Demo Data from SIGIR 2026 / reviewers in the wild / expert
Miaoqian Lin
dblp:353/7582
· DBLP profile ↗
6ranked-venue papers
3as first author
6since 2021 · last 2026
—ORCID · none
Domains — the database's venue-derived domains; a paper can count in several
Security and privacy · 6 · 3 first-author · 6 since 2021
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Software engineering, system software, and programming languages
4 papers |
Program analysis · 78% Requirements engineering and software design · 13% Debugging and program repair · 9% | |
| Network and information security
3 papers |
Systems and software security · 100% | |
| Artificial intelligence
2 papers |
Language models and text generation · 100% |
Topics — the 11 heaviest of 14, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Program analysis › static analysis
bug detection |
1.9 | 2 | 2026 | SpecAuditor: Generating Audit Specifications for LLM-Driven Bug Detection · SP 2026 Uncovering the iceberg from the tip: Generating API Specifications for Bug Detection via Specification Propagation Analysis · NDSS 2025 |
Program analysis
static analysis |
1.9 | 2 | 2026 | SpecAuditor: Generating Audit Specifications for LLM-Driven Bug Detection · SP 2026 Generating API Parameter Security Rules with LLM for API Misuse Detection · NDSS 2025 |
Systems and software security › vulnerability analysis
API misuse detection |
1.7 | 2 | 2025 | The Midas Touch: Triggering the Capability of LLMs for RM-API Misuse Detection · NDSS 2025 Generating API Parameter Security Rules with LLM for API Misuse Detection · NDSS 2025 |
Systems and software security
vulnerability discovery |
1.6 | 2 | 2025 | The Midas Touch: Triggering the Capability of LLMs for RM-API Misuse Detection · NDSS 2025 AutoPwn: Artifact-Assisted Heap Exploit Generation for CTF PWN Competitions · IEEE Trans. Inf. Forensics Secur. 2024 |
Requirements engineering and software design › specification
specification generation |
1.0 | 1 | 2026 | SpecAuditor: Generating Audit Specifications for LLM-Driven Bug Detection · SP 2026 |
Natural language and speech › Language models and text generation › large language model
LLM for code analysis |
0.9 | 1 | 2025 | The Midas Touch: Triggering the Capability of LLMs for RM-API Misuse Detection · NDSS 2025 |
Systems and software security › exploitation
automated exploit generation |
0.8 | 1 | 2024 | AutoPwn: Artifact-Assisted Heap Exploit Generation for CTF PWN Competitions · IEEE Trans. Inf. Forensics Secur. 2024 |
Systems and software security
exploitation |
0.8 | 1 | 2024 | AutoPwn: Artifact-Assisted Heap Exploit Generation for CTF PWN Competitions · IEEE Trans. Inf. Forensics Secur. 2024 |
Program analysis › error detection
API misuse detection |
0.7 | 1 | 2023 | Detecting API Post-Handling Bugs Using Code and Description in Patches · USENIX Security Symposium 2023 |
Debugging and program repair
fault localization |
0.7 | 1 | 2023 | Detecting API Post-Handling Bugs Using Code and Description in Patches · USENIX Security Symposium 2023 |
Program analysis › static analysis
vulnerability detection |
0.7 | 1 | 2023 | Detecting API Post-Handling Bugs Using Code and Description in Patches · USENIX Security Symposium 2023 |
Methods — techniques the papers use, named apart from their topics
large language model · 5.5specification propagation analysis · 0.9state machine modeling · 0.8semantic analysis · 0.8dynamic monitoring · 0.8
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2026 | SpecAuditor: Generating Audit Specifications for LLM-Driven Bug Detection
Miaoqian Lin |
SP | 1 |
| 2025 | Uncovering the iceberg from the tip: Generating API Specifications for Bug Detection via Specification Propagation Analysis
Miaoqian Lin, Kai Chen 0012, Yi Yang 0100 |
NDSS | 1 |
| 2025 | Generating API Parameter Security Rules with LLM for API Misuse Detection
Yi Yang 0100, Kai Chen 0012, Miaoqian Lin |
NDSS | 4 |
| 2025 | The Midas Touch: Triggering the Capability of LLMs for RM-API Misuse Detection
Yi Yang 0100, Kai Chen 0012, Miaoqian Lin |
NDSS | 4 |
| 2024 | AutoPwn: Artifact-Assisted Heap Exploit Generation for CTF PWN CompetitionsabstractCapture-the-flag (CTF) competitions have become highly successful in security education, and heap corruption is considered one of the most difficult and rewarding challenges due to its complexity and real-world impact. However, developing a heap exploit is a challenging task that often requires significant human involvement to manipulate memory layouts and bypass security checks. To facilitate the exploitation of heap corruption, existing solutions develop automated systems that rely on manually crafted patterns to generate exploits. Such manual patterns tend to be specific, which limits their flexibility to cope with the evolving exploit techniques. To address this limitation, we explore the problem of the automatic summarization of exploit patterns. We leverage an observation that public attack artifacts provide key insights into heap exploits. Based upon this observation, we develop AutoPwn, the first artifact-assisted AEG system that automatically summarizes exploit patterns from artifacts of known heap exploits and uses them to guide the exploitation of new programs. Considering the diversity of programs and exploits, we propose to use a novel Exploitation State Machine (ESM), with generic states and transitions to model the exploit patterns, and then efficiently construct it through combining the dynamic monitoring of exploits and the semantic analysis of their text descriptions. We implement a prototype of AutoPwn and evaluate it on 96 testing CTF binaries. The results show that AutoPwn produces 22 successful exploits and 13 partial exploits, preliminarily demonstrating its efficacy. Dandan Xu, Kai Chen 0012, Miaoqian Lin, Chaoyang Lin, XiaoFeng Wang 0001 |
IEEE Trans. Inf. Forensics Secur. | 3 |
| 2023 | Detecting API Post-Handling Bugs Using Code and Description in Patches
Miaoqian Lin, Kai Chen 0012, Yang Xiao 0011 |
USENIX Security Symposium | 1 |