Zhi Wang
Office: Room 3233, EBII
Department of Computer Science
North Carolina State University
890 Oval Drive
Raleigh, NC 27695-8206
Email: zhi_wang AT ncsu DOT edu
I am a Ph.D. candidate in the
Department of Computer Science at
North Carolina State University under the
direction of Dr. Xuxian Jiang.
My research focuses on the virtualization based system security.
Before joining Dr. Jiang's research team, I was a senior software engineer
in Intel Asia-Pacific R&D at Shanghai, where I built the TCP/IP network
stack and the USB stack for Tiano,
Intel's UEFI implementation. Even before
that, I received my B.S. and M.S. degrees in Computer Science
from Xi'an Jiaotong University, China,
in July 1999 and March 2002, respectively.
I expect to finish my Ph.D. degree in the summer of 2012. I am currently
in the job market seeking an academic or research position in security.
Please contact me for a full CV if you are interested, thanks!
Publications
2012
Isolating Commodity Hosted Hypervisors with HyperLock
Proceedings of the 7th ACM SIGOPS/EuroSys European Conference on Computer Systems (EuroSys 2012)
Bern Switzerland, April 2012 (15.2%)
Hey, You, Get off of My Market: Detecting Malicious Apps in Official and Alternative Android Markets
Proceedings of the 19th Network and Distributed System Security Symposium (NDSS 2012)
San Diego, CA, February 2012 (17.8%)
Systematic Detection of Capability Leaks in Stock Android Smartphones
Proceedings of the 19th Network and Distributed System Security Symposium (NDSS 2012)
San Diego, CA, February 2012 (17.8%)
2011
Process Out-Grafting: An Efficient `Out-of-VM' Approach for Fine-Grained Process Execution Monitoring
Proceedings of the 18th ACM Conference on Computer and Communications Security (CCS 2011)
Chicago, Il, October 2011 (14.0%) [PDF]
Comprehensive and Efficient Protection of Kernel Control Data
IEEE Transactions on Information Forensics and Security, 6(2), June 2011
2010
HyperSentry: Enabling Stealthy In-context Measurement of Hypervisor Integrity
Proceedings of the 17th ACM Conference on Computer and Communications Security (CCS 2010)
Chicago, Il, October 2010 (17%) [PDF]
DKSM: Subverting Virtual Machine Introspection for Fun and Profit
Proceedings of the 29th IEEE International Symposium on Reliable Distributed Systems (SRDS 2010)
New Delhi, India, October 2010 (23%) [PDF]
Transparent Protection of Commodity OS Kernels using Hardware Virtualization
Proceedings of the 6th International Conference on Security and Privacy in Communication Networks (SecureComm 2010)
Singapore, September 2010 (25%) [PDF]
HyperSafe: A Lightweight Approach to Provide Lifetime Hypervisor Control-Flow Integrity
Proceedings of the 31st IEEE Symposium on Security & Privacy (Oakland 2010)
Defeating Return-Oriented Rootkits with `Return-less' Kernels
Proceedings of the 5th ACM SIGOPS/EuroSys European Conference on Computer Systems (EuroSys 2010)
Paris, France, April 2010 (19%) [PDF]
[*The names of the first two authors are in alphabetical order]
2009
Countering Kernel Rootkits with Lightweight Hook Protection
Proceedings of the 16th ACM Conference on Computer and Communications Security (CCS 2009)
Chicago, IL, November 2009 (18%) [PDF]
ReFormat: Automatic Reverse Engineering of Encrypted Messages
Proceedings of the 14th European Symposium on Research in Computer Security (ESORICS 2009)
Saint Malo, France, September 2009 (19%) [PDF]
2008
Countering Persistent Kernel Rootkits Through Systematic Hook Discovery
Proceedings of the 11th International Symposium on Recent Advances in Intrusion Detection (RAID 2008)
Boston, MA, September 2008 (25%) [PDF]
Media Coverage
HyperSafe/Oakland '10
- Scientists Propose Guaranteed Hypervisor Security, Slashdot, May 17, 2010
- Boffins Propose 'Guaranteed' Hypervisor Security, iTnews, May 15, 2010
- Virtual Malware Faces HyperSafe Lockdown, ZDNet UK, May 11, 2010
- Protecting Virtualisation Hypervisors from Blue Pill Attacks, Computer World, UK, May 10, 2010
- Researchers to Cure Blue Pill Virtualization Attacks, Network World, May 7, 2010
- Researchers Lock Down The Hypervisor, Dark Reading, April 29, 2010
- Research Software Secures Hypervisor Behavior, Threatpost, April 28, 2010
- New Research Spawns Hypervisor Protection Software, HPC In the Cloud, April 27, 2010
- Software Enhances Security for Cloud Computing, Government Technology, April 27, 2010
- New Research Offers Security for Virtualization, Cloud Computing, Science Daily, April 27, 2010
HookSafe/CCS '09
- HookSafe Protects Kernel from Rootkits, Linux Pro Magazine, November 13, 2009
- Scientists Unveil Lightweight Rootkit Protection, Slashdot, November 11, 2009
- Boffins Boast Newfangled Rootkit Blocker, The Register, November 11, 2009
- Protecting OSs from RootKits, Bruce Schneier's Blog, November 10, 2009
- New Tool Seeks to Block Rootkits by Protecting Their Targets, Ars Technica, November 4, 2009
- Boffins Work Out How to Foil Rootkits,The Inquirer, November 4, 2009
- Researchers Create Hypervisor-Based Tool For Blocking Rootkits, Dark Reading, November 3, 2009
- Hooks Hijacked? New Research Shows How To Block Stealthy Malware Attacks, Science Daily, November 3, 2009
Professional Services
TPC Member
- 2012 Military Communications Conference (MILCOM 12)
- 3rd IEEE International Workshop on Data Security and PrivAcy in wireless Networks (D-SPAN 2012)
- 6th International Conference on Advanced Engineering Computing and Applications in Sciences (ADVCOMP 2012)
- 3nd Workshop on Security and Privacy in Cloud Computing (ICDCS-SPCC 2012)
- 5th International Conference on Advanced Engineering Computing and Applications in Sciences (ADVCOMP 2011)
- 2nd International Conference on Cloud Computing, GRIDs, and Virtualization (CLOUD COMPUTING 2011)
- 2nd Workshop on Security and Privacy in Cloud Computing (ICDCS-SPCC 2011)
Reviewer (Journal)
- The Computer Journal (Computer Journal 2012)
- International Journal of Security and Networks (IJSN 2012)
- Simulation Modelling Practice and Theory (SIMPAT 2011)
External Reviewer
- 19th Annual Network & Distributed System Security Symposium (NDSS 2012)
- 18th ACM Conference on Computer and Communications Security (CCS 2011)
- 30th International Conference on Distributed Computing Systems (ICDCS 2010)
- 14th European Symposium on Research in Computer Security (ESORICS 2009)
- 12th International Symposium on Recent Advances in Intrusion Detection (RAID 2009)
- 30th IEEE Symposium on Security & Privacy (Oakland 2009)
- 16th Annual Network & Distributed System Security Symposium (NDSS 2009)
Awards and Honors
- First Prize of CTF Competition and Student Scholarship in Trusted Infrastructure Workshop 2011 (TIW 2011)
- CSAW 2010 AT&T Best Applied Security Paper Award Finalist (CSAW 2010)
- 16th ACM Conference on Computer and Communications Security Student Travel Grant (CCS 2009)
- 29th IEEE Symposium on Security and Privacy Student Travel Grant (Oakland 2008)
- Intel Division Recognition Award 2005 (Intel)