VLDB 2026 Research / reviewers in the wild / expert
Xun An
dblp:322/3662
· DBLP profile ↗
3ranked-venue papers
2as first author
3since 2021 · last 2024
0009-0003-4598-391XORCID · corroborated
Domains — the database's venue-derived domains; a paper can count in several
Software engineering, systems software and programming languages · 2 · 2 first-author · 2 since 2021Security and privacy · 1 · 1 since 2021
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2024 | Structure-Sensitive Pointer Analysis for Multi-structure ObjectsabstractStatic analysis is a method within software analysis, and pointer analysis is an important component of static analysis. An important dimension of pointer analysis is field-sensitivity, which has been proven to effectively enhance the accuracy of pointer analysis results. A crucial area of research within field-sensitivity is structure-sensitivity. Structure-sensitivity has been shown to further enhance the precision of pointer analysis. However, existing structure-sensitive methods cannot handle cases where an object possesses multiple structures. Xun An, Xiaoqi Jia, Haichao Du, Yamin Xie |
Internetware | 1 |
| 2023 | Refining Use-After-Free Defense: Eliminating Dangling Pointers in Registers and MemoryabstractThe prevalence of use-after-free (UAF) vulnerabilities poses a significant threat to software security, with dangling pointers identified as the primary cause. However, existing de-fense methods suffer from bypass attacks, high runtime overhead, or only address memory dangling pointers while neglecting register-based ones that also contribute to UAF vulnerabilities. To overcome these shortcomings, we introduce a novel approach, ISDE, that eliminates both register and memory dangling point-ers with minimal additional runtime overhead. ISDE leverages an inter-procedural static pointer analysis method to statically collect object pointers during compilation, and uses the call graph and data flow graph to identify and eliminate potential dangling pointers. Our implementation of ISDE demonstrated its effectiveness in defending against real-world UAF vulnerabilities while maintaining efficiency in the SPEC CPU2006 evaluation. Xun An, Qihang Zhou, Haichao Du, Xiaoqi Jia |
APSEC | 1 |
| 2022 | An Efficient Use-after-Free Mitigation Approach via Static Dangling Pointer Nullification
Xiaoqi Jia, Xun An, Shengzhi Zhang |
SEC | 3 |