View Visitor Map>>
ABOUT US
More >>
- Call for scholarship applicants (PhD [3~3.5 years], Master by research [2 years], and Honours [1 year])24.12.2019
The NSCLab System Security Group was founded in Feb. 2018 to ensure that systems in our society are resilient against cyber-attacks and fulfill essential security and privacy requirements. The systems we focus our research on not only include the classic ICT perspective but also include those that have societal, economical, and human factors. We partner with many top-tier universities and companies all around the world to fix knowledge gaps as well as research gaps in different areas under the system security umbrella. Our research outcomes make a significant contribution to industry's cybersecurity solutions and response to cyber threats in governmental organisations.
OUR RESEARCH
AI Model Security
Tutorial >>
1. Security Policy, Misuse and Privacy issues of LLM
2. Security of Embedded AI Models
Software System Security
Tutorial >>
1. Fuzz Testing
2. Static Analysis Tools for Bugs
Blockchain Ecosystem Security
Tutorial >>
1. Anti-Money Laundry (AML) Analysis
2. Smart Contract Auditing
3. Digital Wallet Security
OUR TEAM
visiting scholar/students >>
Past Members >>
Team Leader
Research Fellow
PhD Candidate
Honours
Visiting Fellow
Yang Xiang
(Founder)
(Founder)
Vincent S. Wen
(Founder)
(Founder)
Sean X. Zhu
(SE Sec)
(SE Sec)
Wanlun Ma
(AI Sec)
(AI Sec)
Siyu Zhang
(SE Sec)
(SE Sec)
Xian Li
(SE Sec)
(SE Sec)
Ricky R. Dong
(SE Sec)
(SE Sec)
Qian Li
(SE Sec)
(SE Sec)
Zongyu Ling
(SE Sec)
(SE Sec)
He Huang
(SE Sec)
(SE Sec)
Hao Zhang
(HCI Sec)
(HCI Sec)
Zehang Deng
(AI Sec)
(AI Sec)
Changzhou Han
(AI Sec)
(AI Sec)
Xi Tang
(AI Sec)
(AI Sec)
Vivian Y. Bao
(HCI Sec)
(HCI Sec)
Yujia Luo
(SE Sec)
(SE Sec)
Enze Dai
(SE Sec)
(SE Sec)
Ningran Li
(Blockchain Sec)
(Blockchain Sec)
Chuan Sheng
(SE Sec)
(SE Sec)
ACHIEVEMENT
Funded Project
- “TECH4HSE: AI Security for AR and VR,” Data61 CRP, $300,000 AUD, 2024.
- “Attribution of Machine-generated Code for Accountability,” ARC DP 240102164, $497,000 AUD, 2023.
- “6G Security & Development,” Department of Home Affairs, $500,000 AUD, 2023.
- “HyperLab: Security for Digital Wallet,” HyperPay, $784,000 USD, 2022.
- "S-CCSC: Security of Cross-chain Smart Contract," Ethereum, $100,000 AUD, 2022.
- "Adversarial Macine Learning for Cyber (22~23 Extension)," Data61 CRP, $110,000 AUD, 2022.
- "Building National Cybersecurity Capabilities for Digital Transformation in Manufacturing," CSRIO/Data61 NGGP, $1,614,420 AUD, 2022.
- "MemberGuard: Protecting Machine Learning Privacy from Membership Inference," ARC DP 220102784, $450,000 AUD, 2022.
- "Defending AI based FinTech Systems against Model Extraction Attacks," ARC LP 200100084, $620,000 AUD, 2021.
- "An Efficient and Scalable Design of Blockchain System," ASTA (Industry Funding), $126,098.96 AUD, 2021.
- "Currency Chart and AI Analysis," Renhe Group (Industry Funding), $160,000 AUD, 2020.
- "Developing Adversary-Aware Classifiers for Android Malware Detection," ARC DP 200100886, $420,000 AUD, 2019.
- "Building Trust with Distributed Ledgers for Digital Platforms," Data61 CRP, $430,000 AUD, 2019.
- "Detecting Firmware Vulnerabilities in Smart Home Devices," ARC LP 180100170, $420,000 AUD, 2019.
- "Developing an Effective Defence to Cyber-reputation Manipulation Attacks," ARC LP 170100924, $750,000 AUD, 2018.
- "Blockchain for Art Market," ArtChain Global (Industry Funding), $1,400,000 AUD, 2018.
- "Deep Learning for Cyber," Data61 CRP, $1,600,000 AUD, 2018.
- "Adversarial Macine Learning for Cyber," Data61 CRP, $1,500,000 AUD, 2018.
Selected Publications
- K. Zhang, S. Wang, J. Han, X. Zhu, X. Li, S. Wang, S. Wen, ``Your Fix Is My Exploit: Enabling Comprehensive DL Library API Fuzzing with Large Language Models,'' The International Conference on Software Engineering (ICSE), accepted in Jun. 2024. [CCF-A软工顶会]
- K. Ye, X. Zhu, X. Xiao, S. Wen, M. Xue, Y. Xiang, ``BAZZAFL: Moving Fuzzing Campaigns Towards Bugs via Grouping Bug-oriented Seeds'' IEEE Transactions on Dependable and Secure Computing, accepted in May, 2024. [CCF-A安全顶刊]
- G. Fei, Y. Liu, G. Hu, Guangmin, S. Wen, Y. Xiang, ``Online Social Network User Home Location Inference Based on Heterogeneous Networks'' IEEE Transactions on Dependable and Secure Computing, accepted in Apr, 2024. [CCF-A安全顶刊]
- W. Ma, D. Wang, C. Chen, S. Wen, G. Fei, Y. Xiang, ``LocGuard: A Location Privacy Defender for Image Sharing'' IEEE Transactions on Dependable and Secure Computing, accepted in Mar, 2024. [CCF-A安全顶刊]
- W. Ma, Y. Song, M. Xue, S. Wen, Y. Xiang, ``The Code of Ethics: A Holistic Audit of AI Code Generators'' IEEE Transactions on Dependable and Secure Computing, accepted in Mar, 2024. [CCF-A安全顶刊]
- X. Zhu, S. Zhang, C. Li, S. Wen, Y. Xiang, ``Fuzzing Android Native System Libraries via Dynamic Data Dependency Graph'' IEEE Transactions on Information Forensics and Security, accepted in Mar, 2024. [CCF-A安全顶刊]
- L. Tang, X. Chen, S. Wen, L. Li, M. Globler, and Y. Xiang, ``Demystifying the Evolution of Android Malware Variants'' IEEE Transactions on Dependable and Secure Computing, accepted in Oct, 2023. [CCF-A安全顶刊]
- X. Mo, Y. Zhang, L.Y. Zhang, W. Luo, N. Sun, S. Hu, S. Gao, and Y. Xiang, ``Robust Backdoor Detection for Deep Learning via Topological Evolution Dynamics,'' The 45th IEEE Symposium on Security and Privacy (IEEE S&P), accepted in Oct, 2023. [CCF-A安全顶会]
- X. Hu, H. Cai, M. Alazab, W. Zhou, M. S. Haghighi, S. Wen, ``Federated Learning in Industrial IoT: A Privacy-Preserving Solution that Enables Sharing of Data in Hydrocarbon Explorations,'' IEEE Transactions on Industrial Informatics, accepted in July. 2023. [中科院一区]
- K. Zhang, X. Zhu, X. Xiao, M. Xue, C. Zhang, S. Wen, ``ShapFuzz: Efficient Fuzzing via Shapley-Guided Byte Selection,'' The Network and Distributed System Security (NDSS), accepted in May, 2023. [CCF-A安全顶会]
- Y. Zhang, X. Zhu, D. He, M. haghighi, S.L. Ji, S. Wen, M. Xue, Z. Peng, ``Detecting Union Type Confusion in Component Object Model,'' The 32nd USENIX Security Symposium (USENIX SEC), accepted in May, 2023. [CCF-A安全顶会]
- R. Zhang, T. Wu, X. Chen, S. Wen, S. Nepal, P. Cecile, Y. Xiang, ``Dynalogue: A Transformer-Based Dialogue System with Dynamic Attention,'' The ACM Web Conference 2023 (WWW), accepted in Jan, 2023. [CCF-A网络数据分析顶会]
- X. Zhu, S. Wen, S. Camtepe, Y. Xiang, ``Fuzzing: A Survey for Roadmap,'' ACM Computing Survey, published in January, 2023. [中科院一区]
- Y. Cao, X. Xiao, R. Sun, D. Wang, J. Xue, S. Wen, ``StyleFool: Fooling Video Classification Systems via Style Transfer,'' The 44th IEEE Symposium on Security and Privacy (IEEE S&P), accepted in Nov, 2022. [CCF-A安全顶会]
- W. Ma, D. Wang, R. Sun, J. Xue, S. Wen, Y. Xiang, ``The Beatrix Resurrections: Robust Backdoor Detection via Gram Matrices,'' The Network and Distributed System Security (NDSS), accepted in Sept, 2022. [CCF-A安全顶会]
- X. Hu, W. Ma, C. Chen, S. Wen, J. Zhang, Y. Xiang, and G. Fei, ``Event Detection in Online Social Network Methodologies, State-of-Art, and Evolution,'' Computer Science Review, accepted in Jul, 2022. [中科院一区]
- C. Li, X. Chen, R. Sun, J. Xue, S. Wen, E. Ahmed, S. Camtepe, Y. Xiang, ``Cross-Language Android Permission Specification,'' The ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering (ESEC/FSE), accepted in June, 2022. [CCF-A软工顶会]
- C. Xu, Y. Ding, C. Chen, Y. Ding, W. Zhou and S. Wen, ``Personalized Location Privacy Protection for Location-Based Services in Vehicular Networks,'' IEEE Transactions on Intelligent Transportation Systems, accepted in May, 2022. [中科院一区]
- L. Tang, X. Chen, T. Wu, S. Wen, L. Li, X. Xia, M. Globler, and Y. Xiang, ``How does Visualisation Help App Practitioners Analyse Android Apps?'' IEEE Transactions on Dependable and Secure Computing, accepted in May, 2022. [CCF-A安全顶刊]
- J. Zhang, L. Pan, Q.L. Han, C. Chen, S. Wen, Y. Xiang, ``Deep Learning Based Attack Detection for Cyber-Physical System Cybersecurity: A Survey,'' IEEE/CAA Journal of Automatica Sinica, Vol. 9, no. 3, pp. 377-391, Mar 2022. [中科院一区]
- H. Li, C. Xia, T. Wang, S. Wen, C. Chen, and Y. Xiang ``Capturing Dynamics of Information Diffusion in SNS: A Survey of Methodology and Techniques,'' ACM Computing Survey, accepted in January, 2022. [中科院一区]
- K. Zhang, X. Xiao, X. Zhu, S. Wen, R. Sun, J. Xue, ``Path Transitions Tell More: Optimizing Fuzzing Schedules via Runtime Program States,'' The International Conference on Software Engineering (ICSE), accepted in Dec. 2021. [CCF-A软工顶会]
- T. Wang, H. Ke, A. Jolfaei, S. Wen, M. S. Haghighi, S. Huang, ``Missing Value Filling Based on the Collaboration of Cloud and Edge in Artificial Intelligence of Things,'' IEEE Transactions on Industrial Informatics, accepted in Oct. 2021. [中科院一区]
- H. Li, C. Xia, T. Wang, S. Wen, C. Chen, Y. Xiang, ``Capturing Dynamics of Information Diffusion in SNS: A Survey of Methodology and Techniques,'' ACM Computing Survey, accepted in Sept. 2021. [中科院一区]
- D. Li, J.Q. Liu, S. Huang, S. Wen, H. Liu, ``Addictive Incentive Mechanism in Crowdsensing from the Perspective of Behavioural Economics,'' IEEE Transactions on Parallel and Distributed Systems, accepted in Aug. 2021. [CCF-A]
- C. Li, X. Chen, D. Wang, S. Wen, M. Ahmed, S. Camtepe, Y. Xiang, ``Backdoor Attack on Machine Learning based Android Malware Detectors,'' IEEE Transactions on Dependable and Secure Computing, accepted in July, 2021. [CCF-A安全顶刊]
- X. Feng, R. Sun, X. Zhu, J. Xue, S. Wen, D. Liu, S. Nepal, and Y. Xiang, ``Snipuzz: Black-box Fuzzing of IoT Firmware via Message Snippet Inference,'' Proceedings of the ACM Conference on Computer and Communications Security (ACM CCS), Accepted in May, 2021. [CCF-A安全顶会]
- X. Zhu, M. Boehme, ``Regression Greybox Fuzzing,'' Proceedings of the ACM Conference on Computer and Communications Security (ACM CCS), accepted in March, 2021. [CCF-A安全顶会]
- F. Fariar, M.S. Haghighi, A. Jolfaei, and S. Wen, ``Covert Attacks through Adversarial Learning: Studying the Effect of Lane Keeping Attacks on the Safety of Autonomous Vehicles,'' IEEE/ASME Transactions on Mechatronics, accepted in January, 2021. [中科院一区]
- D. Wang, C. Li, S. Wen, Q.L. Han, S. Nepal, X. Zhang and Y. Xiang, ``Daedalus: Breaking Nonmaximum Suppression in Object Detection via Adversarial Examples,'' IEEE Transactions on Cybernetics, accepted in December, 2020. [中科院一区]
- F. Farivar, M.S. Haghighi, A. Jolfaei, and S. Wen, ``On the Security of Networked Control Systems in Smart Vehicle and its Adaptive Cruise Control,'' IEEE Transactions on Intelligent Transportation Systems, accepted in September, 2020. [中科院一区]
- D. Wang, C. Li, S. Wen, S. Nepal, and Y. Xiang, ``Man-in-the-Middle Attacks against Machine Learning Classifiers via Malicious Generative Models,'' IEEE Transactions on Dependable and Secure Computing, accepted in September, 2020. [CCF-A安全顶刊]
- D. Wang, S. Wen, S. Nepal, and Y. Xiang, ``Defending against Adversarial Attack towards Deep Neural Networks via Collaborative Multi-Task Training,'' IEEE Transactions on Dependable and Secure Computing, accepted in August, 2020. [CCF-A安全顶刊]
- X. Zhu, X. Feng, S. Wen, C. Seyit, Y. Xiang, and K. Ren, ``CSI-Fuzz: Full-speed Edge Tracing Using Coverage Sensitive Instrumentation,'' IEEE Transactions on Dependable and Secure Computing, accepted in July, 2020. [CCF-A安全顶刊]
- G. Lin, S. Wen, Q.L. Han, J. Zhang, and Y. Xiang, ``Software Vulnerability Detection Using deep neuralnetworks: A Survey,'' Proceedings of the IEEE, accepted in April, 2020. [CCF-A综合类顶刊]
- S. Liu, G. Lin, Q.L. Han, S. Wen, J. Zhang, and Y. Xiang, ``Deepbalance: Deep-learning and fuzzy oversampling for Vulnerability Detection,'' IEEE Transactions on Fuzzy Systems, accepted in Februry, 2019. [中科院一区]
- X. Chen, C. Li, D. Wang, S. Wen, J. Zhang, S. Nepal, Y. Xiang, K. Ren, ``Android HIV: A study ofrepackaging Malware for Evading Machine-Learning Detection,'' IEEE Transactions on Information Forensics and Security, vol. 15, pp. 987-1001, 2019 [高被引,CCF-A安全顶刊].
- T. Wang, C. Xia, S. Wen, H. Xue, Y. Xiang, S. Tu, ``SADI: A Novel Model to Study the Propagation of Social Worms in Hierarchical Networks,'' IEEE Transactions on Dependable and Secure Computing, vol. 16, no. 1, pp. 142-155, 2019. [CCF-A安全顶刊]
- D. Li, S. Wang, J. Liu, H. Liu, S. Wen, ``Crowdsensing from the Perspective of Behavioral Economics: An Incentive Mechanism based on Mental Accounting,'' IEEE Internet-of-Things Journal, vol. 6, no. 5, pp. 9123-9139, 2019. [中科院一区]
Awards
- Swinburne Research Excellence Award 2020 - Winner: Sheng Wen
- Outstanding HDR Published Award 2020 - Winner: Xiao Chen
RESOURSE DOWNLOAD
AFLChurn: Regression Greybox Fuzzing (X. Zhu's CCS paper 2021)
VisialDroid: A Tool for Malware Family Analysis
NeuralSec - Daedalus Attack: An Attack against Object Detection Models such as YOLOv3
Vul4Vendetta - CSIFuzz: A full-Speed Fuzzing Tool to Detect Bugs in Binaries
Vul4Vendetta - FEData: A Dataset for Evaluating Performance of Fuzz Testing
SPONSERS & PARTNERS
