[14 Jan 2022] Our paper on assessing certificate validation of WPA-Enterprise supplicants is accepted by MobiCom 2022. Congrats, Kailong!
[3 Jan 2022] I am serving ESORICS’22 as a PC member
[7 Sep 2021] I am serving the Web Conference (WWW)’22 as a PC member
[31 May 2021] Our paper on auditing privacy compliance of applet providers is accepted by the 2021 ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA). Congrats, Kulani!
[7 May 2021] Our work on privacy compliance of Android apps is presented at Black Hat Asia 2021
[16 Jan 2021] Our paper on intra-domain fingerprinting is accepted by The Web Conference 2021 (WWW). Congrats, Kailong!
[10 Jan 2021] I am serving ESORICS’21 as a PC member

About

I am a Senior Lecturer at School of Information Technology and Electrical Engineering, The University of Queensland, Australia. I obtained my PhD degree from National University of Singapore, Singapore, and my M.S. and B.S. degrees from Peking University, China. My research interests include Computer Security, Software Engineering and Formal Methods.

I am recently working on these areas:

• IoT/ICS Security ISSTA21, TSE19, ACSAC17
• Privacy & Machine Learning ESORICS21, WWW21, ESORICS20
• Mobile Security MobiCom22, ASE19, TSE18

Work with me: I am looking for self-motivated PhD students, interns and postdocs. My current focus is on formal methods on security, protocol verification, fuzzing, machine learning and blockchain. If you are interested, please send me an email with your CV.

I am honored to be working with:

• Yanjun Zhang (UQ PhD): Privacy-preserving Machine Learning
• Kailong Wang (NUS PhD, UQ Visiting Scholar): Network Security, Machine Learning on Security
• Kulani Mahadewa (NUS PhD, now Lecturer at University of Moratuwa): IoT Security
• Quanqi Ye (NUS PhD, now Lecturer at Waikato University): Mobile Security

Selected Recent Publications [more]

IoT/ICS Security

Kulani Mahadewa, Yanjun Zhang, Guangdong Bai, Lei Bu, Zhiqiang Zuo, Dileepa Fernando, Zhenkai Liang, Jin Song Dong. Identifying privacy weaknesses from multi-party trigger-action integration platforms. The 30th ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA), 2021.
[PDF] [Taifu Website]

Kulani Mahadewa, Kailong Wang, Guangdong Bai, Ling Shi, Yan Liu, Jin Song Dong and Zhenkai Liang. Scrutinizing Implementations of Smart Home Integrations. IEEE Transactions on Software Engineering (TSE), 2019.
[PDF]

Privacy & Machine Learning

Yanjun Zhang, Guangdong Bai, Xue Li, Caitlin Curtis, Chen Chen, Ryan Ko. Privacy-Preserving Gradient Descent for Distributed Genome-Wide Analysis. The 26th European Symposium on Research in Computer Security (ESORICS), 2021.
[PDF]

Kailong Wang, Junzhe Zhang, Guangdong Bai, Ryan Ko, Jin Song Dong. It's Not Just the Site, It's the Contents: Intra-domain Fingerprinting Social Media Websites Through CDN Bursts. The Web Conference (WWW), 2021.
[PDF] [Datasets]

Yanjun Zhang, Guangdong Bai, Xue Li, Caitlin Curtis, Chen Chen, Ryan K. L. Ko. PrivColl: Practical Privacy-Preserving Collaborative Machine Learning. The 25th European Symposium on Research in Computer Security (ESORICS), 2020.
[PDF]

Mobile Security

Kailong Wang, Yuwei Zheng, Qing Zhang, Guangdong Bai, Mingchuang Qin, Donghui Zhang, Jin Song Dong. Assessing Certificate Validation User Interfaces of WPA Supplicants. The 28th Annual International Conference on Mobile Computing and Networking (MobiCom), 2021.
[PDF]

Tianming Liu, Haoyu Wang, Li Li, Guangdong Bai, Yao Guo and Guoai Xu. DaPanda: Detecting Aggressive Push Notification in Android Apps. The 34th IEEE/ACM International Conference on Automated Software Engineering (ASE), 2019.
[PDF]

Guangdong Bai, Quanqi Ye, Yongzheng Wu, Heila Botha, Jun Sun, Yang Liu, Jin Song Dong and Willem Visser. Towards Model Checking Android Applications. IEEE Transactions on Software Engineering (TSE), 44(6): 595-612, 2018.
[PDF]