Zhiyao Feng

dblp:305/3607 · DBLP profile ↗
← Back
4ranked-venue papers
0as first author
4since 2021 · last 2026
—ORCID · unresolved

Domains — the database's venue-derived domains; a paper can count in several

Security and privacy · 3 · 3 since 2021Systems, architecture and hardware · 1 · 1 since 2021
YearPublicationVenuePosition
2026 SYSYPHUZZ: the Pressure of More Coverage
Zezhong Ren, Han Zheng 0006, Zhiyao Feng, Qinying Wang, Marcel Busch, Yuqing Zhang 0001, Chao Zhang 0008, Mathias Payer
NDSS3
2024 Monarch: A Fuzzing Framework for Distributed File Systems
Tao Lyu 0004, Zhiyao Feng, Yueyang Pan, Yujie Ren, Meng Xu 0001, Mathias Payer, Sanidhya Kashyap
USENIX ATC3
2023 Callee: Recovering Call Graphs for Binaries with Transfer and Contrastive Learning
abstract
Recovering binary programs’ call graphs is crucial for inter-procedural analysis tasks and applications based on them. One of the core challenges is recognizing targets of indirect calls (i.e., indirect callees). Existing solutions all have high false positives and negatives, making call graphs inaccurate. In this paper, we propose a new solution Callee combining transfer learning and contrastive learning. The key insight is that, deep neural networks (DNNs) can automatically identify patterns concerning indirect calls. Inspired by the advances in question-answering applications, we utilize contrastive learning to answer the callsite-callee question. However, one of the toughest challenges is that DNNs need large datasets to achieve high performance, while collecting large-scale indirect-call ground truths can be computational-expensive. Therefore, we leverage transfer learning to pre-train DNNs with easy-to-collect direct calls and further fine-tune DNNs for indirect-calls. We evaluate Callee on several groups of targets, and results show that our solution could match callsites to callees with an F1-Measure of 94.6%, much better than state-of-the-art solutions. Further, we apply Callee to two applications – binary code similarity detection and hybrid fuzzing, and found it could greatly improve their performance.
Wenyu Zhu, Zhiyao Feng, Jianjun Chen 0005, Zhijian Ou, Min Yang 0002, Chao Zhang 0008
SP2
2023 AIFORE: Smart Fuzzing Based on Automatic Input Format Reverse Engineering
Ji Shi 0002, Zhun Wang, Zhiyao Feng, Shisong Qin, Wei You 0001, Mathias Payer, Chao Zhang 0008
USENIX Security Symposium3