News Log

  • (5/2017) ONR project on Semantics-Directed Binary Reverse Engineering and Transformation Validation funded. Thanks to ONR!
  • (10/2016) Congratulations to Ben, whose dissertation won ACM SIGSAC Dissertation Award Runner-Up.
  • (3/2016) Keynote talk at MASS 2016 about MCFI/RockJIT/PICFI; Title: "Protecting Dynamic Code by Modular Control-Flow Integrity" [slides].
  • (12/2015) Congratulations to Ben, who finished his Ph.D. with thesis "Practical Control-Flow Integrity".
  • (7/2015) Paper "Per-Input Control-Flow Integrity" accepted at CCS 2015.
  • (6/2015) We are glad to release the source code of MCFI and RockJIT and PiCFI . Please see this GitHub page.
  • (12/2014) The RockSalt repository has moved to GitHub. The latest version can be found at here.
  • (11/2014) Paper "Producing Hook Placements To Enforce Expected Access Control Policies" accepted at ESSOS 15.
  • (8/2014) NSF medium project "Retrofitting software for defense-in-depth" funded; in collaboration with Penn State, Rutgers, and U. of Vermont. [Lehigh news release | local WFMZ news release]
  • (7/2014) Paper "RockJIT: Securing Just-In-Time Compilation Using Modular Control-Flow Integrity" accepted at CCS 2014.
  • (5/2014) Congratulations to Siliang, who finished his Ph.D. with thesis "Improving quality of software with foreign function interfaces using static analysis".
  • (5/2014) Paper "NativeGuard: Protecting Android Applications from Third-Party Native Libraries" accepted at WiSec 2014.
  • (3/2014) Paper "Finding Reference-Counting Errors in Python/C Programs with Affine Analysis" accepted at ECOOP 2014.
  • (2/2014) Paper "Modular Control Flow Integrity" accepted at PLDI 2014.
  • (1/2014) Invited talk at PiP 2014 [slides].
  • (7/2013) A paper about Monitor Integrity Protection (MIP) accepted by CCS 2013.
  • (4/2013) Strato paper accepted by Usenix Security 2013.
  • (2/2013) We are glad to release the source code of the second version of Robusta (now dubbed Arabica). Please see this page.
  • (1/2013) DuPro paper accepted by AsiaCCS 2013.
  • (9/2012) The GoNative project received a Google Research Award.
  • (8/2012) The GoNative project has an openning for a full-time postdoc position. Details are in this page.
  • (6/1012) Arabica paper accepted by ESORICS 12.
  • (1/2012) RockSalt paper accepted by PLDI 2012.
  • (1/2012) We are glad to open source RockSalt 1.0, which includes a high-fidelity model of a subset of x86 in Coq. See this page.
  • (1/2012) Dr. Gang Tan received the NSF Faculty Early Career Development (CAREER) award with the project "User-Space Protection Domains for Compositional Information Security".
  • (1/2012) The SOS lab is looking for talented undergraduate and graduate students to join. Undergrads who are interested in computer security can do a summer internship under the NSF REU program; see this page for more details.
  • (11/2011) We are glad to release the source code of Robusta 1.0; Please see this page.
  • (7/2011) Research paper "Combining Control-Flow Integrity and Static Analysis for Efficient and Validated Data Sandboxing" accepted by CCS-2011
  • (6/2011) Research paper "Detection and Classification of Different Botnet C&C Channels" accepted by ATC-2011
  • (6/2011) Research paper "JET: Exception checking in the Java Native Interface" accepted by OOPSLA '11
  • (2/2011) Tan was a UN Panelist on fighting cybercrime (video | Lehigh article)
  • (1/2011) Research paper "JNI Light: An Operational Model for the Core JNI" published in the NGC journal
  • (8/2010) Research paper "JNI Light: An Operational Model for the Core JNI" accepted by APLAS '10
  • (6/2010) Research paper "Robusta: Taming the Native Beast of the JVM" accepted by CCS '10
  • (3/2010) The GoNative project is now sponsored by Google
  • (10/2009) The SOS lab hosted NJPLS
  • (9/2009) The GoNative project is now sponsored by NSF
  • (8/2009) Research paper "Weak updates and separation logic" accepted by APLAS '09
  • (7/2009) Research paper "Finding bugs in exceptional situations of JNI programs" accepted by CCS '09
  • (6/2009) News article about the lab's research
  • (6/2009) Research paper about the NJ voting machine study accepted by EVT/WOTE '09
  • (6/2009) Research positions available. More...
  • (12/2008) Former member, Jason Croft, wins Honorable Mention in CRA's Outstanding Undergradate Award