Penghui Li

Penghui Li Ph.D. Candidate Department of Computer Science and Engineering The Chinese University of Hong Kong Shatin, NT, Hong Kong SAR, China Office: Room 101, HSH Engineering Building Email: phli[at]cse.cuhk.edu.hk CV/LinkedIn/GitHub

About Me

I am a final-year Ph.D. candidate at Department of Computer Science and Engineering, The Chinese University of Hong Kong (CUHK). I am fortunate to be supervised by Prof. Wei Meng. I received my bachelor's degree from University of Chinese Academy of Sciences in 2019.

I am generally interested in software security and software engineering. I develop scalable static analysis and dynamic testing approaches for automated vulnerability detection. My research so far has found hundreds of new bugs in foundational system software, e.g., Linux kernel and GitHub, and has received recognition with awards from academia and industry.

In my security research journey, I have fruitful research experience working with Prof. Chao Zhang from Tsinghua University, Prof. Kangjie Lu from University of Minnesota, and Prof. Kai Chen from Chinese Academy of Sciences.

Publications

• SelectFuzz: Efficient Directed Fuzzing with Selective Path Exploration
  Changhua Luo, Wei Meng, Penghui Li
  In Proceedings of the 44th IEEE Symposium on Security and Privacy (Oakland), May 2023

• SEDiff: Scope-Aware Differential Fuzzing to Test Internal Function Models in Symbolic Execution
  Penghui Li, Wei Meng, Kangjie Lu
  In Proceedings of the 30th ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering (ESEC/FSE), Research Track, November 2022
  

• TChecker: Precise Static Inter-Procedural Analysis for Detecting Taint-Style Vulnerabilities in PHP Applications
  Changhua Luo, Penghui Li, Wei Meng
  In Proceedings of the 29th ACM Conference on Computer and Communications Security (CCS), Web Security Track, November 2022
  ★ Best Paper Honorable Mention Award

• Understanding and Detecting Performance Bugs in Markdown Compilers
  Penghui Li, Yinxi Liu, Wei Meng
  In Proceedings of the 36th IEEE/ACM International Conference on Automated Software Engineering (ASE), Research Track, November 2021
  

• LChecker: Detecting Loose Comparison Bugs in PHP
  Penghui Li, Wei Meng
  In Proceedings of the Web Conference 2021 (WWW), Security Track, April 2021
  

• On the Feasibility of Automated Built-in Function Modeling for PHP Symbolic Execution
  Penghui Li, Wei Meng, Kangjie Lu, Changhua Luo
  In Proceedings of the Web Conference 2021 (WWW), Security Track, April 2021