News

[04/2026] Our paper on benchmarking alignment of coding agent is accepted to CAIS'26

[02/2026]  Our team PurCL is selected as one of the 10 teams in Amazon Nova AI Challenge (year 2)

The challenge focuses on evaluating user-centric of coding agent: how coding agent effectively interacts with a user and how it helps user audit AI generated code.

[07/2025] 🎖 Our team PurCL won 1st Place in Amazon Nova AI Challenge. The challenge focuses on security alignment of code language model. Our team won 1st place in challenge involving 10 top universities around the world (selected from >90 applicants). Here's our code: https://github.com/PurCL/ASTRA.

[06/2025 - 09/2025] I am interning at Microsoft Research@Redmond this summer. During the internship, I studied the architecture of tool designs in coding agents. Our research formulates how tool interfaces affect the robustness, exploration, and efficiency of coding agents.

Selected Publications

When Harmful Intent Dissolves into Technical Detail: How Safe Are Coding Agents Against Cyber Misuse?

Xiangzhe Xu, Shiwei Feng, Guangyu Shen, Xiangyu Zhang. CAIS'2026.

ASTRA: Autonomous Spatial-Temporal Red-teaming for AI Software Assistants

Xiangzhe Xu*, Guangyu Shen*, Zian Su, Siyuan Cheng, Hanxi Guo, Lu Yan, Xuan Chen, Jiasheng Jiang, Xiaolong Jin, Chengpeng Wang, Zhuo Zhang, Xiangyu Zhang. Technical Report 🎖 1st Place Solution in Amazon Nova AI Challenge

TAI3: Testing Agent Integrity in Interpreting User Intent

Shiwei Feng*, Xiangzhe Xu*, Xuan Chen, Kaiyuan Zhang, Syed Yusuf Ahmed, Zian Su, Mingwei Zheng, Xiangyu Zhang. NeurIPS'2025. PDF 🎖 3,000 USD Bug Bounty by Finding Bugs in Alexa+

ProSec: Fortifying Code LLMs with Proactive Security Alignment

Xiangzhe Xu*, Zian Su*, Jinyao Guo, Kaiyuan Zhang, Zhenting Wang, Xiangyu Zhang. ICML'2025. PDF

GenNm: Symbol Preference Aware Generative Models for Recovering Variable Names from Stripped Binary

Xiangzhe Xu, Zhuo Zhang, Zian Su, Ziyang Huang, Shiwei Feng, Yapeng Ye, Nan Jiang, Danning Xie, Siyuan Cheng, Lin Tan, Xiangyu Zhang. NDSS'2025. PDF

RepoAudit: An Autonomous LLM-Agent for Repository-Level Code Auditing

Jinyao Guo, Chengpeng Wang, Xiangzhe Xu, Zian Su, Xiangyu Zhang. ICML'2025. PDF

CodeArt: Better Code Models by Attention Regularization When Symbols Are Lacking

Zian Su, Xiangzhe Xu, Ziyang Huang, Zhuo Zhang, Yapeng Ye, Jianjun Huang, Xiangyu Zhang. FSE’2024. PDF

ReSym: Harnessing LLMs to Recover Variable and Data Structure Symbols from Stripped Binaries

Danning Xie, Zhuo Zhang, Nan Jiang, Xiangzhe Xu, Lin Tan, and Xiangyu Zhang. CCS'2024. 🎖 ACM SIGSAC Distinguished Paper Award PDF. 

LLMDFA:Analyzing Dataflow in Code with Large Language Models

Chengpeng Wang, Wuqi Zhang, Zian Su, Xiangzhe Xu, Xiaoheng Xie, Xiangyu Zhang. NeurIPS’2024. PDF

ProRec: Source Code Foundation Models are Transferable Binary Analysis Knowledge Bases

Zian Su, Xiangzhe Xu, Ziyang Huang, Kaiyuan Zhang, Xiangyu Zhang. NeurIPS'2024. PDF

ROCAS: Root Cause Analysis of Autonomous Driving Accidents via Cyber-Physical Co-mutation

Shiwei Feng, Yapeng Ye, Qingkai Shi, Zhiyuan Cheng, Xiangzhe Xu, Siyuan Cheng, Hongjun Choi, Xiangyu Zhang. ASE'2024. 🎖 ACM SIGSOFT Distinguished Paper Award PDF

ParDiff: Practical Static Differential Analysis of Network Protocol Parsers 

Mingwei Zheng, Qingkai Shi, Xuwei Liu, Xiangzhe Xu, Le Yu, Congyu Liu, Guannan Wei, Xiangyu Zhang. OOPSLA'2024. 🎖 ACM SIGPLAN Distinguished Paper Award PDF

DiEmph: Improving Binary Code Similarity Transformer Models by Semantics-Driven Instruction Deemphasis

Xiangzhe Xu, Shiwei Feng, Yapeng Ye, Guangyu Shen, Zian Su, Siyuan Cheng, Guanhong Tao, Qingkai Shi, Zhuo Zhang, and Xiangyu Zhang. ISSTA’2023. PDF

PEM: Representing Binary Program Semantics for Similarity Analysis via A Probabilistic Execution Model

Xiangzhe Xu*, Zhou Xuan*, Shiwei Feng, Siyuan Cheng, Yapeng Ye, Qingkai Shi, Guanhong Tao, Le Yu, Zhuo Zhang, Xiangyu Zhang. FSE’2023. PDF

StateLifter: Extracting Protocol Format as State Machine via Controlled Static Loop Analysis

Qingkai Shi, Xiangzhe Xu, Xiangyu Zhang. USENIX Security’2023. PDF

ARCTURUS: Full Coverage Binary Similarity Analysis with Reachability-guided Emulation

Anshunkang Zhou, Yikun Hu, Xiangzhe Xu, Charles Zhang. TOSEM'2023. PDF

CSLED: Automatic Generation and Validation of Instruction Encoders and Decoders 

Xiangzhe Xu, Jinhua Wu, Yuting Wang*, Zhenguo Yin and Pengfei Li. CAV’2021. PDF

CompCertELF: Verified Separate Compilation of C Programs into ELF Object Files 

Yuting Wang, Xiangzhe Xu, Pierre Wilke, Zhong Shao. OOPSLA’2020. PDF

CPC: Automatically Classifying and Propagating Natural Language Comments via Program Analysis

Juan Zhai, Xiangzhe Xu, Yu Shi, Guanhong Tao, Minxue Pan, Shiqing Ma, Lei Xu, Weifeng Zhang, Lin Tan, Xiangyu Zhang. ICSE'2020. PDF

Experience

• Jun. 2025 – Sep. 2025, Research intern at Microsoft Research. Advisor: Qianhui Wu, Hamidreza Saghir, Marc-Alexandre Côté, Tong Wang, Kiran Lakkaraju, Michael Albada. Microsoft Research

• Apr. 2021 – Aug. 2021, Research assistant on binary program analysis. Advisor: Charles Zhang. HKUST

• Sep. 2020 – Feb. 2021, Research assistant on program verification. Advisor: Yuting Wang. SJTU

• May 2020 – Aug. 2020, Intern on automatic differentiation. Advisor: Hao Chen. ByteDance AI Lab

• Dec. 2019 – Mar. 2020, Research assistant on program analysis. Advisor: Xiangyu Zhang. Purdue University

• Jul. 2019  – Oct. 2019, Research intern on program verification. Advisor: Zhong Shao. Yale University 

• Jul. 2018  – Jun. 2019, Research intern on program analysis. Advisor: Minxue Pan, Juan Zhai. Nanjing University

Awards

• Amazon Nova AI Challenge Research Grant ($250,000 + $1M computation resource), 2026

• Bug Bounty of Alexa+ ($3000), 2025

• 1st Place in Amazon Nova AI Challenge ($250,000), 2025

• Amazon Trusted AI Challenge Research Grant ($250,000 + $1M computation resource), 2024

• 1st Place in AutoDriving CTF at DEFCON30 (from 110 global teams), 2022

Invited Talks & Lectures

• Scaling auditing expertise via neural-symbolic multi-agent system, Feb 2026, Amazon

• Intelligence engineering in the era of vibe coding, Oct 2025, Purdue University

• Building trustworthy AI coding systems through agentic red-teaming, July 2025, Amazon; May 2025, TrustNLP

• Scaling security expertise with AI-driven systems, Apr 2025, RIT; Mar 2025, Microsoft

• Harnessing domain expertise to elevate post-training data quality, Mar 2025, Meta

• Understanding programs when symbols are lacking, Nov 2024, UMass Amherst

• An agentic red-teaming framework, Nov 2024, Amazon

• Inference time scaling for code reasoning task, Oct 2024, Purdue University

• Incorporating program analysis insights to code models, Apr 2024, UMass Amherst

• Introduction to code language models, Nov 2023, Purdue University

Services

Reviewer

• NeurIPS 2026

• COLM 2026

• State Of the Art in Program Analysis (SOAP) 2026

• ICLR 2026

• NeurIPS 2025, {DL4C, ResponsibleFM}@NeurIPS 2025

• Reasoning and Planning for LLMs @ ICLR 2025

• LLM4Code@ICSE 2025

• ARR 2025 Feb, 2025 May

• IEEE Transactions on Dependable and Secure Computing (TDSC) 2025

• EXPlainable and REliable Software Systems (EXPRESS) 2025

• ACM Transactions on Software Engineering and Methodology(TOSEM)

• IEEE Internet of Things Journal (IoTJ)

• The Computer Journal (COMPJ)

Sub-Reviewer

• International Symposium on the Foundations of Software Engineering (FSE), 2020

• International Conference on Automated Software Engineering (ASE), 2023,2024

• International Conference on AI Engineering – Software Engineering for AI (ICSE-CAIN), 2022,2023,2024

• ACM Conference on Computer and Communications Security (CCS), 2022,2023,2024

• International Conference on Software Engineering (ICSE), 2022,2023

• International Symposium on Software Testing and Analysis (ISSTA),2020,2024

Artifact Evaluation Committee

• ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI), 2024

• International Symposium on Software Testing and Analysis (ISSTA),2024

• IEEE/ACM International Symposium on Code Generation and Optimization (CGO), 2024,2025

• ACM Conference on Computer and Communications Security (CCS), 2023

• Static Analysis Symposium (SAS), 2025

• Object-oriented Programming, Systems, Languages, and Applications (OOPSLA), 2025

Other Services

• The 42nd International Conference on Software Engineering(ICSE’20) Track Scheduling co-Chair

• Faculty Search Representative in Purdue Computer Science Graduate Student Association (2023–2024)