Mind the Gap: Cross-RFC Formal Analysis Exposes DNSSEC's Hidden Vulnerabilities
DNSSECVerif · Cross-RFC formal analysis of DNSSEC.
Security researcher
I study the security of Internet protocols and the systems that rely on them. My work combines fuzzing, protocol analysis, and formal methods to find vulnerabilities in widely deployed software.
I received my Ph.D. in Computer Engineering from UC Irvine in 2025, advised by Prof. Zhou Li, and my B.Eng. from ShanghaiTech University in 2020.

Lately
Selected work
DNS & Internet security.
Automated analysis.
ML security & privacy.
DNSSECVerif · Cross-RFC formal analysis of DNSSEC.
CustodianFL · Verifiable anomaly detection for federated learning.
ResolverFuzz · Finding DNS resolver vulnerabilities through query-response fuzzing.
Acceptance rate: 18.3%
FedSecurity · A benchmark for attacks and defenses in federated learning and LLMs.
Acceptance rate: 20.5% · Applied Data Science track
ResolverFuzz Philadelphia, PA
ResolverFuzz San Diego, CA
ResolverFuzz Charlotte, NC
Community
Conference reviewing: NDSS (2021–2025), AsiaCCS (2021–2022), and SecureComm (2023). Journal reviewing: IEEE TDSC, TIFS, TWC, and IoT Journal; Computer Networks; High-Confidence Computing; Peer-to-Peer Networking and Applications; and PeerJ Computer Science.
ShanghaiTech Outstanding Graduate (2020). Student travel grants from USENIX Security, NDSS, IEEE S&P, ANRW, and ACSAC.
Beyond research
Away from the keyboard, I play the clarinet. I was principal clarinet of the UCI Symphony Orchestra from 2020 to 2024 and won the 2024 UCI Concerto Competition.
Louis Spohr
Op. 26 · with the UCI Symphony Orchestra
Franz Schubert
D. 965 · The Shepherd on the Rock