About

I'm a research fellow at National University of Singapore (NUS), hosted by Prof Abhik Roychoudhury. Before that, I received my doctoral degree from Tsinghua University, advised by Prof Yu Jiang, and BS degree from Beijing University of Posts and Telecommunications (BUPT).

Research

My research is focused on automated program analysis and vulnerability detection for the Internet of Things (IoT), especially in the domain of network protocol security. My works have discovered over 90 critical zero-days in widely-used open-source projects, with 55 CVEs assigned.

Publications

  • [NDSS'24] DynPRE: Protocol Reverse Engineering via Dynamic Inference. [paper][slides]
    Zhengxiong Luo, Kai Liang, Yanyang Zhao, Feifan Wu, Junze Yu, Heyuan Shi, and Yu Jiang.
    Accepted in Network and Distributed System Security (NDSS) 2024.
  • [EMSOFT/TCAD'24] Parallel Fuzzing of IoT Messaging Protocols through Collaborative Packet Generation. [paper]
    Zhengxiong Luo, Junze Yu, Qingpeng Du, Yanyang Zhao, Feifan Wu, Heyuan Shi, Wanli Chang, and Yu Jiang.
    Accepted in International Conference on Embedded Software (EMSOFT) 2024, and published in IEEE Trans. Comput. Aided Des. Integr. Circuits Syst (TCAD).
  • [ISSTA'24] Logos: Log Guided Fuzzing for Protocol Implementations. [paper]
    Feifan Wu, Zhengxiong Luo#, Yanyang Zhao, Qingpeng Du, Junze Yu, Ruikang Peng, Heyuan Shi, and Yu Jiang.
    Accepted in International Symposium on Software Testing and Analysis (ISSTA) 2024.
  • [DAC'24] SPFuzz: Stateful Path based Parallel Fuzzing for Protocols in Autonomous Vehicles. [paper]
    Junze Yu, Zhengxiong Luo#, Fangshangyuan Xia, Yanyang Zhao, Heyuan Shi, and Yu Jiang.
    Accepted in Design Automation Conference (DAC) 2024.
  • [ISSRE'24] MDIplier: Protocol Format Recovery via Hierarchical Inference.
    Kai Liang*, Zhengxiong Luo*, Yanyang Zhao, Wenlong Zhang, Ronghua Shi, Yu Jiang, Heyuan Shi and Chao Hu.
    Accepted in International Symposium on Software Reliability Engineering (ISSRE) 2024.
  • [USENIX Security'23] Bleem: Packet Sequence Oriented Fuzzing for Protocol Implementations. [paper] [slides]
    Zhengxiong Luo, Junze Yu, Feilong Zuo, Jianzhong Liu, Yu Jiang, Ting Chen, Abhik Roychoudhury, and Jiaguang Sun.
    Accepted in USENIX Security Symposium 2023.
  • [EMSOFT/TCAD'22] Vulnerability Detection of ICS Protocols Via Cross-State Fuzzing. [paper]
    Feilong Zuo*, Zhengxiong Luo*, Junze Yu, Ting Chen, Zichen Xu, Aiguo Cui, and Yu Jiang.
    Accepted in International Conference on Embedded Software (EMSOFT) 2022 (Best Paper Nominee), and published in IEEE Trans. Comput. Aided Des. Integr. Circuits Syst (TCAD).
  • [DAC'21] PAVFuzz: State-Sensitive Fuzz Testing of Protocols in Autonomous Vehicles. [paper] [slides]
    Feilong Zuo, Zhengxiong Luo#, Junze Yu, and Yu Jiang.
    Accepted in Design Automation Conference (DAC) 2021.
  • [DAC'20] ICS Protocol Fuzzing: Coverage Guided Packet Crack and Generation. [paper] [slides]
    Zhengxiong Luo, Feilong Zuo, Yuheng Shen, Xun Jiao, Wanli Chang, and Yu Jiang.
    Accepted in Design Automation Conference (DAC) 2020.
  • [EMSOFT/TECS'19] Polar: Function Code Aware Fuzz Testing of ICS Protocol. [paper] [slides] [code]
    Zhengxiong Luo, Feilong Zuo, Yu Jiang, Jian Gao, Xun Jiao, and Jiaguang Sun.
    Accepted in International Conference on Embedded Software (EMSOFT) 2019 (Best Paper Nominee), and published in ACM Trans. Embed. Comput. Syst. (TECS).

Selected Awards

Academic Services

  • Program Committee for NDSS Artifact Evaluation, 2025
  • Reviewer for ACM Transactions on Software Engineering and Methodology (TOSEM), 2024, 2025
  • Reviewer for ACM Computing Surveys, 2023, 2024
  • Reviewer for IEEE Transactions on Dependable and Secure Computing (TDSC), 2023