Yuhong Nan

Yuhong Nan is an Associate Professor in the School of Software Engineering at Sun Yat-sen University, China, specializing in software security and privacy leakage analysis for emerging platforms including IoT, mobile systems, and blockchain. Previously a Post-doctoral Research Associate at Purdue University under Prof. Dongyan Xu, she builds practical security tools to detect and mitigate vulnerabilities in real-world systems.

Dr. Nan earned her PhD from Fudan University in 2018 supervised by Prof. Min Yang. Her academic journey spans rigorous research in security engineering with emphasis on empirical validation and tool development for complex platform ecosystems.

Her research program focuses on uncovering systemic security flaws through innovative analysis techniques. Key contributions include vulnerability detection in smart contracts (e.g., state dependencies, reentrancy), privacy leakage analysis in mobile/IoT ecosystems, and countermeasures against deceptive UI patterns. She employs hybrid approaches combining static/dynamic analysis, machine learning, and large-scale empirical studies to develop deployable security solutions.

Analysis of her 15 most recent publications (2023-2025) reveals dominant themes in blockchain security (60%), particularly smart contract/DApp vulnerabilities, with significant work in mobile privacy (30%) and cross-platform threats (10%). Her methodology consistently leverages fine-grained static analysis, semantic enrichment, and feedback-driven fuzzing, yielding tools like SmartAxe and Midas that have influenced industry practices.

Dr. Nan actively mentors graduate researchers with 17 advisees including Tencent-employed graduates, and serves as a trusted reviewer for premier journals (IEEE TDSC, TMC, TOPS) and conference committees (ASIACCS, ICICS). Her leadership in security communities bridges academic research with practical defense mechanisms.

At Sun Yat-sen University, she directs a high-output research group that collaborates with industry partners to address evolving threats in decentralized systems, maintaining her position among top publishing authors in USENIX Security, CCS, and NDSS venues through rigorous technical innovation.