Yingpei Zeng's Home Page

Yingpei Zeng (曾英佩)'s Home Page

I am a Distinguished Associate Professor of School of Cyberspace at Hangzhou Dianzi University. I received my B.S. and Ph.D. degrees from Department of Computer Science & Technology, Nanjing University, in 2004 and 2010 respectively, under the supervision of Prof. Li Xie. I also worked as a Research Assistant in Department of Computing, Hong Kong Polytechnic University with Prof. Jiannong Cao during May 2008 and May 2009. Before joining Hangzhou Dianzi University in 2018, I worked as a Senior R&D Engineer in China Mobile (HangZhou) Information Technology Co.,Ltd. (i.e., CMCC Hangzhou R&D Center) for three years, and earlier worked as a Senior/Principle Software Design Engineer, and Product Owner in MicroStrategy for five years.

Contact information:: Room 610, Science & Technology Hall; School of Cyberspace; Hangzhou Dianzi University; Xiasha Higher Education Zone, Hangzhou, 310018; E-mail: yzeng {at} hdu.edu.cn

Software Security. We aim to develop new fuzzing tools to find vulnerabilities in programs. We found buffer-overread, use-after-free, and NULL-pointer-dereference vulnerabilities during our investigation, logged as CVE-2018-19519, CVE-2018-19797, CVE-2018-19827, CVE-2018-19826, CVE-2018-20190 etc.
The project is partially supported by Natural Science Foundation of China (NSFC) under grant No. 61902098 (PI) (2020-2022), and State Key Laboratory for Novel Software Technology, Nanjing University, under grant No. KFKT2019B04 (PI) (2019-2021).

Some previous projects:

Mogosec (CMCC), an app protection project. I designed and implemented the latest VMP-based (Virtual Machine Protection) app protection. Also, I also designed the transparent secure device-cloud tunnel mechanism (hook + userspace tcp/ip stack + VPN). (2016~2017)
An enterprise WiFi gateway secure auditing platform (CMCC), for the regulation of the Ministry of Public Security. We audit public WiFi networks based on Deep Packet Inspection (DPI). I mainly worked on the DPI module. (2018)
An IoT security module (CMCC), which can be integrated into 2G,4G, and NB-IoT communication modules. I mainly worked on the secure communication tunnel. (2017)
The united authentication platform (CMCC). It's CMCC-version united authentication and identity management platform, based on carrier capabilities (SIM, GGSN etc.). I mainly did researches on new App-SIM communication mechanisms. (2015~2016)
MicroStrategy Mobile (MicroStrategy), a business intelligence platform works in mobile devices. I worked on different features and later led the iOS Analytic team. (2010~2015)
Security in wireless sensor networks and Ad Hoc networks (NSFC, Hongkong Polyu ICRG). I worked on secure localization, clone attack detection, secure clustering, and traffic safety. (2005~2010)
A security management platform (High-tech R&D Program of Jiangsu Province), a security management platform for managing security devices (IDS, Firewall). (2004~2008)

Software Security (For graduate student) (Spring 2020, Spring 2021)
Innovation Practice (Fall 2019 - Spring 2020, Fall 2020 - Spring 2021, Fall 2021 - Spring 2022)
Operation System (Spring 2020, Spring 2021, Spring 2022)
Professional Practice (Production Practice) (Fall 2019, Fall 2020, Fall 2021)