Android Application Analysis Professors and Supervisors

Shing-Chi Cheungمشاهده پروفایل

استاد

Max Planck Institute for Security and PrivacyGermany

Shing-Chi Cheung is a Professor of Computer Science and Engineering at the Hong Kong University of Science and Technology (HKUST), School of Engineering. He founded the CASTLE research group and co-founded the International Workshop on Automation of Software Testing (AST) in 2006. His leadership includes serving as General Chair of FSE 2014 and chairing multiple APSEC conferences. His research focuses on software quality enhancement through program analysis, testing, debugging, and AI techniques, targeting Android apps, open-source software, deep learning systems, smart contracts, and spreadsheets. Current projects include metamorphic testing frameworks, binary analysis tools, and vulnerability detection systems for emerging technologies. His publication portfolio demonstrates consistent contributions to software engineering since 2016, with recent work emphasizing AI-integrated testing methodologies, smart contract security, and deep learning system reliability. Key trends show increasing focus on cross-language analysis, data visualization quality, and compiler-level verification for modern software stacks. Distinguished Member of the ACM Fellow of the British Computer Society Editorial board member: Science of Computer Programming (SCP), Journal of Computer Science and Technology (JCST) Former editorial board member: IEEE Transactions on Software Engineering (2006-2009), Information and Software Technology (2012-2015) Four patents in China and the United States Cheung actively mentors through the CASTLE research group and serves on program committees for major conferences including ICSE, ESEC/FSE, and ISSTA. His work bridges academic research with practical applications through industry collaborations and tool development. He has contributed to numerous workshops and symposia as steering committee member and program chair.

پروفایل رسمی دانشگاه

Minxue Panمشاهده پروفایل

استاد

Max Planck Institute for Security and PrivacyGermany

Minxue Pan is a Professor and PhD supervisor at the Software Institute, State Key Laboratory for Novel Software Technology, Nanjing University, China. His research focuses on the dependability of complex software systems, with expertise spanning software modeling and verification, software analysis and testing, cyber-physical systems, mobile computing, and intelligent software engineering. Ph.D. in Computer Science and Technology from Nanjing University (2014), supervised by Prof. Xuandong Li B.Sc. from Nanjing University Studied at UC Berkeley's Department of Electrical Engineering and Computer Sciences (2009-2010) under Prof. Edward A. Lee Professor Pan's research interests center on improving software dependability through innovative approaches to modeling, analysis, and testing. His work spans traditional software systems, mobile applications (particularly Android), cyber-physical systems, and the application of AI techniques to software engineering problems. He has made significant contributions to GUI testing, vulnerability detection, and deep learning applications in software engineering. His recent publications (2024-2025) demonstrate a strong focus on applying advanced machine learning techniques to software testing and security challenges. Key trends include leveraging large language models for test migration, enhancing fault localization with graph learning and contrastive learning, developing specialized frameworks for Android security analysis, and improving test efficacy through GUI and functional equivalence. His work consistently targets real-world industrial settings and addresses practical challenges in mobile and complex software systems. ISSTA 2020 Distinguished Paper Award ICSE 2025 Best Artifact Award Professor Pan actively advises graduate students and has developed several notable tools including Q-testing (reinforcement-learning based Android testing), ISDChecker (model checking for interrupt-driven systems), PREFEST (preference-wise testing for Android), Sketchoid (GUI code search), and PI-REC (hand-drawn draft conversion). His research is supported by extensive publication records in top-tier software engineering venues including ASE, ICSE, FSE, ISSTA, and TOSEM. He teaches undergraduate courses in Advanced Programming with C++, Software System Design, and Software Construction, as well as graduate courses in Advanced Software Design. His laboratory work focuses on developing practical solutions for real-world software dependability challenges through the State Key Laboratory for Novel Software Technology.

پروفایل رسمی دانشگاه

Zhiyun Qianمشاهده پروفایل

استاد

Max Planck Institute for Security and PrivacyGermany

Zhiyun Qian is the Everett and Imogene Ross Professor in the Department of Computer Science and Engineering at the University of California Riverside. His research bridges academic security research with practical hacking techniques, focusing on vulnerability discovery and analysis across operating systems, networks, and mobile platforms. His primary research interests include: System security: Automated cyber attacks/defenses, kernel vulnerability discovery, and security tool development Network security: TCP side channels, multi-path TCP flaws, and firewall evasion techniques AI/ML applications for security: LLM-integrated static analysis and reinforcement-learning-based fuzzing His work has led to critical discoveries including unfixable TCP side channel vulnerabilities (CVE-2016-5696) recognized with GeekPwn awards. His research methodology combines program analysis, reverse engineering, fuzzing, model checking, and machine learning to build practical security systems. Notable scientific awards include: GeekPwn 2016 most creative idea award Geekpwn 2017 winner award Applied Networking Research Prize Professor Qian actively mentors students in security competitions including Pwn2Own and GeekPwn. He serves on prestigious program committees including IEEE Security and Privacy (Oakland), ACM CCS, and USENIX Security. His teaching portfolio includes graduate courses CS 254 (Network Security) and CS 255 (Computer Security), along with undergraduate courses CS 153 (Operating Systems) and CS 165 (Computer Security). He leads the SecLab research group at UCR (GitHub: seclab-ucr, 3824★) developing security tools for kernel and Android ecosystems. Current projects focus on LLM-enhanced static analysis, precise vulnerability detection, and automated patch testing.

پروفایل رسمی دانشگاه

Andreas Zellerمشاهده پروفایل

استاد

Max Planck Institute for Security and PrivacyGermany

Andreas Zeller serves as Professor for Software Engineering at Saarland University and faculty at the CISPA Helmholtz Center for Information Security in Saarbrücken, Germany. His dual appointments position him at the intersection of academic research and practical cybersecurity applications, contributing significantly to both institutions' research profiles. Professor Zeller's research spans multiple dimensions of software quality assurance, with particular expertise in automated debugging techniques, mining software repositories for insights, specification mining, and security testing methodologies. His work consistently bridges theoretical foundations with practical implementation, resulting in tools and frameworks adopted widely in both research and industry contexts. Analysis of his recent publications reveals an evolutionary trajectory from foundational debugging work toward increasingly sophisticated grammar-based testing approaches, with notable integration of machine learning techniques in recent years. His research demonstrates consistent focus on improving software reliability through automated analysis, with growing emphasis on security applications including XML injection testing, GNSS module security, and binary file format vulnerabilities. Recipient of two ERC Advanced Grants (including the S3 project) ACM Fellow ACM SIGSOFT Outstanding Research Award Professor Zeller has successfully secured substantial research funding through competitive mechanisms including ERC grants, enabling his team to pursue ambitious research agendas. His leadership extends to mentoring through his roles as doctoral symposium co-chair and active participation in new faculty development initiatives. He maintains strong engagement with the research community through numerous program committee memberships and conference organization roles. At CISPA Helmholtz Center for Information Security, Zeller contributes to the center's mission through research focused on software security testing and analysis. His work on grammar-based testing and fuzzing directly addresses critical security challenges in modern software systems, with practical applications for improving software resilience against attacks.

پروفایل رسمی دانشگاه

Austin Mordahlمشاهده پروفایل

استادیار

Max Planck Institute for Security and PrivacyGermany

Austin Mordahl is an Assistant Professor in the Department of Computer Science at the University of Illinois Chicago. His research focuses on improving the usability and reliability of software quality assurance tools, particularly static analyses and fuzz testing. Dr. Mordahl actively seeks students interested in cutting-edge research in software engineering at UIC. Dr. Mordahl's research interests span multiple areas of software engineering with a particular emphasis on: Static Analysis and Taint Analysis for software security Automated Testing techniques including fuzz testing Improving the usability and reliability of software quality assurance tools Configurable static analysis tools and their behavior Applying machine learning to triage and configure static analysis tools Lifting static analysis to work on software product lines Improving evaluations of fuzz testing tools His recent publications demonstrate a strong focus on addressing challenges in configurable static analysis tools, with particular attention to nondeterministic behavior, configuration spaces, and automatic testing and debugging approaches. Mordahl's work bridges theoretical foundations with practical applications, aiming to make software quality assurance tools more accessible and effective for developers. Dr. Mordahl has received several prestigious awards for his work: NSF Graduate Research Fellowship Awardee (2020) Eugene McDermott Graduate Research Fellowship Awardee (2020) ICSE 2019 Student Research Competition Winner Dr. Mordahl is actively involved in mentoring and seeks students interested in software engineering research. He has served on numerous program committees for top software engineering conferences including ICSE, ASE, ISSTA, and PLDI. His service to the academic community extends to artifact evaluation committees, demonstrating his commitment to research reproducibility and rigor.

پروفایل رسمی دانشگاه

Lu Xiaoمشاهده پروفایل

استادیار

Max Planck Institute for Security and PrivacyGermany

Lu Xiao is an Assistant Professor in the School of Systems and Enterprises at Stevens Institute of Technology, where she conducts research in software engineering with a focus on software architecture, software economics, cost estimation, and software ecosystems. Dr. Xiao completed her PhD in Computer Science at Drexel University in 2016 under the supervision of Dr. Yuanfang Cai. Her doctoral research focused on the relationship between software architecture and quality attributes. Her research spans several key areas in software engineering with emphasis on empirical methods. She investigates how software architecture influences quality attributes, studies software economics and cost estimation techniques, and examines the dynamics of software ecosystems. Her work frequently analyzes real-world software projects, particularly those in the Apache Software Foundation, providing insights into software maintenance patterns, testing practices, and performance issues. Dr. Xiao has developed practical tools like SAIN for software architecture infrastructure and eFish'nSea for performance education. Analysis of Dr. Xiao's publication record reveals consistent contributions to empirical software engineering, particularly in software architecture analysis, testing methodologies, and performance issues. Her research often centers on Apache projects, demonstrating methodological rigor in studying real-world development practices. She has made significant advances in understanding test refactoring, mocking frameworks, and the identification of performance bottlenecks through linguistic analysis of issue reports. Dr. Xiao has actively contributed to the software engineering research community through service on program committees for major conferences including ASE, ICSE, ESEC/FSE, and ICSA. Her work on program committees spans multiple tracks including Research Papers, Student Research Competition, and specialized workshops. As an academic advisor, Dr. Xiao guides graduate students in research on software architecture analysis, testing practices, and performance optimization. Her research methodology combines empirical analysis of large software repositories with tool development and validation, ensuring practical relevance of her findings. Dr. Xiao leads research efforts focused on understanding the relationship between software architecture and quality attributes. Her current work on bots in pull requests represents cutting-edge research into automation in open source development processes, continuing her tradition of investigating real-world software engineering phenomena.

پروفایل رسمی دانشگاه

Maxime Lamotheمشاهده پروفایل

استادیار

Max Planck Institute for Security and PrivacyGermany

Maxime Lamothe is an assistant professor at Polytechnique Montreal specializing in empirical software engineering and mining software repositories. His research focuses on software APIs, build systems, and the intersection of AI and software engineering. Previously, he was a postdoctoral researcher at the University of Waterloo's Software REBELs Lab under Prof. Shane McIntosh. Dr. Lamothe's educational background includes: Ph.D. in Software Engineering from Concordia University (2020) M.Eng from Concordia University (2017) B.Eng from McGill University (2013) His research interests center around empirical studies of software engineering practices, with particular focus on API design and evolution, software build systems, and performance analysis. Dr. Lamothe investigates how developers interact with APIs, how build systems operate in practice, and how AI techniques can enhance software engineering processes while maintaining human oversight of critical decisions. Dr. Lamothe's publication record shows a consistent focus on empirical approaches to understanding software engineering practices. His work frequently examines API usage patterns, code review processes, and continuous integration systems. A notable trend is his growing interest in applying AI techniques to software engineering challenges while maintaining empirical validation of proposed solutions through rigorous case studies and longitudinal analyses. Dr. Lamothe actively serves the academic community as a reviewer for top journals including Transactions on Software Engineering (TSE), Empirical Software Engineering (EMSE), and Journal of Systems and Software (JSS). He has served on program committees for major conferences including ASE, ICSE, ESEC/FSE, MSR, and SANER across multiple years, with particular involvement in the NIER Track, Research Papers track, and Tool Demonstration tracks. Currently seeking Masters and Ph.D. students, Dr. Lamothe leads research at the intersection of traditional software engineering practices and emerging AI techniques. His work combines rigorous empirical methods with practical applications to solve real challenges in software development, with implications for improving API design, enhancing code review processes, optimizing build systems, and developing trustworthy AI-assisted software engineering tools.

پروفایل رسمی دانشگاه

Sallam Abualhaijaمشاهده پروفایل

پژوهشگر

Max Planck Institute for Security and PrivacyGermany

Dr. Sallam Abualhaija serves as a Researcher at the Interdisciplinary Centre for Security, Reliability, and Trust (SnT) at the University of Luxembourg, where she applies cutting-edge AI technologies to software engineering challenges with emphasis on requirements engineering and regulatory compliance. Her work bridges academic research and industry applications through extensive collaboration with corporate partners. She earned her PhD in Computer Science from Hamburg University of Technology (Germany) in 2016, establishing her expertise in computational approaches to software requirements. Her research centers on leveraging natural language processing and large language models for regulatory compliance, particularly GDPR implementation in software systems. Key focus areas include automated compliance checking of privacy policies, data processing agreements, and financial regulations through techniques like question-answering systems and ambiguity resolution. This work directly addresses the critical need for trustworthy AI systems that adhere to legal frameworks while improving software development efficiency. Analysis of her recent publications reveals a strong trend toward practical tool development (e.g., CompAi) and multi-solution studies for GDPR compliance across mobile applications, financial services, and general software systems. Her research consistently integrates industry collaboration, with growing emphasis on LLM-driven approaches since 2023. Dr. Abualhaija actively contributes to the academic community through program committee roles at ASE, ICSE, and RE conferences, and as co-organizer of workshops including MO2RE (Multi-Disciplinary Requirements Engineering) and FinanSE. She has chaired tutorials on replication in NLP for requirements engineering and AI applications in regulatory compliance, demonstrating commitment to knowledge transfer and community building. As a core member of SnT, she contributes to Luxembourg's leading research hub for security, reliability, and trust in ICT systems. Her work aligns with SnT's mission through projects that develop verifiable, privacy-preserving technologies with real-world regulatory impact, particularly in European data protection contexts.

پروفایل رسمی دانشگاه

Yutian Tangمشاهده پروفایل

استادیار

Max Planck Institute for Security and PrivacyGermany

Dr. Yutian Tang serves as an Assistant Professor (UK Lecturer) and Principal Investigator at the School of Computing Science, University of Glasgow, where he supervises PhD students and leads research in AI-driven software engineering. His academic journey includes a PhD from The Hong Kong Polytechnic University's Department of Computing. His research spans AI+SE integration , particularly focusing on Large Language Models for program analysis, software testing, and Android security. Key areas include: LLM-assisted vulnerability detection and repair Empirical studies of real-world software systems Privacy protection mechanisms Configuration compatibility in mobile applications Smart contract security optimization His publication portfolio shows a clear trajectory toward AI-augmented software engineering , with recent work demonstrating how LLMs can enhance taint analysis, binary code similarity detection, and test generation. This evolution reflects the field's broader shift toward AI integration while maintaining rigorous empirical validation. Award highlights include: Best Industry Paper Award at ISSRE'18 Elevation to IEEE Senior Member (2024) Three Android OS defects confirmed by Google Security Team As an active researcher and community contributor, Tang serves on 40+ program committees including PLDI, ICSE, and FSE. His work receives funding from National Natural Science Foundation of China, Shanghai Science Commission, OpenAI, and Google. Current projects focus on automated bug localization and LLM-based testing frameworks, with recent grants from OpenAI Cybersecurity and Google Cloud programs. He leads research groups investigating Android security and AI-assisted program analysis, collaborating with institutions like Lund University.

پروفایل رسمی دانشگاه

Lian Liمشاهده پروفایل

استاد

Max Planck Institute for Security and PrivacyGermany

Lian Li is a Professor in the Institute of Computing Technology at the Chinese Academy of Sciences, where he leads the program analysis research group. He holds a PhD from the University of New South Wales, Australia, and a Bachelor's degree from Tsinghua University in Engineering Physics. His research focuses on developing innovative program analysis techniques and tools to enhance software reliability and security. His educational background includes a PhD in Computer Science from the University of New South Wales (2003-2007) with a thesis on "ScratchPad Management for Static Data Aggregates" under Professor Jinling Xue, and a Bachelor's degree in Engineering Physics from Tsinghua University (1993-1998). Lian Li's research primarily centers on program analysis techniques, particularly static analysis methods for software security and reliability. His group developed Wukong, a static analysis and detection system capable of identifying deep security vulnerabilities across functions, components, and complex dependencies in C/C++, Java, and Android applications. This tool has discovered thousands of errors in popular open-source software including Google Chromium, Bash, sed, and Hadoop, with hundreds confirmed by developers and over 50 CVEs assigned. His publication record shows a strong focus on program analysis, particularly context-sensitive pointer analysis, taint analysis, and vulnerability detection. His recent work (2021-2024) demonstrates continued innovation in context-free language reachability, efficient IFDS algorithms, and specialized analysis for generics and authorization vulnerabilities. His research spans cybersecurity, programming languages, and software engineering domains, with emphasis on practical applications for real-world software systems. ASE 2019 Distinguished Paper Award CCS 2022 Best Paper Honorable Mention Lian Li has guided numerous PhD and Master's students in computer system architecture and software theory. His research group maintains active collaborations across various software analysis domains, with funding supporting their work on tools like Wukong. They have developed significant intellectual property including multiple patents related to program analysis techniques. The program analysis research group he leads focuses on developing practical tools for software reliability and security. Their work bridges theoretical program analysis with real-world applications, particularly through the Wukong analysis system which has been successfully applied to major open-source projects.

پروفایل رسمی دانشگاه

Mengjun Xieمشاهده پروفایل

استاد

The University of Tennessee at ChattanoogaUnited States

Mengjun Xie serves as Professor and Head of the Department of Computer Science & Engineering at the University of Tennessee at Chattanooga (UTC), holding dual distinguished titles as Guerry Professor and UC Foundation Professor. He directs the UTC InfoSec Center, a hub for cybersecurity research and education, and teaches advanced courses including Algorithm Analysis, Network Security, and Software Engineering. His leadership spans departmental administration, curriculum development, and strategic initiatives in computer science education. Education: PhD in Computer Science, College of William and Mary, 2010 (Supporting Areas: Cybersecurity) Dr. Xie's research spans Cybersecurity, Cloud/Edge Computing, Mobile Computing, Social Network Analysis, Big Data Analytics, and Computer Education. His work focuses on practical security solutions for IoT systems through knowledge graph applications, remote live forensics for Android devices, and blockchain-based IoT platforms. He pioneers educational tools for hands-on cybersecurity training, emphasizing privacy technologies and cloud-based lab development. His publications demonstrate consistent innovation at the intersection of theoretical research and real-world implementation. Recent publications (2022-2024) reveal a strong trend toward knowledge graph applications in cybersecurity, particularly for IoT forensics and log anomaly detection. His research bridges cloud security challenges with educational outreach, evidenced by developments like ForensiQ for IoT forensics and hands-on lab materials for privacy education. This dual focus on cutting-edge security research and pedagogical innovation defines his scholarly impact. Dr. Xie actively mentors students through thesis and dissertation supervision and serves as Faculty Advisor for UTC MocSec Cyber Defense since 2018. His service portfolio includes: Faculty Member, UTC Quantum Initiative (2022-Present) Committee Member, UTC Faculty Senate (2020-2024) Project Supervisor, UTC Employee COVID-19 Self-Check Application (2020-2021) Committee Chair, UTC CAE-CD Re-designation Committee (2022-2023) Committee Member, CECS Outreach and Research Committee (2023-2025) As Director of the InfoSec Center , he leads a multidisciplinary team advancing cybersecurity research, education, and community engagement through the CAE-CD program, industry partnerships, and national collaborations including NSA-sponsored initiatives.

پروفایل رسمی دانشگاه