题  目：Improving Software Security with Concurrent Monitoring, Automated Diagnosis, and Self-shielding 

　　报告人：Dr. Qiang Zeng (Temple University) 

　　时  间：2016年6月17日（星期五）, 上午10:00-11:00 

　　地  点：中国科学院信息工程研究所3号楼3221室 

　　Abstract: 

　　Bill Gates said "Microsoft products are generally bug free," while in practice software by vendors like Microsoft as well as open-source communities contains numerous bugs, which lead to serious security threats. Innovative ideas and approaches for hardening software will be presented. Novel non-blocking concurrent monitoring that leverages multi-core architectures is proposed to detect attacks with high efficiency. Upon detection, automated diagnosis is launched to capture the characteristics of zero-day attacks. The self-shielding capability is built into software, such that precise defenses are generated on the user side automatically based on the diagnosis results without requiring the assistance from the software developers, providing instant protection to users. The end-to-end solution defeats attacks such as Heartbleed with a low overhead. 

　　Bio:     

　　Dr. Qiang Zeng is a tenure-track assistant professor in the Department of Computer and Information Sciences at Temple University. He received his Ph.D. from Penn State University, and Bachelor's and Master's degrees from Beihang University. His main research interest is Systems Security, with a focus on Software, Cloud, and Mobile Systems. His work has been published in PLDI, NDSS, Security & Privacy, CGO, ICSE, TKDE, etc. He has led research projects funded by NSF, US Army, Air Force Research Lab, IBM T.J. Watson Research Center, and the NEC Lab America. 

　　Dr. Zeng plans to recruit several fully-funded PhD students during this visit. Interested students are welcome to contact him and send your resume (qzeng@temple.edu).