Heqing Huang, Research Staff Scientist @ IBM T.J. Watson Research Center, New York

Bio & Research
    I am a Research Staff Scientist in security & privacy at IBM Thomas J. Watson Research Center. I earned my Ph.D in the Department of Computer Science and Engineering (CSE) at the Pennsylvania State University in Feb., 2016. I was honored and very fortunate to work with my advisors Dr. Sencun Zhu and Dr. Peng Liu. I was also fortunate to have Dr.  Tom La Porta (Director, School of Electrical Engineering and Computer Science, Penn State) and Dr. David Miller as my Ph.D committee members. 

    My current research interests include applying AI for cybersecurity, Privacy preserving AI and securing AI system,  mobile and IoT security, malware detection and etc. I am currently working on the DARPA transparent computing project for APT detection. 

    Past research focus: Android repackaging detection (the ViewDroid Project, Source Code), Enterprise network security analysis (MulVAL Attack GraphSource Code).

    Email: heqing.state AT gmail.com

    Past Industrial Experience
    • Malware research intern, FireEye Lab, 2015 - 2016 (built a scalable threat intelligence platform for APT detection based on code analysis)
    • Security research intern, R&D at Palo Alto Networks, WildFire Team, 2015 (with full-time return offer)
    • System security research intern on SEAndroid, Samsung Research America, Knox Android Team, 2014

    Selected Conference Publications3
    • (pdfbibtex) " A Large-scale Study of Android Malware Development Phenomenon on Public Malware Submission and Scanning Platform." Heqing Huang,  Cong Zheng, Junyuan Zeng, Wu Zhou, Sencun Zhu, Peng Liu, IEEE Transactions on Big Data (invited journal paper by IEEE Big Data conference). 2018.
    • (pdfbibtex) "IDIoT: Securing the Internet of Things like it's 1994." David Barrera,  Ian Molloy, Heqing  Huang, Proceedings of the DISS Workshop (NDSS). 2018.
    • (pdfbibtex)  "SweetDroid: Toward a Context-Sensitive Privacy Policy Enforcement Framework for Android OS." Xin Chen,  Heqing  Huang, Sencun Zhu  Proceedings of 2017 Workshop on Privacy in the Electronic Society (with ACM CCS 2017).
    • (pdfbibtex)  "Android Malware Development on Public Malware Scanning Platforms: A Large-scale Data-driven Study." Heqing Huang, Cong Zheng, Junyuan Zeng, Wu Zhou, Sencun Zhu, Peng Liu, Suresh Chari, Ce Zhang,   Proceedings of  2016 IEEE Big Data (accepted as long paper with four acceptances: 79/423=18.7%) (a FRESH Android malware dataset released the result website) 
    • (pdfbibtex) "Learning from Big Malwares." Linhai Song,  Heqing  Huang, Wu Zhou, Wenfei Wu and Yiying Zhang, Proceedings of the 7th ACM SIGOPS Asia-Pacific Workshop on Systems (APSys). 2016.
    • (pdfbibtex) "Semantics-based Repackaging Detection for Mobile Apps." Quanlong Guan, H.  HuangWenqi Luo, and Sencun Zhu,  Proceedings  of the International Symposium on Engineering Secure Software and Systems, 2016. 
    • (pdfbibtex) "From Physical to Cyber: Escalating Protection for Personalized Auto Insurance." Le Guan., Xu, J., Wang, S., Xing, X., Lin, L., H. Huang, Peng Liu, Wenke Lee, Proceedings of the 14th ACM Conference on Embedded Networked Sensor Systems (SenSys),  2016. (Design flaws have been reported to a leading auto insurance company)
    • (pdfbibtex, codedemo)  "From System Service Freezing to System Server Shutdown in Android: All You Need Is a Loop in an Application." Heqing  Huang, Sencun Zhu, Kai Chen, and Peng Liu,  Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security (ACM CCS), 2015. (Acceptance ratio: 128/646 = 19.8%) (Automatically identified design flaws in ActivityManager and WindowManager that confirmed by Google security team)
    • (pdfbibtex)  "Towards Discovering and Understanding Unexpected Hazards in Tailoring Antivirus Software for Android." Heqing Huang, Kai Chen, Chuanggang Ren, Peng Liu, Sencun Zhu, and Dinghao Wu,   Proceedings of the 10th ACM Symposium on Information, Computer and Communications Security (AsiaCCS), 2015. (Acceptance ratio: 48/269 = 17.8%). Relevant findings have been reported to most of the AV vendors from 16 countries (e.g., Lookout, Sophos, Symantec, Dr.Web and etc.).
    • (pdfbibtex) System released  "Finding Unknown Malice in 10 Seconds: Mass Vetting for New Threats at the Google-Play Scale."  Kai Chen, Peng Wang, Yeonjoon Lee, Xiaofeng Wang, Nan Zhang, Heqing Huang, Wei Zou, and Peng Liu,  Proceedings of the 24th USENIX Security Symposium (Security), 2015. (Acceptance ratio: 67/426 = 15.7%) 
    • (pdfbibtex, code"ViewDroid: Towards Obfuscation-Resilient Mobile Application Repackaging Detection."  Fangfang Zhang, Heqing Huang, Sencun Zhu, Dinghao Wu, and Peng Liu,  Proceedings of the ACM Conference on Security and Privacy in Wireless and Mobile Networks (WiSec), 2014.  (Accepted as full paper; acceptance ratio: 14/96 = 14.5%) 
    •  (pdfbibtex) "A Framework for Evaluating Mobile App Repackaging Detection Algorithms." Heqing Huang, Sencun Zhu, Peng Liu, and Dinghao Wu,  The 6th International Conference, Trust and Trustworthy Computing, 2013. (Acceptance rate: 20.5%) 
    • (pdfbibtex, code"Distilling Critical Attack Graph Surface Iteratively through Minimum-Cost SAT Solving."  Heqing Huang, Su Zhang, Xinming Ou, Atul Prakash, and Karem Sakallah,  Proceedings of the 27th Annual Computer Security Applications Conference (ACSAC)., 2011- Best Student Paper Award  (Acceptance ratio: 39/295 = 20%) 

    Recent Professional Activities
    • TPC Member: SecureComm 2017, 2018
    • TPC Member: CNS 2017
    • TPC Member: MoST 2017 
    • TPC Member: ICCNS 2016, 2017 

    Honor and Awards
    • IBM Patent Plateau Award, 2016-2018

    • IBM Manager's Choice Award, 2016 - 2017
    • FireEye Hackathon Winner, 2015-2016 
    • Penn State Outstanding Graduate Research Assistant Award (one of the three awardees), 2015
    • First-place Award in the Cisco Innovation Competition (building an Android NFC app for restaurants queuing service), $4000, 2013
    • Student Travel Grant, CCS, Fall 2015
    • Best Paper Award Honorarium, ACSAC 2011, $1500, Fall 2011
    • Student Travel Grant, ACSAC 2011, $1300, Fall 2011
    • Excellent Student Scholarship, Huazhong University of Science and Tech., 2007-2010

    More about me

    I married my nice wife Jenny in 2013. We believe in the sacrifice of Jesus Christ for our sins.  

    I have been a super soccer fan since six. Before coming to Penn State, I was the captain of Huazhong University of Science and Technology (HUST) Computer Science Soccer Team. This team won two first-runner up in the HUST Cup for the years 2009 and 2010, which's been the historical best record in HUST Computer Science. I served as a volunteer coach for kids between U7 and U10 for the State College Chinese Alliance Church. If your child(ren) want to join us, please feel free to contact me. 

    I enjoyed playing chess with my father and grandfather.