Avatar

Jiang Ming

Assistant Professor of Computer Science

Tulane University

About Me

Tulane-SSE

I am an Assistant Professor in the Department of Computer Science at Tulane University. I received my PhD from The Pennsylvania State University. My research interests span Software and Systems Security. I strive to ground my efforts in practical security problems with an eye towards developing effective solutions to address realistic threats caused by today’s emerging technologies.

I am always looking for self-motivated Ph.D. students who would like to carry on top-notch research on Software and Systems Security. Candidates are expected to have a solid background in compilers, operating systems, formal methods, and strong programming skills. Please contact me if you are interested.

Research Interests:

  • 💡Binary Code Analysis and Verification for Security Issues
  • 💡Hardware-Assisted Software Security Analysis
  • 💡Mobile Systems Security
  • 💡Language-based Security

Featured Publications

August 2022 In Proceedings of the 31st USENIX Security Symposium, Boston, MA, USA, August 10-12, 2022. (Acceptance rate 17.2%=256/1492)

[USENIX Security '22] PolyCruise: A Cross-Language Dynamic Information Flow Analysis

⭐ Artifact Evaluation Badges: Available, Functional

March 2022 In Proceedings of the 27th International Conference on Architectural Support for Programming Languages and Operating Systems, Lausanne, Switzerland, Feb 28-March 4, 2022. (Acceptance rate 20.1%=80/397)

[ASPLOS '22] One Size Does Not Fit All: Security Hardening of MIPS Embedded Systems via Static Binary Debloating for Shared Libraries

⭐ ACM Badges: Available, Functional, Reproduced

🥇 Champion of PLDI 2021 Student Research Competition (Graduate Track)

🥈 2022 ACM Student Research Competition Grand Finalists: Second Place

February 2022 In Proceedings of the 29th Network and Distributed System Security Symposium, San Diego, California, 27 February – 3 March, 2022. (Acceptance rate 16.2%=83/513)

[NDSS '22] Chosen-Instruction Attack Against Commercial Code Virtualization Obfuscators

November 2021 In Proceedings of the 28th ACM Conference on Computer and Communications Security, Virtual Conference, November 15-19, 2021. (Acceptance rate 22.3%=196/879)

[CCS '21] Towards Transparent and Stealthy Android OS Sandboxing via Customizable Container-Based Virtualization

August 2021 In Proceedings of the 30th USENIX Security Symposium, Virtual Event, August 11-13, 2021. (Acceptance rate 18.8%=248/1319)

[USENIX Security '21] MBA-Blast: Unveiling and Simplifying Mixed Boolean-Arithmetic Obfuscation

⭐ Artifact Evaluation Passed

📰 Our work motiviates the new IDA-Pro plugin by Hex-Rays.

August 2021 In Proceedings of the 30th USENIX Security Symposium, Virtual Event, August 11-13, 2021. (Acceptance rate 18.8%=248/1319)

[USENIX Security '21] Obfuscation-Resilient Executable Payload Extraction From Packed Malware

June 2021 In Proceedings the 42nd ACM SIGPLAN Conference on Programming Language Design and Implementation, Virtual Event, June 23-25, 2021. (Acceptance rate 27.2%=87/320)

[PLDI '21] Unleashing the Hidden Power of Compiler Optimization on Binary Code Difference: An Empirical Study

🏆 PLDI Distinguished Paper Award

📰 ACM SIGPLAN Blog: When Compiler Optimization Meets Binary Code Difference

June 2021 In Proceedings the 42nd ACM SIGPLAN Conference on Programming Language Design and Implementation, Virtual Event, June 23-25, 2021. (Acceptance rate 27.2%=87/320)

[PLDI '21] Boosting SMT Solver Performance on Mixed-Bitwise-Arithmetic Expressions

⭐ Artifacts Evaluated – Available & Functional

📰 Our work motiviates the new IDA-Pro plugin by Hex-Rays.

May 2021 In Proceedings of the 43rd International Conference on Software Engineering, Virtual Event, May 25-28, 2021. (Acceptance rate 22.4%=138/615)

[ICSE '21] App's Auto-Login Function Security Testing via Android OS-Level Virtualization

💥 Zero-day Vulnerability Discovered: CVE-2019-15843, VULBOX-2019-0221059, CNVD-2019-42028, CNVD-2019-42029, CNVD-2019-42030, CNVD-2019-42031, CNVD-2019-42032, CNVD-2019-42033, CNVD-2019-42034

November 2020 In Proceedings of the 27th ACM Conference on Computer and Communications Security, Virtual Event, November 9-13, 2020. (Acceptance rate 16.9%=121/715)

[CCS '20] PatchScope: Memory Object Centric Patch Diffing

November 2020 In Proceedings of the 27th ACM Conference on Computer and Communications Security, Virtual Event, November 9-13, 2020. (Acceptance rate 16.9%=121/715)

[CCS '20] VAHunt: Warding Off New Repackaged Android Malware in App-Virtualization's Clothing

June 2019 In Proceedings of the 17th ACM International Conference on Mobile Systems, Applications, and Services, Seoul, South Korea, June 17-21, 2019. (Acceptance rate 22.7%=39/172)

[MobiSys '19] "Jekyll and Hyde" is Risky: Shared-Everything Threat Mitigation in Dual-Instance Apps

October 2018 In Proceedings of the 25th ACM Conference on Computer and Communications Security, Toronto, Canada, October 15-19, 2018. (Acceptance rate 16.6%=134/809)

[CCS '18] VMHunt: A Verifiable Approach to Partial-Virtualized Binary Code Simplification

October 2018 In Proceedings of the 25th ACM Conference on Computer and Communications Security, Toronto, Canada, October 15-19, 2018. (Acceptance rate 16.6%=134/809)

[CCS '18] Towards Paving the Way for Large-Scale Windows Malware Analysis: Generic Binary Unpacking with Orders-of-Magnitude Performance Boost

📰 UTA News Report

August 2018 In Proceedings of the 27th USENIX Security Symposium, Baltimore, MD, USA, August 15-17, 2018. (Acceptance rate 19.1%=100/524)

[USENIX Security '18] Towards Predicting Efficient and Anonymous Tor Circuits

August 2017 In Proceedings of the 26th USENIX Security Symposium, Vancouver, BC, Canada, August 16-18, 2017. (Acceptance rate 16.3%=85/522)

[USENIX Security '17] BinSim: Trace-based Semantic Binary Diffing via System Call Sliced Segment Equivalence Checking

May 2017 In Proceedings of the 38th IEEE Symposium on Security and Privacy, San Jose, CA, May 22-24, 2017. (Acceptance rate 13.3%=60/450)

[S&P '17] Cryptographic Function Detection in Obfuscated Binaries via Bit-precise Symbolic Loop Mapping

⭐ CSAW'17 Applied Research Competition Top 10 Finalists

September 2016 In Proceedings of the 31st IEEE/ACM International Conference on Automated Software Engineering, Singapore, September 3-7, 2016. (Acceptance rate 19.1%=57/298)

[ASE '16] StraightTaint: Decoupled Offline Symbolic Taint Analysis

October 2015 In Proceedings of the 22nd ACM Conference on Computer and Communications Security, Denver, Colorado, October 12-16, 2015. (Acceptance rate 19.3%=128/660)

[CCS '15] LOOP: Logic-Oriented Opaque Predicate Detection in Obfuscated Binary Code

August 2015 In Proceedings of the 24th USENIX Security Symposium, Washington, D.C., August 12-14, 2015. (Acceptance rate 15.7%=67/426)

[USENIX Security '15] TaintPipe: Pipelined Symbolic Taint Analysis

November 2014 In Proceedings of the 22nd ACM SIGSOFT International Symposium on the Foundations of Software Engineering, Hong Kong, China, November 16-22, 2014. (Acceptance rate 21.8%=61/280)

[FSE '14] Semantics-Based Obfuscation-Resilient Binary Code Similarity Comparison with Applications to Software Plagiarism Detection

⭐ Distinguished Paper Award Nomination

Recent Publications

[USENIX Security '22] PolyCruise: A Cross-Language Dynamic Information Flow Analysis
Wen Li, Jiang Ming, Xiapu Luo, Haipeng Cai
[ASPLOS '22] One Size Does Not Fit All: Security Hardening of MIPS Embedded Systems via Static Binary Debloating for Shared Libraries
Haotian Zhang, Mengfei Ren, Yu Lei, Jiang Ming
[NDSS '22] Chosen-Instruction Attack Against Commercial Code Virtualization Obfuscators
Shijia Li, Chunfu Jia, Pengda Qiu, Qiyuan Chen, Jiang Ming, Debin Gao
[CCS '21] Towards Transparent and Stealthy Android OS Sandboxing via Customizable Container-Based Virtualization
Wenna Song, Jiang Ming, Lin Jiang, Yi Xiang, Xuanchen Pan, Jianming Fu, Guojun Peng
[USENIX Security '21] MBA-Blast: Unveiling and Simplifying Mixed Boolean-Arithmetic Obfuscation
Binbin Liu, Junfu Shen, Jiang Ming, Qilong Zheng, Jing Li, Dongpeng Xu
See all publications

Teaching

teaching

I teach the following courses at Tulane and UT Arlington:

  • CSE 4380/5380: Information Security
  • CSE 6388: Practical Malware Analysis
  • CSE 6388: Advanced Software Security Analysis

Students

students

I'm fortunate to advise many talented students.

Current PhD Students:

  • Haotian Zhang
  • Erika A Leal
  • Cristian Channing Garces
  • Kun Liu
  • Xiaolei Ren (co-advised with Jeff Lei)
  • Mengfei Ren (co-advised with Jeff Lei)

Graduated PhD Students:

  • Dr. Armon Barton (PhD'18, co-advised with Matthew Wright), Assistant Professor, Naval Postgraduate School.
  • Dr. Mohsin Junaid (PhD'17, co-advised with David Kung), Senior Engineer, Samsung Research America.

Graduated Master Students:

  • John Podolanko, 2019, Cyber Security Manager, Tenet Healthcare.
  • Jay Mayank Patel, 2019, Software Engineer, Amazon.
  • Anchal Raheja, 2018, Information Security Engineer, Copart.
  • Ashwini Balkrushna Kardile, 2018, Software Engineer, Intel.

Services

Technical Program Committee:

  • [USENIX Security]: USENIX Security Symposium, 2021, 2022
  • [CCS]: ACM Conference on Computer and Communications Security, 2019, 2020.
  • [ICICS]: International Conference on Information and Communications Security, 2019, 2020, 2021
  • [FEAST]: ACM CCS Workshop on Forming an Ecosystem Around Software Transformation, 2018, 2019, 2020.
  • Security and Communication Networks, Special Issue “Attack and Defence of Smart Systems”, Guest Editor.
  • Frontiers in Computer Science, Special Issue “Intelligent Defenses for Secure Mobile Software and Systems”, Guest Editor.

Versatility

Photography

I enjoy taking pictures to remember a particular moment in my life. My favorite topics are landscape, nature, and the night sky.
Dec 5, 2019 2 min read

Contact

  • jming[at]tulane[dot]edu
  • 405 Stanley Thomas Hall, New Orleans, LA 70118
  • Thursday 10:00 am to 11:50 am or email for appointment