[a few years ago]

Zhendong Su Associate Professor Department of Computer Science University of California, Davis Ph.D. (2002) Computer Science University of California, Berkeley

Office Hours: by appt., 3011 Kemper

S 08 Software Systems Seminar: W 2-3, 3083 Kemper (bi-weekly)
S 08 Citation Project Meeting: W 2-3, 3083 Kemper (bi-weekly)
S 08 Research Group Meeting: W 3-4, 3083 Kemper

NEW: Please donate for China Earthquake Relief.

NEW: I have openings for post-docs for 2008. Anyone with a solid CS background (strong theoretical and programming skills) is encouraged to contact me to apply. If you email me, please use the subject line "post-doc positions for 2008" and include links to your CV and a few representative papers of yours.

Research

My research interests span programming languages, software engineering, and computer security, focusing on programming language-based techniques and tools for improving and ensuring software reliability and security.

I am affiliated with the Center for Software Systems Research (CSSR); I am also a faculty in the Computer Security Group.

   Current Projects [Funded by NSF, LLNL, AFOSR, Intel]

• Automated debugging [ICSE'06, ASE'07]
• Clone detection and similarity checking [ICSE'07, FSE'07]
• Firewall modeling, analysis, and optimization [S&P'06, Rule Optimization]
  
• Malicious code detection, analysis, and prevention [CCS'05, ASPLOS'06, ACSAC'06]
• Program analysis of numerical software [TACAS'04, TCS'05, ICSE'06]
• Web and database application security and reliability [ICSE'04, SAVCBS'04, POPL'06, PLDI'07]

   Selected Recent Publications [complete list | DBLP]

• Simplifying programs for better testing and analysis (FSE'08)
• Mining specifications using compositional rules (FSE'08)
• Concolic testing of web applications (ISSTA'08)
• Scalable detection of semantic clones (ICSE'08)
• Symbolic mining of temporal specifications (ICSE'08)
• Static detection of XSS vulnerabilities (ICSE'08)
• Context-aware statistical debugging (ASE'07)
• Context-based detection of clone-related bugs (FSE'07)
• Static detection of SQL injection vulnerabilities (PLDI'07)
• Deckard: a new clone detection tool (ICSE'07)
• Validity checking for automata over linear constraints (FSTTCS'06)
• Temporal search for hidden malware analysis (ASPLOS'06)
• Firewall rule validation (IEEE S&P'06)
• Hierarchical delta debugging (ICSE'06)
• Dimensional unit checking (ICSE'06)
• Runtime detection of SQL injection attacks (POPL'06)
• Analysis of polymorphic worm exploits (CCS'05)
• Subtype satisfiability over posets (ESOP'05)
• Static checking of database applications (ICSE'04, ACM SIGSOFT Distinguished Paper Award)
• Integer range constraints (TACAS'04, invited paper for a TCS special issue)
• More selected publications: POPL'02, POPL'00, PLDI'98, TACAS'98 (EAPLS Best Paper), ESOP'01, FoSSaCS'98

Professional Activities

   Current Activities

• Associate Editor: ACM TOSEM, 2008 -- present.
• PC Co-chair: SAS'09, Los Angeles, CA, August 9-11, 2009 (co-located with LICS'09).
• PC Member: ISSTA'09, July 2009.
• PC Member: ICSE'09, Vancouver, Canada, May 16-24, 2009.
• PC Member: WWW'09 (Security and Privacy Track), Madrid, Spain, April 20-24, 2009.
• PC Member: CC'09, York, UK, March 22-29, 2009.
• PC Member: NDSS'09, San Diego, CA, February 2009.
• PC Member: APLAS'08, Bangalore, India, December 9-11, 2008.
• PC Member: HASE'08, Nanjing, China, December 3-5, 2008.
• PC Member: SecureComm'08, Istanbul, Turkey, September 22-25, 2008.

• Lecturer: Oregon Summer School, Eugene, OR, July 18-27, 2007.
• PC Member (past):
           CATARS'08, TASE'08, ICSE'08, WWW'08, NDSS'08,
           ETX'07, APLAS'07, FSE'06, SAS'06, TACAS'06, RAMSS'05.
• Reviewer (journals): TOPLAS, TSE, TOSEM, JFP, I&C, HOSC.
• Reviewer (conferences): POPL, PLDI, ICSE, FSE, CAV, SAS, ICALP, RTA, INFOCOM, NDSS, ACSAC.
• NSF Panelist: 2005, 2006, 2008.
• AFOSR Proposal Reviewer: 2007