系统安全，智能安全，云计算安全

​

083900-网络空间安全

系统安全，可信计算，云计算安全

2022-11--中国科学院信息工程研究所   副研究员
2017-09--2022-06   中国科学院大学   博士研究生
2013-09--2017-06   大连海事大学   学士

2022.11至今， 中国科学院信息工程研究所，副研究员

   

（ 1 ） 一种增强移动设备操作系统虚拟内核安全的方法, 发明专利, 2024, 第 1 作者, 专利号: CN118395415A

（ 2 ） 一种基于动态变化的云环境消息中间件消息处理和转发方法及系统, 发明专利, 2023, 第 2 作者, 专利号: CN117118605A

   

（1） Focusing on Language: Revealing and Exploiting Language Attention Heads in Multilingual Large Language Models., AAAI, 2026, 
（2） FalconScope: Effective and Efficient Detection of Hidden Web Interfaces in IoT Devices., WWW, 2026, 
（3） FlexClave: An Extensible and Secure Trusted Execution Environment Framework., IEEE TC, 2026, 
（4） WorksetEnclave: Towards Optimizing Cold Starts in Confidential Serverless with Workset-Based Enclave Restore., ASPLOS, 2026, 
（5） vCause: Efficient and Verifiable Causality Analysis for Cloud-based Endpoint Auditing, USENIX Security, 2026, 
（6） IoTBec: An Accurate and Efficient Recurring Vulnerability Detection Framework for Black Box IoT devices, NDSS, 2026, 
（7） RContainer: A Secure Container Architecture through Extending ARM CCA Hardware Primitives., Network and Distributed System Security Symposium (NDSS) 2025, 2025, 
（8） CubeVisor: A Multi-realm Architecture Design for Running VM with ARM CCA, The Annual Computer Security Applications Conference (ACSAC) 2024.18 Mar 2025, 2025, 
（9） Unicontainer: Unlocking the Potential of Unikernel for Secure and Efficient Containerization., International Conference on Measurement and Modeling of Computer Systems (Sigmetrics). 2025, 2025, 
（10） Chameleon: Towards Building Least-privileged TEE via Functionality-based Resource Re-grouping, The 23rd ACM International Conference on Mobile Systems, Applications, and Services (MobiSys). 2025, 2025, 
（11） SISTAR: An Efficient DDoS Detection and Mitigation Framework Utilizing Programmable Data Planes, The ACM Conference on Computer and Communications Security (ACM CCS 2025), 2025, 
（12） HClave: An isolated execution environment design for hypervisor runtime security., Computers & Security, 2024, 
（13） ConMonitor: Lightweight Container Protection with Virtualization and VM Functions, Proceedings of the 2024 ACM Symposium on Cloud Computing (SoCC). 2024, 2024, 
（14） SEDSpec: Securing Emulated Devices by Enforcing Execution Specification, The 54th Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN) 2024, 2024, 
（15） Log2Policy: An Approach to Generate Fine-Grained Access Control Rules for Microservices from Scratch, The Annual Computer Security Applications Conference (ACSAC) 2023, 2023, 
（16） SecFortress: Securing Hypervisor using Cross-layer Isolation, 36th IEEE International Parallel &Distributed Processing Symposium (IPDPS) 2022, 2022, 

（1） 深入探析Linux系统虚拟化原理、实现与安全, The Principle, Implementation, and Security of Linux Virtualization, 科学出版社, 2026-03, 第 2 作者