Lyuye Zhang is a final-year PhD candidate. He completed his undergraduate studies at Harbin Engineering University, China in 2016, earning a Bachelor’s degree. In 2018, he furthered his academic pursuits by obtaining a Master of Engineering degree from Nanyang Technological University, Singapore. Currently, he is engaged in a doctoral program at the School of Computer and Science Engineering in Nanyang Technological University, where he is under the esteemed guidance of Professor Yang Liu.

Research Interests

My primary research interests revolve around the domains of Software Security and Maintenance, encompassing various aspects such as Open Source Security, Software Supply Chain Security, Open Source Governance, and Software Evolution Analysis.

News

• May 2024: My short paper “Vulnerability Root Cause Function Locating For Java Vulnerabilities” was accepted by ICSE 2024 Student Competition Track.
• Dec 2023: Our paper “Empirical Analysis of Vulnerabilities Life Cycle in Golang Ecosystem” was accepted by ICSE 2024.
• August 2023: Our paper “Software Composition Analysis for Vulnerability Detection: An Empirical Study on Java Projects” was accepted by FSE2023.
• July 2023: Our paper “Mitigating Persistence of Open-Source Vulnerabilities in Maven Ecosystem” was accepted by ASE2023.
• February 2023: Our paper “Compatible Remediation on Vulnerabilities from Third-Party Libraries for Java Projects” received the ACM SIGSOFT Distinguished Paper Award at ICSE2023!
• December 2022: Our paper “Compatible Remediation on Vulnerabilities from Third-Party Libraries for Java Projects” was accepted by ICSE2023.
• December 2022: Our paper “OSSFP: Precise and Scalable C/C++ Third-Party Library Detection using Fingerprinting Functions” was accepted by ICSE2023.
• October 2022: Our paper “Has My Release Disobeyed Semantic Versioning? Static Detection Based on Semantic Differencing” received the ACM SIGSOFT Distinguished Paper Award at ASE2022.
• July 2022: Our paper “Has My Release Disobeyed Semantic Versioning? Static Detection Based on Semantic Differencing for Java” was accepted by ASE2022!

Services

• APSEC 2024 PC.
• ACSAC 2024 PC.
• Internetware 2024 PC.
• MSR2024 Junior PC.
• CCS2023 AEC.