate

Pub­li­ca­tions

• Hongbo Chen, Haobin Hi­roki Chen, Ming­shen Sun, Kang Li, Zhaofeng Chen, Xi­aoFeng Wang. A Ver­i­fied Con­fi­den­tial Com­put­ing as a Ser­vice Frame­work for Pri­vacy Preser­va­tion. To ap­pear in Pro­ceed­ings of the 32nd USENIX Se­cu­rity Sym­po­sium. USENIX Se­cu­rity '23, Au­gust, 2023
• Jincheng Wang, Zhuo­hua Li, Ming­shen Sun, Bin Yuan, John C.S. Lui. IoT Anom­aly De­tec­tion Via De­vice In­ter­ac­tion Graph. To ap­pear in Pro­ceed­ings of the 53rd An­nual IEEE/IFIP In­ter­na­tional Con­fer­ence on De­pend­able Sys­tems and Net­work. DSN '23, June, 2023
• Zhuo­hua Li, Jincheng Wang, Ming­shen Sun, John C.S. Lui. De­tect­ing Cross-Lan­guage Mem­ory Man­age­ment Is­sues in Rust. In Pro­ceed­ings of the 27th Eu­ro­pean Sym­po­sium on Re­search in Com­puter Se­cu­rity. ES­ORICS '22, Sep­tem­ber, 2022
• Jincheng Wang, Zhuo­hua Li, Ming­shen Sun, John C.S. Lui. Zig­bee's Net­work Re­join Pro­ce­dure for IoT Sys­tems: Vul­ner­a­bil­i­ties and Im­pli­ca­tions. In Pro­ceed­ings of the 25th In­ter­na­tional Sym­po­sium on Re­search in At­tacks, In­tru­sions and De­fenses. RAID '22, Oc­to­ber, 2022
• Jincheng Wang, Zhuo­hua Li, John C.S. Lui, Ming­shen Sun. Topol­ogy-The­o­retic Ap­proach To Ad­dress At­tribute Link­age At­tacks In Dif­fer­en­tial Pri­vacy. Com­put­ers & Se­cu­rity. Vol­ume 113, Feb­ru­ary 2022
• Hui Xu, Zhuang­bin Chen, Ming­shen Sun, Yang­fan Zhou, Michael R. Lyu. Mem­ory-Safety Chal­lenge Con­sid­ered Solved? An In-Depth Study with All Rust CVEs. ACM Trans­ac­tions on Soft­ware En­gi­neer­ing and Method­ol­ogy. Vol­ume 31, Jan­u­ary 2022
• Zhuo­hua Li, Jincheng Wang, Ming­shen Sun, John C.S. Lui. MirChecker: De­tect­ing Bugs in Rust Pro­grams via Sta­tic Analy­sis. In Pro­ceed­ings of the 2021 ACM SIGSAC Con­fer­ence on Com­puter and Com­mu­ni­ca­tions Se­cu­rity. CCS '21, Vir­tual Con­fer­ence, No­vem­ber, 2021.
• Jincheng Wang, Zhuo­hua Li, John C.S. Lui, Ming­shen Sun. Topol­ogy-The­o­retic Ap­proach To Ad­dress At­tribute Link­age At­tacks In Dif­fer­en­tial Pri­vacy. In Pro­ceed­ings of IEEE IN­FO­COM WK­SHPS: BigSe­cu­rity 2021: In­ter­na­tional Work­shop on Se­cu­rity and Pri­vacy in Big Data. Vir­tual Con­fer­ence, May, 2021.
• Shengye Wan, Ming­shen Sun, Kun Sun, Ning Zhang, and Xu He. Rus­TEE: De­vel­op­ing Mem­ory-Safe ARM Trust­Zone Ap­pli­ca­tions. In Pro­ceed­ings of the 35th An­nual Com­puter Se­cu­rity Ap­pli­ca­tions Con­fer­ence. ACSAC '20, Austin, Texas, USA, De­cem­ber 2020.
• Pei Wang, Yu Ding, Ming­shen Sun, Huibo Wang, Tongxin Li, Run­dong Zhou, Zhaofeng Chen, and Yim­ing Jing. Build­ing and Main­tain­ing a Third-Party Li­brary Sup­ply Chain for Pro­duc­tive and Se­cure SGX En­clave De­vel­op­ment. In Pro­ceed­ings of the 42nd In­ter­na­tional Con­fer­ence on Soft­ware En­gi­neer­ing, the Soft­ware En­gi­neer­ing In Prac­tice Track. ICSE-SEIP '20, Seoul, South Korea, May, 2020.
• Yang Hu, Ming­shen Sun, John C.S. Lui. Ex­ploit­ing Non-Uni­form Pro­gram Ex­e­cu­tion Time to Evade Record/Re­play Foren­sic Analy­sis. Com­put­ers & Se­cu­rity. Vol­ume 88, Jan­u­ary 2020
• Huibo Wang, Pei Wang, Yu Ding, Ming­shen Sun, Yim­ing Jing, Ran Duan, Long Li, Yu­long Zhang, Tao Wei, and Zhiqiang Lin. To­wards Mem­ory Safety for En­clave Pro­grams with Rust-SGX. In Pro­ceed­ings of the 26th ACM Con­fer­ence on Com­puter and Com­mu­ni­ca­tions Se­cu­rity. CCS '19, Lon­don, UK, No­vem­ber, 2019.
• Zhuo­hua Li, Jincheng Wang, Ming­shen Sun, and John C.S. Lui. Se­cur­ing the De­vice Dri­vers of Your Em­bed­ded Sys­tems: Frame­work and Pro­to­type. In Pro­ceed­ings of the 3rd In­ter­na­tional Work­shop on Se­cu­rity and Foren­sics of IoT (in con­junc­tion with ARES 2019). IoT-SEC­FOR '19, Can­ter­bury, UK, Au­gust 2019.
• Ming­shen Sun, Xi­aolei Li, John C.S. Lui, Richard T.B. Ma, and Zhenkai Liang. Monet: A User-ori­ented Be­hav­ior-based Mal­ware Vari­ants De­tec­tion Sys­tem for An­droid. IEEE Trans­ac­tions on In­for­ma­tion Foren­sics and Se­cu­rity. TIFS, 12(5), 1103-1112, 2017.
• Ming­shen Sun, Tao Wei, and John C.S. Lui. Tain­tART: A Prac­ti­cal Multi-level In­for­ma­tion-Flow Track­ing Sys­tem for An­droid Run­Time. In Pro­ceed­ings of the 23rd ACM Con­fer­ence on Com­puter and Com­mu­ni­ca­tions Se­cu­rity. CCS '16, Vi­enna, Aus­tria, Oc­to­ber 2016.
• Ming­shen Sun, John C.S. Lui, and Yajin Zhou. Blender: Self-ran­dom­iz­ing Ad­dress Space Lay­out for An­droid Apps. In Pro­ceed­ings of the 19th In­ter­na­tional Sym­po­sium on Re­search in At­tacks, In­tru­sions and De­fenses. RAID '16, Evry, France, Sep­tem­ber 2016.
• Ming­shen Sun, Meng­meng Li, and John C.S. Lui. DroidEa­gle: Seam­less De­tec­tion of Vi­su­ally Sim­i­lar An­droid Apps. In Pro­ceed­ings of the 8th ACM Con­fer­ence on Se­cu­rity and Pri­vacy in Wire­less and Mo­bile Net­works. WiSec '15, New York City, USA, June 2015.
• Ming­shen Sun, Min Zheng, John C.S. Lui, and Xux­ian Jiang. De­sign and Im­ple­men­ta­tion of an An­droid Host-based In­tru­sion Pre­ven­tion Sys­tem. In Pro­ceed­ings of the 30th An­nual Com­puter Se­cu­rity Ap­pli­ca­tions Con­fer­ence. ACSAC '14, New Or­leans, USA, De­cem­ber 2014.
• Min Zheng, Ming­shen Sun, and John C.S. Lui. Droid­Trace: A Ptrace Based An­droid Dy­namic Analy­sis Sys­tem with For­ward Ex­e­cu­tion Ca­pa­bil­ity. In Pro­ceed­ings of the 10th In­ter­na­tional Wire­less Com­mu­ni­ca­tions and Mo­bile Com­put­ing Con­fer­ence. IWCMC '14, Nicosia, Cyprus, Au­gust 2014.
• Min Zheng, Ming­shen Sun, and John C.S. Lui. DroidRay: A Se­cu­rity Eval­u­a­tion Sys­tem for Cus­tomized An­droid Firmwares. In Pro­ceed­ings of the 9th ACM Sym­po­sium on In­for­ma­tion, Com­puter and Com­mu­ni­ca­tions Se­cu­rity. ASI­ACCS '14, Kyoto, Japan, June 2014.
• Min Zheng, Ming­shen Sun, and John C.S. Lui. Droid­An­a­lyt­ics: A Sig­na­ture Based An­a­lytic Sys­tem to Col­lect, Ex­tract, An­a­lyze and As­so­ci­ate An­droid Mal­ware. In Pro­ceed­ings of the 12th IEEE In­ter­na­tional Con­fer­ence on Trust, Se­cu­rity and Pri­vacy in Com­put­ing and Com­mu­ni­ca­tions. Trust­Com '13, Mel­bourne, Aus­tralia, July 2013.

Pro­fes­sional Ser­vices

• Jour­nal Re­viewer: IEEE Trans­ac­tions on In­for­ma­tion Foren­sics and Se­cu­rity, IET In­for­ma­tion Se­cu­rity, Se­cu­rity and Com­mu­ni­ca­tion Net­works, IEEE Trans­ac­tions on De­pend­able and Se­cure Com­put­ing, IEEE Trans­ac­tions on Mo­bile Com­put­ing, IEEE Com­mu­ni­ca­tions Mag­a­zine
• Con­fer­ence Ex­ter­nal Re­viewer: MoST 2016, CNS 2016, SPSM 2016, CO­DASPY 2017, MoST 2017, PAC 2017