李页霆，中国科学院信息工程研究所副研究员、硕士生导师，长期从事软件与系统安全研究，主要聚焦智能化漏洞挖掘、自动化漏洞利用、程序分析与安全评测技术。

围绕漏洞检测、利用生成与安全评测等方向，在 IEEE S&P、USENIX Security、NDSS、ICSE、ASE、ISSTA、TOSEM 等网络安全与软件工程领域国际顶级会议/期刊发表论文40余篇。相关研究获得 ICSE 2024 ACM SIGSOFT Distinguished Paper Award，并获 USENIX Security 2025 Distinguished Paper Honorable Mention，相关成果被《中国科学报》及国际安全公司报道。

课题组长期招收硕士生、博士生、博士后和科研实习生。欢迎对软件与系统安全、智能化漏洞挖掘、自动化漏洞利用、程序分析、模糊测试、二进制分析、LLM安全评测等方向感兴趣的同学加入。

课题组重视真实问题驱动和系统能力建设，学生将有机会参与真实软件生态漏洞分析、CVE挖掘与验证、安全评测任务，以及面向 S&P、USENIX Security、CCS、NDSS、ICSE、FSE、ASE、ISSTA 等顶级会议的科研训练。

欢迎具有较强编程能力、系统实现能力、论文阅读能力或网络安全实践经验的同学联系。来信请附个人简历、成绩单、代表性项目/代码链接，以及简要研究兴趣。更多研究成果、论文列表与招生信息请参见个人主页：https://yetingli.github.io/

   

083900-网络空间安全

软件安全分析理论与技术

2022-08~2025-10, 中国科学院信息工程研究所, 预聘副研究员

2025-10~现在, 中国科学院信息工程研究所, 副研究员

[1] Themis: Bridging Documentation and Code to Uncover Access Control Vulnerabilities in GitLab.

Yujie Sun, Huina Chao, Yeting Li*, Xinyi Wang, Yiming Liu, Jialun Cao, Qin Mai, Hengyu Yang, Feng Li, Wei Huo, Baoxu Liu. 2026 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP), CCF-B, 2026, 第 3 作者/通讯作者

[2] LifeFuzz: Lifecycle-Guided Fuzzing for Windows Driver Cross-Handler Vulnerabilities.

Chendong Yu, Yuekang Li, Yang Xiao, Jie Lu, Yeting Li, Defang Bo, Wei Huo. The 21st ACM European Conference on Computer Systems (EuroSys), CCF-A, 2026, 第 5 作者

[3] User-Space Dependency-Aware Rehosting for Linux-Based Firmware Binaries.

Chuan Qin, Cen Zhang, Yaowen Zheng, Puzhuo Liu, Jian Zhang, Yeting Li, Weidong Zhang, Yang Liu, Limin Sun. The 33rd Network and Distributed System Security Symposium (NDSS), CCF-A, 2026, 第 6 作者

[4] Through the Authentication Maze: Detecting Authentication Bypass Vulnerabilities in Firmware Binaries.

Nanyu Zhong, Yuekang Li, Yanyan Zou, Jiaxu Zhao, Jinwei Dong, Yang Xiao, Bingwei Peng, Yeting Li, Wei Wang, Wei Huo. The 33rd Network and Distributed System Security Symposium (NDSS), CCF-A, 2026, 第 8 作者

[5] VULCANBOOST: Boosting ReDoS Fixes through Symbolic Representation and Feature Normalization.

Yeting Li, Yecheng Sun, Zhiwu Xu, Haiming Chen, Xinyi Wang, Hengyu Yang, Huina Chao, Cen Zhang, Yang Xiao, Yanyan Zou, Feng Li, Wei Huo. The 34th USENIX Security Symposium (USENIX Security), CCF-A, 2025, 第 1 作者, Distinguished Paper Honorable Mention, 6% of accepted papers

[6] ZIPPER: Static Taint Analysis for PHP Applications with Precision and Efficiency.

Xinyi Wang, Yeting Li*, Jie Lu, Shizhe Cui, Chenghang Shi, Qin Mai, Yunpei Zhang, Yang Xiao, Feng Li, Wei Huo. The 34th USENIX Security Symposium (USENIX Security), CCF-A, 2025, 通讯作者

[7] From Constraints to Cracks: Constraint Semantic Inconsistencies as Vulnerability Beacons for Embedded Systems.

Jiaxu Zhao, Yuekang Li, Yanyan Zou, Yang Xiao, Naijia Jiang, Yeting Li, Nanyu Zhong, Bingwei Peng, Kunpeng Jian, Wei Huo. The 34th USENIX Security Symposium (USENIX Security), CCF-A, 2025, 第 6 作者

[8] CodeCleaner: Elevating Standards with A Robust Data Contamination Mitigation Toolkit.

Jialun Cao, Songqiang Chen, Wuqi Zhang, Hau Ching Lo, Yeting Li*, Shing-Chi Cheung. The 16th Asia-Pacific Symposium on Internetware (Internetware), CCF-C, 2025, 第 5 作者/通讯作者

[9] A Large Scale Study of AI-based Binary Function Similarity Detection Techniques for Security Researchers and Practitioners.

Jingyi Shi, Yufeng Chen, Yang Xiao, Yuekang Li, Zhengzi Xu, Sihao Qiu, Chi Zhang, Keyu Qi, Yeting Li, Xingchu Chen, Yanyan Zou, Yang Liu, Wei Huo. The 40th IEEE/ACM International Conference on Automated Software Engineering (ASE), CCF-A, 2025, 第 9 作者

[10] Understanding Resource Injection Vulnerabilities in Kubernetes Ecosystems.

Defang Bo, Jie Lu, Feng Li, Jingting Chen, Jinchen Wang, Chendong Yu, Yeting Li, Wei Huo. The 40th IEEE/ACM International Conference on Automated Software Engineering (ASE), CCF-A, 2025, 第 7 作者

[11] Vulnerability-Affected Versions Identification: How Far Are We?

Xingchu Chen, Chengwei Liu, Jialun Cao, Yang Xiao, Xinyue Cai, Yeting Li, Jingyi Shi, Tianqi Sun, Haiming Chen, Wei Huo. The 40th IEEE/ACM International Conference on Automated Software Engineering (ASE), CCF-A, 2025, 第 6 作者

[12] A Survey of Protocol Fuzzing.

Xiaohan Zhang, Cen Zhang, Xinghua Li, Zhengjie Du, Bing Mao, Yuekang Li, Yaowen Zheng, Yeting Li, Li Pan, Yang Liu, Robert Deng. ACM Computing Surveys (CSUR), 57(2): 35:1-35:36, 2025, 第 8 作者

[13] Fuzzing for Stateful Protocol Implementations: Are We There Yet?

Kunpeng Jian, Yanyan Zou, Yeting Li*, Jialun Cao, Menghao Li, Jian Sun, Jingyi Shi, Wei Huo. The 18th Theoretical Aspects of Software Engineering Conference (TASE), CCF-C, 2024, 通讯作者

[14] How Effective Are They? Exploring Large Language Model Based Fuzz Driver Generation.

Cen Zhang, Yaowen Zheng, Mingqiang Bai, Yeting Li, Wei Ma, Xiaofei Xie, Yuekang Li, Limin Sun, Yang Liu. The 33rd ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA), CCF-A, 2024, 第 4 作者

[15] Semantic-Enhanced Static Vulnerability Detection in Baseband Firmware.

Yiming Liu, Cen Zhang, Feng Li, Yeting Li, Jianhua Zhou, Jian Wang, Lanlan Zhan, Yang Liu, Wei Huo. The 46th International Conference on Software Engineering (ICSE), CCF-A, 2024, 第 4 作者, ACM SIGSOFT Distinguished Paper Award

[16] Leveraging Semantic Relations in Code and Data to Enhance Taint Analysis of Embedded Systems.

Jiaxu Zhao, Yuekang Li, Yanyan Zou, Zhaohui Liang, Yang Xiao, Yeting Li, Bingwei Peng, Nanyu Zhong, Xinyi Wang, Wei Wang, Wei Huo. The 33rd USENIX Security Symposium (USENIX Security), CCF-A, 2024, 第 6 作者

[17] File Hijacking Vulnerability: The Elephant in the Room.

Chendong Yu, Yang Xiao, Jie Lu, Yuekang Li, Yeting Li, Lian Li, Yifan Dong, Jian Wang, Jingyi Shi, Defang Bo, Wei Huo. The 31st Annual Network and Distributed System Security Symposium (NDSS), CCF-A, 2024, 第 5 作者

[18] Aster: Automatic Speech Recognition System Accessibility Testing for Stutterers.

Yi Liu, Yuekang Li, Gelei Deng, Felix Juefei-Xu, Yao Du, Cen Zhang, Chengwei Liu, Yeting Li, Lei Ma, Yang Liu. The 38th IEEE/ACM International Conference on Automated Software Engineering (ASE), CCF-A, 2023, 第 8 作者

[19] ACETest: Automated Constraint Extraction for Testing Deep Learning Operators.

Jingyi Shi, Yang Xiao, Yuekang Li, Yeting Li, Dongsong Yu, Chendong Yu, Hui Su, Yufeng Chen, Wei Huo. The 32nd ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA), CCF-A, 2023, 第 4 作者

[20] Effective ReDoS Detection by Principled Vulnerability Modeling and Exploit Generation.

Xinyi Wang, Cen Zhang, Yeting Li*, Zhiwu Xu, Shuailin Huang, Yi Liu, Yican Yao, Yang Xiao, Yanyan Zou, Yang Liu, Wei Huo. The 44th IEEE Symposium on Security and Privacy (S&P), CCF-A, 2023, 通讯作者

[21] RegexScalpel: Regular Expression Denial of Service (ReDoS) Defense by Localize-and-Fix.

Yeting Li, Yecheng Sun, Zhiwu Xu, Jialun Cao, Yuekang Li, Rongchen Li, Haiming Chen, Shing-Chi Cheung, Yang Liu, Yang Xiao. The 31st USENIX Security Symposium (USENIX Security), CCF-A, 2022, 第 1 作者

[22] Learning Disjunctive Multiplicity Expressions and Disjunctive Generalize Multiplicity Expressions from Both Positive and Negative Examples.

Yeting Li, Haiming Chen, Zixuan Chen. The Computer Journal, CCF-B, 2022, 第 1 作者

[23] SemMT: A Semantic-based Testing Approach for Machine Translation Systems.

Jialun Cao, Meiziniu Li, Yeting Li, Ming Wen, Shing-Chi Cheung, Haiming Chen. ACM Transactions on Software Engineering and Methodology (TOSEM), CCF-A, 2022, 第 3 作者

[24] ReDoSHunter: A Combined Static and Dynamic Approach for Regular Expression DoS Detection.

Yeting Li, Zixuan Chen, Jialun Cao, Zhiwu Xu, Qiancheng Peng, Haiming Chen, Liyuan Chen, Shing-Chi Cheung. The 30th USENIX Security Symposium (USENIX Security), CCF-A, 2021, 第 1 作者

[25] TransRegex: Multi-modal Regular Expression Synthesis by Generate-and-Repair.

Yeting Li, Shuaimin Li, Zhiwu Xu, Jialun Cao, Zixuan Chen, Yun Hu, Haiming Chen, Shing-Chi Cheung. The 43rd International Conference on Software Engineering (ICSE), CCF-A, 2021, 第 1 作者

[26] FlashRegex: Deducing Anti-ReDoS Regexes from Examples.

Yeting Li, Zhiwu Xu, Jialun Cao, Haiming Chen, Tingjian Ge, Shing-Chi Cheung, Haoren Zhao. The 35th IEEE/ACM International Conference on Automated Software Engineering (ASE), CCF-A, 2020, 第 1 作者

[27] Inferring Restricted Regular Expressions with Interleaving from Positive and Negative Samples.

Yeting Li, Haiming Chen, Lingqi Zhang, Bo Huang, Jianzhao Zhang. The 24th Pacific-Asia Conference on Knowledge Discovery and Data Mining (PAKDD), CORE-A, 2020, 第 1 作者

[28] FlashSchema: Achieving High Quality XML Schemas with Powerful Inference Algorithms and Large-scale Schema Data.

Yeting Li, Jialun Cao, Haiming Chen, Tingjian Ge, Zhiwu Xu, Qiancheng Peng. The 36th IEEE International Conference on Data Engineering (ICDE), CCF-A, 2020, 第 1 作者

[29] Learning k-Occurrence Regular Expressions from Positive and Negative Samples.

Yeting Li, Xiaoying Mou, Haiming Chen. The 38th International Conference on Conceptual Modeling (ER), CORE-A, 2019, 第 1 作者

[30] Context-free Grammars for Deterministic Regular Expressions with Interleaving.

Xiaoying Mou, Haiming Chen, Yeting Li. The 16th International Colloquium on Theoretical Aspects of Computing (ICTAC), CCF-C, 2019, 第 3 作者

[31] An Effective Algorithm for Learning Single Occurrence Regular Expressions with Interleaving.

Yeting Li, Haiming Chen, Xiaolan Zhang, Lingqi Zhang. The 23rd International Database Engineering & Applications Symposium (IDEAS), CORE-B, 2019, 第 1 作者

[32] Learning k-Occurrence Regular Expressions with Interleaving.

Yeting Li, Xiaolan Zhang, Jialun Cao, Haiming Chen, Chong Gao. The 24th International Conference on Database Systems for Advanced Applications (DASFAA), CCF-B, 2019, 第 1 作者

[33] Learning DMEs from Positive and Negative Examples.

Yeting Li, Chunmei Dong, Xinyu Chu, Haiming Chen. The 24th International Conference on Database Systems for Advanced Applications (DASFAA), CCF-B, 2019, 第 1 作者

[34] A Large-Scale Repository of Deterministic Regular Expression Patterns and Its Applications.

Haiming Chen, Yeting Li, Chunmei Dong, Xinyu Chu, Xiaoying Mou, Weidong Min. The 23rd Pacific-Asia Conference on Knowledge Discovery and Data Mining (PAKDD), CORE-A, 2019, 第 2 作者

[35] Learning Restricted Regular Expressions with Interleaving.

Chunmei Dong, Yeting Li, Haiming Chen. The 45th International Conference on Current Trends in Theory and Practice of Computer Science (SOFSEM), CORE-B, 2019, 第 2 作者

[36] Learning Concise Relax NG Schemas Supporting Interleaving from XML Documents.

Yeting Li, Xiaoying Mou, Haiming Chen. The 14th Advanced Data Mining and Applications (ADMA), CORE-B, 2018, 第 1 作者

[37] Learning Restricted Regular Expressions with Interleaving from XML Data.

Yeting Li, Xiaolan Zhang, Han Xu, Xiaoying Mou, Haiming Chen. The 37th International Conference on Conceptual Modeling (ER), CORE-A, 2018, 第 1 作者

[38] Inferring Regular Expressions with Interleaving from XML Data.

Xiaolan Zhang, Yeting Li, Fei Tian, Fanlin Cui, Chunmei Dong, Haiming Chen. The 2nd Asia Pacific Web (APWeb) and Web-Age Information Management (WAIM) Joint Conference on Web and Big Data (APWeb-WAIM), CCF-C, 2018, 第 2 作者

[39] Practical Study of Deterministic Regular Expressions from Large-scale XML and Schema Data.

Yeting Li, Xinyu Chu, Xiaoying Mou, Chunmei Dong, Haiming Chen. The 22nd International Database Engineering & Applications Symposium (IDEAS), CORE-B, 2018, 第 1 作者

[40] Inference of a Concise Regular Expression Considering Interleaving from XML Documents.

Xiaolan Zhang, Yeting Li, Fanlin Cui, Chunmei Dong, Haiming Chen. The 22nd Pacific-Asia Conference on Knowledge Discovery and Data Mining (PAKDD), CORE-A, 2018, 第 2 作者

[41] Practical Study of Subclasses of Regular Expressions in DTD and XML Schema.

Yeting Li, Xiaolan Zhang, Feifei Peng, Haiming Chen. The 18th Asia Pacific Web Conference (APWeb), CCF-C, 2016, 第 1 作者

现指导学生

麦钦  硕士研究生  085412-网络与信息安全  

刘俊杰  硕士研究生  085412-网络与信息安全