|
Dr. Jianwei Zhuge Assistant Professor Institute of Computer Science and Technology Peking University Haidian District, Beijing(100871), China | (86-10) 82529607 (phone) (86-10) 82529207 (fax) zhugejianwei_at_icst.pku.edu.cn www.honeynet.org.cn |
Research Interests Systems and Network Security Education Ph.D. in Computer Science, Peking University, China. 2001-2006. Dissertation: Research on Technologies for Network Intrusion Detection and Behavior Correlation Analysis. Ph.D. Advisors: Xuan Wang, Jianguo Xiao, Wei Zou. M.S. Advisors: Zhenkun Yang, Aimin Pan. B.S. in Computer Science, Peking University, China. 1997-2001. Professional Experience Assistant Professor, Institute of Computer Science and Technology, Peking University, China, 7/2006 - present. Intern Research Staff Member, Microsoft Research Asia, Beijing, China. 12/2002 - 9/2003. Project Manager (Entrepreneurial experience), JingDongPu Corp. Beijing, 3/2002 - 12/2002. Awards and Honors IBM Ph.D. Fellowship, 2005 (worldwide, honored by IBM Corp.) First Prize of the 13th Peking University "Challenge Cup" Competition, Second Prize of the Special Contribution, 2005. (honored by Peking University) Microsoft Fellow Scholarship, 2004 (Asia Pacific-wide, honored by MSRA) HP Scholarship, 2003 (nationwide, honored by HP China) “Three Goods” Student of Peking University & Kodak Scholarship, 2002. Publications in English Papers in Refereed Conferences J. Zhuge, T. Holz, C. Song, J. Guo, X. Han and W. Zou, Studying Malicious Websites and the Underground Economy on the Chinese Web, the 7th Workshop on the Economics of Information Security (WEIS'08), Hanover, NH, USA, June 2008. J. Zhuge, Y. Zhou, J. Guo. et al, Malicous Websites on the Chinese Web: Overview and Case Study, In Proceedings of 20th Annual FIRST Conference (FIRST’08), British Columbia, Canada, June 2008. Y. Zhou, J. Zhuge, N. Xu. et al, Matrix, a Distributed Honeynet and its Applications, In Proceedings of 20th Annual FIRST Conference (FIRST’08), British Columbia, Canada, June 2008. J. Zhuge, T. Holz, X. Han, C. Song, and W. Zou. Collecting Autonomous Spreading Malware Using High-interaction Honeypots, In Proceedings of 9th International Conference on Information and Communications Security (ICICS'07), Zhengzhou, China, Dec 2007. Z. Liang,T. Wei,Y. Chen, X. Han, J. Zhuge, and W. Zou. Component Similarity Based Methods for Automatic Analysis of Malicious Executables, In Proceedings of Virus Bulletin Conference 2007 (VB'07), Vienna, Austria, Sep 2007. J. Zhuge, X. Han, Y. Chen, Z. Ye, and W. Zou. Towards High Level Attack Scenario Graph through Honeynet Data Correlation Analysis, In Proceedings of the 7th IEEE Workshop on Information Assurance (IAW'06), West Point, New York, USA, June 2006. J. Zhuge, and R. Yao. Security Mechanisms for Wireless Home Network, In Proceedings of IEEE Global Telecommunications Conference 2003 (GLOBECOM'03), Vol. 3, pp. 1527-1531, San Francisco, USA, Dec 2003. Technical Reports J. Zhuge, T. Holz, X. Han, J. Guo, and W. Zou. Characterizing the IRC-based Botnet Phenomenon, Peking University & University of Mannheim Technical Report, Nov 2007. J. Zhuge, T. Holz, C. Song, J. Guo, X. Han, and W. Zou. Studying Malicious Websites and the Underground Economy on the Chinese Web, Peking University & University of Mannheim Technical Report, Nov 2007. Publications in Chinese Articles in Refereed Journals J. Zhuge, X. Han, Y. Zhou, Z. Ye and W. Zou. Botnet Research and Development, Chinese Journal of Software, 19(3):702~715, 2008.. J. Zhuge, X. Han, Y. Zhou, C. Song, J. Guo and W. Zou. HoneyBow: An Automated Malware Collection Tool based on the High-Interaction Honeypot Principle, Chinese Journal of Communication, 28(12):8~13, 2007. X. Han, J. Guo, Y. Zhou, J. Zhuge, D. Cao, and W. Zou. An Investigation on the Botnets Activities, Chinese Journal of Communication, 28(12):167~172, 2007. J. Zhuge, X. Han, Z. Ye, and W. Zou, A Network Attack Plan Recognition Algorithm based on the Extended Goal Graph, Chinese Journal of Computers, 29(8):1356-1366, 2006. J. Zhuge, D. Wang, Y. Chen, Z. Ye, and W. Zou, A Network Anomaly Detector Based on the D-S Evidence Theory, Chinese Journal of Software, 17(3):463-471, 2006. J. Zhuge, Z. Ye, and W. Zou, Research on Classification of Attack Technologies, Computer Engineering, 31(21): 121-123, 2005. J. Zhuge, H. Xu, and A. Pan, An Attack Knowledge Model Based on Object-Oriented Technology, Journal of Computer Research and Development, 41(7): 1110-1116, 2004. Papers in Refereed Conferences and Workshops Z. Liang, D. Si, C. Li, J. Mao, Y. Chen and J. Zhuge. Detecting High-Level Interactive Honeypots. In Proceedings of the 2007 Chinese Symposium on Network and Information Security (NetSec'07), Qingdao, China, Aug 2007. J. Zhuge, Z. Wu, F. Zhang, Z.Ye, and W. Zou. Use Honeynet to Exposure Security Threats on the Internet, China National Computer Conference 2005 (CNCC'05), Wuhan, China, Oct 2005. J. Zhuge, X. Han, Z. Ye, and W. Zou. Discover and Track Botnets, In Proceedings of the 2005 Chinese Symposium on Network and Information Security (NetSec'05), Beijing, Aug 2005. Articles in Magazines J. Zhuge. Measurement on Botnets, Computer World – CSO & Information Security Magazine, Invited Article, to appear. J. Zhuge. Honeypot Technology and its Latest Progress, Computer World – CSO & Information Security Magazine, Invited Article, Oct 2007. J. Zhuge. Strike Malware using Honeypot Technology, Computer World – CSO & Information Security Magazine, Invited Article, Oct 2007. J. Zhuge, Honeypot/Honeynet Technologies and their applications, Computer Security Expert Magazine, Invited Special Column, July 2005. Includes four articles (“Know the Enemy, Know the Honeypot”, “Deploying the Honeynet, and Know Your Enemy”, “Honeynet Application: Tracking Botnets”, “Honeynet Application: Analyzing Internet Phishing”). J. Zhuge, Network Attack Technologies Trends, Computer World Magazine, Invited Article, March 2005. J. Zhuge, Network Defense Technologies Trends, Computer World Magazine, Invited Article, March. 2005. Systems Built (selected) HoneyBow: a malware collection honeypot based on the high interaction honeypot principle, published under the GPL license. N-Eye: Network Environment Apperceive Tool, published under the GPL license. Thesis Advising and Co-Advising Active Ph.D. Advisees: Xinhui Han. Active M.S. Advisees: Fangfang Zhang, Tengfei Lu, Qiushi Wang, Chengyu Song, Yaxin Liu, Feng Wang, Qihang Zeng. Active B.S. Advisees: Jinhui Zhong, Nan Li, Shixiong Zhu, Hao Liu. Graduated M.S. Thesis Advisees: Zhigang Cang, Dawei Wang, Jianjun He, Zhifa Wu, Dongzhi Cao, Yan Li. Graduated B.S. Thesis Advisees: Yan Li, Fangfang Zhang, Cheng Li, Jinpeng Guo, Qiushi Wang, Chengyu Song, Yaxin Liu. Teaching Seminar on Hacking Analysis and Forensics. Institute of Computer Science and Technology, Peking University, Fall 2007. Grants and Contracts Analysis and Detection of Virus on Mobile Terminals. Funded by Ministry of Education, 2007-2009. with Prof. Wei Zou (main PI). Proactive Security Protection Technologies based on Honeyfarm Archticture for Large Scale Networks. Funded by the 863 High-Tech Research and Development Program of China under Grant No. 2006AA01Z445. 2006-2008. with Prof. Zhiyuan Ye (main PI). Security Emergency Response Exercitation. Funded by Chinese Mobile Communications Corp. 2005. with Prof. Zhiyuan Ye (main PI). |