Source author record

Huafeng Zhang

Huafeng Zhang appears in the imported research catalog. Authorship, coauthor and topic links are available while profile ownership is still unclaimed.

ResearcherUnclaimed source record

Catalog footprint

What is connected

9works
9topics
4close collaborators

Actions

Connect this record

Log in to claim

Research graph

See the researcher in context

Open full explorer

Inspect adjacent papers, topics, institutions and collaborators without losing the researcher page.

Building this map preview

BZPEER is loading the nearby papers, people, topics and institutions for this page.

Published work

9 published item(s)

preprint2021arXiv

Industry Practice of Coverage-Guided Enterprise-Level DBMS Fuzzing

As an infrastructure for data persistence and analysis, Database Management Systems (DBMSs) are the cornerstones of modern enterprise software. To improve their correctness, the industry has been applying blackbox fuzzing for decades. Recently, the research community achieved impressive fuzzing gains using coverage guidance. However, due to the complexity and distributed nature of enterprise-level DBMSs, seldom are these researches applied to the industry. In this paper, we apply coverage-guided fuzzing to enterprise-level DBMSs from Huawei and Bloomberg LP. In our practice of testing GaussDB and Comdb2, we found major challenges in all three testing stages. The challenges are collecting precise coverage, optimizing fuzzing performance, and analyzing root causes. In search of a general method to overcome these challenges, we propose Ratel, a coverage-guided fuzzer for enterprise-level DBMSs. With its industry-oriented design, Ratel improves the feedback precision, enhances the robustness of input generation, and performs an on-line investigation on the root cause of bugs. As a result, Ratel outperformed other fuzzers in terms of coverage and bugs. Compared to industrial black box fuzzers SQLsmith and SQLancer, as well as coverage-guided academic fuzzer Squirrel, Ratel covered 38.38%, 106.14%, 583.05% more basic blocks than the best results of other three fuzzers in GaussDB, PostgreSQL, and Comdb2, respectively. More importantly, Ratel has discovered 32, 42, and 5 unknown bugs in GaussDB, Comdb2, and PostgreSQL.

preprint2021arXiv

IntelliGen: Automatic Driver Synthesis for FuzzTesting

Fuzzing is a technique widely used in vulnerability detection. The process usually involves writing effective fuzz driver programs, which, when done manually, can be extremely labor intensive. Previous attempts at automation leave much to be desired, in either degree of automation or quality of output. In this paper, we propose IntelliGen, a framework that constructs valid fuzz drivers automatically. First, IntelliGen determines a set of entry functions and evaluates their respective chance of exhibiting a vulnerability. Then, IntelliGen generates fuzz drivers for the entry functions through hierarchical parameter replacement and type inference. We implemented IntelliGen and evaluated its effectiveness on real-world programs selected from the Android Open-Source Project, Google's fuzzer-test-suite and industrial collaborators. IntelliGen covered on average 1.08X-2.03X more basic blocks and 1.36X-2.06X more paths over state-of-the-art fuzz driver synthesizers FUDGE and FuzzGen. IntelliGen performed on par with manually written drivers and found 10 more bugs.

preprint2020arXiv

Yangians and Baxter's relations

We study a category O of representations of the Yangian associated to an arbitrary finite-dimensional complex simple Lie algebra. We obtain asymptotic modules as analytic continuation of a family of finite-dimensional modules, the Kirillov--Reshetikhin modules. In the Grothendieck ring we establish the three-term Baxter's TQ relations for the asymptotic modules. We indicate that Hernandez--Jimbo's limit construction can also be applied, resulting in modules over anti-dominantly shifted Yangians.

preprint2016arXiv

Fundamental representations of quantum affine superalgebras and R-matrices

We study a certain family of finite-dimensional simple representations over quantum affine superalgebras associated to general linear Lie superalgebras, the so-called fundamental representations: the denominators of rational $R$-matrices between two fundamental representations are computed; a cyclicity (and so simplicity) condition on tensor products of fundamental representations is proved.

preprint2016arXiv

RTT realization of quantum affine superalgebras and tensor products

We use the RTT realization of the quantum affine superalgebra associated with the Lie superalgebra $\mathfrak{gl}(M,N)$ to study its finite-dimensional representations and their tensor products. In the case $\mathfrak{gl}(1,1)$, the cyclicity condition of tensor products of finite-dimensional simple modules is determined completely in terms of zeros and poles of rational functions. This in turn induces cyclicity of some particular tensor products of Kirillov-Reshetikhin modules related to $\mathfrak{gl}(M,N)$.

preprint2014arXiv

Representations of Quantum Affine Superalgebras

We study the quantum affine superalgebra $U_q(Lsl(M,N))$ and its finite-dimensional representations. We prove a triangular decomposition and establish a system of Poincaré-Birkhoff-Witt generators for this superalgebra, both in terms of Drinfel'd currents. We define the Weyl modules in the spirit of Chari-Pressley and prove that these Weyl modules are always finite-dimensional and non-zero. In consequence, we obtain a highest weight classification of finite-dimensional simple representations when $M \neq N$. Some concrete simple representations are constructed via evaluation morphisms.

preprint2013arXiv

Amplitude and phase control of gain without inversion in a four-level atomic system using loop-transitio

Amplitude and phase control of gain without inversion is investigated in a four level loop-structure atomic system. Two features are presented. One is that gain without inversion can be obtained through the amplitude control of the applied fields. The other is that gain without inversion show a phase-dependence on the relative phase between the fields applied on the two two-photon transitions. Gain and phase-dependence originate from interference induced by such a loop-transition structure.