Publications

Research Report: Not All Move Specifications Are Created Equal
Meng Xu
LangSec 2024 paper 

@inproceedings{roi_spec,
  title = {{Research Report: Not All Move Specifications Are Created Equal}},
  author = {Meng Xu},
  booktitle = {Proceedings of the 2024 Workshop on Language-Theoretic Security (LangSec)},
  year = 2024,
  month = 5,
  address = {San Francisco, CA},
}

Securing Aptos Framework with Formal Verification
Junkil Park, Teng Zhang, Wolfgang Grieskamp, Meng Xu, Gerardo Di Giacomo, Kundu Chen, Yi Lu, Robert Chen
FMBC 2024 paper 

@inproceedings{mvp_aptos,
  title = {{Securing Aptos Framework with Formal Verification}},
  author = {Junkil Park and Teng Zhang and Wolfgang Grieskamp and Meng Xu and Gerardo Di Giacomo and Kundu Chen and Yi Lu and Robert Chen},
  booktitle = {Proceedings of the 2024 International Workshop on Formal Methods for Blockchains (FMBC)},
  year = 2024,
  month = 4,
  address = {Luxembourg City, Luxembourg},
}

FuzzSlice: Pruning False Positives in Static Analysis Warnings through Function-Level Fuzzing
Aniruddhan Murali, Noble Mathews, Mahmoud Alfadel, Mei Nagappan, Meng Xu
ICSE 2024 paper 

@inproceedings{fuzz_slice,
  title = {{FuzzSlice: Pruning False Positives in Static Analysis Warnings through Function-Level Fuzzing}},
  author = {Aniruddhan Murali and Noble Mathews and Mahmoud Alfadel and Mei Nagappan and Meng Xu},
  booktitle = {Proceedings of the 2024 International Conference on Software Engineering (ICSE)},
  year = 2024,
  month = 4,
  address = {Lisbon, Portugal},
}

Sense: Enhancing Microarchitectural Awareness for TEEs via Subscription-Based Notification
Fan Sang, Jaehyuk Lee, Xiaokuan Zhang, Meng Xu, Scott Constable, Yuan Xiao, Michael Steiner, Mona Vij, Taesoo Kim
NDSS 2024 paper 

@inproceedings{sense,
  title = {{Sense: Enhancing Microarchitectural Awareness for TEEs via Subscription-Based Notification}},
  author = {Fan Sang and Jaehyuk Lee and Xiaokuan Zhang and Meng Xu and Scott Constable and Yuan Xiao and Michael Steiner and Mona Vij and Taesoo Kim},
  booktitle = {Proceedings of the 2024 Annual Network and Distributed System Security Symposium (NDSS)},
  year = 2024,
  month = 2,
  address = {San Diego, CA},
}

Finding Specification Blind Spots via Fuzz Testing
Ru Ji, Meng Xu
Oakland 2023 paper 

@inproceedings{fast,
  title = {{Finding Specification Blind Spots via Fuzz Testing}},
  author = {Ru Ji and Meng Xu},
  booktitle = {Proceedings of the 2023 IEEE Symposium on Security and Privacy (Oakland)},
  year = 2023,
  month = 5,
  address = {San Francisco, CA},
}

Fast and Reliable Formal Verification of Smart Contracts with the Move Prover
David Dill, Wolfgang Grieskamp, Junkil Park, Shaz Qadeer, Meng Xu, Emma Zhong
TACAS 2022 paper  source  artifact 
* EAPLS Best Paper Award
* SCP Best Tool Paper Nomination

@inproceedings{mvp,
  title = {{Fast and Reliable Formal Verification of Smart Contracts with the Move Prover}},
  author = {David Dill and Wolfgang Grieskamp and Junkil Park and Shaz Qadeer and Meng Xu and Emma Zhong},
  booktitle = {Proceedings of the 2022 International Conference on Tools and Algorithms for the Construction and Analysis of Systems (TACAS)},
  year = 2022,
  month = 4,
  address = {Munich, Germany},
}

Finding Bugs in File Systems with an Extensible Fuzzing Framework
Seulbae Kim, Meng Xu, Sanidhya Kashyap, Jungyeon Yoon, Wen Xu, Taesoo Kim
ToS 2020 paper  source 

@article{hydra_ext,
  title = {{Finding Bugs in File Systems with an Extensible Fuzzing Framework}},
  author = {Seulbae Kim and Meng Xu and Sanidhya Kashyap and Jungyeon Yoon and Wen Xu and Taesoo Kim},
  journal = {ACM Transactions on Storage (ToS)},
  year = 2020,
  month = 5,
  volume = 16,
  number = 10,
}

Krace: Data Race Fuzzing for Kernel File Systems
Meng Xu, Sanidhya Kashyap, Hanqing Zhao, Taesoo Kim
Oakland 2020 paper  slides  source 

@inproceedings{krace,
  title = {{Krace: Data Race Fuzzing for Kernel File Systems}},
  author = {Meng Xu and Sanidhya Kashyap and Hanqing Zhao and Taesoo Kim},
  booktitle = {Proceedings of the 2020 IEEE Symposium on Security and Privacy (Oakland)},
  year = 2020,
  month = 5,
  address = {San Francisco, CA},
}

Finding Semantic Bugs in File Systems with an Extensible Fuzzing Framework
Seulbae Kim, Meng Xu, Sanidhya Kashyap, Jungyeon Yoon, Wen Xu, Taesoo Kim
SOSP 2019 paper  slides  source 

@inproceedings{hydra,
  title = {{Finding Semantic Bugs in File Systems with an Extensible Fuzzing Framework}},
  author = {Seulbae Kim and Meng Xu and Sanidhya Kashyap and Jungyeon Yoon and Wen Xu and Taesoo Kim},
  booktitle = {Proceedings of the 2019 ACM Symposium on Operating Systems Principles (SOSP)},
  year = 2019,
  month = 10,
  address = {Huntsville, ON},
}

Dominance as a New Trusted Computing Primitive for the Internet of Things
Meng Xu, Manuel Huber, Zhichuang Sun, Paul England, Marcus Peinado, Sangho Lee, Andrey Marochko, Dennis Mattoon, Rob Spiger, Stefan Thom
Oakland 2019 paper  slides 

@inproceedings{cider,
  title = {{Dominance as a New Trusted Computing Primitive for the Internet of Things}},
  author = {Meng Xu and Manuel Huber and Zhichuang Sun and Paul England and Marcus Peinado and Sangho Lee and Andrey Marochko and Dennis Mattoon and Rob Spiger and Stefan Thom},
  booktitle = {Proceedings of the 2019 IEEE Symposium on Security and Privacy (Oakland)},
  year = 2019,
  month = 5,
  address = {San Francisco, CA},
}

Stopping Memory Disclosures via Diversification and Replicated Execution
Kangjie Lu, Meng Xu, Chengyu Song, Taesoo Kim, Wenke Lee
TDSC 2018 paper 

@article{buddy,
  title = {{Stopping Memory Disclosures via Diversification and Replicated Execution}},
  author = {Kangjie Lu and Meng Xu and Chengyu Song and Taesoo Kim and Wenke Lee},
  journal = {IEEE Transactions on Dependable and Secure Computing (TDSC)},
  year = 2018,
  month = 10,
  volume = preprint,
  number = NA,
}

QSYM: A Practical Concolic Execution Engine Tailored for Hybrid Fuzzing
Insu Yun, Sangho Lee, Meng Xu, Yeongjin Jang, Taesoo Kim
SEC 2018 paper  slides  source 
* USENIX Security Best Paper Award

@inproceedings{qsym,
  title = {{QSYM: A Practical Concolic Execution Engine Tailored for Hybrid Fuzzing}},
  author = {Insu Yun and Sangho Lee and Meng Xu and Yeongjin Jang and Taesoo Kim},
  booktitle = {Proceedings of the 2018 USENIX Security Symposium (SEC)},
  year = 2018,
  month = 8,
  address = {Baltimore, MD},
}

Precise and Scalable Detection of Double-Fetch Bugs in OS Kernels
Meng Xu, Chenxiong Qian, Kangjie Lu, Michael Backes, Taesoo Kim
Oakland 2018 paper  slides  source 

@inproceedings{deadline,
  title = {{Precise and Scalable Detection of Double-Fetch Bugs in OS Kernels}},
  author = {Meng Xu and Chenxiong Qian and Kangjie Lu and Michael Backes and Taesoo Kim},
  booktitle = {Proceedings of the 2018 IEEE Symposium on Security and Privacy (Oakland)},
  year = 2018,
  month = 5,
  address = {San Francisco, CA},
}

Prevention of Cross-update Privacy Leaks on Android
Beumjin Cho, Sangho Lee, Meng Xu, Sangwoo Ji, Taesoo Kim, Jong Kim
ComSIS 2018 paper  source 

@article{breakup,
  title = {{Prevention of Cross-update Privacy Leaks on Android}},
  author = {Beumjin Cho and Sangho Lee and Meng Xu and Sangwoo Ji and Taesoo Kim and Jong Kim},
  journal = {Computer Science and Information Systems (ComSIS)},
  year = 2018,
  month = 1,
  volume = 15,
  number = 1,
}

Checking Open-Source License Violation and 1-day Security Risk at Large Scale
Ruian Duan, Ashish Bijlani, Meng Xu, Taesoo Kim, Wenke Lee
CCS 2017 paper  slides  source 

@inproceedings{osspolice,
  title = {{Checking Open-Source License Violation and 1-day Security Risk at Large Scale}},
  author = {Ruian Duan and Ashish Bijlani and Meng Xu and Taesoo Kim and Wenke Lee},
  booktitle = {Proceedings of the 2017 ACM Conference on Computer and Communications Security (CCS)},
  year = 2017,
  month = 10,
  address = {Dallas, TX},
}

PlatPal: Detecting Malicious Documents with Platform Diversity
Meng Xu, Taesoo Kim
SEC 2017 paper  slides  source 

@inproceedings{platpal,
  title = {{PlatPal: Detecting Malicious Documents with Platform Diversity}},
  author = {Meng Xu and Taesoo Kim},
  booktitle = {Proceedings of the 2017 USENIX Security Symposium (SEC)},
  year = 2017,
  month = 8,
  address = {Vancouver, BC},
}

Bunshin: Compositing Security Mechanisms through Diversification
Meng Xu, Kangjie Lu, Taesoo Kim, Wenke Lee
ATC 2017 paper  slides  source 

@inproceedings{bunshin,
  title = {{Bunshin: Compositing Security Mechanisms through Diversification}},
  author = {Meng Xu and Kangjie Lu and Taesoo Kim and Wenke Lee},
  booktitle = {Proceedings of the None USENIX Annual Technical Conference (ATC)},
  year = 2017,
  month = 7,
  address = {Santa Clara, CA},
}

Toward Engineering a Secure Android Ecosystem: A Survey of Existing Techniques
Meng Xu, Chengyu Song, Yang ji, Ming-Wei Shih, Kangjie Lu, Cong Zheng, Ruian Duan, Yeongjin Jang, Byoungyoung Lee, Chenxiong Qian, Sangho Lee, Taesoo Kim
CSUR 2016 paper 

@article{survey_android,
  title = {{Toward Engineering a Secure Android Ecosystem: A Survey of Existing Techniques}},
  author = {Meng Xu and Chengyu Song and Yang ji and Ming-Wei Shih and Kangjie Lu and Cong Zheng and Ruian Duan and Yeongjin Jang and Byoungyoung Lee and Chenxiong Qian and Sangho Lee and Taesoo Kim},
  journal = {ACM Computing Surveys (CSUR)},
  year = 2016,
  month = 8,
  volume = 49,
  number = 2,
}

UCognito: Private Browsing without Tears
Meng Xu, Yeongjin Jang, Xinyu Xing, Taesoo Kim, Wenke Lee
CCS 2015 paper  slides  source 

@inproceedings{ucognito,
  title = {{UCognito: Private Browsing without Tears}},
  author = {Meng Xu and Yeongjin Jang and Xinyu Xing and Taesoo Kim and Wenke Lee},
  booktitle = {Proceedings of the 2015 ACM Conference on Computer and Communications Security (CCS)},
  year = 2015,
  month = 10,
  address = {Denver, CO},
}