Lab: No.24 South Section 1, Yihuan Road, Chengdu, China 610064
Email: codesec [AT] scu.edu.cn

NEWS

25 Sep. 2021
Congrats to Dr. Huang won Second prize of Beijing Science and Technology Award.

31 Aug. 2021
Congrats to Zhao's team won first prize ciscn 2021.

30 Aug. 2021
Paper accepted by SCN(CCF C) with Xie.

11 Aug. 2021
Paper accepted by ICDF2C(CCF C) with Ou.

1 July. 2021
Paper accepted & Best Paper Award ICICS(CCF C) with Guo.

24 Jun. 2020
Congrats to five B.S. & six M.S. achived their degree today!!

7 June. 2021
Paper accepted by Trustcom(CCF C) with Su & Liang.

25 Jan. 2021
Paper accepted by JISA(CCF C) with Li.

20 Jan. 2021
Paper accepted by Neurocomputing with Zhou.

17 Dec. 2020
Paper accepted by Computers & Security with Guo.

30 Nov. 2020
Paper accepted by Security and Communication Networks with Su.

3 Nov. 2020
Paper accepted by Security and Communication Networks with Wu.

16 Sep. 2020
Paper accepted by The Computer with Zhang.

22 Aug. 2020
Paper accepted by Applied Sciences with Gao.

26 Jul. 2020
Congrats to new administrator groups for CTF student associations.

24 Jul. 2020
Congrats to Yicheng's team on the NCSISC 2020 contest.

3 Jul. 2020
Paper accepted by Applied Sciences with undergraduate students.

1 Jul. 2020
Congrats to Yongyan on outstanding undergraduate thesis award!

30 Jun. 2020
Paper accepted by ML4CS 2020 with Ph.D students.

24 Jun. 2020
Paper accepted by IIEEE DSC 2020 with undergraduate students.

Links

安全学术圈
SecWiki
Research Materials

I am an Associate Professor in the School of Cyber Science and Engineering, Sichuan Univeristy, China. I am broadly interested in all aspects of network and system security. My work follows a measurement and data driven approach to characterize and detect critical security issues in large-scale systems. My current research focuses on attack detection, underground economics, cyber threat intelligence, source code and supply chain security.

I obtained my Ph.D. in Computer Science at the Sichuan Univeristy, and I did a Joint PhD student at University of California, Santa Barbara, under the supervision of Prof. Giovanni Vigna.

Selected Publications (Full List)

• CyberRel: Joint Entity and Relation Extraction for Cybersecurity Concepts
  Yongyan Guo, Zhengyu Liu, Cheng Huang*, Jiayong Liu, Wangyuan Jing, Ziwang Wang, Yanghao Wang
  International Conference on Information and Communications Security (ICICS), 2021.
  DOI PDF CCF C Best Paper Award

• Malicious Packages Lurking in User-Friendly Python Package Index
  Genpei Liang, Xiangyu Zhou, Qingyu Wang, Yutong Du, Cheng Huang*
  IEEE International Conference on Trust, Security and Privacy in Computing and Communications(TrustCom), 2021.
  DOI CCF C

• ExSense: Extract Sensitive Information from Unstructured Data
  Yongyan Guo, Jiayong Liu, Wenwu Tang and Cheng Huang*
  Computers & Security, 2021, 102: 102156.
  DOI PDF CCF B

• NEDetector: Automatically Extracting Cybersecurity Neologisms from Hacker Forums
  Ying Li, Jiaxing Cheng, Cheng Huang*, etc.
  Journal of Information Security and Applications, 2021(58):102784.
  DOI CCF C

• Effective method for detecting malicious PowerShell scripts based on hybrid features
  Yong Fang, Xiangyu Zhou, Cheng Huang*
  Neurocomputing, 2021.
  J DOI Data JCR 2

• Covert Timing Channel Detection Method Based on Time Interval and Payload Length Analysis
  Jiaxuan Han, Cheng Huang, Fan Shi, Jiayong Liu*
  Computers & Security, 2020(97), 101952
  DOI CCF B

• GroupTracer: Automatic Attacker TTP Profile Extraction and Group Cluster in Internet of Things
  Yixin Wu, Cheng Huang*, Xing Zhang and Hongyi Zhou
  Security and Communication Networks, vol. 2020, Article ID 8842539.
  DOI PDF CCF C

• CyberEyes: Cybersecurity Entity Recognition Model Based on Graph Convolutional Network
  Yong Fang, Yuchi Zhang,Cheng Huang*
  The Computer Journal, 2020, bxaa141.
  DOI PDF CCF B

• Session-based Webshell Detection using Machine Learning in Web Logs
  Yixin Wu, Yuqiang Sun, Cheng Huang*, Peng Jia, and Luping Liu
  Security and Communication Networks, 2019, 3093809.
  DOI PDF CCF C

• Providing Email Privacy by Preventing Webmail from Loading Malicious XSS Payloads
  Yong Fang, Yijia Xu, Peng Jia and Cheng Huang*
  Applied Sciences, 2020, 10(13), 4425.
  DOI PDF JCR 3

• EmailDetective: An Email Authorship Identification and Verification Model
  Yong Fang, Yue Yang, Cheng Huang*
  The Computer Journal, 2020, bxaa059.
  DOI Data CCF B

• A Study on Web Security Incidents in China by Analyzing Vulnerability Disclosure Platforms
  Cheng Huang, JiaYong Liu*, Yong Fang, Zheng Zuo
  Computers & Security, 2016(58): 47-62
  DOI CCF B

• Detecting Malicious JavaScript Code Based on Semantic Analysis
  Yong Fang, Cheng Huang*, Yu Su, Yaoyao Qiu
  Computers & Security, 2020(93), 101764
  DOI CCF B

• Automatic Identification of Honeypot Server Using Machine Learning Techniques
  Cheng Huang, Jiaxuan Han, Xing Zhang, and Jiayong Liu*
  Security and Communication Networks, 2019, 2627608.
  DOI PDF CCF C

• Gossip: Automatically Identifying Malicious Domains from Mailing List Discussions
  Cheng Huang, Shuang Hao, Luca Invernizzi, JiaYong Liu, Yong Fang, Christopher Kruegel, Giovanni Vigna
  Proceedings of the 2017 ACM on Asia Conference on Computer and Communications Security (ASIA CCS)
  Abu Dhabi, United Arab Emirates, April 2017.
  DOI PDF CCF C

• FastEmbed: Predicting vulnerability exploitation possibility based on ensemble machine learning algorithm
  Yong Fang, Yongcheng Liu, Cheng Huang*, Liang Liu
  PLoS One, 2020, 15(2): e0228439.
  DOI PDF Data JCR 3