JZ.

Computer Security · Research & teaching

ZHANG
Yuanyuan.

张媛媛.

Explore my research ↗Get in touch
mycat

Short Bio.

01 / Background

I’m an Associate Professor in the School of CS at Shanghai Jiao Tong University. My research sits at the intersection of Program Analysis and System Security, with a focus on new forms of intelligent system security, including AI harness, embody intelligence, etc.

Research Team.

02 / The lab

GoSec Lab / SCS / SJTU

Ideas become experiments.
Experiments become insight.

GoSec Lab, the research group I lead, focuses on security research of emerging intelligent systems and vulnerability discovery. We are securing the smooth operation and evolution of AI systems on their path to soon taking over human intellectual work(QAQ).

GoSec Lab is a close-knit team that collaborates deeply, keeps an open and supportive atmosphere, and delivers a steady stream of research results.

Connect with the lab ↗GoSecLab

Research directions

  • AI Harness SecuritySecurity of the AI agent execution harness: permission abuse, sandbox escape, and toolchain compromise.
  • Vulnerability DiscoveryFinding bugs where there is no source code — binaries and firmware.
  • Join our groupWe are recruiting undergraduate thesis students and research interns, and accepting Master's and PhD applications for Fall 2027.

Selected publications.

Sample entries · replace with your papers
2026

Reducing the TCB of SGX-oriented LibOSes at Runtime.

Donghui Yu, Dahan Pan, Fengwei Zhang, Haoran Fang, Ya Fang, Yuanyuan Zhang.

[FSE 2026]

Paper · add linkCode · add linkProject · add link
2026

An Empirical Study on the Robustness of Android Third-Party Library Detection Tools Against Advanced Obfuscation.

Dahan Pan, Zhuohao Zhang, Yunjia Min, Runhan Feng, Yuanyuan Zhang.

[ICSE 2026]

Paper · add linkCode · add link
2025

A Formal Approach to Multi-Layered Privileges for Enclaves.

Yang, Ganxiang, Chenyang Liu, Zhen Huang, Guoxing Chen, Hongfei Fu, Yuanyuan Zhang, and Haojin Zhu.

[NDSS 2025]

Paper · add linkSlides · add link
2024

DDGF: Dynamic Directed Greybox Fuzzing with Path Profiling.

Haoran Fang, Kaikai Zhang, Donghui Yu, Yuanyuan Zhang.

[ISSTA 2024]

Paper · add linkSlides · add link

Courses.

04 / Courses

System security & Vulnerability discovery.

CS3312 · Undergraduate · Spring

Computer System Security

Computer System Security examines cutting-edge research in system and software security. Grounded in compilers, operating systems, and architecture, it fosters systematic thinking about security issues and offers hands-on experience with real-world program analysis tools.

Experimental platform ↗

NIS4343 · Undergraduate · Autumn

Vulnerability Discovery and Analysis

Vulnerability Analysis and Discovery enables students to understand common software vulnerability models and master the principles, methods, and tools of vulnerability analysis and discovery, gaining hands-on experience in finding real-world vulnerabilities.

Experimental platform ↗

Life between the ideas.

06 / In pictures

A few moments from the lab, the classroom, and life beyond campus.

Life in GoSec Lab and SJTU
[The people behind the research][Lab gathering, conference, or collaboration · location · year]
[Learning by doing][Classroom, experiment, or student project · course · year]
[A little perspective][Travel, a hobby, or a favorite place · location · year]

07 / Start a conversation

Reach out.

Good research starts with a question.
Good question starts a conversation.

Email

yyjess @ sjtu edu cn

School of Computer Science
Shanghai Jiao Tong University
Minhang District, Shanghai, China

GoSec LabSCSSJTU