EDBT 2026 Demo / reviewers in the wild / expert
Yishun Zeng
dblp:272/7212
· DBLP profile ↗
4ranked-venue papers
2as first author
3since 2021 · last 2026
0009-0009-4089-6730ORCID · corroborated
Domains — the database's venue-derived domains; a paper can count in several
Security and privacy · 3 · 1 first-author · 2 since 2021Software engineering, systems software and programming languages · 1 · 1 first-author · 1 since 2021
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2026 | RTFuzz: Fuzzing browsers via efficient render tree mutation
Yishun Zeng, Xicheng Lu, Chao Zhang 0008 |
Comput. Secur. | 1 |
| 2026 | TypeNFuzz: Dynamic Type-aware Object Dependence Graph-Guided Fuzzing for JavaScript Library Bug DiscoveryabstractNode.js owes much of its popularity to an enormous library ecosystem. While this abundance speeds development, widely varying code quality complicates efforts to assure robustness. Effective library testing is hard for two reasons: (1) dynamic typing obscures the construction of valid, complex inputs and (2) crucial internal logic is hidden behind shallow exports, making deep paths difficult to reach. Existing tools handle neither challenge well. To address these challenges and elevate library quality, we propose TypeNFuzz, a novel testing approach for Node.js libraries. TypeNFuzz integrates: (1) Type-driven Input Synthesis : mines TypeScript declaration files to build semantically correct objects, defeating dynamic-typing ambiguities. (2) Deep Reachability Exploration : fuzzing guided by a dynamic and type-aware object dependence graph (ODG), systematically triggering execution deep within the internal code paths to uncover deep logic. The evaluation demonstrates the effectiveness of TypeNFuzz: it achieves 1.70–6.74 times higher code coverage than state-of-the-art tools, directly attributed to its ability to handle complex types and penetrate deep logic. Critically, it uncovered 77 defects in popular built-in and third-party libraries, significantly contributing to improved robustness and stability. Yishun Zeng, Chao Zhang 0008 |
ACM Trans. Softw. Eng. Methodol. | 1 |
| 2025 | EAGLEYE: Exposing Hidden Web Interfaces in IoT Devices via Routing Analysis
Hangtian Liu, Shuitao Gan, Chao Zhang 0008, Zicong Gao, Yishun Zeng, Zhiyuan Jiang |
NDSS | 7 |
| 2020 | FANS: Fuzzing Android Native System Services via Automated Interface Analysis
Baozheng Liu, Chao Zhang 0008, Guang Gong, Yishun Zeng, Haifeng Ruan, Jianwei Zhuge |
USENIX Security Symposium | 4 |