About Me

Research Interests

Publications

• Waltzz: WebAssembly Runtime Fuzzing with Stack-Invariant Transformation (to appear)

  Lingming Zhang, Binbin Zhao, Jiacheng Xu, Peiyu Liu, Qinge Xie, Yuan Tian, Jianhai Chen, Shouling Ji

  In Proceedings of the 34nd USENIX Security Symposium (Security '25)

• SoK: Unraveling the Veil of OS Kernel Fuzzing

  Jiacheng Xu, He Sun, Shihao Jiang, Qingying Wang, Mingming Zhang, Xiang Li, Kaiwen Shen, Peng Cheng, Jiming Chen, Chao Zhang, Shouling Ji

  arXiv 2025 (arXiv)

  PDF

• Critical Code Guided Directed Greybox Fuzzing for Commits

  Yi Xiang, Xuhong Zhang, Liu Peiyu, Shouling Ji, Xiao Xiao, Hong Liang, Jiacheng Xu, Wenhai Wang

  In Proceedings of the 33nd USENIX Security Symposium (Security '24)

  PDF Code Slides Video

• MOCK: Optimizing Kernel Fuzzing Mutation with Context-aware Dependency

  Jiacheng Xu, Xuhong Zhang, Shouling Ji, Yuan Tian, Binbin Zhao, Qinying Wang, Peng Cheng, Jiming Chen

  In Proceedings of 2024 Network and Distributed System Security Symposium (NDSS '24)

  PDF Code Slides Video

• MINER: A Hybrid Data-Driven Approach for REST API Fuzzing

  Chengyang Lv, Jiacheng Xu, Shouling Ji, Xuhong Zhang, Qinying Wang, Binbin Zhao, Gaoning Pan, Wei Cao, Peng Chen, Reheem Beyah

  In Proceedings of the 32nd USENIX Security Symposium (Security '23)

  PDF Code Slides Video

• One Bad Apple Spoils the Barrel: Understanding the Security Risks Introduced by Third-Party Components in IoT Firmware

  Binbin Zhao, Shouling Ji, Jiacheng Xu, Yuan Tian, Qiuyang Wei, Qinying Wang, Chenyang Lyu, Xuhong Zhang, Changting Lin, Jingzheng Wu, Reheem Beyah

  IEEE Transactions on Dependable and Secure Computing (TDSC '23)

  PDF Dataset

• A Large-Scale Empirical Analysis of the Vulnerabilities Introduced by Third-Party Components in IoT Firmware

  Binbin Zhao, Shouling Ji, Jiacheng Xu, Yuan Tian, Qiuyang Wei, Qinying Wang, Chenyang Lyu, Xuhong Zhang, Changting Lin, Jingzheng Wu, Reheem Beyah

  In Proceedings of the 31st ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA '22)

  PDF Slides Dataset Video

Awards

• Outsanding Graduate, Zhejiang University
• Zhejiang Government Scholarship

Academic Service

• Program Committee for USENIX Security Artifact Evaluation, 2025