EDBT 2026 Demo / reviewers in the wild / expert
Shangzhi Xu
dblp:226/3409
· DBLP profile ↗
3ranked-venue papers
2as first author
3since 2021 · last 2026
0009-0001-6020-2216ORCID · corroborated
Domains — the database's venue-derived domains; a paper can count in several
Security and privacy · 2 · 2 first-author · 2 since 2021Software engineering, systems software and programming languages · 1 · 1 since 2021
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Network and information security
2 papers |
Systems and software security · 93% Network security · 7% | |
| Software engineering, system software, and programming languages
3 papers |
Software maintenance and evolution · 38% Software testing · 33% Debugging and program repair · 29% | |
| Computer architecture, parallel and distributed computing, and storage systems
1 paper |
Embedded and real-time systems · 100% |
Topics — the 11 heaviest of 11, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Systems and software security
vulnerability discovery |
1.9 | 2 | 2026 | PufferDoS: Efficient and Effective Attack String Generation for Regular Expression Denial of Service Vulnerabilities · SP 2026 Enhancing Security in Third-Party Library Reuse - Comprehensive Detection of 1-day Vulnerability through Code Patch Analysis · NDSS 2025 |
Systems and software security › vulnerability discovery
regular expression denial of service |
1.0 | 1 | 2026 | PufferDoS: Efficient and Effective Attack String Generation for Regular Expression Denial of Service Vulnerabilities · SP 2026 |
Software testing
fuzzing |
1.0 | 1 | 2026 | PufferDoS: Efficient and Effective Attack String Generation for Regular Expression Denial of Service Vulnerabilities · SP 2026 |
Systems and software security › software supply chain security
third-party library vulnerability identification |
0.9 | 1 | 2025 | Enhancing Security in Third-Party Library Reuse - Comprehensive Detection of 1-day Vulnerability through Code Patch Analysis · NDSS 2025 |
Software maintenance and evolution › software evolution › software adaptation
dynamic reconfiguration |
0.9 | 1 | 2025 | Real-time Rectifying Flight Control Misconfiguration Using Intelligent Agent · ACM Trans. Softw. Eng. Methodol. 2025 |
Debugging and program repair
program repair |
0.9 | 1 | 2025 | Real-time Rectifying Flight Control Misconfiguration Using Intelligent Agent · ACM Trans. Softw. Eng. Methodol. 2025 |
Embedded and real-time systems
cyber-physical system platforms |
0.9 | 1 | 2025 | Real-time Rectifying Flight Control Misconfiguration Using Intelligent Agent · ACM Trans. Softw. Eng. Methodol. 2025 |
Embedded and real-time systems › real-time control
flight control systems |
0.9 | 1 | 2025 | Real-time Rectifying Flight Control Misconfiguration Using Intelligent Agent · ACM Trans. Softw. Eng. Methodol. 2025 |
Network security › attack strategy
denial-of-service attack |
0.3 | 1 | 2026 | PufferDoS: Efficient and Effective Attack String Generation for Regular Expression Denial of Service Vulnerabilities · SP 2026 |
Robotics › Legged, aerial and field robots › aerial robot control
drone control |
0.3 | 1 | 2025 | Real-time Rectifying Flight Control Misconfiguration Using Intelligent Agent · ACM Trans. Softw. Eng. Methodol. 2025 |
Software maintenance and evolution
software dependencies |
0.3 | 1 | 2025 | Enhancing Security in Third-Party Library Reuse - Comprehensive Detection of 1-day Vulnerability through Code Patch Analysis · NDSS 2025 |
Methods — techniques the papers use, named apart from their topics
state change inspection · 2.6intelligent agent · 2.6attack string generation · 2.0code patch analysis · 1.7clone detection · 1.7
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2026 | PufferDoS: Efficient and Effective Attack String Generation for Regular Expression Denial of Service Vulnerabilities
Shangzhi Xu, Yuekang Li, Nan Sun 0002, Benjamin Turnbull, Shuangxiang Kan, Siqi Ma 0001 |
SP | 1 |
| 2025 | Enhancing Security in Third-Party Library Reuse - Comprehensive Detection of 1-day Vulnerability through Code Patch Analysis
Shangzhi Xu, Jialiang Dong, Weiting Cai, Juanru Li, Arash Shaghaghi |
NDSS | 1 |
| 2025 | Real-time Rectifying Flight Control Misconfiguration Using Intelligent AgentabstractConfigurations are supported by most flight control systems, allowing users to control a flying drone adapted to complexities such as environmental changes or mission alterations. Such an advanced functionality also introduces a significant problem—misconfiguration settings. It may cause drone instability, threaten drone safety, and potentially lead to substantial financial loss. However, detecting and rectifying misconfigurations across different flight control systems is challenging because (1) (mis)configuration-related code snippets might be syntactically correct and thus hard to identify through traditional code analysis; (2) the response to each configuration varies under different flying scenarios. In this article, we propose and implement a novel rectification approach, Nyctea , to detect instability caused by misconfigurations and conduct an on-the-fly rectification. Nyctea first continuously inspects state changes over consecutive time intervals and calculates the overall deviations to determine whether a drone is in a transition of instability to control loss. When a potential instability is reported, Nyctea instantly invokes a pre-trained intelligent agent to automatically generate proper configurations and then re-configure the drone against entering a state of loss of control. This process of reconfiguration is conducted iteratively until the instability is eliminated. We integrated Nyctea with the widely used flight control system, Ardupilot and PX4 . The simulated and practical experiment results showed that Nyctea successfully eliminates instabilities caused by 85% of misconfigurations. For each misconfiguration, Nyctea averagely generated 4 to 5 configurations to achieve a successful rectification. Ruidong Han, Shangzhi Xu, Juanru Li, Elisa Bertino, David Lo 0001, Jianfeng Ma 0001, Siqi Ma 0001 |
ACM Trans. Softw. Eng. Methodol. | 2 |