Research

Google Scholar • dblp • ResearchGate

Publications

• Hongbo Chen, Haobin Hiroki Chen, Mingshen Sun, Kang Li, Zhaofeng Chen, XiaoFeng Wang. A Verified Confidential Computing as a Service Framework for Privacy Preservation. To appear in Proceedings of the 32nd USENIX Security Symposium. USENIX Security '23, August, 2023
• Jincheng Wang, Zhuohua Li, Mingshen Sun, Bin Yuan, John C.S. Lui. IoT Anomaly Detection Via Device Interaction Graph. To appear in Proceedings of the 53rd Annual IEEE/IFIP International Conference on Dependable Systems and Network. DSN '23, June, 2023
• Zhuohua Li, Jincheng Wang, Mingshen Sun, John C.S. Lui. Detecting Cross-Language Memory Management Issues in Rust. In Proceedings of the 27th European Symposium on Research in Computer Security. ESORICS '22, September, 2022
• Jincheng Wang, Zhuohua Li, Mingshen Sun, John C.S. Lui. Zigbee's Network Rejoin Procedure for IoT Systems: Vulnerabilities and Implications. In Proceedings of the 25th International Symposium on Research in Attacks, Intrusions and Defenses. RAID '22, October, 2022
• Jincheng Wang, Zhuohua Li, John C.S. Lui, Mingshen Sun. Topology-Theoretic Approach To Address Attribute Linkage Attacks In Differential Privacy. Computers & Security. Volume 113, February 2022
• Hui Xu, Zhuangbin Chen, Mingshen Sun, Yangfan Zhou, Michael R. Lyu. Memory-Safety Challenge Considered Solved? An In-Depth Study with All Rust CVEs. ACM Transactions on Software Engineering and Methodology. Volume 31, January 2022
• Zhuohua Li, Jincheng Wang, Mingshen Sun, John C.S. Lui. MirChecker: Detecting Bugs in Rust Programs via Static Analysis. In Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security. CCS '21, Virtual Conference, November, 2021.
• Jincheng Wang, Zhuohua Li, John C.S. Lui, Mingshen Sun. Topology-Theoretic Approach To Address Attribute Linkage Attacks In Differential Privacy. In Proceedings of IEEE INFOCOM WKSHPS: BigSecurity 2021: International Workshop on Security and Privacy in Big Data. Virtual Conference, May, 2021.
• Shengye Wan, Mingshen Sun, Kun Sun, Ning Zhang, and Xu He. RusTEE: Developing Memory-Safe ARM TrustZone Applications. In Proceedings of the 35th Annual Computer Security Applications Conference. ACSAC '20, Austin, Texas, USA, December 2020.
• Pei Wang, Yu Ding, Mingshen Sun, Huibo Wang, Tongxin Li, Rundong Zhou, Zhaofeng Chen, and Yiming Jing. Building and Maintaining a Third-Party Library Supply Chain for Productive and Secure SGX Enclave Development. In Proceedings of the 42nd International Conference on Software Engineering, the Software Engineering In Practice Track. ICSE-SEIP '20, Seoul, South Korea, May, 2020.
• Yang Hu, Mingshen Sun, John C.S. Lui. Exploiting Non-Uniform Program Execution Time to Evade Record/Replay Forensic Analysis. Computers & Security. Volume 88, January 2020
• Huibo Wang, Pei Wang, Yu Ding, Mingshen Sun, Yiming Jing, Ran Duan, Long Li, Yulong Zhang, Tao Wei, and Zhiqiang Lin. Towards Memory Safety for Enclave Programs with Rust-SGX. In Proceedings of the 26th ACM Conference on Computer and Communications Security. CCS '19, London, UK, November, 2019.
• Zhuohua Li, Jincheng Wang, Mingshen Sun, and John C.S. Lui. Securing the Device Drivers of Your Embedded Systems: Framework and Prototype. In Proceedings of the 3rd International Workshop on Security and Forensics of IoT (in conjunction with ARES 2019). IoT-SECFOR '19, Canterbury, UK, August 2019.
• Mingshen Sun, Xiaolei Li, John C.S. Lui, Richard T.B. Ma, and Zhenkai Liang. Monet: A User-oriented Behavior-based Malware Variants Detection System for Android. IEEE Transactions on Information Forensics and Security. TIFS, 12(5), 1103-1112, 2017.
• Mingshen Sun, Tao Wei, and John C.S. Lui. TaintART: A Practical Multi-level Information-Flow Tracking System for Android RunTime. In Proceedings of the 23rd ACM Conference on Computer and Communications Security. CCS '16, Vienna, Austria, October 2016.
• Mingshen Sun, John C.S. Lui, and Yajin Zhou. Blender: Self-randomizing Address Space Layout for Android Apps. In Proceedings of the 19th International Symposium on Research in Attacks, Intrusions and Defenses. RAID '16, Evry, France, September 2016.
• Mingshen Sun, Mengmeng Li, and John C.S. Lui. DroidEagle: Seamless Detection of Visually Similar Android Apps. In Proceedings of the 8th ACM Conference on Security and Privacy in Wireless and Mobile Networks. WiSec '15, New York City, USA, June 2015.
• Mingshen Sun, Min Zheng, John C.S. Lui, and Xuxian Jiang. Design and Implementation of an Android Host-based Intrusion Prevention System. In Proceedings of the 30th Annual Computer Security Applications Conference. ACSAC '14, New Orleans, USA, December 2014.
• Min Zheng, Mingshen Sun, and John C.S. Lui. DroidTrace: A Ptrace Based Android Dynamic Analysis System with Forward Execution Capability. In Proceedings of the 10th International Wireless Communications and Mobile Computing Conference. IWCMC '14, Nicosia, Cyprus, August 2014.
• Min Zheng, Mingshen Sun, and John C.S. Lui. DroidRay: A Security Evaluation System for Customized Android Firmwares. In Proceedings of the 9th ACM Symposium on Information, Computer and Communications Security. ASIACCS '14, Kyoto, Japan, June 2014.
• Min Zheng, Mingshen Sun, and John C.S. Lui. DroidAnalytics: A Signature Based Analytic System to Collect, Extract, Analyze and Associate Android Malware. In Proceedings of the 12th IEEE International Conference on Trust, Security and Privacy in Computing and Communications. TrustCom '13, Melbourne, Australia, July 2013.

Professional Services

• Journal Reviewer: IEEE Transactions on Information Forensics and Security, IET Information Security, Security and Communication Networks, IEEE Transactions on Dependable and Secure Computing, IEEE Transactions on Mobile Computing, IEEE Communications Magazine
• Conference External Reviewer: MoST 2016, CNS 2016, SPSM 2016, CODASPY 2017, MoST 2017, PAC 2017