👨🏻‍🎓 About Me

I am a final-year Ph.D. candidate at the College of Computer Science and Artificial Intelligence, Fudan University, under the supervision of Prof. Min Yang and Prof. Lei Zhang.

My research is primarily focused on software security, specifically addressing vulnerabilities in open-source software. My work spans the complete vulnerability lifecycle: discovery, analysis, exploitation, and automated fixing.

To push the boundaries in this field, I leverage multidisciplinary techniques such as advanced program analysis and fuzzing. Currently, I am also actively exploring the integration of Large Language Models (LLMs) to significantly enhance these security methodologies.

📄 Publications

1. Algernon: A Flag-Guided Hybrid Fuzzer for Unlocking Hidden Program Paths. [Paper]
   Peng Deng, Lei Zhang, Jingqi Long, Wenzheng Hong, Zhemin Yang, Yuan Zhang, Donglai Zhu, Min Yang.
   In Proceedings of the 40th IEEE/ACM International Conference on Automated Software Engineering (ASE), Seoul, South Korea, November 16-20, 2025.
2. LLMPort: Cross-file Patch Porting via Task Decomposition and Self-correction. [Paper]
   Bofei Chen, Lei Zhang, Peng Deng, Nan Wang, Haoyu Xu, Mingda Guo, Yuan Zhang, Min Yang.
   In Proceedings of the 40th IEEE/ACM International Conference on Automated Software Engineering (ASE), Seoul, South Korea, November 16-20, 2025.
3. ChainFuzz: Exploiting Upstream Vulnerabilities in Open-Source Supply Chains. [Paper]
   Peng Deng, Lei Zhang, Yuchuan Meng, Zhemin Yang, Yuan Zhang, Min Yang.
   In Proceedings of the 34th USENIX Security Symposium (USENIX Security), Seattle, WA, USA, August 13-15, 2025.
4. Towards Automatic Detection and Exploitation of Java Web Application Vulnerabilities via Concolic Execution guided by Cross-thread Object Manipulation. [Paper]
   Xinyou Huang, Lei Zhang, Yongheng Liu, Peng Deng, Yinzhi Cao, Yuan Zhang, Min Yang.
   In Proceedings of the 34th USENIX Security Symposium (USENIX Security), Seattle, WA, USA, August 13-15, 2025.
5. Confidential Computing on NVIDIA Hopper GPUs: A Performance Benchmark Study. [Paper]
   Jianwei Zhu, Hang Yin, Peng Deng, Aline Almeida, Shunfan Zhou.
   Arxiv.
6. NestFuzz: Enhancing Fuzzing with Comprehensive Understanding of Input Processing Logic. [Paper]
   Peng Deng, Zhemin Yang, Lei Zhang, Guangliang Yang, Wenzheng Hong, Yuan Zhang, Min Yang.
   In Proceedings of the 30th ACM Conference on Computer and Communications Security (CCS), Copenhagen, Denmark, November 26-30, 2023.

🏅 Honors and Awards

• 2025: National Scholarship of China
• 2025: USENIX Security Student Grant

🎓 Academic Services

• External Reviewer
  • USENIX ATC 2025
  • CCS 2024
  • USENIX Security 2023