VLDB 2026 Research / reviewers in the wild / expert
Man Zhou 0006
dblp:165/8236-6
· DBLP profile ↗
5ranked-venue papers
3as first author
5since 2021 · last 2026
0009-0001-9687-1649ORCID · verified
Domains — the database's venue-derived domains; a paper can count in several
Security and privacy · 3 · 2 first-author · 3 since 2021Systems, architecture and hardware · 1 · 1 first-author · 1 since 2021Computer networks · 1 · 1 since 2021
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2026 | Functional Semantic Inference Method for Industrial Control Proprietary ProtocolabstractIndustrial control protocols (ICPs), especially proprietary protocols, lack public specifications due to security and commercial considerations, posing profound challenges for security audits and vulnerability detection. Although the function code fields in ICPs define critical operational semantics (e.g., PLC start/stop), existing protocol reverse engineering (PRE) methods struggle to accurately infer the functional implications of their value dependencies. To address this critical gap, we propose FuncSeinfer, an operation-traffic correlation-driven method for inferring functional semantics in proprietary ICPs by associating graphical user interface (GUI) operations of programming software with network traffic. FuncSeinfer first employs an entropy-based dynamic field extraction algorithm to generate candidate fields. Subsequently, it applies heuristic rules and clustering scoring rules to accurately infer function code fields. Finally, it identifies semantics through variance analysis of traffic marked with operational labels. We rigorously evaluated FuncSeinfer on 7 widely used ICPs (S7comm, UMAS-A, UMAS-B, Modbus, PCCC, Melsoft, and Fins) in 9 real-world PLCs from 5 leading manufacturers, achieving 100% accuracy in function code field inference, outperforming state-of-the-art PRE tools such as Netzob, FieldHunter, Netplier, and FSIBP. Furthermore, FuncSeinfer can accurately identify the semantic meaning of 78 function codes, which is an average improvement of 20.2% compared to Wireshark. This study fills the gap in functional semantics within ICP reverse engineering, enabling in-depth security analysis without requiring protocol specifications. Yahui Yang, Yangyang Geng, Man Zhou 0006, Zhuo Lv, Liupeng He |
IEEE Internet Things J. | 4 |
| 2025 | Physical semantic inference method for industrial control proprietary protocol data fields
Yahui Yang, Yangyang Geng, Man Zhou 0006 |
Comput. Secur. | 4 |
| 2025 | Strengthening edge defense: A differential game-based edge intelligence strategy against APT attacks
Man Zhou 0006, Lansheng Han |
Comput. Secur. | 1 |
| 2025 | Unmanned aerial vehicle swarm-assisted reliable federated learning for traffic flow prediction
Man Zhou 0006, Lansheng Han, Yangyang Geng |
Future Gener. Comput. Syst. | 1 |
| 2024 | Stealthy attack detection based on controlled invariant subspace for autonomous vehicles
Man Zhou 0006 |
Comput. Secur. | 1 |