Xiang Ling

Selected Publications [Full Publications]

1. ICSE

   The Seeds of the FUTURE Sprout from History: Fuzzing for Unveiling Vulnerabilities in Prospective Deep Learning Libraries

   Zhiyuan Li, Jingzheng Wu,  Xiang Ling, Tianyue Luo, Zhiqing Rui, and Yanjun Wu

   In International Conference on Software Engineering (ICSE) 2025

   Bib HTML Code CCF-A 会议

   @inproceedings{zhiyuan2025future,
     title = {The Seeds of the FUTURE Sprout from History: Fuzzing for Unveiling Vulnerabilities in Prospective Deep Learning Libraries},
     author = {Li, Zhiyuan and Wu, Jingzheng and Ling, Xiang and Luo, Tianyue and Rui, Zhiqing and Wu, Yanjun},
     booktitle = {International Conference on Software Engineering (ICSE)},
     pages = {},
     year = {2025},
     month = {},
     address = {},
     publisher = {IEEE},
     bibtex_show = {true},
     corr = {false},
     abbr = {ICSE},
     flag = {CCF-A 会议},
     html = {},
     code = {https://github.com/Redmept1on/FUTURE},
     selected = {true}
   }

2. USEC

   A Wolf in Sheep’s Clothing: Practical Black-box Adversarial Attacks for Evading Learning-based Windows Malware Detection in the Wild

   Xiang Ling, Zhiyu Wu, Bin Wang, Wei Deng, Jingzheng Wu, Shouling Ji, Tianyue Luo, and Yanjun Wu

   In USENIX Security Symposium Aug 2024

   Bib HTML Code CCF-A 会议

   @inproceedings{ling2024wolf,
     title = {A Wolf in Sheep's Clothing: Practical Black-box Adversarial Attacks for Evading Learning-based Windows Malware Detection in the Wild},
     author = {Ling, Xiang and Wu, Zhiyu and Wang, Bin and Deng, Wei and Wu, Jingzheng and Ji, Shouling and Luo, Tianyue and Wu, Yanjun},
     booktitle = {USENIX Security Symposium},
     pages = {7393--7410},
     year = {2024},
     month = aug,
     address = {Philadelphia, PA, USA},
     publisher = {USENIX},
     bibtex_show = {true},
     corr = {false},
     abbr = {USEC},
     flag = {CCF-A 会议},
     html = {https://www.usenix.org/system/files/usenixsecurity24-ling.pdf},
     code = {https://github.com/jiyuay/MalGuise-Access-Instructions},
     selected = {true}
   }

3. COSE

   Adversarial Attacks against Windows PE Malware Detection: A Survey of the State-of-the-Art

   Xiang Ling, Lingfei Wu, Jiangyu Zhang, Zhenqing Qu, Wei Deng, Xiang Chen, Yaguan Qian, Chunming Wu, Shouling Ji, Tianyue Luo, Jingzheng Wu, and Yanjun Wu

   Computer & Security May 2023

   arXiv Bib HTML Code CCF-B 期刊 (IF=5.105)

   @article{ling2023survey,
     title = {Adversarial Attacks against {Windows PE} Malware Detection: A Survey of the State-of-the-Art},
     author = {Ling, Xiang and Wu, Lingfei and Zhang, Jiangyu and Qu, Zhenqing and Deng, Wei and Chen, Xiang and Qian, Yaguan and Wu, Chunming and Ji, Shouling and Luo, Tianyue and Wu, Jingzheng and Wu, Yanjun},
     journal = {Computer \& Security},
     publisher = {Elsevier},
     volumn = {128},
     pages = {103135},
     year = {2023},
     month = may,
     bibtex_show = {true},
     corr = {false},
     abbr = {COSE},
     arxiv = {2112.12310},
     html = {https://www.sciencedirect.com/science/article/pii/S0167404823000445},
     code = {https://github.com/ryderling/adversarial-attacks-and-defenses-for-windows-pe-malware-detection},
     flag = {CCF-B 期刊 (IF=5.105)},
     selected = {true}
   }

4. Black Hat

   AutoSpear: Towards Automatically Bypassing and Inspecting Web Application Firewalls

   Zhenqing Qu,  Xiang Ling, and Chunming Wu

   In Black Hat Asia May 2022

   Bib HTML Code Slides

   @inproceedings{qu2022autospear,
     title = {AutoSpear: Towards Automatically Bypassing and Inspecting Web Application Firewalls},
     author = {Qu, Zhenqing and Ling, Xiang and Wu, Chunming},
     booktitle = {Black Hat Asia},
     year = {2022},
     month = may,
     address = {Virtual Event},
     bibtex_show = {true},
     corr = {false},
     abbr = {Black Hat},
     html = {https://blackhat.com/asia-22/briefings/schedule/#autospear-towards-automatically-bypassing-and-inspecting-web-application-firewalls-25503},
     slides = {https://i.blackhat.com/Asia-22/Thursday-Materials/AS-22-Qu-AutoSpear-Towards-Automatically-Bypassing-and-Inspecting-Web-Application-Firewalls.pdf},
     code = {https://github.com/u21h2/AutoSpear},
     selected = {true}
   }

5. INFOCOM

   MalGraph: Hierarchical Graph Neural Networks for Robust Windows Malware Detection

   Xiang Ling, Lingfei Wu, Wei Deng, Zhenqing Qu, Jiangyu Zhang, Sheng Zhang, Tengfei Ma, Bin Wang, Chunming Wu, and Shouling Ji

   In IEEE Conference on Computer Communications (INFOCOM) May 2022

   Bib HTML Code CCF-A 会议

   @inproceedings{ling2022malgraph,
     title = {{MalGraph}: Hierarchical Graph Neural Networks for Robust Windows Malware Detection},
     author = {Ling, Xiang and Wu, Lingfei and Deng, Wei and Qu, Zhenqing and Zhang, Jiangyu and Zhang, Sheng and Ma, Tengfei and Wang, Bin and Wu, Chunming and Ji, Shouling},
     booktitle = {IEEE Conference on Computer Communications (INFOCOM)},
     pages = {1998--2007},
     year = {2022},
     month = may,
     address = {Virtual Event},
     publisher = {IEEE},
     bibtex_show = {true},
     corr = {false},
     abbr = {INFOCOM},
     flag = {CCF-A 会议},
     html = {https://ieeexplore.ieee.org/document/9796786},
     code = {https://github.com/ryderling/MalGraph},
     selected = {true}
   }

6. S&P

   DEEPSEC: A Uniform Platform for Security Analysis of Deep Learning Model

   Xiang Ling, Shouling Ji, Jiaxu Zou, Jiannan Wang, Chunming Wu, Bo Li, and Ting Wang

   In IEEE Symposium on Security and Privacy (IEEE S&P, Oakland) May 2019

   Bib HTML Code CCF-A 会议

   @inproceedings{ling2019deepsec,
     title = {{DEEPSEC}: A Uniform Platform for Security Analysis of Deep Learning Model},
     author = {Ling, Xiang and Ji, Shouling and Zou, Jiaxu and Wang, Jiannan and Wu, Chunming and Li, Bo and Wang, Ting},
     booktitle = {IEEE Symposium on Security and Privacy (IEEE S&P, Oakland)},
     pages = {673--690},
     year = {2019},
     month = may,
     address = {San Francisco, USA},
     publisher = {IEEE},
     bibtex_show = {true},
     corr = {true},
     abbr = {S&P},
     flag = {CCF-A 会议},
     html = {https://ieeexplore.ieee.org/document/8835375},
     code = {https://github.com/ryderling/DEEPSEC},
     selected = {true}
   }