Welcome to Xu Duan’s personal page.

I am currently a master student at the Institute of Software, Chinese Academy of Sciences, where I am fortunate to be advised by Prof. Jingzheng Wu. My research interests include software security, vulnerability mining, and programming language processing. At the same time, I have a strong interest in machine learning and deep learning.

In past, I got a bachelor’s degree from the School of Computer Science and Technology at the University of Science and Technology Beijing.

Publications

Papers

• Duan, X., Wu, J., Ji, S., Rui, Z., Luo, T., Yang, M., & Wu, Y. (2019, August). VulSniper: Focus Your Attention to Shoot Fine-Grained Vulnerabilities. In IJCAI (pp. 4665-4671). [paper]

• Duan, X., Wu, J., Du, M., Luo, T., Yang, M., & Wu, Y. (2021, October). MultiCode: A Unified Code Analysis Framework based on Multi-type and Multi-granularity Semantic Learning. In 2021 IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW) (pp. 359-364). IEEE. (Best Practice Award) [paper]

• Wu, J., Ling, X., Duan, X., Luo, T., & Yang, M. (2024, June). VulDL: Tree-based and Graph-based Neural Networks for Vulnerability Detection and Localization. In Proceedings of the 28th International Conference on Evaluation and Assessment in Software Engineering (pp. 323-332). [paper]

• Xu, X., Wu, J., Yang, M., Luo, T., Duan, X., Li, W., … & Wu, B. (2020, November). Information leakage by model weights on federated learning. In Proceedings of the 2020 workshop on privacy-preserving machine learning in practice (pp. 31-36). [paper]

• Rui, Z., Wu, J., Luo, T., Duan, X., Zhao, H., Chen, C. (2019). A Method of Inheritance Security Vulnerability Detection Based on Atomic Control Flow Graph. Seminar on Manned Space Engineering Software Security Reliability Technology.

Patents

• Duan X, Wu J, Luo T, Yang M, Ni C, Wu Y. A Vulnerability Detection Method based on Cycle Verification over Core Control Flow Graph, No. 201811578979.5. (ISCAS)

• Duan X, Wu J, Wu Y, Luo T, Yang M, Ni C. A Program Source Code Encoding Method based on Code Property Tensor, ZL201910554093.5. (ISCAS)

Software Copyright

• VulSniper: source code vulnerability detection software, 2019SR0692340. (ISCAS)

• VulGraph: Knowledge Graph-based Vulnerability Management Platform, 2019SR0860641. (ISCAS)

Contact

Please contact me via email: duanxu2019@iscas.ac.cn