从2013年起一直从事系统软件安全研究,主要利用程序分析技术检测操作系统、数据库系统、网络协议栈等系统软件的缺陷和漏洞,并担任北航开源系统软件安全实验室主任。以第一/通讯作者身份在USENIX ATC、ACM ASPLOS、USENIX Security等系统和安全领域的重要会议期刊上发表40余篇论文,包括CCF-A类论文23篇。多次担任ASPLOS、EuroSys、FSE等CCF-A类会议程序委员。主持国家自然科学基金面上/青年项目、军科委研究计划项目、北京市自然科学基金面上项目、中央网信办支撑项目等。主导研制的自动化程序分析在Linux、FFmpeg、MySQL等主流开源系统软件中发现超过五千个真实缺陷,近三年获得400余个CVE/CNVD/CNNVD原创漏洞证书/编号,并应用于华为鸿蒙/欧拉操作系统、腾讯TDSQL数据库系统、蚂蚁AntOS Linux操作系统、航天嵌入式控制软件等关键国产系统软件的安全保障,获得10余项企业应用证明和感谢信。 十篇代表性CCF-A类论文: 1. Gui-Dong Han, Jia-Ju Bai*, Qiu-Ji Chen, Jiqiang Lu. Static Detection of TOCTOU Bugs Caused by Kernel Races. In USENIX Security 2026. (通讯作者) 2. Zi-Xuan Fu, Jia-Ju Bai*, Hong-Bo Feng, Kang Chen. One DBMS, Two Modes, and a Bunch of Bugs: Catching Logic Bugs in Distributed DBMSs via Differential Testing. In SIGMOD 2026. (通讯作者) 3. Jia-Ju Bai, Rui-Nan Hu, Cheng Li, Jianjun Chen, Rui Chen, Zhenyu Guan. NetPuzz: Testing Network Printers via Fully Black-Box and Feedback-Guided Protocol Fuzzing. In IEEE TDSC 2026. (第一作者) 4. Fudong Wu, Qianhong Wu, Jia-Ju Bai*, Bo Qin, Zhenyu Guan, Willy Susilo. Network-Layer Differential Fuzzing for Ethereum. In IEEE TIFS 2026. (通讯作者) 5. Jia-Ju Bai. BESA: Extending Bugs Triggered by Runtime Testing via Static Analysis. In EuroSys 2025. (唯一作者) 6. Yonghao Zou, Jia-Ju Bai*, Zu-Ming Jiang, Ming Zhao, Diyu Zhou. Blackbox Fuzzing of Distributed Systems with Multi-Dimensional Inputs and Symmetry-Based Feedback Pruning. In NDSS 2025. (通迅作者) 7. Jia-Ju Bai, Hao-Xuan Song, Shi-Min Hu. Multi-Dimensional and Message-Guided Fuzzing for Robotic Programs in Robot Operating System. In ASPLOS 2024. (第一作者) 8. Jia-Ju Bai, Tuo Li, Shi-Min Hu. DLOS: Effective Static Detection of Deadlocks in OS Kernels. In USENIX ATC 2022. (第一作者) 9. Zu-Ming Jiang, Jia-Ju Bai*, Kangjie Lu, Shi-Min Hu. Context-Sensitive and Directional Concurrency Fuzzing for Data-Race Detection. In NDSS 2022. (通讯作者) 10. Tuo Li, Jia-Ju Bai*, Yulei Sui, Shi-Min Hu. Path-Sensitive and Alias-Aware Typestate Analysis for Detecting OS Bugs. In ASPLOS 2022. (通讯作者) 实验室长期招收系统软件安全、操作系统、程序分析方向的博士/硕士研究生、实习本科生、博士后等,欢迎有意向的同学可直接联系我。 News:实验室尚有2027年入学的博士生/硕士生招生名额,欢迎投送简历到我的邮箱:baijiaju@buaa.edu.cn! |