李页霆，中国科学院信息工程研究所预聘副研究员，专注于软件漏洞分析与利用、软件安全评测。发表S&P、USENIX SEC、NDSS、ICSE、ASE、TOSEM、ISSTA等高水平论文20余篇，其中1篇ICSE 2024最佳论文+5篇安全四大会议+19篇一作/通讯。担任USENIX SEC、 TMC、JCST、TASE等高质量会议与期刊论文审稿人以及CAV、AsiaCCS等高质量论文辅助审稿人。主持国家自然基金青年项目、 中国科学院 “特别研究助理资助项目”、中国科学院信息工程研究所“攀登计划”等。相关成果获《中国科学报》、知名安全公司Snyk报道。

课题组长期招收硕士生、博士生和博士后，欢迎对软件与系统安全感兴趣的同学加入我们团队。

   

083900-网络空间安全

软件安全分析理论与技术

2022-08~现在, 中国科学院信息工程研究所, 预聘副研究员

   

（1） 中国科学院院长优秀奖, 院级, 2022
（2） 中国科学院 “特别研究助理资助项目”, 院级, 2022
（3） 研究生国家奖学金, 国家级, 2018
（4） 国家奖学金, 国家级, 2015

（ 1 ） 一种基于动静态结合的ReDoS漏洞检测方法与系统, 发明专利, 2023, 第 1 作者, 专利号: CN116614270A

（ 2 ） 针对应用程序的文件劫持漏洞检测方法及装置, 发明专利, 2024, 第 4 作者, 专利号: CN117473506A

[1] Semantic-Enhanced Static Vulnerability Detection in Baseband Firmware. Yiming Liu, Cen Zhang, Feng Li, Yeting Li, Jianhua Zhou, Jian Wang, Lanlan Zhan, Yang Liu, Wei Huo: The 46th International Conference on Software Engineering (ICSE), CCF-A. 2024, 第 4 作者, ACM SIGSOFT Distinguished Paper Award

[2] File Hijacking Vulnerability: The Elephant in the Room. Chendong Yu, Yang Xiao, Jie Lu, Yuekang Li, Yeting Li, Lian Li, Yifan Dong, Jian Wang, Jingyi Shi, Defang Bo, Wei Huo: The 31st Annual Network and Distributed System Security Symposium (NDSS), CCF-A, 2024, 第 5 作者

[3] How Effective Are They? Exploring Large Language Model Based Fuzz Driver Generation. Cen Zhang, Yaowen Zheng, Mingqiang Bai, Yeting Li, Wei Ma, Xiaofei Xie, Yuekang Li, Limin Sun, Yang Liu: The 33rd ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA), CCF-A, 2024, 第 4 作者

[4] Leveraging Semantic Relations in Code and Data to Enhance Taint Analysis of Embedded Systems. Jiaxu Zhao, Yuekang Li, Yanyan Zou, Zhaohui Liang, Yang Xiao, Yeting Li, Bingwei Peng, Nanyu Zhong, Xinyi Wang, Wei Wang, Wei Huo: The 33rd USENIX Security Symposium (USENIX SEC), CCF-A, 2024, 第 6 作者

[5] Learning Disjunctive Multiplicity Expressions and Disjunctive Generalize Multiplicity Expressions from Both Positive and Negative Examples. Yeting Li, Haiming Chen, Zixuan Chen: The Computer Journal, CCF-B, 2024, 第 1 作者

[6] Fuzzing for Stateful Protocol Implementations: Are We There Yet? Kunpeng Jian, Yanyan Zou, Yeting Li, Jialun Cao, Menghao Li, Jian Sun, Jingyi Shi and Wei Huo: The 18th International Symposium on Theoretical Aspects of Software Engineering (TASE) , CCF-C, 2024, 通讯作者

[7] Aster: Automatic Speech Recognition System Accessibility Testing for Stutterers. Yi Liu, Yuekang Li, Gelei Deng, Felix Juefei-Xu, Yao Du, Cen Zhang, Chengwei Liu, Yeting Li, Lei Ma, Yang Liu: The 38th IEEE/ACM International Conference on Automated Software Engineering (ASE), CCF-A, 2023, 第 8 作者

[8] ACETest: Automated Constraint Extraction for Testing Deep Learning Operators. Jingyi Shi, Yang Xiao, Yuekang Li, Yeting Li, Dongsong Yu, Chendong Yu, Hui Su, Yufeng Chen, Wei Huo: The 32nd ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA), CCF-A, 2023, 第 4 作者

[9] Effective ReDoS Detection by Principled Vulnerability Modeling and Exploit Generation. Xinyi Wang, Cen Zhang, Yeting Li*, Zhiwu Xu, Shuailin Huang, Yi Liu, Yican Yao, Yang Xiao, Yanyan Zou, Yang Liu, Wei Huo: The 44th IEEE Symposium on Security and Privacy (S&P), CCF-A, 2023, 通讯作者

[10] RegexScalpel: Regular Expression Denial of Service (ReDoS) Defense by Localize-and-Fix. Yeting Li, Yecheng Sun, Zhiwu Xu, Jialun Cao, Yuekang Li, Rongchen Li, Haiming Chen, Shing-Chi Cheung, Yang Liu, Yang Xiao: The 31st USENIX Security Symposium (USENIX SEC), CCF-A, 2022, 第 1 作者

[11] SemMT: A Semantic-based Testing Approach for Machine Translation Systems. Jialun Cao, Meiziniu Li, Yeting Li, Ming Wen, Shing-Chi Cheung, Haiming Chen: ACM Transactions on Software Engineering and Methodology (TOSEM) , CCF-A, 2022, 第 3 作者

[12] ReDoSHunter: A Combined Static and Dynamic Approach for Regular Expression DoS Detection. Yeting Li, Zixuan Chen, Jialun Cao, Zhiwu Xu, Qiancheng Peng, Haiming Chen, Liyuan Chen, Shing-Chi Cheung: The 30th USENIX Security Symposium (USENIX SEC), CCF-A, 2021, 第 1 作者

[13] TransRegex: Multi-modal Regular Expression Synthesis by Generate-and-Repair. Yeting Li, Shuaimin Li, Zhiwu Xu, Jialun Cao, Zixuan Chen, Yun Hu, Haiming Chen, Shing-Chi Cheung: The 43rd International Conference on Software Engineering (ICSE), CCF-A, 2021, 第 1 作者

[14] FlashRegex: Deducing Anti-ReDoS Regexes from Examples. Yeting Li, Zhiwu Xu, Jialun Cao, Haiming Chen, Tingjian Ge, Shing-Chi Cheung, Haoren Zhao: The 35th IEEE/ACM International Conference on Automated Software Engineering (ASE), CCF-A, 2020, 第 1 作者

[15] Inferring Restricted Regular Expressions with Interleaving from Positive and Negative Samples. Yeting Li, Haiming Chen, Lingqi Zhang, Bo Huang, Jianzhao Zhang: The 24th Pacific-Asia Conference on Knowledge Discovery and Data Mining (PAKDD), CORE-A, 2020, 第 1 作者

[16] FlashSchema: Achieving High Quality XML Schemas with Powerful Inference Algorithms and Large-scale Schema Data. Yeting Li, Jialun Cao, Haiming Chen, Tingjian Ge, Zhiwu Xu, Qiancheng Peng: The 36th IEEE International Conference on Data Engineering (ICDE), CCF-A, 2020, 第 1 作者

[17] Learning k-Occurrence Regular Expressions from Positive and Negative Samples. Yeting Li, Xiaoying Mou, Haiming Chen: The 38th International Conference on Conceptual Modeling (ER) , CORE-A, 2019, 第 1 作者

[18] Context-free Grammars for Deterministic Regular Expressions with Interleaving. Xiaoying Mou, Haiming Chen, Yeting Li: The 16th International Colloquium on Theoretical Aspects of Computing (ICTAC), CCF-C, 2019, 第 3 作者

[19] An Effective Algorithm for Learning Single Occurrence Regular Expressions with Interleaving. Yeting Li, Haiming Chen, Xiaolan Zhang, Lingqi Zhang: The 23rd International Database Engineering & Applications Symposium (IDEAS), CORE-B, 2019, 第 1 作者

[20] Learning k-Occurrence Regular Expressions with Interleaving. Yeting Li, Xiaolan Zhang, Jialun Cao, Haiming Chen, Chong Gao: The 24th International Conference on Database Systems for Advanced Applications (DASFAA), CCF-B, 2019, 第 1 作者

[21] Learning DMEs from Positive and Negative Examples. Yeting Li, Chunmei Dong, Xinyu Chu, Haiming Chen: The 24th International Conference on Database Systems for Advanced Applications (DASFAA), CCF-B, 2019, 第 1 作者

[22] A Large-Scale Repository of Deterministic Regular Expression Patterns and Its Applications. Haiming Chen, Yeting Li, Chunmei Dong, Xinyu Chu, Xiaoying Mou, Weidong Min: The 23rd Pacific-Asia Conference on Knowledge Discovery and Data Mining (PAKDD), CORE-A, 2019, 第 2 作者

[23] Learning Restricted Regular Expressions with Interleaving. Chunmei Dong, Yeting Li, Haiming Chen: The 45th International Conference on Current Trends in Theory and Practice of Computer Science (SOFSEM), CORE-B, 2019, 第 2 作者

[24] Learning Concise Relax NG Schemas Supporting Interleaving from XML Documents. Yeting Li, Xiaoying Mou, Haiming Chen: The 14th Advanced Data Mining and Applications (ADMA), CORE-B, 2019, 第 1 作者

[25] Learning Restricted Regular Expressions with Interleaving from XML Data. Yeting Li, Xiaolan Zhang, Han Xu, Xiaoying Mou, Haiming Chen: The 37th International Conference on Conceptual Modeling (ER), CORE-A, 2019, 第 1 作者

[26] Inferring Regular Expressions with Interleaving from XML Data. Xiaolan Zhang, Yeting Li, Fei Tian, Fanlin Cui, Chunmei Dong, Haiming Chen: The 2nd Asia Pacific Web (APWeb) and Web-Age Information Management (WAIM) Joint Conference on Web and Big Data (APWeb-WAIM), CCF-C, 2018, 第 2 作者

[27] Practical Study of Deterministic Regular Expressions from Large-scale XML and Schema Data. Yeting Li, Xinyu Chu, Xiaoying Mou, Chunmei Dong, Haiming Chen: The 22nd International Database Engineering & Applications Symposium (IDEAS), CORE-B, 2018, 第 1 作者

[28] Inference of a Concise Regular Expression Considering Interleaving from XML Documents. Xiaolan Zhang, Yeting Li, Fanlin Cui, Chunmei Dong, Haiming Chen: The 22nd Pacific-Asia Conference on Knowledge Discovery and Data Mining (PAKDD), CORE-A, 2018, 第 2 作者

[29] Practical Study of Subclasses of Regular Expressions in DTD and XML Schema. Yeting Li, Xiaolan Zhang, Feifei Peng, Haiming Chen: The 18th Asia Pacific Web Conference (APWeb), CCF-C, 2016, 第 1 作者

   

（ 1 ） 基于语义建模的ReDoS漏洞检测与修复技术研究, 负责人, 国家任务, 2024-01--2026-12

现指导学生

麦钦  硕士研究生  085412-网络与信息安全