Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page

Miaoqian Lin

dblp:353/7582 · DBLP profile ↗
← Back
6ranked-venue papers
3as first author
6since 2021 · last 2026
—ORCID · none

Domains — the database's venue-derived domains; a paper can count in several

Security and privacy · 6 · 3 first-author · 6 since 2021

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Software engineering, system software, and programming languages
4 papers
Program analysis · 78% Requirements engineering and software design · 13% Debugging and program repair · 9%
Network and information security
3 papers
Systems and software security · 100%
Artificial intelligence
2 papers
Language models and text generation · 100%

Topics — the 11 heaviest of 14, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Program analysis › static analysis
bug detection
1.922026
SpecAuditor: Generating Audit Specifications for LLM-Driven Bug Detection · SP 2026
Uncovering the iceberg from the tip: Generating API Specifications for Bug Detection via Specification Propagation Analysis · NDSS 2025
Program analysis
static analysis
1.922026
SpecAuditor: Generating Audit Specifications for LLM-Driven Bug Detection · SP 2026
Generating API Parameter Security Rules with LLM for API Misuse Detection · NDSS 2025
Systems and software security › vulnerability analysis
API misuse detection
1.722025
The Midas Touch: Triggering the Capability of LLMs for RM-API Misuse Detection · NDSS 2025
Generating API Parameter Security Rules with LLM for API Misuse Detection · NDSS 2025
Systems and software security
vulnerability discovery
1.622025
The Midas Touch: Triggering the Capability of LLMs for RM-API Misuse Detection · NDSS 2025
AutoPwn: Artifact-Assisted Heap Exploit Generation for CTF PWN Competitions · IEEE Trans. Inf. Forensics Secur. 2024
Requirements engineering and software design › specification
specification generation
1.012026
SpecAuditor: Generating Audit Specifications for LLM-Driven Bug Detection · SP 2026
Natural language and speech › Language models and text generation › large language model
LLM for code analysis
0.912025
The Midas Touch: Triggering the Capability of LLMs for RM-API Misuse Detection · NDSS 2025
Systems and software security › exploitation
automated exploit generation
0.812024
AutoPwn: Artifact-Assisted Heap Exploit Generation for CTF PWN Competitions · IEEE Trans. Inf. Forensics Secur. 2024
Systems and software security
exploitation
0.812024
AutoPwn: Artifact-Assisted Heap Exploit Generation for CTF PWN Competitions · IEEE Trans. Inf. Forensics Secur. 2024
Program analysis › error detection
API misuse detection
0.712023
Detecting API Post-Handling Bugs Using Code and Description in Patches · USENIX Security Symposium 2023
Debugging and program repair
fault localization
0.712023
Detecting API Post-Handling Bugs Using Code and Description in Patches · USENIX Security Symposium 2023
Program analysis › static analysis
vulnerability detection
0.712023
Detecting API Post-Handling Bugs Using Code and Description in Patches · USENIX Security Symposium 2023

Methods — techniques the papers use, named apart from their topics

large language model · 5.5specification propagation analysis · 0.9state machine modeling · 0.8semantic analysis · 0.8dynamic monitoring · 0.8
YearPublicationVenuePosition
2026 SpecAuditor: Generating Audit Specifications for LLM-Driven Bug Detection
Miaoqian Lin
SP1
2025 Uncovering the iceberg from the tip: Generating API Specifications for Bug Detection via Specification Propagation Analysis
Miaoqian Lin, Kai Chen 0012, Yi Yang 0100
NDSS1
2025 Generating API Parameter Security Rules with LLM for API Misuse Detection
Yi Yang 0100, Kai Chen 0012, Miaoqian Lin
NDSS4
2025 The Midas Touch: Triggering the Capability of LLMs for RM-API Misuse Detection
Yi Yang 0100, Kai Chen 0012, Miaoqian Lin
NDSS4
2024 AutoPwn: Artifact-Assisted Heap Exploit Generation for CTF PWN Competitions
abstract
Capture-the-flag (CTF) competitions have become highly successful in security education, and heap corruption is considered one of the most difficult and rewarding challenges due to its complexity and real-world impact. However, developing a heap exploit is a challenging task that often requires significant human involvement to manipulate memory layouts and bypass security checks. To facilitate the exploitation of heap corruption, existing solutions develop automated systems that rely on manually crafted patterns to generate exploits. Such manual patterns tend to be specific, which limits their flexibility to cope with the evolving exploit techniques. To address this limitation, we explore the problem of the automatic summarization of exploit patterns. We leverage an observation that public attack artifacts provide key insights into heap exploits. Based upon this observation, we develop AutoPwn, the first artifact-assisted AEG system that automatically summarizes exploit patterns from artifacts of known heap exploits and uses them to guide the exploitation of new programs. Considering the diversity of programs and exploits, we propose to use a novel Exploitation State Machine (ESM), with generic states and transitions to model the exploit patterns, and then efficiently construct it through combining the dynamic monitoring of exploits and the semantic analysis of their text descriptions. We implement a prototype of AutoPwn and evaluate it on 96 testing CTF binaries. The results show that AutoPwn produces 22 successful exploits and 13 partial exploits, preliminarily demonstrating its efficacy.
Dandan Xu, Kai Chen 0012, Miaoqian Lin, Chaoyang Lin, XiaoFeng Wang 0001
IEEE Trans. Inf. Forensics Secur.3
2023 Detecting API Post-Handling Bugs Using Code and Description in Patches
Miaoqian Lin, Kai Chen 0012, Yang Xiao 0011
USENIX Security Symposium1