Lian LiView profile
Professor
Lian Li is a Professor in the Institute of Computing Technology at the Chinese Academy of Sciences, where he leads the program analysis research group. He holds a PhD from the University of New South Wales, Australia, and a Bachelor's degree from Tsinghua University in Engineering Physics. His research focuses on developing innovative program analysis techniques and tools to enhance software reliability and security. His educational background includes a PhD in Computer Science from the University of New South Wales (2003-2007) with a thesis on "ScratchPad Management for Static Data Aggregates" under Professor Jinling Xue, and a Bachelor's degree in Engineering Physics from Tsinghua University (1993-1998). Lian Li's research primarily centers on program analysis techniques, particularly static analysis methods for software security and reliability. His group developed Wukong, a static analysis and detection system capable of identifying deep security vulnerabilities across functions, components, and complex dependencies in C/C++, Java, and Android applications. This tool has discovered thousands of errors in popular open-source software including Google Chromium, Bash, sed, and Hadoop, with hundreds confirmed by developers and over 50 CVEs assigned. His publication record shows a strong focus on program analysis, particularly context-sensitive pointer analysis, taint analysis, and vulnerability detection. His recent work (2021-2024) demonstrates continued innovation in context-free language reachability, efficient IFDS algorithms, and specialized analysis for generics and authorization vulnerabilities. His research spans cybersecurity, programming languages, and software engineering domains, with emphasis on practical applications for real-world software systems. ASE 2019 Distinguished Paper Award CCS 2022 Best Paper Honorable Mention Lian Li has guided numerous PhD and Master's students in computer system architecture and software theory. His research group maintains active collaborations across various software analysis domains, with funding supporting their work on tools like Wukong. They have developed significant intellectual property including multiple patents related to program analysis techniques. The program analysis research group he leads focuses on developing practical tools for software reliability and security. Their work bridges theoretical program analysis with real-world applications, particularly through the Wukong analysis system which has been successfully applied to major open-source projects.

