主要研究方向是机密计算、云计算与虚拟化、AI智能体攻防。

在USENIX Security、NDSS、ISSTA、TC、TDSC、TSC等发表论文10余篇。

拟招对机密计算、云计算与虚拟化、AI智能体攻防等方向感兴趣的硕士研究生，欢迎邮件联系。

083900-网络空间安全

2018-03--2019-03   新加坡管理大学   联合培养
2015-09--2021-01   北京大学   理学博士
2011-09--2015-06   北京邮电大学   工学学士

   

2024-08~现在, 中国科学院信息工程研究所, 副研究员
2021-01~2024-08,华为北京研究所OS内核实验室, 高级工程师、主任工程师

• [USENIX Security-26] Shiwen Wang, Wu Luo*, Kaicheng Liu, Zheyuan Xu, Yaowen Zheng, Wenhao Wang, Shijun Zhao, Peinan Li, Rui Hou. Enjoy the Free Lunch, Someone Paid for Us: Escaping Resource Limits of MicroVM-based Containers, In Proceedings of the 35th USENIX Security Symposium, 2026. (CCF-A类会议，通讯作者).
• [ISSTA-26] Xiaobei Zhang, Yaowen Zheng, Wu Luo, Shijun Zhao, Yongsheng Tao, Dan Meng, Rui Hou. A Comprehensive Empirical Analysis of Patch Presence Testing: Capabilities, Limitations, and Paths Forward. In Proceedings of the 35th ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA), 2026. (CCF-A类会议).
• [TC-26] Shiwen Wang, Peinan Li, Yunkai Bai, Wu Luo, Guang Yan, Dan Meng, Rui Hou. NXT: Sharable Trusted Execution Environment for Multi-Tenant NPU Cluster, IEEE Transactions on Computers (TC), 2026. (CCF-A类期刊)
• [ICASSP-23] Yutang Xia, Yang Luo, Wu Luo, Qingni Shen, Yahui Yang, Zhonghai Wu. A Role Engineering Approach Based on Spectral Clustering Analysis for Restful Permissions in Cloud, IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP), 2023, Page(s): 1--5.（CCF-B类会议）
• [NDSS-22] Wu Luo, Xuhua Ding, Pengfei Wu, Xiaolei Zhang, Qingni Shen, Zhonghai Wu. ScriptChecker: To tame third-party script execution with task capabilities, Network and Distributed System Security Symposium (NDSS), 2022.（CCF-A类会议）
• [TDSC-22] Chuntao Dong, Qingni Shen, Xuhua Ding, Daoqing Yu, Wu Luo, Pengfei Wu, Zhonghai Wu. T-Counter: Trustworthy and Efficient CPU Resource Measurement using SGX in the Cloud, IEEE Transactions on Dependable and Secure Computing (TDSC), 2022, Volume: 20, Issue: 1, Page(s): 867--885.（CCF-A类期刊）
• [TSC-21] Pengfei Wu, Jianting Ning, Wu Luo, Xinyi Huang, Debiao He. Exploring Dynamic Task Loading in SGX-based Distributed Computing, IEEE Transactions on Services Computing (TSC), 2021, Volume: 16, Issue: 1, Page(s): 288--301.（CCF-A类期刊）
• 董春涛, 沈晴霓, 罗武, 吴鹏飞, 吴中海. SGX应用支持技术研究进展. 软件学报, 2021, 卷: 32, 期: 1, 页: 137--166.
• 罗武, 沈晴霓, 吴中海, 吴鹏飞, 董春涛, 夏玉堂. 浏览器同源策略安全研究综述. 软件学报. 2020, 卷: 32, 期: 8, 页: 2469--2504.
• [CLOUD-20] Xuhao Wang, Qingni Shen, Wu Luo, Pengfei Wu. RSDS: Getting System Call Whitelist for Container Through Dynamic and Static Analysis, IEEE International Conference on Cloud Computing (CLOUD), 2020, Page(s): 600--608.（CCF-C类会议）
• [RAID-19] Wu Luo, Qingni Shen, Yutang Xia, Zhonghai Wu. Container-IMA: A privacy-preserving Integrity Measurement Architecture for Containers, International Symposium on Research in Attacks, Intrusions and Defenses (RAID), 2019, Page(s): 487--500.（CCF-B类会议）
• [ICICS-19] Zhenyu Zhao, Qingni Shen, Wu Luo, Anbang Ruan. CloudCoT: a blockchain-based cloud service dependency attestation framework, International Conference on Information and Communications Security (ICICS), 2019, Volume: 11999, Page(s): 584--599.（CCF-C类会议）
• [ICC-17] Tian Puyang, Qingni Shen, Yang Luo, Wu Luo, Zhonghai Wu. Making least privilege the low-hanging fruit in clouds, IEEE International Conference on Communications (ICC) , 2017, Page(s): 1--7.（CCF-C类会议）
• [TrustCom-16] Wu Luo, Wei Liu, Yang Luo, Anbang Ruan, Qingni Shen, Zhonghai Wu. Partial attestation: towards cost-effective and privacy-preserving remote attestations, IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom), 2016, Page(s): 152--159.（CCF-C类会议）
• [CLOUD-16] Yang Luo, Wu Luo, Tian Puyang, Qingni Shen, Anbang Ruan, Zhonghai Wu. Openstack security modules: A least-invasive access control framework for the cloud, IEEE International Conference on Cloud Computing (CLOUD), 2016, Page(s): 51--58.（CCF-C类会议）
• [TrustCom-16] Yang Luo, Wu Luo, Xiaoning Sun, Qingni Shen, Anbang Ruan, Zhonghai Wu. Whispers between the containers: High-capacity covert channel attacks in docker, IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom), 2016, Page(s): 630--637.（CCF-C类会议）
• [ICICS-16] Yang Luo, Tian Puyang, Wu Luo, Qingni Shen, Anbang Ruan, Zhonghai Wu. Multipol: Towards a multi-policy authorization framework for restful interfaces in the cloud, International Conference on Information and Communications Security (ICICS), 2016. Volume: 9977, Page(s): 214--226.（CCF-C类会议）