主要研究方向是芯片与系统安全、嵌入式设备漏洞挖掘与防护。在USENIX Security、ASPLOS、ISSTA等系统安全和软工领域发表论文20余篇。目前主要开展智能网联汽车安全、芯片级主动安全防御前沿技术的研究。

计划招收2025年秋季入学的硕士生1名，从事系统级漏洞挖掘与防御、片上安全治理的研究。

课题组常年招收实习生，欢迎联系。

083900-网络空间安全

芯片与系统安全；物联网设备安全；漏洞挖掘

2013-09--2020-01   中国科学院大学   工学博士
2009-09--2013-06   四川大学   工学学士

   

2024-03~现在, 中国科学院信息工程研究所, 副研究员
2020-12~2024-03,新加坡南洋理工大学, 博士后研究员

2023-09-27-今,Cybersecurity期刊客座编辑, 客座编辑

   

   

[1] ISSTA. 2024, 第 2 作者  通讯作者  
[2] Empirical Software Engineering. 2024, 第 4 作者
[3] Puzhuo liu, Yaowen Zheng, Sun Chengnian, Chuan Qin, Dongliang Fang, Mingdong Liu, Limin Sun. FITS: Inferring Intermediate Taint Sources for Effective Vulnerability Analysis of IoT Device Firmware. ASPLOS. 2024, 第 2 作者  通讯作者  
[4] Zhengjie Du, Yuekang Li, Yaowen Zheng, Xiaohan Zhang, Cen Zhang, Yi Liu, Sheikh Mahbub Habib, Xinghua Li, Linzhang Wang, Yang Liu, Bing Mao. Medusa: Unveil Memory Exhaustion DoS Vulnerabilities in Protocol Implementations. WWW. 2024, 第 3 作者  通讯作者  
[5] Puzhuo liu, Yaowen Zheng, Sun Chengnian, HONG LI, ZHI LI, Limin Sun. Battling against Protocol Fuzzing: Protecting Networked Embedded Devices from Dynamic Fuzzers. TOSEM[J]. 2024, 第 2 作者  通讯作者  null(null): 
[6] DATE. 2023, 第 4 作者
[7] USENIX Security. 2023, 第 5 作者
[8] Said, Kabir Sulaiman, Nie, Liming, Lin, Yuanchang, Zheng, Yaowen, Ding, Zuohua. Automated GUI widgets classification. FRONTIERS OF COMPUTER SCIENCE. 2023, 第 4 作者17(1): 233-235, 
[9] Chuan Qin, Jiaqian Peng, Puzhuo Liu, Yaowen Zheng, Kai Cheng, Weidong Zhang, Limin Sun. UCRF: Static analyzing firmware to generate under-constrained seed for fuzzing SOHO router. COMPUTERS & SECURITY[J]. 2023, 第 4 作者128(null): http://dx.doi.org/10.1016/j.cose.2023.103157.
[10] Kai Cheng, Yaowen Zheng, Tao Liu, Guan Le, Peng Liu, Hong Li, Hongsong Zhu, Kejiang Ye, Limin Sun. Detecting Vulnerabilities in Linux-based Embedded Firmware with SSE-based On-demand Alias Analysis. ISSTA'23. 2023, 第 2 作者  通讯作者  
[11] 郑尧文, 文辉, 程凯, 李红, 朱红松, 孙利民. 物联网安全威胁与安全模型. 信息安全学报[J]. 2023, 第 1 作者8(5): 81-95, http://jcs.iie.ac.cn/xxaqxb/ch/reader/view_abstract.aspx?file_no=20230506&flag=1.
[12] Nie, Liming, Said, Kabir Sulaiman, Ma, Lingfei, Zheng, Yaowen, Zhao, Yangyang. A systematic mapping study for graphical user interface testing on mobile apps. IET SOFTWARE. 2023, 第 4 作者17(3): 249-267, https://doaj.org/article/24d34463d66d4eb5bfc1dc29598db774.
[13] QRS. 2022, 第 4 作者
[14] CSCS. 2022, 第 3 作者
[15] WASA. 2022, 第 3 作者
[16] Liu, Puzhuo, Zheng, Yaowen, Song, Zhanwei, Fang, Dongliang, Lv, Shichao, Sun, Limin. Fuzzing proprietary protocols of programmable controllers to find vulnerabilities that affect physical control. JOURNAL OF SYSTEMS ARCHITECTURE[J]. 2022, 第 2 作者127: http://dx.doi.org/10.1016/j.sysarc.2022.102483.
[17] 孙越, 吕世超, 游建舟, 孙玉砚, 陈新, 郑尧文, 孙利民. IPSpex: Enabling Efficient Fuzzing via Specification Extraction on ICS Protocol. ACNS 2022: Applied Cryptography and Network Security. 2022, 第 6 作者null(null): doi.org/10.1007/978-3-031-09234-3_1.
[18] Yaowen Zheng, Yuekang Li, Cen Zhang, Hongsong Zhu, Yang Liu, Limin Sun. Efficient Greybox Fuzzing of Applications in Linux-based IoT Devices via Enhanced User-mode Emulation. 31st ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA 2022). 2022, 第 1 作者
[19] SEC. 2021, 第 5 作者
[20] ACSAC. 2021, 第 7 作者
[21] Zhou, Wei, Cao, Chen, Huo, Dongdong, Cheng, Kai, Zhang, Lan, Guan, Le, Liu, Tao, Jia, Yan, Zheng, Yaowen, Zhang, Yuqing, Sun, Limin, Wang, Yazhe, Liu, Peng. Reviewing IoT Security via Logic Bugs in IoT Platforms and Systems. IEEE INTERNET OF THINGS JOURNAL[J]. 2021, 第 9 作者8(14): 11621-11639, http://dx.doi.org/10.1109/JIOT.2021.3059457.
[22] 陈千, 程凯, 郑尧文, 朱红松, 孙利民. 函数级数据依赖图及其在静态脆弱性分析中的应用. 软件学报[J]. 2020, 第 3 作者31(11): 3421-3435, http://lib.cqvip.com/Qikan/Article/Detail?id=7103363893.
[23] Zheng Yaowen, Davanian Ali, Yin Heng, Song Chengyu, Zhu Hongsong, Su Limin, USENIX Assoc. FIRM-AFL: High-Throughput Greybox Fuzzing of IoT Firmware via Augmented Process Emulation. PROCEEDINGS OF THE 28TH USENIX SECURITY SYMPOSIUM. 2019, 第 1 作者1099-1114, http://apps.webofknowledge.com/CitedFullRecord.do?product=UA&colName=WOS&SID=5CCFccWmJJRAuMzNPjj&search_mode=CitedFullRecord&isickref=WOS:000509775000063.
[24] Zheng, Yaowen, Song, Zhanwei, Sun, Yuyan, Cheng, Kai, Zhu, Hongsong, Sun, Limin, IEEE. An Efficient Greybox Fuzzing Scheme for Linux-based IoT Programs Through Binary Static Analysis. 2019 IEEE 38TH INTERNATIONAL PERFORMANCE COMPUTING AND COMMUNICATIONS CONFERENCE (IPCCC)[J]. 2019, 第 1 作者null(null): 
[25] 郑尧文, 文辉, 程凯, 宋站威, 朱红松, 孙利民. 物联网设备漏洞挖掘技术研究综述. 信息安全学报[J]. 2019, 第 1 作者4(5): 61-75, http://lib.cqvip.com/Qikan/Article/Detail?id=7100187215.
[26] Cheng, Kai, Li, Qiang, Wang, Lei, Chen, Qian, Zheng, Yaowen, Sun, Limin, Liang, Zhenkai, IEEE. DTaint: Detecting the Taint-Style Vulnerability in Embedded Device Firmware. 2018 48TH ANNUAL IEEE/IFIP INTERNATIONAL CONFERENCE ON DEPENDABLE SYSTEMS AND NETWORKS (DSN). 2018, 第 5 作者430-441, 
[27] Zheng Yaowen, Cheng Kai, Li Zhi, Pan Shiran, Zhu Hongsong, Sun Limin, Lam KY, Chi CH, Qing S. A Lightweight Method for Accelerating Discovery of Taint-Style Vulnerabilities in Embedded Systems. INFORMATION AND COMMUNICATIONS SECURITY, ICICS 2016. 2016, 第 1 作者9977: 27-36,