计算机系统与软件安全研究组 GoSec @ CS.SJTU

GoSec@CS.SJTU is a computer security research team in the CS department, Shanghai Jiao Tong University. Our team works on various topics in system and software security, including trusted execution, binary analysis, secure compilation. We concern about the risks in emerging technologies and continue practicing a range of methodologies to benefit the security requirements in the real world.

Our current and past projects

  • System Security
    • RISC-V security system design
    • Intel SGX, TDX, AMD SEV
  • Binary Analysis
    • Kernel information leakage detection
    • Binary code similarity comparison [more]
  • IoT Security
    • SmartCfg exploitation [more]
    • Firmware fuzzing
    • WebAssembly security analysis
  • Secure Compiling
    • Compiling-on-the-Cloud
    • JavaScript obfuscation
  • NLP-based Security Analysis
    • Harvesting password on GitHub
    • NLP-EYE [more]
  • Android
    • Third-party libraries de-coupling [more]
    • Authentication & Privacy

Achievement & Award

  • 2020 GoSec毕业生和在校生参加A*0*E战队 DEF CON CTF总决赛世界冠军
  • 2020 上海交大“谷歌杯”学生创业计划大赛《蜚语代码安全增强平台》 唯一金奖
  • 2020 OPPO安全最佳合作伙伴奖
  • 2019 首届SGX应用创新大赛《面向SGX的程序自动化移植框架》 二等奖
  • 2019 GoSec毕业生和在校生参加A*0*E战队 DEF CON CTF总决赛全球第四名
  • 2018 上海市科技进步奖一等奖(第四完成人)
  • 2018 网鼎杯信息安全竞赛总成绩第四名 高校组亚军
  • 2017 GoSec毕业生和在校生参加A*0*E战队 DEF CON CTF总决赛全球第四名
  • 2017 上海市计算机学会信息安全最佳论文奖
  • 2015 CodeGate CTF总决赛 全球冠军

Upcoming Events

  • Usenix Security: 2022.02.01

Useful Links


Join Us

  • For anyone: Intern position is open! (Accommodation provided. 为外地实习生提供住宿)
  • For SJTUers: 上海交通大学创新实践网 (PRP,大创,暑期实习等),电院攀登计划)
  • Long-term recruitment plan: Postdoc (Ph.D.+), Research assistant (Master+), Research intern (Bachelor student, Bachelor+)
  • Send your CV to: gossip@sjtu.edu.cn