Portrait of Zhiwei Lin

PhD Candidate

Zhiwei Lin

Computer Science
National University of Singapore

I am a PhD candidate in Computer Science at the National University of Singapore, advised by Prof. Chengpeng Wang. My research spans AI for Security, Network Security, and Program Analysis, with a focus on vulnerability discovery, software supply chain security, and CDN security. I am also a core member of the CTF team 0x401.

News

  1. Started my PhD in Computer Science at NUS.
  2. Joined Ant Group as a Security Engineer.
  3. Two papers accepted by ASE 2025.
  4. Presented CDN Cannon at Black Hat Asia.
  5. CDN Cannon accepted by USENIX Security.

Publications

arXiv 2025Preprint

TraceAegis: Securing LLM-Based Agents via Hierarchical and Behavioral Anomaly Detection

Jiahao Liu, Bonan Ruan, Xianglin Yang, Zhiwei Lin, Yan Liu, Yang Wang, Tao Wei, Zhenkai Liang

arXiv preprint. Paper

ASE 2025Tool Demonstration

A Large-Scale Evolvable Dataset for Model Context Protocol Ecosystem and Security Analysis

Zhiwei Lin, Bonan Ruan, Jiahao Liu, Weibo Zhao

40th IEEE/ACM International Conference on Automated Software Engineering. Paper

ASE 2025Research Paper

Propagation-Based Vulnerability Impact Assessment for Software Supply Chains

Bonan Ruan, Zhiwei Lin, Jiahao Liu, Chuqi Zhang, Kaihang Ji, Zhenkai Liang

40th IEEE/ACM International Conference on Automated Software Engineering. Paper

USENIX Security 2024Research Paper

CDN Cannon: Exploiting CDN Back-to-Origin Strategies for Amplification Attacks

Ziyu Lin, Zhiwei Lin, Ximeng Liu, Jianjun Chen, Run Guo, Cheng Chen, Shaodong Xiao

33rd USENIX Security Symposium. Paper

arXiv 2024Preprint

Detecting and Measuring Security Implications of Entangled Domain Verification in CDN

Ziyu Lin, Zhiwei Lin, Run Guo, Jianjun Chen, Mingming Zhang, Ximeng Liu, Tianhao Yang, Zhuoran Cao, Robert H. Deng

arXiv preprint. Paper

Talks

CDN Cannon: Exploiting CDN Back-to-Origin Strategies for Amplification Attacks
Black Hat Asia, Talk

Experience

  1. Security EngineerAnt Group
  2. Research AssistantCURIOSITY Lab, National University of Singapore
  3. Security Engineering InternAnt Group
  4. Research InternCURIOSITY Lab, National University of Singapore
  5. Security Research InternQI-ANXIN Technology
  6. Research InternNISL, Tsinghua University

Education

  1. PhD in Computer ScienceNational University of Singapore
  2. Master of ComputingNational University of Singapore
  3. Bachelor of EngineeringSichuan University, Wuyuzhang Honors College