Congratulate on Group's accepted HASP 2021 paper

Congratulate to 2 papers of our Group's accepted by HASP 2021(Workshop on Hardware and Architectural Support for Security and Privacy (HASP) 2021)： A Novel Memory Management for RISC-V Enclaves Haonan Li, Weijie Huang, Mingde Ren, Hongyi Lu, Zhenyu Ning*, Heming Cui, and Fengwei Zhang To Appear In Proceedings of the Hardware and Architectural Support for Security […]

热烈祝贺金一博同学荣获迎新羽毛球比赛男子单打冠军

热烈祝贺：课题组新晋RA/健身达人金一博同学，在2021年南方科技大学迎新羽毛球比赛中夺得男子单打冠军，撒花~~鼓掌~~ 身体是革(ke)命(yan)的本钱，希望大家都能坚持锻炼身体，保持最好的状态去工作和生活。

The 3rd COMPASS Awards Ceremony

祝贺宁老师获批国自然青年基金项目

热烈祝贺课题组研究助理教授：宁振宇老师，获批国家自然科学基金青年科学基金项目！ 🎉🎉🎉🎉🎉🎉🎉🎉🎉🎉🎉🎉🎉🎉🎉🎉🎉🎉🎉🎉🎉🎉🎉🎉🎉🎉🎉🎉🎉🎉

COMPASS实验室收到鸿蒙系统HarmonyOS致谢

点击查看原文链接：HarmonyOS安全团队衷心感谢如下团队和个人对HarmonyOS系统安全性做出的贡献。 致谢   更新时间: 2021-08-06 10:01 HarmonyOS非常重视系统的安全问题，通过和安全社区及业界同仁共同合作，不断提升和完善系统的安全性。如果您或您的团队发现HarmonyOS系统中存在安全或隐私的漏洞，请参考HarmonyOS安全奖励计划提交报告。 HarmonyOS安全团队衷心感谢如下团队和个人对HarmonyOS系统安全性做出的贡献。 2021

Dr. Shoumeng Yan of Ant Group gave an academic lecture for SUSTechers

Dr. Shoumeng Yan of Ant Group was invited to give an academic lecture for SUSTechers, the topic of the lecture was开源TEE技术，让机密计算易如反掌.     

期末聚会

又是一年聚会时，猜猜他们都说了啥？  

转：​蚂蚁集团访问南科大计算机系

点击查看原文：​蚂蚁集团访问南科大计算机系 2021年6月1日，蚂蚁集团来南方科技大学计算机系访问交流。此行由蚂蚁集团研究员兼基础设施侧负责人何征宇研究员带队，成员包括技术专家、投资专家、合作经理等21人。南科大工学院和计算机系高度重视，工学院院长徐政和院士，系主任姚新教授亲自参加。此外参加此次交流的还有技术转移中心廖骁老师和杨健老师，计算机系副系主任王琦老师，信息安全方向张殷乾、张锋巍、宁振宇老师，软件工程方向张煜群、刘烨庞、陈馨慧老师，以及COMPASS课题组成员等。 图1：工学院院长徐政和院士和计算机系主任姚新教授 张锋巍老师作为主持人，进行简短的开场后，进入领导致辞环节，徐院长介绍了我校的办学历程、工学院的师资力量、人才培养模式以及校企合作的具体模式。计算机系主任姚新老师笑称此次交流的时间选的很好，六一儿童节，恰逢计算机系成立刚满5年，教师团队年富力强、朝气蓬勃、童心未泯，能更好的做好基础学科。两位领导都表示有信心将来可以愉快合作。何征宇研究员表示，希望可以通过此行讨论合作模式，并探索合作的新途径。技术转移中心主任助理廖骁博士详细介绍了我校的招生模式、生源构成、师资力量以及产学研制度等。计算机系副系主任王琦老师详细介绍了计算机系自2016年成立5年来的成长历程、不断增长的国际化师资队伍以及本科生和研究生的培养模式。张锋巍老师向蚂蚁团队介绍了与蚂蚁集团相关研究方向的几位老师。随后宁振宇老师、张殷乾老师、刘烨庞老师和张煜群老师也分别介绍了各自的研究方向。 图2：蚂蚁集团何征宇研究员 图3：主持人张锋巍老师 图4：技术转移中心主任助理廖骁博士 图5：计算机系副系主任王琦老师     图6：计算机系4位老师讲解研究方向并进行双方交流 图7：蚂蚁集团技术专家与我系老师交流 最后，蚂蚁集团几位技术专家就具体的技术问题与我系老师进行了深入交流，蚂蚁集团的投资专家和高校合作经理也就合作方式也进行了深入探讨。 交流会在轻松愉快，又不乏严谨细致的气氛中结束。何征宇研究员对南科大的人才培养，校企合作对给予了充分肯定，并表示希望开展进一步的合作。

The 2nd COMPASS Awards Ceremony

转：华为采用南科大计算机系本科生的成果封堵手机漏洞

点击查看原文：华为采用南科大计算机系本科生的成果封堵手机漏洞 5月27日，第15届进攻技术研讨会（15th Workshop On Offensive Technologies）于线上举行，南方科技大学五位大四本科生在该会议上进行关于USBType-C协议漏洞的报告。 图：学生做线上报告 进攻技术研讨会自2007年起，与计算机领域顶级学术会议USENIXSecurity与IEEES&P联合举办，由USENIX与IEEE协会赞助。作为信息安全领域进攻方向的研讨会，每年都会吸引大量的研究者与工业界人士参加。其主要目标为为工业界、学术界与独立黑客间建立沟通与协作的桥梁。以更好地促进信息安全领域的进步。 在南方科技大学的计算机本科课程 CS315 《计算机安全》上，五位大四本科生（卢弘毅，吴烨昌，李树青，林游，张超祖）在计算机系张锋巍任课老师的指导下展开对USBType-C协议安全的分析，进行针对该协议的漏洞发掘，并该成果在国际进攻技术研讨会上进行报告。 图：张锋巍老师和五位学生 该项目主要借助USBType-C的接口的新功能，视频信号传输来增强之前的一个被称作BadUSB的攻击。在之前BadUSB的攻击中，其最大的缺陷是只能进行键盘的模拟来注入命令执行，但是缺乏一个反馈通道（Feedback Channel），即攻击者是无法知道目前客户端的状态的，但在USB 3.1 中，引入了一个被称作 DisplayPortOverUSB-C的特性，允许视频流在USB协议中传输。小组在注意到这一点之后，就开始着手进行该项目。 项目小组最后制作了一个BadUSB-C的原型，并且把它制成了一个类似于充电宝的形状。一旦被受害者接入他们的手机，BadUSB-C可以窃取大量的用户信息，成功实现了攻击。 这种类型的漏洞在共享充电宝兴起的当下实际上是十分危险的，他们在完成论文的同时，就联系了华为应急响应中心（PSIRT）来进行负责任的披露，并且该漏洞已获批漏洞编号CVE-2021-22325。在发现该漏洞的同时，该小组成员也向华为反馈了相关漏洞的信息并积极协助修复，目前该漏洞已被华为修复，同时，该漏洞也评审通过了华为终端安全漏洞奖励计划。

Professor Zongming Guo of Peking University gave a frontier lecture for SUSTechers

Professor Zongming Guo of Peking University was invited to give a frontier lecture for SUSTechers, the topic of the lecture was QoE驱动的虚拟现实视频传输关键技术.

Prof. Haibo Chen of Shanghai Jiao Tong University gave a frontier lecture online for SUSTechers

Prof. Haibo Chen of Shanghai Jiao Tong University was invited by Dr. Fengwei Zhang to give a frontier lecture online for SUSTechers, the topic of the lecture was 软硬件协同的操作系统安全研究.

Professor Jiwu Jing of University of Chinese Academy of Sciences gave a frontier lecture for SUSTechers

Professor Jiwu Jing of University of Chinese Academy of Sciences was invited to give a frontier lecture for SUSTechers, the topic of the lecture was 信息安全新技术探讨.

Welcome Tao Wei of Ant Finantial Services to our School to give a frontier lecture for SUSTechers

On April 23, Prof. Fengwei Zhang invited Tao Wei, vice president of ant financial services, to our school to give a frontier lecture. Together with Feng Xue, senior algorithm expert of ant financial services, and Lin Huang, IoT security expert of ant financial services, Prof.Fengwei Zhang and members of the research group, Prof. Yinqian Zhang […]

Professor Chao Zhang of Tsinghua University gave an academic lecture for SUSTechers

Professor Chao Zhang of Tsinghua University was invited to give an academic lecture for SUSTechers, the topic of the lecture was 软件漏洞挖掘方法探索.  

Dr. Fengwei Zhang was invited to serve on the PC of the USENIX Security 2022

Dr. Fengwei Zhang was invited to serve on the PC of the USENIX Security 2022. USENIX Secuirty is one of the TOP 4 Conferences of Computer Security (CCF A). Conference Website:  https://www.usenix.org/conference/usenixsecurity22

Professor Yungang Bao of the University of Chinese Academy of Sciences gave a frontier lecture for SUSTechers

On March 12, Prof. Fengwei Zhang invited Prof. Yungang Bao of the University of Chinese Academy of Sciences to give a frontier lecture. Prof. Bao was engaged in the cutting-edge research of computer architecture and open source chips. Before the report, members of Fengwei Zhang 's research group exchanged scientific research projects related to system […]

Welcome Xianghui Zhang(former CTO of Microsoft in the Greater China Region)to visit COMPASS Group

On March 9, Xianghui Zhang, who is the former chief technology executive of Microsoft in the Greater China Region, visited the COMPASS research group and held cordial talks with the members of the research group. From college entrance examination to scientific research, from research direction to life stage selection, laughter came out from time to […]

Dr. Fengwei Zhang was invited to serve on the PC of IEEE S&P ("Oakland") 2022

  Dr. Fengwei Zhang was invited to serve on the PC of IEEE S&P ("Oakland") 2022. IEEE S&P ("Oakland") 2022 is one of the TOP 4 Conferences of Computer Security (CCF A). Conference Website: https://www.ieee-security.org/TC/SP2022/cfpapers.html

Congratulate on Hongyi's accepted WOOT 2021 paper

Congratulate on Hongyi's accepted WOOT 2021(The 15th Workshop On Offensive Technologies) paper. This paper is based on a course project from our computer security class taught by Prof. Zhang last semester. All the coauthors are undergraduate students in the class. Title: BadUSB-C: Revisiting BadUSB with Type-C Authors: Hongyi Lu, Shuqing Li, You Lin, Chaozu Zhang, […]

Congratulate Dr. Lei Zhou for his accepted IEEE TDSC (CCF A) journal papper

Congratulate Dr. Lei Zhou for his accepted IEEE TDSC (CCF A) journal papper entitled "A Coprocessor-based Introspection Framework via Intel Management Engine". A good news kick-off the year of Ox. Let's rock, COMPASSer.

Welcome Dr. Lei Zhou to join COMPASS lab as a posdoctoral fellow

Welcome Dr. Lei Zhou to join COMPASS lab as a posdoctoral fellow. Dr. Lei Zhou was a visiting Ph.D. student at COMPASS lab from August 2017 to December 2020, and he received his Ph.D. Degree in Computer Science from South China Unvieristy in November 2020.  

COMPASS Awards Ceremony

Nice breeze, nice mountain climbing

  At the end of the semester, members of COMPASS research group and college students climbed the mountain and had dinner together.      

Professor Qiong Huang of South China Agriculture University gave a frontier lecture for SUSTechers

Professor Qiong Huang of South China Agriculture University was invited to give a frontier lecture for SUSTechers, the topic of the lecture was Asymmetric Searchable Encryption Secure against Offline Keyword Guessing Attacks.                                    

Professor Wei Zhao of Shenzhen Institute of Advanced Technology gave a frontier lecture for SUSTechers

Professor Wei Zhao of Shenzhen Institute of Advanced Technology was invited to give a frontier lecture for SUSTechers, the topic of the lecture was Future of Computing.

感谢课题组硕士熊辉同学及家人送来的赣南脐橙

感谢熊辉及家人给COMPASS实验室邮寄来赣南信丰的脐橙，话说这脐橙个大饱满，汁水浓郁，皮薄肉厚，果香怡人，吃上一个幸福感满满。  

Professor Zhao Yao of Beijing Jiaotong University gave a frontier lecture for SUSTechers

Professor Zhao Yao of Beijing Jiaotong University was invited to give a frontier lecture for SUSTechers, the topic of the lecture was 弱监督与交互式图像分割.     Professor Xin Yao, Professor Jianguo Zhang, Associate Professor Shiqi Yu, and Assistant Professor Feng Zheng of Department of Computer Science and Engineering at SUSTech came to have an academic exchange with Professor […]

Academician Onur Mutlu gave a frontier lecture online for SUSTechers

Professor Onur Multu who is an elected member of the Academy of Europe, an ACM Fellow,and an IEEE Fellow, was invited by Dr. Fengwei Zhang to give a frontier lecture online for SUSTechers, the topic of the lecture was Intelligent Architectures for Intelligent Machines. The students took an active part in the lecture given by the Academician Onur […]

Professor Hai Jin of HuaZhong University of Science and Technology gave a frontier lecture for SUSTechers

Professor Hai Jin who is the Cheung Kung Scholars Chair Professor of Computer Science and Engineering at HuaZhong University of Science and Technology(HUST), was invited by Dr. Fengwei Zhang to give a frontier lecture for SUSTechers, the topic of the lecture was Towards the Practical Blockchain System: Challenges and Practices.     Bonus scene: Professor Xin […]

Dr. Fengwei Zhang was invited to serve on the PC of the USENIX Security 2021

Dr. Fengwei Zhang was invited to serve on the PC of the USENIX Security 2021. USENIX Secuirty is one of the TOP 4 Conferences of Computer Security (CCF A). Conference Website: https://www.usenix.org/conference/usenixsecurity21

The final of the Network Security Competition held smoothly with Dr. Fengwei Zhang as one of the judges

11月14日，由深圳市南山区人力资源局主办的“匠心筑梦、智汇南山”深圳市南山区网络安全技术与应用技能竞赛决赛于广东新安职业技术学院顺利举行。 本次大赛由深圳市企鹅网络科技有限公司承办，在承办多次市级、区级技能大赛经验支持下，经过为期一个月的报名宣传，截至10月16日收到腾讯众创空间、Q学友、今日头条、新浪、网易等自媒号线上渠道及奇安信、比思克、携创天成、优比格科技等线下渠道的共计120多名选手的报名，并于10月18日和10月24日完成初赛赛前辅导及竞赛初赛，最终44名选手脱颖而出成功晋级决赛。 当日决赛通过上机实操和答辩两个环节展开竞赛。上机实操采用奇安信防火墙在真实环境展开设防竞赛，44位选手在90分钟按照要求逐一完成设置并提交答案，最终由来自深德技校和深圳市第二职业技术学校资深网络安全专家批卷评分。 选手答辩则由来自深圳腾讯、南科大、奇安信、宝山技校6名评委专家分成三组对选手展开逐一答辩，最终得出选手综合评分。 在经过为时4个小时的竞赛角逐及评委的评分汇总，最终将有10名选手获得本次大赛的奖项。本次竞赛设一等奖1名，奖励人民币30000元；二等奖2名，奖励人民币20000元/名；三等奖3名，奖励人民币10000元/名；优秀奖4名，奖励人民币5000元/名。 深圳腾讯应用运维安全总监胡珀表示，目前企业需要大量的具有全栈网络安全人才及专项网络领域突出的人才，大赛可以挖掘大量的各方面的人才，并鼓励学校多培养在安全领域的企业人才。 南科大的张锋巍教授有着丰富的安全领域的研发经验，他表示在培养领域人才的过程中，应当鼓励他们多参与企业实战来丰富知识和经验，也认为将来在基于ARM芯片的硬件安全防护的研发会有重大突破。 此外来自广东新安职校的参赛选手毛立冰老师表示，本次大赛学校给予高度重视，带领学校多名老师及学生参加此次大赛，不仅让师生得到锻炼的机会，更让大家接触到企业是如何做网络安全防范的举措。 本次大赛在南山区人力资源局的指导下顺利完成竞赛，取得了优异的成绩，让大量的学校及企业参与进来，不仅有利于发现网络安全人才，更有利于引起社会和企业的对网络安全的重视，为安全强国做出贡献。（何艳霞） 原文链接：https://appdetail.netwin.cn/web/2020/11/71021b8abe2c8f128226a82a3b70bfce.html

Dr. Xuewen Chen of Accenture Technology Labs gave a frontier lecture at SUSTech

Dr. Xuewen Chen who is currently Managing Director at Accenture Technology Labs(Shenzhen) and Accenture Shenzhen innovation Hub was invited by Dr. Fengwei Zhang to give a frontier lecture at SUSTech, the topic of the lecture was AI-driven smart vehicles.    

Dr. Jiannong Cao of Hong Kong Polytechnic University gave a frontier lecture online for SUSTechers

Dr. Jiannong Cao who is the Otto Poon Charitable Foundation Professor in Data Science and the Chair Professor of Distributed and Mobile Computing in the Department of Computing at The Hong Kong Polytechnic University, was invited by Dr. Fengwei Zhang to give a frontier lecture online for SUSTechers, the topic of the lecture was Edge Computing: Current […]

The CNCC 2020 "Chip endogenous security and trusted computing" technology forum was successfully held under the co chair of Dr. Fengwei Zhang

新基建时代，科技自立自强迫切需要我们构建自主可控的基础软硬件系统。然而，自主可控的芯片和计算机系统就一定安全吗？如何保证CPU等核心芯片的安全性？如何从CPU等底层硬件、操作系统来保证核心软硬件运行的可信性？为了对芯片内生安全和可信计算技术进行深入研讨，2020年10月24日下午，CNCC“芯片内生安全与可信计算”技术论坛在北京新世纪日航饭店2层山东厅成功举办。 “芯片内生安全与可信计算“技术论坛由CCF互联网专委会主任、国防科技大学苏金树教授担任主席，南方科技大学张锋巍副教授担任共同主席。本次论坛邀请了四位讲者，包括中国工程院沈昌祥院士、南方科技大学张殷乾教授、上海交通大学夏虞斌副教授，美国德州农工大学蔡嘉哲助理教授。在Panel环节，还邀请到了中国科学院计算技术研究所研究员级高级工程师、中国计算机学会体系结构专委常务委员会主任武成岗，以及蚂蚁金服机密计算研发总监闫守孟等来自国内顶级科研结构和企业界的知名专家，他们共同带来了一场顶尖的学术盛宴。 沈昌祥院士首先带来了《创新发展安全可信集成电路产业夯实国家网络安全基础》的报告。报告主要分为三部分：（1）有科学网络安全观构建主动免疫安全可信保障体系；（2）打造主动免疫可信计算3.0新型产业空间；（3）内置可信架构集成电路产品的开发和应用。 张殷乾教授在线上做了《CrossLine: Breaking ``Security-by-Crash'' based Memory Isolation in AMD SEV》的报告。他介绍了我们从AMD SEV的漏洞中能吸取什么样的经验教训。主要包括以下六点：教训1，Protect registers (e.g., encrypting VMCB) ；教训2，Use authenticated encryption (e.g., MAC)；教训3，Protect page tables outside the TEE ；教训4，Protect I/O (e.g., IOMMU)；教训5，Avoid hypervisor-managed ASID (e.g., hardware validation)； 教训6，Prevent side channels。 夏虞斌副教授做了《蓬莱Enclave：RISC-V平台的可信执行环境》的报告。他首先介绍了TEE在工业界迅速发展的构成中，面临的四个挑战：（1）兼容性-与安全性的权衡；（2）安全性-TEE的安全保证；（3）高效性-安全与性能的权衡；（4）可控性-对TEE的定义与构建。接着，他介绍了蓬莱/Penglai:基于RISC-V平台的TEE，并且蓬莱的目标就是要解决提出的四个挑战。 蔡嘉哲助理教授在线上做了《Intel SGX: Toward a Production-Ready Platform for Confidential Computing》的报告。他首先介绍了英特尔防护扩展技术（Intel SGX）,接着介绍了Graphene: A LibOS for Unmodified Linux […]

Dr. Zhengyu He of ANT FINANCIAL SERVICES GROUP gave a frontier lecture at SUSTech

Dr. Zhengyu He who is the leader of Trust-Native technology department from ANT FINANCIAL SERVICES GROUP was invited by Dr. Fengwei Zhang to give a frontier lecture at SUSTech, the topic of the lecture was Operating Systems and Me.      

Dr. Fengwei Zhang held a forum of "Chip endogenous security and trusted computing" at CNCC Technology Forum as co chairman

              CNCC2020将于10月22-24日在北京新世纪日航饭店（主会场）举行，在沈阳、杭州、济南、重庆、厦门等地设置了3个分会场和3个专场，且开通了线上直播。本届会议主题为：信息技术助力社会治理（Information Technology Empowering Social Governance）。        CNCC是宏观论述技术趋势的大会，本届大会设14个特邀报告、 3场大会论坛、百余场技术论坛、 CCF CTO峰会、CCF颁奖典礼、优秀大学生颁奖等多场活动。        在CNCC期间，10月24日下午13:30-15:30，国防科技大学教授，博士生导师，CCF杰出会员、互联网专委会主任，苏金树老师作为论坛主席，南方科技大学计算机科学与工程系副教授，研究员，张锋巍老师作为共同主席，将邀请这一领域学术界的顶尖学者一起，探讨芯片内生安全与下一代可信执行环境(TEE)。        想要了解本次论坛的更多内容，可以点击链接。        CNCC官网链接

New Semester Party

Dr. Fengwei Zhang was invited to give a speech at the INCLUSION · Fintech Conference

INCLUSION · Fintech Conference, which is the world's top financial technology event, was hold from Sep 24 to 26, at 2020 Expo Area, Shanghai, China. The theme of the conference is  "ENVISION TOMORROW". Dr. Fengwei Zhang was invited to give a speech entitled  "Breaking the Trusted Execution Environment on ARM" at the "IoT Security: Make Security […]

Congratulation to Zhenyu Ning for his conditionally accepted ESORICS 2020 paper

[ESORICS 2020] One paper titled "HART: Hardware-assisted Kernel Module Tracing on Arm"  is accepted by European Symposium on Research in Computer Security  (ESORICS) 2020, Zhenyu Ning is now a Research Assistant Professor in our group. Congratulatios to Zhenyu.

Welcome Dr. Zhenyu Ning to join COMPASS lab as a Research Assistant Professor！

Zhenyu Ning: He received his Ph.D. degree in computer science from the Department of Computer Science and Engineering in Wayne State University, USA in April 2020. He will keep on researching on the area of system security after joining COMPASS Lab.

Congratulations: Lei Zhou's paper was selected as a Ruuner-up Best Paper Award in IEEE/IFIP DSN 2020 (3 out of 291 submissions)

Lei Zhou's article, entitled "KShot: Live Kernel Patching with SMM and SGX", was selected as a Ruuner-up Best Paper Award in DSN 2020 (The 50th IEEE/IFIP International Conference on Dependable Systems and Networks). There are only 3 candidates out of 291 submissions. Congratulations to Lei Zhou. Best Paper Award

Welcome Dr. Jingquan Ge to join COMPASS lab as a Postdoc！

Jingquan Ge: He obtained a doctor's degree in Cyber Security, State Key Laboratory of Information Security, Institute of Information Engineering, Chinese Academy of Sciences in January 2020.

Congratulations on Lei Zhou's paper received by "DSN 2020"

  [DSN 2020] One paper titled "KShot: Live Kernel Patching with SMM and SGX" is accepted by DSN 2020, the acceptance rate is only 16.5% this year, Congratulations, Lei Zhou.

New year party

Lecture of Pro. Su Jinshu from National University of Defense Technology

Lecture: Deep Learning and Analysis of Software Code for Fun and Profit

Lecture: Old Cliché or New Challenge: To Initialize a Shared Key Between Two Devices