Heqing Huang, Research Staff @ IBM T.J. Watson Research Center, New York

Bio & Research
    I am a Research Staff Member in security & privacy at IBM Thomas J. Watson Research Center. I earned my Ph.D in the Department of Computer Science and Engineering (CSE) at the Pennsylvania State University in Feb., 2016. I was honored and very fortunate to work with my advisors Dr. Sencun Zhu and Dr. Peng Liu. I was also fortunate to have Dr.  Tom La Porta (Director, School of Electrical Engineering and Computer Science, Penn State) and Dr. David Miller as my Ph.D committee members. 

    My current research interests include mobile and IoT security, malware detection, 
    system vulnerability analysis. I am currently working on the DARPA transparent computing project for APT detection. 

    Past research focus: Android repackaging detection (the ViewDroid Project, Source Code), Enterprise network security analysis (MulVAL Attack GraphSource Code).

    Email: heqing.state AT gmail.com

    Past Industrial Experience
    • Malware research intern, FireEye Lab, 2015 - 2016 (built a scalable platform for APT detection based on code analysis)
    • Security research intern, R&D at Palo Alto Networks, WildFire Team, 2015 (with full-time return offer)
    • System security research intern on SEAndroid, Samsung Research America, Knox Android Team, 2014

    Selected Conference Publications
    • NEW!!  (pdfbibtex)  "Android Malware Development on Public Malware Scanning Platforms: A Large-scale Data-driven Study." Heqing Huang, Cong Zheng, Junyuan Zeng, Wu Zhou, Sencun Zhu, Peng Liu, Suresh Chari, Ce Zhang,   Proceedings of  2016 IEEE Big Data (accepted as long paper with four acceptances: 79/423=18.7%) (a FRESH Android malware dataset released the result website) 
    • NEW!! (pdfbibtex) "Learning from Big Malwares." Linhai Song,  Heqing  Huang, Wu Zhou, Wenfei Wu and Yiying Zhang, Proceedings of the 7th ACM SIGOPS Asia-Pacific Workshop on Systems (APSys). 2016.
    • NEW!! (pdfbibtex) "Semantics-based Repackaging Detection for Mobile Apps." Quanlong Guan, H.  HuangWenqi Luo, and Sencun Zhu,  Proceedings  of the International Symposium on Engineering Secure Software and Systems, 2016. 
    • NEW!! (pdfbibtex) "From Physical to Cyber: Escalating Protection for Personalized Auto Insurance." Le Guan., Xu, J., Wang, S., Xing, X., Lin, L., H. Huang, Peng Liu, Wenke Lee, Proceedings of the 14th ACM Conference on Embedded Networked Sensor Systems (SenSys),  2016. (Design flaws have been reported to a leading auto insurance company)
    • (pdfbibtex, codedemo)  "From System Service Freezing to System Server Shutdown in Android: All You Need Is a Loop in an Application." Heqing  Huang, Sencun Zhu, Kai Chen, and Peng Liu,  Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security (CCS), 2015. (Acceptance ratio: 128/646 = 19.8%) (Automatically identified design flaws in ActivityManager and WindowManager that confirmed by Google security team)
    • (pdfbibtex)  "Towards Discovering and Understanding Unexpected Hazards in Tailoring Antivirus Software for Android." Heqing Huang, Kai Chen, Chuanggang Ren, Peng Liu, Sencun Zhu, and Dinghao Wu,   Proceedings of the 10th ACM Symposium on Information, Computer and Communications Security (AsiaCCS), 2015. (Acceptance ratio: 48/269 = 17.8%). Relevant findings have been reported to most of the AV vendors from 16 countries (e.g., Lookout, Sophos, Symantec, Dr.Web and etc.).
    • (pdfbibtex) System released  "Finding Unknown Malice in 10 Seconds: Mass Vetting for New Threats at the Google-Play Scale."  Kai Chen, Peng Wang, Yeonjoon Lee, Xiaofeng Wang, Nan Zhang, Heqing Huang, Wei Zou, and Peng Liu,  Proceedings of the 24th USENIX Security Symposium (Security), 2015. (Acceptance ratio: 67/426 = 15.7%) 
    • (pdfbibtex, code"ViewDroid: Towards Obfuscation-Resilient Mobile Application Repackaging Detection."  Fangfang Zhang, Heqing Huang, Sencun Zhu, Dinghao Wu, and Peng Liu,  Proceedings of the ACM Conference on Security and Privacy in Wireless and Mobile Networks (WiSec), 2014.  (Accepted as full paper; acceptance ratio: 14/96 = 14.5%) 
    •  (pdfbibtex) "A Framework for Evaluating Mobile App Repackaging Detection Algorithms." Heqing Huang, Sencun Zhu, Peng Liu, and Dinghao Wu,  The 6th International Conference, Trust and Trustworthy Computing, 2013. (Acceptance rate: 20.5%) 
    • (pdfbibtex, code"Distilling Critical Attack Graph Surface Iteratively through Minimum-Cost SAT Solving."  Heqing Huang, Su Zhang, Xinming Ou, Atul Prakash, and Karem Sakallah,  Proceedings of the 27th Annual Computer Security Applications Conference (ACSAC)., 2011- Best Student Paper Award  (Acceptance ratio: 39/295 = 20%) 

    Recent Professional Activities
    • TPC Member: SecureComm 2017
    • TPC Member: MoST 2017 
    • TPC Member: ICCNS 2016, 2017 

    Honor and Awards
    • FireEye Hackathon Winner, 2015-2016 
    • Penn State Outstanding Graduate Research Assistant Award (one of the three awardees), 2015
    • First-place Award in the Cisco Innovation Competition (building an Android NFC app for restaurants queuing service), $4000, 2013
    • Student Travel Grant, CCS, Fall 2015
    • Best Paper Award Honorarium, ACSAC 2011, $1500, Fall 2011
    • Student Travel Grant, ACSAC 2011, $1300, Fall 2011
    • Graduate Research Fellowship Award, Kansas State University, $8000, Summer 2011
    • Outstanding Prize, National Security Competition, China (top 10%, Nationwide), 2009
    • Excellent Student Scholarship, Huazhong University of Science and Tech., 2007-2010

    More about me

    I married my nice wife Jenny in 2013. We believe in the sacrifice of Jesus Christ for our sins.  

    I have been a super soccer fan since six. Before coming to Penn State, I was the captain of Huazhong University of Science and Technology (HUST) Computer Science Soccer Team. This team won two first-runner up in the HUST Cup for the years 2009 and 2010, which's been the historical best record in HUST Computer Science. I served as a volunteer coach for kids between U7 and U10 for the State College Chinese Alliance Church. If your child(ren) want to join us, please feel free to contact me. 

    I enjoyed playing chess with my father and grandfather.