ZHE LI

• 3.9 GPA
• Capstone Project: Symbolic Execution on Scripting Languages: This Project is supported by NSF fund and conducted by me and my supervisor to do research on symbolic executions on scripting level programming languages. Symbolic execution is a binary-level automated testing method. We divided project into two parts as following.
• Research Project (Part One): Symbolic execution on JavaScript in the environment of Node.js
• Implemented a running example for the approach of an in-situ method to test back-end JS libraries from NPM in Node.js based on V8 engine through V8 intrinsic functions.
• Implemented a prototype framework of applying symbolic execution on front-end JS Script based on multiple testing frameworks available like Jest and Puppeteer etc. It is able to test JavaScript embedded in html page with symbolic execution technique with MetaMask as a running example using React Component.
• Research on bytecode interpretation traces captured within V8 engine for symbolic execution with KLEE. It involves modifying the non-optimizing compiler Sparkplug feature of V8 and the LLVM translator of McSema to achieve symbolic execution in KLEE.
• Research Project (Part Two): Symbolic execution on Lua Scripting
• Implemented a working example of applying traditional symbolic execution technique on Nmap (on NSE scripts) which has an embedded Lua interpreter and adds more complexity during web interaction. Further we applied the working example to generate honeyfarm for website to defending attacking Nmap scripts
• Enabled using AFL as a comparison method to test Nmap scripts in order to illustrate the efficiency of using symbolic execution
• Synthesized results from symbolic execution on Lua scripts (NSE scripts from NMAP in particular) to generate honeyfarms to defend attackers

Publication:

• Zhe Li and Fei Xie. 2023. Concolic Testing of Front-end JavaScript. In Proceedings of the 26th International Conference on Fundamental Approaches to Software Engineering (FASE’23). Pairs, France.
• Zhe Li and Fei Xie. 2023. In-Situ Concolic Testing of JavaScripts. In Proceedings of the 30th IEEE International Conference on Software Analysis, Evolution and Reengineering (SANER’23). Macao SAR, China.
• Zhe Li, Bo Chen, Wu-chang Feng, and Fei Xie. 2021. Concolic Execution of NMap Scripts for Honeyfarm Generation. In Proceedings of the 8th ACM Workshop on Moving Target Defense (MTD '21). Association for Computing Machinery, New York, NY, USA
• Yunwei Dong, Zhe Li, D Towey, “On the Relationship between Model Coverage and Code Coverage Using MATLAB’s Simulink”, Software Quality, Reliability and Security(QRS), 2015, 3-5 August,Vancouver, BC, ISSN:978-1-4673-7988-5
• Yunwei Dong, Zhe Li, H Zhan, ”A Model Driven Testing Solution for Embedded System with Simulink/Stateflow model”, International Conference on Trustworthy Systems and Their Applications, 2015, 8-9 July,Hualien,Taiwan，ISSN: 978-1-4673-9580-9
• Yibo Cheng, Yunwei Dong, Zhe Li, “A Transformation from Simulink/Stateflow to Hierarchical Interface Automata”, 2013 International Conference on Information Technology and Applications, Nov. 2013, pp.414-418.

• 3.7 GPA
• Research Project: Model Testing Methods based on Simulink Model of Safety Critical System
• The research aimed at predicting the security of Simulink model to save development costs through the technique of mapping model coverage to code coverage
• Ability in problem analysis and solving was polished; learned more about research methods and paper writing methods through communications with Dave Towey at University of Nottingham Ningbo and TY CHEN at Swinburne
• Developed a technique of transforming Simulink/Stateflow model to a Hierarchical Interface Automata and to participate in developing the tool based on the developed method
• Analyzed behaviors within models and find out coverage criteria relationship between model and generated code
• Conducted experiments to ensure the correctness of the mapping method
• Summarized constraints within the Simulink model of a certain system and managed to restore solve them with appropriate Constraints Solvers,

• 3.6 GPA and ranked in Top 19% of class
• Capstone Project: Standardized Operation Procedure System for State Grid Ningxia Electric Power Company,
• Responsible for requirements collection and analysis
• In charge of GUI design, database design for Permission Assignment Module including Manual Assignment Mode and Batch Assignment Mode as well as their Design Pattern Selection
• Implemented the above mentioned Module with Java on SoTower Platform independently as well as its Unit Testing
• Conducted Integration Testing and System Testing of the entire system and wrote related documents
• Learned about the procedure of software development and increased practical experience