Campuses
Research
- Binary code representation
- Learning representations that connect the compiled forms of a function to what it does, so analysts can find known code across processors, compilers and optimization settings.
- Explainable vulnerability analysis
- Moving vulnerability assessment from a score to code-level evidence an analyst can inspect, through learned detection, rule generation and patch screening.
- Malware beyond known families
- Comparing unfamiliar malware with the available evidence instead of forcing it into a known class, using open-set recognition, functional decomposition and authorship analysis.
- Firmware and supply-chain security
- Recovering the software components and capabilities of a firmware image from the image itself, without relying on the supplier.
- Avionics intrusion detection
- Resource-aware, adaptive and unsupervised detection for aircraft data buses such as MIL-STD-1553, built on attack analysis and controlled simulation.
Some of our lab members
-
Steven H. H. DingI am an Assistant Professor in the School of Information Studies at McGill University and an Adjunct Assistant Professor in the School of Computing at Queen's University. My research applies machine learning to security problems, including binary code analysis, vulnerability analysis, malware and firmware security. I received my PhD from McGill University in 2019.
Publications
- UniSafe: Modality-Agnostic Hateful Content Detection via Shared-Space Projection International World Wide Web Conference (WWW), 2026
- Supplier-Independent Capability Verification of Software and Firmware with AI-Driven ATT&CK Mapping International Conference on Cyber Conflict (CyCon), 2026
- Reinforced Graph Reduction for Efficient Anomaly Detection in Large-Scale Networks IEEE Swiss Conference on Data Science (SDS), 2026
- Security risk assessment of android automotive OS software supply chain using firmware reverse engineering Computers & Security, 2026
- SATCLIP-GNN: Cold-Start PM2.5 Forecasting with Satellite-Derived Location Priors IEEE Mediterranean and Middle-East Geoscience and Remote Sensing Symposium (M2GARSS), 2026
- Transforming Generic Coder LLMs to Effective Binary Code Embedding Models for Similarity Detection NeurIPS, 2025
- TALME: Topical Adversarial LLM-based Misinformation Enforcer International Conference on Advances in Artificial Intelligence (ICAAI), 2025
- ProvSpider: A Robust and Universal Toolkit for Binary Provenance Analysis Using Deep Learning IEEE International Symposium on Network Computing and Applications (NCA), 2025
- Toward a Robust Detection of PowerShell Malware against Code Mixing and Obfuscation by Using Sentence Transformer and Similarity Learning ACM Transactions on Privacy and Security, 2025
- MalGPT: A Generative Explainable Model for Malware Binaries ECML PKDD, 2025
All publications (55)
- Vulnerability Patch Verification for Military Software Systems Through AI-Driven Code-Level Rule Generation International Conference on Cyber Conflict, 2025
- Understanding Abandonment and Slowdown Dynamics in the Maven Ecosystem International Conference on Mining Software Repositories (MSR), 2025
- Obfuscated Clone Search in JavaScript based on Reinforcement Subsequence Learning ACM Transactions on Software Engineering and Methodology, 2025
- Mecha: A Neural-Symbolic Open-Set Homogeneous Decision Fusion Approach for Zero-Day Malware Similarity Detection IEEE Transactions on Software Engineering, 2025
- Automating SBOM Generation with Zero-Shot Semantic Similarity International Conference on Signal Processing and Information Communications (ICSPIC), 2025
- Leveraging Human Knowledge in Large Language Model for Obfuscation-Resisted Phishing URL Detection International Conference on Mobile and Secure Services (MobiSecServ), 2024
- A First Look at Self-Admitted Miscommunications in GitHub Issues IEEE/ACM International Conference on Automated Software Engineering Workshops (ASEW), 2024
- Dynamic Neural Control Flow Execution: an Agent-Based Deep Equilibrium Approach for Binary Vulnerability Detection ACM International Conference on Information and Knowledge Management (CIKM), 2024
- NeuroYara: Learning to Rank for Yara Rules Generation Through Deep Language Modeling and Discriminative N-Gram Encoding IEEE Transactions on Dependable and Secure Computing, 2024
- An empirical study on developers’ shared conversations with ChatGPT in GitHub pull requests and issues Empirical Software Engineering, 2024
- PulseAnomaly: Unsupervised Anomaly Detection on Avionic Platforms With Seasonality and Trend Modeling in Transformer Networks IEEE Transactions on Dependable and Secure Computing, 2024
- VeriBin: A Malware Authorship Verification Approach for APT Tracking through Explainable and Functionality-Debiasing Adversarial Representation Learning ACM Transactions on Privacy and Security, 2024
- ERS0: Enhancing Military Cybersecurity with AI-Driven SBOM for Firmware Vulnerability Detection and Asset Management International Conference on Cyber Conflict, 2024
- Accelerating Autonomous Cyber Operations: A Symbolic Logic Planner Guided Reinforcement Learning Approach International Conference on Computing, Networking and Communications (ICNC), 2024
- Unmasking of Maskware: Detection and Prevention of Next-Generation Mobile Crypto-Ransomware International Symposium on Foundations and Practice of Security, 2024
- Ch4os: Discretized Generative Adversarial Network for Functionality-Preserving Evasive Modification on Malware International Conference on Artificial Neural Networks (ICANN), 2024
- Variational Autoencoder with Temporal Condition for Effective Shape-based Calcium Imaging Neuron Registration IEEE International Conference on Bioinformatics and Biomedicine (BIBM), 2023
- GenTAL: Generative Denoising Skip-gram Transformer for Unsupervised Binary Code Similarity Detection International Joint Conference on Neural Networks (IJCNN), 2023
- TDRLM: Stylometric learning for authorship verification by Topic-Debiasing Expert Systems with Applications, 2023
- MaGnn: Binary-Source Code Matching by Modality-Sharing Graph Convolution for Binary Provenance Analysis IEEE Annual International Computer Software and Applications Conference (COMPSAC), 2023
- Milo: Attacking Deep Pre-trained Model for Programming Languages Tasks with Anti-analysis Code Obfuscation IEEE Annual International Computer Software and Applications Conference (COMPSAC), 2023
- Asm2Seq: Explainable Assembly Code Functional Summary Generation for Reverse Engineering and Vulnerability Analysis Digital Threats Research and Practice, 2023
- AIM: An Android Interpretable Malware detector based on application class modeling Journal of Information Security and Applications, 2023
- VulANalyzeR: Explainable Binary Vulnerability Detection with Multi-task Learning and Attentional Graph Convolution ACM Transactions on Privacy and Security, 2023
- SV1DUR: A Real-Time MIL-STD-1553 Bus Simulator with Flight Subsystems for Cyber-Attack Modeling and Assessments IEEE Military Communications Conference (MILCOM), 2022
- Adversarial Variational Modality Reconstruction and Regularization for Zero-Day Malware Variants Similarity Detection IEEE International Conference on Data Mining (ICDM), 2022
- D2D-MAP: A Drone to Drone Authentication Protocol Using Physical Unclonable Functions IEEE Transactions on Vehicular Technology, 2022
- AdaptIDS: Adaptive Intrusion Detection for Mission-Critical Aerospace Vehicles IEEE Transactions on Intelligent Transportation Systems, 2022
- OD1NF1ST: True Skip Intrusion Detection and Avionics Network Cyber-attack Simulation ACM Transactions on Cyber-Physical Systems, 2022
- H4rm0ny: A Competitive Zero-Sum Two-Player Markov Game for Multi-Agent Learning on Evasive Malware Generation and Detection IEEE International Conference on Cyber Security and Resilience (CSR), 2022
- JARV1S: Phenotype Clone Search for Rapid Zero-Day Malware Triage and Functional Decomposition for Cyber Threat Intelligence International Conference on Cyber Conflict, 2022
- SCS-Gan: Learning Functionality-Agnostic Stylometric Representations for Source Code Authorship Verification IEEE Transactions on Software Engineering, 2022
- A Review and Analysis of Attack Vectors on MIL-STD-1553 Communication Bus IEEE Transactions on Aerospace and Electronic Systems, 2022
- CamoDroid: An Android application analysis environment resilient against sandbox evasion Journal of Systems Architecture, 2022
- TASR: Adversarial learning of topic-agnostic stylometric representations for informed crisis response through social media Information Processing & Management, 2022
- Cut It: Deauthentication Attacks on Protected Management Frames in WPA2 and WPA3 International Symposium on Foundations and Practice of Security, 2022
- I-MAD: Interpretable malware detector using Galaxy Transformer Computers & Security, 2021
- ER-AE: Differentially Private Text Generation for Authorship Anonymization Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies (NAACL-HLT), 2021
- A Novel and Dedicated Machine Learning Model for Malware Classification International Conference on Software Technologies (ICSOFT), 2021
- Detecting High-Engaging Breaking News Rumors in Social Media ACM Transactions on Management Information Systems, 2020
- Asm2Vec: Boosting Static Representation Robustness for Binary Clone Search against Code Obfuscation and Compiler Optimization IEEE Symposium on Security and Privacy (S&P), 2019
- Detecting breaking news rumors of emerging topics in social media Information Processing & Management, 2019
- Arabic Authorship Attribution ACM Transactions on Asian and Low-Resource Language Information Processing, 2018
- Learning Stylometric Representations for Authorship Analysis IEEE Transactions on Cybernetics, 2017
- A Visualizable Evidence-Driven Approach for Authorship Attribution ACM Transactions on Information and System Security, 2015