WingTecher Lab: Software System Security Assurance Group

School of Software, Tsinghua University

The WingTecher Lab is a software system security assurance group at the Institute of Software Systems Engineering, School of Software, Tsinghua University. Supervised by Prof. Jiaguang Sun, who is an academician of the Chinese Academy of Engineering, the lab consists of one associate professor, one postdoc, and 15 Ph.D. / Master students. With the mission of "securing large-scale software systems", we focus on software security in the fields of artificial intelligence, blockchain, industrial control systems, operating systems, etc. Our research studies how to automatically mine and understand software vulnerabilities, often relying on techniques such as deep learning, symbolic execution, and fuzz testing, and we use the insights gained to drive security measurement of large-scale software systems.

The lab has been cooperating with Huawei, Tencent, Alibaba Group, WeBank, CNCERT/CC, etc. We designed and developed the vulnerability clone detection intelligent processing tool and the vulnerability fuzzing integration mutation tool, and applied them to software such as WeBank Ethernet Virtual Machine, Huawei Server Communication Protocol, Alibaba OS, Tencent QQ, and CNCERT Industrial Automation Protocols. We have detected numerous security vulnerabilities that infect the above software, among which 110 vulnerabilities have been included in both the National Vulnerability Database (CVE) and the China National Vulnerability Database. While collaborating with the industry and driving software and service innovations, we have also published more than 60 papers in leading conferences and journals such as FSE, ICSE, Security, TC, and TPDS. Members of the WingTecher Lab have won awards such as China Computer Federation (CCF) Distinguished Dissertation Award, champion of the National Undergraduate Software Testing Competition, Microsoft Research Asia StarTrack Program, Young Elite Scientists Sponsorship Program by the China Association for Science and Technology, DAMO Academy Young Fellow, and National Science Fund for Excellent Young Scholars.