Researcher profile

Fengyuan Xu

Fengyuan Xu contributes to research discovery and scholarly infrastructure.

ResearcherAffiliation not importedOpen to collaborate

Trust snapshot

Quick read

Trust 17 - UnverifiedVerification L1Unclaimed author
4works
0followers
7topics
4close collaborators

Actions

Decide how to stay connected

Follow researcher0

Identity and collaboration

How to connect with this researcher

Claiming links this public author record to a researcher profile and unlocks direct collaboration workflows.

Log in to claim

Direct collaboration

Open a focused conversation when the fit is right

Claim this author entity first to unlock direct invitations.

Research graph

See the researcher in context

Open full explorer

Inspect adjacent work, topics, institutions and collaborators without jumping out to a separate graph page.

Building this graph slice

BZPEER is loading the nearby papers, people, topics and institutions for this page.

Published work

4 published item(s)

preprint2022arXiv

Automation Slicing and Testing for in-App Deep Learning Models

Intelligent Apps (iApps), equipped with in-App deep learning (DL) models, are emerging to offer stable DL inference services. However, App marketplaces have trouble auto testing iApps because the in-App model is black-box and couples with ordinary codes. In this work, we propose an automated tool, ASTM, which can enable large-scale testing of in-App models. ASTM takes as input an iApps, and the outputs can replace the in-App model as the test object. ASTM proposes two reconstruction techniques to translate the in-App model to a backpropagation-enabled version and reconstruct the IO processing code for DL inference. With the ASTM's help, we perform a large-scale study on the robustness of 100 unique commercial in-App models and find that 56\% of in-App models are vulnerable to robustness issues in our context. ASTM also detects physical attacks against three representative iApps that may cause economic losses and security issues.

preprint2021arXiv

A System for Efficiently Hunting for Cyber Threats in Computer Systems Using Threat Intelligence

Log-based cyber threat hunting has emerged as an important solution to counter sophisticated cyber attacks. However, existing approaches require non-trivial efforts of manual query construction and have overlooked the rich external knowledge about threat behaviors provided by open-source Cyber Threat Intelligence (OSCTI). To bridge the gap, we build ThreatRaptor, a system that facilitates cyber threat hunting in computer systems using OSCTI. Built upon mature system auditing frameworks, ThreatRaptor provides (1) an unsupervised, light-weight, and accurate NLP pipeline that extracts structured threat behaviors from unstructured OSCTI text, (2) a concise and expressive domain-specific query language, TBQL, to hunt for malicious system activities, (3) a query synthesis mechanism that automatically synthesizes a TBQL query from the extracted threat behaviors, and (4) an efficient query execution engine to search the big system audit logging data.

preprint2021arXiv

Enabling Efficient Cyber Threat Hunting With Cyber Threat Intelligence

Log-based cyber threat hunting has emerged as an important solution to counter sophisticated attacks. However, existing approaches require non-trivial efforts of manual query construction and have overlooked the rich external threat knowledge provided by open-source Cyber Threat Intelligence (OSCTI). To bridge the gap, we propose ThreatRaptor, a system that facilitates threat hunting in computer systems using OSCTI. Built upon system auditing frameworks, ThreatRaptor provides (1) an unsupervised, light-weight, and accurate NLP pipeline that extracts structured threat behaviors from unstructured OSCTI text, (2) a concise and expressive domain-specific query language, TBQL, to hunt for malicious system activities, (3) a query synthesis mechanism that automatically synthesizes a TBQL query for hunting, and (4) an efficient query execution engine to search the big audit logging data. Evaluations on a broad set of attack cases demonstrate the accuracy and efficiency of ThreatRaptor in practical threat hunting.

preprint2021arXiv

On developing piecewise rational mapping with fine regulation capability for WENO schemes

On the idea of mapped WENO-JS scheme, properties of mapping methods are analyzed, uncertainties in mapping development are investigated, and new rational mappings are proposed. Based on our former understandings, i.e. mapping at endpoints {0, 1} tending to identity mapping, an integrated Cm,n condition is summarized for function development. Uncertainties, i.e., whether the mapping at endpoints would make mapped scheme behave like WENO or ENO, whether piecewise implementation would entail numerical instability, and whether WENO3-JS could preserve the third-order at first-order critical points by mapping, are analyzed and clarified. A new piecewise rational mapping with sufficient regulation capability is developed afterwards, where the flatness of mapping around the linear weights and its endpoint convergence toward identity mapping can be coordinated explicitly and simultaneously. Hence, the increase of resolution and preservation of stability can be balanced. Especially, concrete mappings are determined for WENO3,5,7-JS. Numerical cases are tested for the new mapped WENO-JS, which regards numerical stability including that in long time computation, resolution and robustness. In purpose of comparison, some recent mappings such as IM by [App. Math. Comput. 232, 2014:453-468], RM by [J. Sci. Comput. 67, 2016:540-580] and AIM by [J. Comput. Phys. 381, 2019:162-188] are chosen; in addition, some recent WENO-Z type scheme are selected also. Proposed new schemes can preserve optimal orders at corresponding critical points, achieve numerical stability and indicate overall comparative advantages regarding accuracy, resolution and robustness.