Yishun Zeng

dblp:272/7212 · DBLP profile ↗
← Back
4ranked-venue papers
2as first author
3since 2021 · last 2026
0009-0009-4089-6730ORCID · corroborated

Domains — the database's venue-derived domains; a paper can count in several

Security and privacy · 3 · 1 first-author · 2 since 2021Software engineering, systems software and programming languages · 1 · 1 first-author · 1 since 2021
YearPublicationVenuePosition
2026 RTFuzz: Fuzzing browsers via efficient render tree mutation
Yishun Zeng, Xicheng Lu, Chao Zhang 0008
Comput. Secur.1
2026 TypeNFuzz: Dynamic Type-aware Object Dependence Graph-Guided Fuzzing for JavaScript Library Bug Discovery
abstract
Node.js owes much of its popularity to an enormous library ecosystem. While this abundance speeds development, widely varying code quality complicates efforts to assure robustness. Effective library testing is hard for two reasons: (1) dynamic typing obscures the construction of valid, complex inputs and (2) crucial internal logic is hidden behind shallow exports, making deep paths difficult to reach. Existing tools handle neither challenge well. To address these challenges and elevate library quality, we propose TypeNFuzz, a novel testing approach for Node.js libraries. TypeNFuzz integrates: (1) Type-driven Input Synthesis : mines TypeScript declaration files to build semantically correct objects, defeating dynamic-typing ambiguities. (2) Deep Reachability Exploration : fuzzing guided by a dynamic and type-aware object dependence graph (ODG), systematically triggering execution deep within the internal code paths to uncover deep logic. The evaluation demonstrates the effectiveness of TypeNFuzz: it achieves 1.70–6.74 times higher code coverage than state-of-the-art tools, directly attributed to its ability to handle complex types and penetrate deep logic. Critically, it uncovered 77 defects in popular built-in and third-party libraries, significantly contributing to improved robustness and stability.
Yishun Zeng, Chao Zhang 0008
ACM Trans. Softw. Eng. Methodol.1
2025 EAGLEYE: Exposing Hidden Web Interfaces in IoT Devices via Routing Analysis
Hangtian Liu, Shuitao Gan, Chao Zhang 0008, Zicong Gao, Yishun Zeng, Zhiyuan Jiang
NDSS7
2020 FANS: Fuzzing Android Native System Services via Automated Interface Analysis
Baozheng Liu, Chao Zhang 0008, Guang Gong, Yishun Zeng, Haifeng Ruan, Jianwei Zhuge
USENIX Security Symposium4