I have a strong interest in web security and real-world attack and defense. I earned my Master’s degree from Tianjin University, where I also continued my PhD studies. At JAIST, I conducted research on privacy protection. In addition to my academic work, I actively participate in CTF competitions and have conducted authorized penetration testing on various websites and applications to identify vulnerabilities and earn the bounty.

• Bachelor: Changchun University of Science and Technology, China

• Master: Tianjin University, China & Japan Advanced Institute of Science and Technology, Japan

• Doctor: Tianjin University, China (Joint with TU Delft, Netherlands)

1. Xu, G., Lei, W., Gong, L., Liu, J., Bai, H., Chen, K., ... & Liu, S. (2022). UAF-GUARD: Defending the Use-After-Free Exploits via Fine-grained Memory Permission Management. Computers & Security, 103048. 

2. Nie, P., Xu, G., Jiao, L., Liu, S., Liu, J., Meng, W., ... & Zheng, X. (2021). Sparse Trust Data Mining. IEEE Transactions on Information Forensics and Security, 16, 4559-4573.  

3. Xu, G., Li, X., Jiao, L., Wang, W., Liu, A., Su, C., ... & Cheng, X. (2020). BAGKD: A Batch Authentication and Group Key Distribution Protocol for VANETs. IEEE Communications Magazine, 58(7), 35-41. 

4. Xu, G., Wang, W., Jiao, L., Li, X., Liang, K., Zheng, X., ... & Gao, H. (2019). SoProtector: Safeguard privacy for native SO files in evolving mobile IoT applications. IEEE Internet of Things Journal, 7(4), 2539-2552. 

• Hoyen 

The semantics-awareness-based web fuzzing tool

• Faust

Automated traceback of traffic to cloud functions and domain fronting

• ccf4sc

CCF-Conf Deadline filtering for security

• etc.

• Awards:

  • Academic Scholarships

  • University Scholarships

  • Outstanding Student Leaders

  • etc.

• CTF:

  • Fifth Space, 1st, 2022

  • Graduate Student Innovation Alliance University Competition, 1st, 2021

  • Tencent TSRC Rhino-bird CTF, Individual Top30, 2020

  • Jilin Province College Student Competition, 1st, 2018

  • Tianchi Cup, 1st, 2017

  • National Crypto-Math Challenge, Northeast Division 2nd, 2016

  • etc.

• Vulnerabilities:

  • Omitted for security reasons

• Others:

  • TBD