My Briefings submission has been accepted to Black Hat Europe 2026, where I will be speaking.
将作为 Black Hat Europe 2026 Briefings 讲者出席大会。
马福辰Fuchen Ma
Postdoctoral researcher · Shuimu Scholar博士后 · 水木学者
School of Software, Tsinghua University清华大学 · 软件学院
My research focuses on robot security, the generation, collection and curation of robot data, and interoperable systems for heterogeneous robots. My previous work focused on system security and testing.我的研究主要关注机器人安全与攻防、机器人数据的生成、收集与筛选,以及异构机器人的互操作系统。此前主要从事系统安全与测试研究。
My Briefings submission has been accepted to Black Hat Europe 2026, where I will be speaking.
将作为 Black Hat Europe 2026 Briefings 讲者出席大会。
Our paper “USEC: A User-Requirement-Driven Mandatory Access Control Framework for Operating Systems” has been conditionally accepted to OSDI 2026.
论文 “USEC: A User-Requirement-Driven Mandatory Access Control Framework for Operating Systems” 获 OSDI 2026 有条件录用。
I will serve on the CCS 2026 Cycle B program committee.
将担任 CCS 2026 Cycle B 程序委员会委员。
Selected papers on system security and testing. Click a figure for a closer look. 系统安全与测试方向的部分研究成果。点击配图可查看论文原图。
Fig. 6 · View figure查看大图 ↗ OSDI ’26
Uses resource-centric policy templates, demand-driven permission checks and LSM-compatible interfaces to simplify Linux mandatory access control.通过面向资源的策略模板、按需权限检查与兼容 LSM 的接口,简化 Linux 内核的强制访问控制。
Fig. 2 · View figure查看大图 ↗ EuroSys ’26
Combines hybrid message generation, two-tier parallel fuzzing and log-based oracles to test enterprise blockchain systems.结合主动与被动消息生成、两级并行测试和日志断言,对企业级区块链系统进行测试。
Fig. 3 · View figure查看大图 ↗ S&P ’26
Coordinates HTTP, RTSP and ONVIF through a camera status model to find vulnerabilities caused by interactions between protocols.通过摄像头状态模型协调 HTTP、RTSP 和 ONVIF,发现协议交互引起的安全问题。
Fig. 5 · View figure查看大图 ↗ ASE ’25 · Distinguished Paper Award
Models interactions between Wi-Fi transmission and reception, then uses latency feedback to guide coordinated fuzzing.建模 Wi-Fi 网卡发送与接收过程的相互影响,利用时延反馈指导双向协同测试。
Fig. 3 · View figure查看大图 ↗ USENIX Security ’25
Models relationships between cross-node file operations and uses temporary inconsistency duration to guide testing.建模跨节点文件操作之间的关系,以临时不一致的持续时间指导测试,发现元数据一致性问题。
Fig. 4 · View figure查看大图 ↗ S&P ’24
Combines runtime delay injection, deep-priority search and transient delays to find timeout bugs in distributed systems.结合运行时延迟注入、深度优先级搜索与瞬态延迟,发现分布式系统的超时处理缺陷。
IEEE TSE · IEEE TDSC · ACM TOSEM
I received my Ph.D. from Tsinghua University in 2024, advised by Prof. Jiaguang Sun and Prof. Yu Jiang, and my bachelor’s degree from Beijing University of Posts and Telecommunications in 2019.
2024 年于清华大学获得博士学位,导师为孙家广教授和姜宇教授;2019 年于北京邮电大学获得学士学位。
My earlier research focused on security testing for blockchain and distributed systems. My current work extends this research to robotic systems. I welcome academic discussions and collaborations on robot security, data and interoperability.
我的前期研究聚焦区块链与分布式系统的安全测试,目前主要面向机器人系统开展相关研究。欢迎围绕机器人安全、数据与互操作开展学术交流与合作。
11-308, East-Main Building · School of Software, Tsinghua University清华大学软件学院 · 东主楼 11-308