Web Security, Malware Analysis, Vulnerability Detection, Threat Detection and Defenses, Cyber Deception

2020.10-Now, Institute of Information Engineering,CAS, Professor

2015.10-2020.10, Institute of Information Engineering,CAS, Associate Professor

2013.09-2015.10, University of Chinese Academy of Sciences(UCAS), Lecturer

2011.06-2013.09, University of Chinese Academy of Sciences(UCAS), Postdoctor

DBLP: Qixu Liu

[1]. Zhen Chen, Ze Jin, Le Gong, Kexin Chen, Xiangyi Zeng, Qixu Liu. C-Verifier: Understanding and Formally Verifying Cross-Service Flaws in AWS Cognito. 47th IEEE Symposium on Security and Privacy (IEEE S&P 2026), SAN FRANCISCO, CA, MAY 18-21, 2026.

[2].Xingchen Chen, Yeting Li, Ze Jin*, Yaokang Tan, Xianglong Li, Baizhu Wang, Mengjun Zhang, Qixu Liu*. iDetector: Unraveling and Automating the Detection of Modern Java Web Injection Vulnerabilities. ACM Transactions on Software Engineering and Methodology (TOSEM), 2026.

[3].Shenping Xiong, Xutong Wang, Ze Jin, Xinyu Liu*, Haoqiang Wang, Zhen Chen, Ru Tan, Qixu Liu*. TGNN: Enhancing Pixel Tracking Detection via LLM-driven Annotation and GAT-powered Structural Representation. The Web Conference 2026 (WWW 2026). Dubai, United Arab Emirates, April 13-17, 2026.

[4]. Haoqiang Wang, Yiwei Fang, Yichen Liu, Ze Jin, Emma Delph, Xiaojiang Du,  Qixu Liu*, Luyi Xing*. Hidden and Lost Control: on Security Design Risks in IoT User-Facing Matter Controller. the 32nd edition of the Network and Distributed System Security Symposium (NDSS 2025).  San Diego, California. February 24-28, 2025.

[5]. Xinyu Liu, Ze Jin, Jiaxi Liu, Wei Liu, Xiaoxi Wang, Qixu Liu*. ANDetect: A Third-party Ad Network Libraries Detection Framework for Android Applications. the 39th Applied Computer Security Applications Conference (ACSAC 2023), Austin, Texas, USA. December 4-8, 2023.

[6]. Xingchen Chen, Baizhu Wang, Ze Jin, Yun Feng, Xianglong Li, Xincheng Feng, Qixu Liu*. Tabby: Automated Gadget Chain Detection for Java Deserialization Vulnerabilities. The 53rd Annual IEEE/IFIP International Conference on Dependable Systems and Network (DSN 2023). Porto, Portugal, June 27-30, 2023.

[7]. Ze Jin, Luyi Xing*, Yiwei Fang, Yan Jia, Bin Yuan, Qixu Liu*. P-Verifier: Understanding and Mitigating Security Risks in Cloud-based IoT Access Policies. The 29th ACM Conference on Computer and Communications Security (ACM CCS 2022). Los Angeles, USA. November 7-11, 2022

[8]. Junnan Wang,  Qixu Liu*, Di Wu, Ying Dong and Xiang Cui. Crafting Adversarial Example to Bypass Flow-&ML-based Botnet Detector via RL, The 24th International Symposium on Research in Attacks, Intrusions and Defenses (RAID 2021), Donostia / San Sebastian, Spain on October 6-8, 2021

[9]. Zhejun Fang, Qixu Liu, et.al. A Static Technique For Detecting Input Validation Vulnerability in Android Apps. SCIENCE CHINA Information Sciences.60(5): 052111:1-052111:16. 2017

[10]. Qianru Wu, Qixu Liu, Yuqing Zhang, Pen Liu and Guanxing Wen. A Machine Learning Approach for Detecting Third-Party Trackers on the Web. 21st European Symposium on Research in Computer Security（ESORICS 2016）, Greece, Heraklion, 26 - 30 September 2016

[11]. Qianru Wu, Qixu Liu, Yuqing Zhang and Guanxing Wen. TrackerDetector:a System to Detect Third-Party Trackers through Machine Learning. Computer Networks - Elsevier. Volume 91, Pages 164-173, November 14, 2015.

[12]. Yuqing Zhang, Qixu Liu, Qihan Luo, Xaili Wang. XAS: cross-API scripting attacks in social ecosystems. SCIENCE CHINA Information Sciences. 58(1): 012101(14), 2015.