主要研究方向是操作系统，包括智能体操作系统安全，系统安全，AI4Sys等，中科院特聘研究骨干，主持多项操作系统和系统安全相关的国家重点研发计划、中科院先导、国家自然科学基金面上、青年等项目，主持并制定我国可信计算密码行业标准若干项。在国内外期刊及会议上发表论文20余篇，包括CCS、RAID、Computer Networks等信息安全领域重要国际会议和期刊。

谷歌学术网址： https://scholar.google.com/citations?user=yaTMRQkAAAAJ&hl=zh-CN

研究方向：操作系统、智能体操作系统安全、智能体安全

欢迎对操作系统、智能体安全、系统安全以及安全编程语言有兴趣的同学联系。

2008-09--2015-01   中国科学院大学   博士
2004-09--2008-06   西安交通大学   学士

博士研究生

博士

   

2021-12~现在, 中国科学院信息工程研究所, 副研究员
2020-03~2021-11,华为技术有限公司, 技术专家
2019-10~2020-03,中国科学院软件研究所, 副研究员
2015-06~2019-10,中国科学院软件研究所, 助理研究员

• [USENIX Security-26] Shiwen Wang, Wu Luo, Kaicheng Liu, Zheyuan Xu, Yaowen Zheng, Wenhao Wang, Shijun Zhao, Peinan Li, Rui Hou. Enjoy the Free Lunch, Someone Paid for Us: Escaping Resource Limits of MicroVM-based Containers, In Proceedings of the 35th USENIX Security Symposium, 2026 (CCF-A).
• [IJCNN-25] Zhuang Lu, Yulei Wu, He Kong, Shuai Ding, Shijun Zhao, Chunjing Han. TriAnomalyNet: A Microservice Anomaly Detection Model Based on Multi-Stream Encoders. 2025 International Joint Conference on Neural Networks (IJCNN), 2025 (CCF-C).
• [IEICE-25] Qianying Zhang, Dongxu Ji, Shijun Zhao, Zhiping Shi, Yong Guan. MicroTEE: Designing and Implementing TEE OS with Rich Trusted Computing Features Based on Microkernel. IEICE Transactions on Information and Systems, 2025.
• [MICRO-24] Yunkai Bai, Peinan Li, Yubiao Huang, Michael C Huang, Shijun Zhao, Lutan Zhao, Fengwei Zhang, Dan Meng, Rui Hou. Hypertee: A decoupled tee architecture with secure enclave management. 2024 57th IEEE/ACM International Symposium on Microarchitecture (MICRO), 2024 (CCF-A).
• [TrustCom-24] Feng He, Shijun Zhao*, Dan Meng, Rui Hou. MSMP: A Centralized Shared-memory Management for Building Efficient and Reliable File Systems on Microkernels. 2024 IEEE 23rd International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom), 2024 (CCF-C, 通讯作者).
• [通信学报-24] 张倩颖, 赵世军, 冯伟, 秦宇, 冯登国. 跨平台的可信执行环境模块方案研究. 通信学报, 2024.
• [IEICE-24] Linhan Li, Qianying Zhang, Zekun Xu, Shijun Zhao, Zhiping Shi, Yong Guan. rOOM: A Rust-Based Linux Out of Memory Kernel Component. IEICE TRANSACTIONS on Information and Systems, 2024.
• [NDSS-25] Wenhao Wang, Linke Song, Benshan Mei, Shuang Liu, Shijun Zhao, Shoumeng Yan*, XiaoFeng Wang, Dan Meng, Rui Hou* Network and Distributed System Security Symposium (NDSS) 2025  (CCF-A)
• [QRS-22] Linhan Li, Qianying Zhang, Shijun Zhao, Zhiping Shi, Yong Guan. Design and Implementation of OOM Module based on Rust. 2022 IEEE 22nd International Conference on Software Quality, Reliability, and Security Companion (QRS-C), 2022 (CCF-C).
• [Computer Networks-20] Qianying Zhang, Shijun Zhao*. A comprehensive formal security analysis and revision of the two-phase key exchange primitive of TPM 2.0. Computer Networks, 2020 (CCF-B，通讯作者).
• [SCN-20] Yu Qin, Jingbin Liu, Shijun Zhao, Dengguo Feng, Wei Feng. RIPTE: runtime integrity protection based on trusted execution for IoT device. Security and Communication Networks, 2020 (CCF-C).
• [APSEC-20] Yuwei Ma, Qianying Zhang, Shijun Zhao, Guohui Wang, Ximeng Li, Zhiping Shi. Formal verification of memory isolation for the trustzone-based tee. 2020 27th Asia-Pacific Software Engineering Conference (APSEC), 2020 (CCF-C).
• [软件学报-20] Qianying Zhang, Shijun Zhao. Survey of research on protection mechanisms of operating system against board level physical attacks. Journal of Software, 2020.
• [CCS-19] Shijun Zhao, Qianying Zhang, Yu Qin, Wei Feng, Dengguo Feng. Sectee: A software-based approach to secure enclave architecture using tee. Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security, 2019 (CCF-A，第一作者).
• [RAID-19] Shijun Zhao, Qianying Zhang, Yu Qin, Wei Feng, Dengguo Feng. Minimal kernel: an operating system architecture for TEE to resist board level physical attacks. 22nd International Symposium on Research in Attacks, Intrusions and Defenses (RAID 2019), 2019 (CCF-B，第一作者).
• [SCN-19] Meiyu Zhang, Qianying Zhang, Shijun Zhao, Zhiping Shi, Yong Guan. SoftME: A Software-Based Memory Protection Approach for TEE System to Resist Physical Attacks. Security and Communication Networks, 2019 (CCF-C)
• [TrustCom-19] Dongxu Ji, Qianying Zhang, Shijun Zhao, Zhiping Shi, Yong Guan. Microtee: designing tee os based on the microkernel architecture. 2019 18th IEEE International Conference On Trust, Security And Privacy In Computing And Communications/13th IEEE International Conference On Big Data Science And Engineering (TrustCom/BigDataSE), 2019 (CCF-C).
• [CSS-19] Jingbin Liu, Qin Yu, Wei Liu, Shijun Zhao, Dengguo Feng, Weifeng Luo. Log-based control flow attestation for embedded devices. International Symposium on Cyberspace Safety and Security, 2019 (CCF-C).
• [CN-18] Wei Feng, Yu Qin, Shijun Zhao, Dengguo Feng. AAoT: Lightweight attestation and authentication of low-resource things in IoT and CPS. Computer Networks, 2018 (CCF-B).
• [CANS-17] Wei Feng, Yu Qin, Shijun Zhao, Ziwen Liu, Xiaobo Chu, Dengguo Feng. Secure code updates for smart embedded devices based on PUFs. International Conference on Cryptology and Network Security, 2017 (CCF-C).
• [NSS-15] Shijun Zhao, Qianying Zhang, Yu Qin, Dengguo Feng. Universally composable secure TNC protocol based on IF-T binding to TLS. International Conference on Network and System Security, 2015.
• [TRUST-15] Shijun Zhao, Qianying Zhang. A unified security analysis of two-phase key exchange protocols in TPM 2.0. International Conference on Trust and Trustworthy Computing, 2015.
• [ISPEC-15] Shijun Zhao, Qianying Zhang. sHMQV: An efficient key exchange protocol for power-limited devices. International Conference on Information Security Practice and Experience, 2015 (CCF-C).
• [SCN-15] Shijun Zhao, Li Xi, Qianying Zhang, Yu Qin, Dengguo Feng. Security analysis of SM2 key exchange protocol in TPM2. 0. Security and Communication Networks, 2015 (CCF-C).
• [TrustCom-15] Yingjun Zhang, Shijun Zhao, Yu Qin, Bo Yang, Dengguo Feng. Trusttokenf: A generic security framework for mobile two-factor authentication using trustzone. 2015 IEEE Trustcom/BigDataSE/ISPA, 2015 (CCF-C).
• [TRUST-15] Shijun Zhao, Qianying Zhang. A Unified Security Analysis of Two-Phase Key Exchange Protocols in TPM 2.0, Trust and Trustworthy Computing. Springer International Publishing, 2015.
• [TrustED-14] Shijun Zhao, Qianying Zhang, Guangyao Hu, Yu Qin, Dengguo Feng. Providing root of trust for ARM TrustZone using on-chip SRAM. Proceedings of the 4th International Workshop on Trustworthy Embedded Devices, 2014.
• [ICICS-14] Qianying Zhang, Shijun Zhao, Li Xi, Wei Feng, Dengguo Feng. Mdaak: A flexible and efficient framework for direct anonymous attestation on mobile devices. International Conference on Information and Communications Security, 2014 (CCF-C).
• [SecureComm-14] Qianying Zhang, Shijun Zhao, Yu Qin, Dengguo Feng. Improving the security of the hmqv protocol using tamper-proof hardware. International Conference on Security and Privacy in Communication Systems, 2014 (CCF-C).
• [CSB-14] Qianying Zhang, Shijun Zhao, Yu Qin, Dengguo Feng. Formal analysis of TPM2. 0 key management APIs. Chinese science bulletin, 2014.
• [JC-14] Qianying Zhang, Dengguo Feng, Shijun Zhao. Research of platform identity attestation based on trusted chip. Journal on Communications, 2014.
• [TrustCom-11] Aimin Yu, Shijun Zhao. Enhancing Flexibility of TCG's TNC through Layered Property Attestation. 2011 IEEE 10th International Conference on Trust, Security and Privacy in Computing and Communications, 2011 (CCF-C).
• [TrustCom-11] Yu Qin, Dexian Chang, Shijun Zhao, Qianying Zhang. A property-based attestation scheme with the variable privacy. 2011 IEEE 10th International Conference on Trust, Security and Privacy in Computing and Communications, 2011 (CCF-C).

（1） 可信计算：原理与实现, Trusted Computing: Principles and Applications, Walter de Gruyter GmbH & Co KG, 2017-12, 第 4 作者

现指导学生

陈丽新  硕士研究生  083900-网络空间安全  

李道勋  硕士研究生  081201-计算机系统结构  

张泽贤  硕士研究生  081201-计算机系统结构  

许哲源 （博士生，导师：侯锐研究员）

路壮 （博士生，导师：侯锐研究员）

聂泽锴 （博士生，导师，侯锐研究员）