EDBT 2026 Demo / reviewers in the wild / expert
Qingfeng Pan
dblp:245/2668
· DBLP profile ↗
10ranked-venue papers
1as first author
10since 2021 · last 2026
—ORCID · conflict
Domains — the database's venue-derived domains; a paper can count in several
Security and privacy · 6 · 6 since 2021Computer networks · 2 · 2 since 2021Databases, data management, data science and information retrieval · 2 · 1 first-author · 2 since 2021
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2026 | CoordMail: Exploiting SMTP Timeout and Command Interaction to Coordinate Email Middleware for Convergence Amplification Attack
Ruixuan Li 0008, Chaoyi Lu, Baojun Liu 0002, Yanzhong Lin, Qingfeng Pan, Jun Shao 0001 |
NDSS | 5 |
| 2025 | Email Cloaking: Deceiving Users and Spam Email Detectors with Invisible HTML Settings
Bingyang Guo, Mingxuan Liu 0006, Yihui Ma, Ruixuan Li 0008, Fan Shi 0003, Min Zhang 0054, Baojun Liu 0002, Chengxi Xu, Hai-Xin Duan, Geng Hong, Min Yang 0002, Qingfeng Pan |
ESORICS (4) | 12 |
| 2025 | Machine Learning Inference Pipeline Execution Using Pure SQL Based on Operator FusionabstractDeploying machine learning (ML) inference pipelines in databases become increasingly prevalent in many applications. In order to avoid data transfer between the database and ML runtimes, existing ML2SQL frameworks parse ML pipelines to a graph consisting of ML operators and then translate it into pure SQL. Nevertheless, they typically rewrite the graph without operator fusion or only consider the fusion between certain operators such as StandardScaler and tree inference. However, there are various operators in ML pipelines, which have rich fusion opportunities between each other. To fully exploit operator fusion for graph rewriting, we classify widely used ML operators and design fusion rules driven by their characteristics. Moreover, rewriting the original graph by fusion rules produces candidate graphs that generate SQLs with different execution time. We employ an enumeration-based strategy to search for the graph with the lowest cost. However, this strategy may suffer from the combination explosion on search space for complex ML pipelines. To reduce this space, we propose a greedy-based strategy by exploiting the independence among ML operators. We implement a novel ML2SQL framework as a portable plugin for databases, namely Craftsman. Our experimental evaluations show that, in comparison to the existing approaches, Craftsman generates efficient SQL queries which achieves an average speedup of 2.9x on popular databases such as DuckDB. Qingfeng Pan, Jiahe Zhi, Chen Xu 0001, Zhao Zhang 0009, Anita Shao, Guanglei Bao, Qiu Cui, Aoying Zhou |
ICDE | 1 |
| 2025 | Understanding and Characterizing Intermediate Paths of Email Delivery: The Hidden DependenciesabstractIn the cloud era, hosting-based email services have become a common business model. Various entities can participate in the email delivery process. However, the intermediate paths of email delivery have received little attention. In particular, the vulnerabilities and centralization of email intermediate paths have already posed real-world security threats. This paper conducts the first systematic analysis of intermediate paths of email delivery, aiming to understand dependence patterns and characterize the centralization. In collaboration with a large email service provider, we collected Received headers from email reception logs spanning nine months and reconstructed the complete intermediate paths of 105M clean emails. Our results reveal that Microsoft is the dominant provider of intermediate paths, participating in 66.4% of emails. We find that 86.9M (82.7%) emails rely on third-party providers in intermediate paths, and 9.1M (8.7%) paths involve multiple providers. Email signature providers frequently appear in cross-vendor intermediate paths. In addition, we reveal significant differences in the regional dependencies and centralization of email intermediate paths across countries and continents. The centralization observed in email intermediate paths also differs from incoming and outgoing servers. We hope our work prompts more attention to email intermediate paths to enhance the security of the email ecosystem. Ruixuan Li 0008, Chaoyi Lu, Baojun Liu 0002, Yanzhong Lin, Hai-Xin Duan, Qingfeng Pan, Jun Shao 0001 |
IMC | 6 |
| 2025 | HADES Attack: Understanding and Evaluating Manipulation Risks of Email Blocklists
Ruixuan Li 0008, Chaoyi Lu, Baojun Liu 0002, Geng Hong, Hai-Xin Duan, Yanzhong Lin, Qingfeng Pan, Min Yang 0002, Jun Shao 0001 |
NDSS | 8 |
| 2024 | Bounce in the Wild: A Deep Dive into Email Delivery Failures from a Large Email Service ProviderabstractAbnormal email bounces seriously disrupt user lives and company transactions. Proliferating security protocols and protection strategies have made email delivery increasingly complex. A natural question is how and why email delivery fails in the wild. Filling this knowledge gap requires a representative global email delivery dataset, which is rarely disclosed by email service providers (ESPs). Ruixuan Li 0008, Shaodong Xiao, Baojun Liu 0002, Yanzhong Lin, Hai-Xin Duan, Qingfeng Pan, Jianjun Chen 0005, Jia Zhang 0004, Ximeng Liu, Xiuqi Lu, Jun Shao 0001 |
IMC | 6 |
| 2024 | BreakSPF: How Shared Infrastructures Magnify SPF Vulnerabilities Across the Internet
Chuhan Wang 0001, Yasuhiro Kuranaga, Mingming Zhang 0010, Linkai Zheng, Xiang Li 0108, Jianjun Chen 0005, Hai-Xin Duan, Yanzhong Lin, Qingfeng Pan |
NDSS | 10 |
| 2023 | Fine-Grained Tuple Transfer for Pipelined Query Execution on CPU-GPU Coprocessor
Zhenhua Yang, Qingfeng Pan |
DASFAA (1) | 2 |
| 2022 | A Large-scale and Longitudinal Measurement Study of DKIM Deployment
Chuhan Wang 0001, Kaiwen Shen, Minglei Guo, Mingming Zhang 0010, Jianjun Chen 0005, Baojun Liu 0002, Hai-Xin Duan, Yanzhong Lin, Qingfeng Pan |
USENIX Security Symposium | 11 |
| 2021 | Weak Links in Authentication Chains: A Large-scale Analysis of Email Sender Spoofing Attacks
Kaiwen Shen, Chuhan Wang 0001, Minglei Guo, Chaoyi Lu, Baojun Liu 0002, Shuang Hao 0001, Hai-Xin Duan, Qingfeng Pan, Min Yang 0002 |
USENIX Security Symposium | 10 |