BZPEERReading, trust and collaboration for research
Menu

Discover

GraphFollow connections around a paper, topic or saved view.

Workspaces

HomePick up where your research flow left off.InboxHandle requests, replies and notifications from one place.CollectionsCurate reading lists, evidence sets and shareable dossiers.ResearchSee your private provenance graph, trail and imports.CollaborationMove from discovery into focused discussion rooms.PublishDraft, preview and publish full-text research articles.

Network

ExpertsFind specialists worth following or asking for help.CommunitiesJoin research circles organized around shared work.PartnersSee external organizations active around the same topics.

Opportunities

ListingsBrowse roles, calls and collaborations with clearer fit signals.

Account

Log inReturn to your reading and collaboration workspace.Create accountStart saving work, following people and joining teams.
Log inCreate account

Researcher profile

Penghui Li

Penghui Li contributes to research discovery and scholarly infrastructure.

ResearcherAffiliation not importedOpen to collaborate
math.RTmath.AGmath.ATArtificial IntelligenceCryptography and Securitymath.CVSoftware Engineering

Trust snapshot

Quick read

Trust 17 - UnverifiedVerification L1Unclaimed author
4works
0followers
7topics
4close collaborators

Actions

Decide how to stay connected

Follow researcher0

Identity and collaboration

How to connect with this researcher

Claiming links this public author record to a researcher profile and unlocks direct collaboration workflows.

Log in to claim

Direct collaboration

Open a focused conversation when the fit is right

Claim this author entity first to unlock direct invitations.

Research graph

See the researcher in context

Open full explorer

Inspect adjacent work, topics, institutions and collaborators without jumping out to a separate graph page.

Building this graph slice

BZPEER is loading the nearby papers, people, topics and institutions for this page.

Published work

4 published item(s)

preprint2026arXiv

Detecting Privilege Escalation in Polyglot Microservices via Agentic Program Analysis

Microservices are widely adopted in modern cloud systems due to their scalability and fault tolerance. However, microservice architectures introduce significant complexity in privilege and permission control, creating risks of privilege escalation where attackers can gain unauthorized access to resources or operations. Detecting such vulnerabilities is challenging due to complex cross-service interactions, polyglot codebases, and diverse privileged operations and permission checks. We present Neo, an agentic program analysis framework that combines large language models (LLMs) with classic program analysis to address these challenges. Neo leverages an LLM-based agent that dynamically generates analysis plans, adapts code search strategies, and validates semantics. We develop code search primitives that enable Neo to perform scalable and flexible code exploration across services and languages. We evaluated Neo on 25 open-source microservice applications spanning 7 programming languages and 6.2 million lines of code. Neo uncovered 24 zero-day privilege escalation vulnerabilities and achieved 81.0% precision and 85.0% recall on a ground-truth dataset. Compared to existing program analysis and agentic solutions, Neo demonstrated significant improvements in both detection accuracy and scalability. We further showcased Neo's extensibility by applying it to other application domains and vulnerability types, uncovering 18 additional zero-day vulnerabilities.

0 citations0 reviewsNo code linkedOpen access
preprint2022arXiv

Eisenstein series via factorization homology of Hecke categories

Motivated by spectral gluing patterns in the Betti Langlands program, we show that for any reductive group $G$, a parabolic subgroup $P$, and a topological surface $M$, the (enhanced) spectral Eisenstein series category of $M$ is the factorization homology over $M$ of the $\mathrm{E}_2$-Hecke category $\mathrm{H}_{G, P} = \mathrm{IndCoh}(\mathrm{LS}_{G, P}(D^2, S^1))$, where $\mathrm{LS}_{G, P}(D^2, S^1)$ denotes the moduli stack of $G$-local systems on a disk together with a $P$-reduction on the boundary circle. More generally, for any pair of stacks $\mathcal{Y}\to \mathcal{Z}$ satisfying some mild conditions and any map between topological spaces $N\to M$, we define $(\mathcal{Y}, \mathcal{Z})^{N, M} = \mathcal{Y}^N \times_{\mathcal{Z}^N} \mathcal{Z}^M$ to be the space of maps from $M$ to $\mathcal{Z}$ along with a lift to $\mathcal{Y}$ of its restriction to $N$. Using the pair of pants construction, we define an $\mathrm{E}_n$-category $\mathrm{H}_n(\mathcal{Y}, \mathcal{Z}) = \mathrm{IndCoh}_0\left(\left((\mathcal{Y}, \mathcal{Z})^{S^{n-1}, D^n}\right)^\wedge_{\mathcal{Y}}\right)$ and compute its factorization homology on any $d$-dimensional manifold $M$ with $d\leq n$, \[ \int_M \mathrm{H}_n(\mathcal{Y}, \mathcal{Z}) \simeq \mathrm{IndCoh}_0\left(\left((\mathcal{Y}, \mathcal{Z})^{\partial (M\times D^{n-d}), M}\right)^\wedge_{\mathcal{Y}^M}\right), \] where $\mathrm{IndCoh}_0$ is the sheaf theory introduced by Arinkin--Gaitsgory and Beraldo. Our result naturally extends previous known computations of Ben-Zvi--Francis--Nadler and Beraldo.

0 citations0 reviewsNo code linkedOpen access
preprint2020arXiv

The Jordan--Chevalley decomposition for $G$-bundles on elliptic curves

We study the moduli stack of degree $0$ semistable $G$-bundles on an irreducible curve $E$ of arithmetic genus $1$, where $G$ is a connected reductive group. Our main result describes a partition of this stack indexed by a certain family of connected reductive subgroups $H$ of $G$ (the $E$-pseudo-Levi subgroups), where each stratum is computed in terms of $H$-bundles together with the action of the relative Weyl group. We show that this result is equivalent to a Jordan--Chevalley theorem for such bundles equipped with a framing at a fixed basepoint. In the case where $E$ has a single cusp (respectively, node), this gives a new proof of the Jordan--Chevalley theorem for the Lie algebra $\mathfrak{g}$ (respectively, group $G$). We also provide a Tannakian description of these moduli stacks and use it to show that if $E$ is an ordinary elliptic curve, the collection of framed unipotent bundles on $E$ is equivariantly isomorphic to the unipotent cone in $G$. Finally, we classify the $E$-pseudo-Levi subgroups using the Borel--de Siebenthal algorithm and compute some explicit examples.

0 citations0 reviewsNo code linkedOpen access
preprint2020arXiv

Uniformization of semistable bundles on elliptic curves

Let $G$ be a connected reductive complex algebraic group, and $E$ a complex elliptic curve. Let $G_E$ denote the connected component of the trivial bundle in the stack of semistable $G$-bundles on $E$. We introduce a complex analytic uniformization of $G_E$ by adjoint quotients of reductive subgroups of the loop group of $G$. This can be viewed as a nonabelian version of the classical complex analytic uniformization $ E \simeq \mathbb{C}^*/q^{\mathbb{Z}}$. We similarly construct a complex analytic uniformization of $G$ itself via the exponential map, providing a nonabelian version of the standard isomorphism $\mathbb{C}^* \simeq \mathbb{C}/\mathbb{Z}$, and a complex analytic uniformization of $G_E$ generalizing the standard presentation $E = \mathbb{C}/(\mathbb{Z} \oplus \mathbb{Z} τ)$. Finally, we apply these results to the study of sheaves with nilpotent singular support. As an application to Betti geometric Langlands conjecture in genus 1, we define a functor from $Sh_\mathcal{N}(G_E)$ (the semistable part of the automorphic category) to ${IndCoh}_{\check{\mathcal{N}}}({Locsys}_{\check G} (E))$ (the spectral category).

0 citations0 reviewsNo code linkedOpen access