Zhiwei Lin

News

• 2026.08Started my PhD in Computer Science at NUS.
• 2025.07Joined Ant Group as a Security Engineer.
• 2025Two papers accepted by ASE 2025.
• 2025Presented CDN Cannon at Black Hat Asia 2025.
• 2024CDN Cannon accepted by USENIX Security 2024.

Publications Google Scholar ↗

1. arXiv'25

   TraceAegis: Securing LLM-Based Agents via Hierarchical and Behavioral Anomaly Detection

   Jiahao Liu, Bonan Ruan, Xianglin Yang, Zhiwei Lin, Yan Liu, Yang Wang, Tao Wei, Zhenkai Liang

   arXiv preprint, 2025 [PDF]

2. ASE'25

   A Large-Scale Evolvable Dataset for Model Context Protocol Ecosystem and Security Analysis

   Zhiwei Lin, Bonan Ruan, Jiahao Liu, Weibo Zhao

   40th IEEE/ACM International Conference on Automated Software Engineering (ASE), 2025, Tool Demonstration [PDF]

3. ASE'25

   Propagation-Based Vulnerability Impact Assessment for Software Supply Chains

   Bonan Ruan, Zhiwei Lin, Jiahao Liu, Chuqi Zhang, Kaihang Ji, Zhenkai Liang

   40th IEEE/ACM International Conference on Automated Software Engineering (ASE), 2025 [PDF]

4. USENIX Sec'24

   CDN Cannon: Exploiting CDN Back-to-Origin Strategies for Amplification Attacks

   Ziyu Lin, Zhiwei Lin, Ximeng Liu, Jianjun Chen, Run Guo, Cheng Chen, Shaodong Xiao

   33rd USENIX Security Symposium, 2024 [PDF]

   Also presented at Black Hat Asia 2025 [Talk]

5. arXiv'24

   Detecting and Measuring Security Implications of Entangled Domain Verification in CDN

   Ziyu Lin, Zhiwei Lin, Run Guo, Jianjun Chen, Mingming Zhang, Ximeng Liu, Tianhao Yang, Zhuoran Cao, Robert H. Deng

   arXiv preprint, 2024 [PDF]

Talks

• 2025Black Hat Asia — CDN Cannon: Exploiting CDN Back-to-Origin Strategies for Amplification Attacks [Link]

Honors

• 2026.091st Prize, Geely Global Automotive Cybersecurity Challenge