Biography

I am a researcher focusing on security problems in the cyber physical space. My current research interests include network security, IoT security, and cybercrime.

I am a faculty member in the School of Computer Science at USTC since August 2021. Prior to that, I was a Tenure-Track Assistant Professor at SUNY Buffalo, a Research Scientist at Facebook, and a Software Engineer at Baidu. I got my PhD degree from Indiana University (Go, Hoosiers!), under the supervision of Prof. XiaoFeng Wang and Prof. Feng Qian. Also, I am pround to be a senior member in the fathers' association thanks to my two boys Tommy and Mars.

PhD/Master positions are available with full RA/TA support.
I am also happy to work with passionate master and undergraduate students, drop me a message if you are interested.

Interests
  • Network Security
  • IoT Security
  • Cybercrime
  • Data-Driven Security
  • Internet Measurement
  • AI Security
Education

  • Ph.D in Computer Science, 2015 - 2019

    Indiana University Bloomington

  • B.E. in Software Engineering, 2009 - 2013

    Beijing Institute of Technology

Recent News

One work on mobile proxy networks got accepted to NDSS 2021.
congrats to my co-authors, and it is a good holiday gift 🙃.
Dec 25, 2020
I will join SUNY Buffalo as a tenure-track assistant professor.
Several PhD positions are available, and the enrollment can be flexible as we all know it is 2020 😂.
Apr 15, 2020
Our work on Voice Assistant platforms has won CSAW'19 Best Paper Award (3rd Place, 3 out of 80)
Congrats ㊗️ to my coauthors! This is my first-ever poster presentation, very glad to get recognized by judges! Refer to the conference website for the finalists and winners. Learn more details from my poster, blog article, talk video, and also the paper.
Nov 15, 2019
Our security paper on Voice Assistant platforms has entered the finalist of CSAW'19 Applied Research Competition
More than happy to learn that our paper on the security of voice assitant platform got accepted as the finalist of CSAW'19 Applied Research Competition. And I will present the paper in NYU, see you at New York around Nov 8th 2019!
Oct 15, 2019
I joined Facebook as Research Scientist
Happy to start a new journey at Facebook, and continue to work on security projects.
Jun 10, 2019
See all

Awards & Honors

Nov 15, 2019
3rd Place of CSAW'19 Applied Research Competition

Refer to the conference website for the finalists and winners. Learn more details from my poster, blog article, talk video, and also the paper.

Mar 1, 2019
NDSS Distinguished Paper Award 2019

Congrats to my co-authors! See here for paper details.

Featured Publications

May 2019 In Oakland'19
Resident Evil: Understanding Residential IP Proxy as a Dark Service
Resident Evil: Understanding Residential IP Proxy as a Dark Service

How can millions of residential IPs serve as traffic exits in commercial web proxy networks?
PDF Cite Code Dataset Slides Video 1-min Preview Blog
May 2019 In Oakland'19
Dangerous skills: Understanding and mitigating security risks of voice-controlled third-party functions on virtual personal assistant systems
Dangerous skills: Understanding and mitigating security risks of voice-controlled third-party functions on virtual personal assistant systems

3rd-party skills on voice assistant platforms incur new seurity threats to users.
PDF Cite Slides Video 1-min Preview Attack Demo Report by Forbes Blog Poster

Publications

Xianghang Mi, Siyuan Tang, Zhengyi Li, Xiaojing Liao, Feng Qian, XiaoFeng Wang (2020). Your Phone is My Proxy: Detecting and Understanding Mobile Proxy Networks. To appear in NDSS'21.

PDF

Yeonjoon Lee, Xueqiang Wang, Kwangwuk Lee, Xiaojing Liao, XiaoFeng Wang, Tongxin Li, Xianghang Mi (2019). Understanding iOS-based Crowdturfing Through Hidden UI Analysis. In Security'19.

PDF Cite

Xianghang Mi, Xuan Feng, Xiaojing Liao, Baojun Liu, XiaoFeng Wang, Feng Qian, Zhou Li, Sumayah Alrwais, Limin Sun, Ying Liu (2019). Resident Evil: Understanding Residential IP Proxy as a Dark Service. In Oakland'19.

PDF Cite Code Dataset Slides Video 1-min Preview Blog

Nan Zhang, Xianghang Mi, Xuan Feng, XiaoFeng Wang, Yuan Tian, Feng Qian (2019). Dangerous skills: Understanding and mitigating security risks of voice-controlled third-party functions on virtual personal assistant systems. In Oakland'19.

PDF Cite Slides Video 1-min Preview Attack Demo Report by Forbes Blog Poster

Eihal Alowaisheq, Peng Wang, Sumayah Alrwais, Xiaojing Liao, XiaoFeng Wang, Tasneem Alowaisheq, Xianghang Mi, Siyuan Tang, Baojun Liu (2019). Cracking the Wall of Confinement: Understanding and Analyzing Malicious Domain Take-downs. In NDSS'19.

PDF Cite

Peng Wang, Xianghang Mi, Xiaojing Liao, XiaoFeng Wang, Kan Yuan, Feng Qian, Raheem A Beyah (2018). Game of Missuggestions: Semantic Analysis of Search-Autocomplete Manipulations. In NDSS'18.

PDF Cite

See all publications

Experience

 
 
 
 
 
Tenure-Track Assistant Professor
University at Buffalo
Apr 2020 – Present New York, United States
Volunteer Appointment, and will formally join UB in Spring 2021.
 
 
 
 
 
Research Scientist
Facebook Inc.
Jun 2019 – Present California, United States
Program analysis (e.g, Fuzzing), and abuse detection
 
 
 
 
 
PhD in Computer Science
Indiana University
Aug 2015 – May 2019 Indiana, United States
Security and Network research
 
 
 
 
 
Software Engineer
Baidu Inc.
May 2014 – Jun 2015 Beijing, China
Web backend development
 
 
 
 
 
B.E in Software Engineering
Beijing Institute of Technologies
Sep 2009 – Jun 2013 Beijing, China
Undergraduate study in Software Engineering

Contact