| Ziyi Guo(Roland Guo) (CV) Gallery Northwestern University, USA. |
[2024.08] Our Team 42-b3yond-6ug won DARPA's AIxCC SemiFinal at DEFCON 32, awarded $2 million. [link]
[2024.07] Awarded Student Grant from USENIX Security'24
[2024.06] Page Spray is accepted by USENIX Security 2024. [link]
[2024.02] Our Team 42-b3yond-6ug won $1 million from DARPA's Artificial Intelligence Cyber Challenge(AIxCC), top 7 in the world. I learn a lot from Professors and Mates! [link]
I love hacking. I'm core member of 42-b3yong-6ug. I play CTF in r3kapig.
I received my Bachelor Degree from Sichuan University, Aug. 2023. Then started pursuing my CS Ph.D. in Northwestern, since Sept. 2023. Before joining in Northwestern, I was a Research Assistant at NISL, Security Researcher at Xuanwu Lab focusing on Vulnerability Exploitation.
Vulnerability Exploitation, Hacking Techniques. Especially in modern AI infrastructure, like Cloud Container, OS, and etc.
LLMs for System Security.
Security Researcher @ Tencent Xuanwu Lab [2021.11 ~ 2022.3]
Research Assistant @ Tsinghua University [2022.3 ~ 2023.5]
Research Assistant @ Northwestern University [2022.6 ~ Now]
Take a Step Further: Understanding Page Spray in Linux Kernel Exploitation. [paper]
Ziyi Guo, Dang K Le, Zhenpeng Lin, Kyle Zeng, Ruoyu Wang, Tiffany Bao, Yan Shoshitaishvili, Adam Doupé, Xinyu Xing
- USENIX Security 2024. Philadelphia, PA, USA.
- Applied our exploitation technique in many real-world Linux Kernel vulnerabilities, based on different contexts, such as Desktop Ubuntu, Android Kernel, Cloud OS.
CAMP: Compiler and Allocator-based Heap Memory Protection. [paper]
Zhenpeng Lin, Zheng Yu, Ziyi Guo, Simone Campanoni, Peter Dinda, Xinyu Xing
- USENIX Security 2024. Philadelphia, PA, USA.
Cross Container Attacks: The Bewildered eBPF on Clouds. [paper]
Yi He* and Roland Guo*(co-first author), Yunlong Xing, Xijia Che, Kun Sun, Zhuotao Liu, Ke Xu, Qi Li
- USENIX Security 2023. Anaheim, CA, USA
- Applied our attack technique to multiple real-world container contexts.
Guiding LLMs fix realworld vulnerabilities.
Under Review.
WebAssembly Structure Sensitive Fuzzing.
Under Review.
- Discovered multiple real-world vulnerabilities in Web3 projects, such as [CVE-2024-25431] [CVE-2024-27532] [CVE-2024-27530] [CVE-2024-27529] [CVE-2024-27528] [CVE-2024-27527], and etc.
Safeguarding Critical Software Infrastructure through Novel AI Systems
News reports cover 42-b3yond-6ug: UWaterloo , DARPA , InfoSecurity Magazine , MeriTalk , Cyberscoop , Dark Reading , ExecutiveGov , The Readable , Science of Security , The Register
Artifact Evaluation Program Committee(AEC): USENIX Security 2024, ISSTA 2024
External Reviewer: IEEE S&P 2024, IEEE S&P 2025
Northwestern University, Ph.D., Computer Science.
September 2023 to Present, Evanston, USA
Sichuan University, B.E., Cyber Security.
September 2019 to July 2023, Chengdu, China
Winner of DARPA's AIxCC SemiFinal at DEFCON 32.
World Finalist, DEFCON 29 CTF
World Finalist, DEFCON 30 CTF
I wrote some tech blogs for people who want to learn vulnerability exploiation in Kanxue