主要研究方向为 互联网基础资源测绘、智能体服务发现与多智能体对抗。长期从事DNS、CDN、Web、邮件等基础设施和基础服务的安全研究，聚焦新型网络\未知服务测量和分析、大规模流量下的恶意服务检测技术。先后主持和参与了国家重点研发计划、发改委信息安全专项、中科院战略性先导科技专项等10余项课题的研究工作。在WWW、ESORICS、INFOCOM、GLOBECOM、ICC、IPCCC等重要学术会议及期刊发表论文40余篇。获授权国家发明专利20项，省部级科技进步奖励2次。

如果你对“网络空间安全+AI+大数据”怀有热忱，且具备以下特质，欢迎与我共赴科研之旅：

• 正直谦逊的品格与扎实的双商基础

• 明确的学术规划与持续学习的内驱力

• 开放包容的团队精神与有效沟通素养

• 积极应对挑战的韧性与成长型思维

期待中的你：

• 享受独立思考也珍视团队智慧

• 既能专注深耕又保持跨界视野

• 在严谨治学中不失探索趣味

互联网基础资源测绘，网络大数据分析，大模型应用

2016-10~现在, 中国科学院信息工程研究所, 副研究员
2012-07~2016-10,中国科学院信息工程研究所, 助理研究员

1. 中国通信学会科技进步二等奖（2025）
2. 中国电子学会科技进步一等奖（2014）

1. NanoTG：基于LLM GUI代理的自动化细粒度移动流量生成, NanoTG: Automated Fine-Grained Mobile Traffic Generation with LLM GUI Agents, IFIP Networking, 2026, 第2作者
2. STAR: 通过语义-流量对齐的跨模态检索实现零样本网站指纹识别, STAR: Semantic-Traffic Alignment and Retrieval for Zero-Shot HTTPS Website Fingerprinting, INFOCOM, 2026, 通信作者
3. DNS解析失败分析方法综述, 网络与信息安全学报, 2026, 通信作者
4. QUIC安全研究综述：协议、实现和生态, 通信学报, 2025, 通信作者
5. 揭秘DoH访问：基于HTTP/2关键帧序列的抗填充干扰网站指纹识别, Unraveling DoH Traces: Padding-Resilient Website Fingerprinting via HTTP/2 Key Frame Sequences, ESORICS, 2025, 通信作者
6. 福尔摩斯与华生：利用HTTP版本并行性实现鲁棒且轻量的HTTPS网站指纹, HOLMES & WATSON: A Robust and Lightweight HTTPS Website Fingerprinting through HTTP Version Parallelism, WWW, 2025, 通信作者
7. 节点级别异质图元结构搜索, Node-Centric Meta Structure Search on Heterogeneous Graphs, ICASSP, 2025, 通信作者
8. IP敲击：缓存场景下的网站指纹识别, Knocking on IP: Unveiling Websites through Cache-Aware Fingerprinting, ICASSP, 2025, 通信作者
9. LayyerX: 通过差分指纹揭示DoH服务组件的隐藏层, LayyerX: Unveiling the Hidden Layers of DoH Server via Differential Fingerprinting,  TrustCom, 2024, 通信作者
10. 基于动态域名水印的IPv6 DNS服务发现方法, 网络与信息安全学报, 2024, 通信作者
11. 失败但缓存：DNS负缓存机制初探, Failed Yet Stored: A First Look at DNS Negative Caching, IPCCC 2024, 通信作者
12. 从指纹到足迹：加密DNS服务依赖性分析,  From Fingerprint to Footprint: Characterizing the Dependencies in Encrypted DNS Infrastructures, ESORICS, 2024, 通信作者
13. IPv6下发现使用TLS1.3的加密DNS服务提供商, Discovering Service Provider of Encrypted DNS with TLS1.3 Support over IPv6, ISCC, 2024, 第3作者
14. 基于对抗训练的IPv6活跃地址生成, 6GAI: Active IPv6 Address Generation via Adversarial Training with Leaked Information, CSCWD, 2024, 第2作者
15. 异质图的链接权重预测,  Meta Structure Search for Link Weight Prediction In Heterogeneous Graphs, ICASSP, 2024, 通信作者
16. DualDNSMiner：一种基于别名解析的双栈解析器发现方法, DualDNSMiner: A Dual-Stack Resolver Discovery Method Based on Alias Resolution, CollaborateCom, 2023, 第2作者
17. SpoofingGuard：通过交付图进行电子邮件欺骗检测的内容无关框架, SpoofingGuard: A Content-agnostic Framework for Email Spoofing Detection via Delivery Graph, CSCWD, 2023, 通信作者.
18. MetaIoT:基于HIN的小样本场景下的恶意物联网流量检测, MetaIoT: Few Shot Malicious Traffic Detection in Internet of Things Networks Based on HIN, IFIP Networking, 2023, 第3作者
19. 通过水印记录揭示DNS基础设施中有缺陷的缓存结构, Unveiling Flawed Cache Structures in DNS Infrastructure via Record Watermarking, Globecom, 2023, 第2作者
20. 基于空间注意力机制的IPv6 DOH隧道检测, CCSv6:A Detection Model for DNS-over-HTTPS Tunnel Using Attention Mechanism over IPv6, ISCC, 2023, 第2作者
21. 一种检测反射放大型拒绝服务攻击的新方法, DRDoSHunter: A Novel Approach Based on FDA and Inter-flow Features for DRDoS Detection, ISCC, 2023, 通信作者
22. 封装在HTTP中的DNS：移动应用中名称解析的测量研究, Wrapping DNS into HTTP(S): An Empirical Study on Name Resolution in Mobile Applications(IFIP Networking), 2023, 通信作者
23. 欺诈守卫者：通过交付图进行电子邮件欺诈检测的内容无关框架, SpoofingGuard: A Content-agnostic Framework for Email Spoofing Detection via Delivery Graph(CSCWD), 2023, 通信作者
24. 基于双层分类器的DoH隧道检测, Detection of DoH Tunnels with Dual-Tier Classifier(MSN),  2022, 通信作者
25. 加密DNS：协议、研究现状与未来展望, 信息安全学报, 2021, 通讯作者
26. 窥探加密世界：基于自编码器的DoH服务节点发现, Peek Inside the Encrypted World: Autoencoder-Based Detection of DoH Resolvers, TrustCom, 2021, 通讯作者
27. 本地递归DNS服务器背后的用户量？使用时间差聚类模型估计, How Many Users Behind a Local Recursive DNS Server? Estimated by Delta-¬Time Cluster Model, International Conference on High Performance Computing and Communications(HPCC), 2020, 通讯作者 
28. 电子邮件安全扩展协议应用分析, Analysis of security extension protocol in e-mail system, 网络与信息安全学报, 2020, 通讯作者 
29. 回溯：从嘈杂的被动网络流量中识别网站首页, Traceback: Learning to Identify Website's Landing URLs via Noisy Web Traces Passively, the 27th International Conference on Telecommunications (ICT), 2020, 第 3 作者 
30. 寻找隐藏的智能摄像头：基于网络流的智能摄像头分析和检测, Hunting for Invisible SmartCam: Characterizing and Detecting Smart Camera Based on Netflow Analysis, 53th IEEE International Conference on Communications (ICC), 2019, 通讯作者 
31. SFDS:基于多协议交叉验证的DNS劫持自反馈检测系统, SFDS: A Self-Feedback Detection System for DNS Hijacking Based on Multi-Protocol Cross Validation, 26th International Conference on Telecommunication (ICT), 2019, 通讯作者 
32. IDNS：大规模流量下DNS基础设施高性能识别模型, IDNS: A High-Performance Model for Identification of DNS Infrastructures on Large-scale Traffic, 24th IEEE Symposium on Computers and Communications (ISCC), 2019, 通讯作者 
33. MeshTrust:基于CDN的视频流量信誉管理信任模型, MeshTrust: A CDN-centric Trust Model for Reputation Management on Video Traffic, The International Conference on Computational Science(ICCS), 2019, 通讯作者 
34. 网络空间资源测绘: 概念与技术, Cyberspace Resources Surveying and Mapping: The Concepts and Technologies, 信息安全学报, 2018, 第 5 作者 
35. WDMTI：使用层次狄利克雷过程识别无线设备制造商和类型, WDMTI: Wireless Device Manufacturer and Type Identification using Hierarchical Dirichlet Process, IEEE International Conference on Mobile Ad hoc and Sensor Systems(MASS), 2018, 第 4 作者 
36. SASD:一种自适应状态解压体系结构, SASD: A Self-Adaptive Stateful Decompression Architecture, IEEE Global Communications Conference(Globecom), 2018, 通讯作者 
37. VegaStar：基于大规模视频流量的非法域名检测系统, VegaStar: An Illegal Domain Detection System on Large-scale Video Traffic, International Conference On Trust, Security And Privacy In Computing And Communications(TrustCom), 2018, 通讯作者 
38. 基于差分隐私的WIFI室内定位位置指纹发布算法, WiFi Fingerprint Releasing for Indoor Localization Based on Differential Privacy, International Symposium on Personal, Indoor, and Mobile Radio Communications(PIMRC), 2017, 第 1 作者 
39. 基于协同稀疏表示学习模型的RGBD动作识别, Collaborative Sparse Representation Leaning Model for RGBD Action Recognition, Journal of Visual Communication and Image Representation(JVIS), 2017, 第 3 作者 
40. 基于正则化多任务学习算法的单/多视点人体动作识别评估, Evaluation of regularized multi-task leaning algorithms for single/multi-view human action recognition, Multimedia Tools and Applications(MTA), 2017, 第 4 作者 
41. 语义和局部保留相关投影, Semantics and locality preserving correlation projections, International Conference on Multimedia and Expo(ICME), 2017, 第 3 作者 
42. 网络流发布中的匿名和反匿名技术, De-anonymous and Anonymous Technologies for Network Traffic Release, Applications and Techniques in Information Security(ATIS), 2017, 第 3 作者