My research is driven by applied cybersecurity. I don't normally write papers.
My publications since 2018 are byproducts during my research.
2027:
“Ghost in the Boot Configuration: Uncovering Remote Vulnerabilities in Windows Bootloader”, Weifeng Yuan, Feng Dong, Jietao Yang, Yunpeng Tian, Mu Zhang, Yongtian Xu, Zhiniang Peng* and Haoyu Wang* EuroSys (2027)
2026:
"Death by a Thousand Drips: Uncovering Critical Resource Leaks in the Windows Ecosystem", Feng Dong, Jianting Gao, Yunpeng Tian, Weifeng Yuan, Mu Zhang, Zesen Ye, Jietao Yang, Zhiniang Peng*. Usenix security 2026 (2026)
“Systematizing Windows Vulnerability Research: Attack Surfaces, Tooling, and the Research-Practice Gap.”, Yunpeng Tian, Feng Dong, Mu Zhang, Ao Huang, Zhiniang Peng*, Xiapu Luo, Haoyu Wang. ACM Transactions on Software Engineering and Methodology (2026)
2025:
“Be Careful of What You Embed: Demystifying OLE Vulnerabilities.”, Yunpeng Tian, Feng Dong, Haoyi Liu, Meng Xu, Zhiniang Peng*, Zesen Ye, Shenghui Li, Xiapu Luo, and Haoyu Wang. NDSS 2025 (2025)
"Error Messages to Fuzzing: Detecting XPS Parsing Vulnerabilities in Windows Printing Components", Yunpeng Tian(s), Feng Dong, Junhai Wang(s), Mu Zhang, Zhiniang Peng*, Zesen Ye, Xiapu Luo, and Haoyu Wang. CCS 2025 (2025)
"Needle in a Haystack: Automated and Scalable Vulnerability Hunting in the Windows ALPC Sea", Haoyi Liu(s), Feng Dong, Yunpeng Tian(s), Mu Zhang, Xuefeng Li, Fangming Gu, Zhiniang Peng* and Haoyu Wang. CCS 2025 (2025)
2023:
“Detecting Union Type Confusion in Component Object Model.”, Yuxing Zhang, Xiaogang Zhu, Daojing He, Shouling Ji, Sheng Wen, Zhiniang Peng. Usenix security 2023 (2023)
On the Security of Fully Homomorphic Encryption for Data Privacy in Internet of Things, Zhiniang Peng, Wei Zhou, Xiaogang Zhu,Youke Wu and Sheng Wen. Concurrency and Computation: Practice and Experience (2023)
2022:
COMRACE Detecting Data Race Vulnerabilities in COM Objects, Fangming Gu, Qingli Guo, Lian Li, Zhiniang Peng, Wei Lin, Xiaobo Yang, Xiaorui Gong. Usenix Security 2022 (2022)
Comments on “A blockchain-based attribute-based signcryption scheme to secure data sharing in the cloud”, Xiaoyu Li, Lin Ge, Jiahui Chen, Zhiniang Peng*. Journal of Systems Architecture (2022)
Static Detection of File Access Control Vulnerabilities on Windows System, Lu, Jiadong, Fangming Gu, Yiqi Wang, Jiahui Chen, Zhiniang Peng*, and Sheng Wen. Concurrency and Computation: Practice and Experience (2022)
2021:
Code is the Law Demystifying and Mitigating Blockchain Inconsistency Attacks Caused by Software Bugs, Guorui Yu , Shibin Zhao , Chao Zhang , Zhiniang Peng , Yuandong Ni , Xinhui Han . INFOCOM 2021 (2021)
2020:
Security Analysis on dBFT protocol of NEO, Qin Wang, Jiangshan Yu, Zhiniang Peng , Vancuong Bui , Shiping Chen, Yong Ding : FC2020 (2020)
MQ Aggregate Signature Schemes with Exact Security Based on UOV Signature, Chen, Jiahui, Jie Ling, Jianting Ning, Zhiniang Peng, and Yang Tan. Inscrypt (2020)
2019:
BPTM: Blockchain-Based Privacy-Preserving Task Matching in Crowdsourcing, Yiming Wu, Shaohua Tang, Bowen Zhao, Zhiniang Peng: IEEE Access 7: 45605-45617 (2019)
Improved Meet-in-the-Middle Attacks on Generic Feistel Constructions, Shibin Zhao, Yuanhao Deng, Zhiniang Peng*, : IEEE Access 7: 34416-34424 (2019)
2018:
Precomputation Methods for UOV Signature on Energy-Harvesting Sensors, Bo Lv, Zhiniang Peng, Shaohua Tang: IEEE Access 6: 56924-56933 (2018)
Circulant UOV: a new UOV variant with shorter private key and faster signature generation, Zhiniang Peng, Shaohua Tang: TIIS 12(3): 1376-1395 (2018)
All roads lead to Rome: Many ways to double spend your cryptocurrency, Zhiniang Peng, Yuki Chen: CoRR abs/1811.06751 (2018)
2017:
Circulant Rainbow: A New Rainbow Variant With Shorter Private Key and Faster Signature Generation, Zhiniang Peng, Shaohua Tang: IEEE Access 5: 11877-11886 (2017)
A Symmetric Authenticated Proxy Re-encryption Scheme with Provable Security, Zhiniang Peng, Shaohua Tang, Linzhi Jiang: ICCCS (2) 2017: 86-99
A Secure Variant of the SRP Encryption Scheme with Shorter Private Key, Bo Lv, Zhiniang Peng, Shaohua Tang: ISPEC 2017: 156-167
Before 2017:
Fast Implementation of Simple Matrix Encryption Scheme on Modern x64 CPU, Zhiniang Peng, Shaohua Tang, Ju Chen, Chen Wu, Xinglin Zhang: ISPEC 2016: 151-166
Efficient hardware implementation of PMI+ for low-resource devices in mobile cloud computing, Shaohua Tang, Bo Lv, Guomin Chen, Zhiniang Peng, Adama Diene, Xiaofeng Chen: Future Generation Comp. Syst. 52: 116-124 (2015)
Efficient Hardware Implementation of MQ Asymmetric Cipher PMI+ on FPGAs, Shaohua Tang, Bo Lv, Guomin Chen, Zhiniang Peng: ISPEC 2014: 187-201
Efficient Hardware Implementation of MQ Asymmetric Cipher PMI+ on FPGAs, Shaohua Tang, Bo Lv, Guomin Chen, Zhiniang Peng: IACR Cryptology ePrint Archive 2013: 878 (2013)
Design and Implementation of Authentication System based on Multivariable Public Key Cryptosystem on FPGA, Zhiniang Peng, Bachelor thesis. 2013
Improvements and Security Analysis for Several Multivariate Cryptography Schemes, Zhiniang Peng, PhD thesis. 2017
Research on Automatic Vulnerability Discovery Technology, Zhiniang Peng, Post-Doc Research. 2023