Published works in premier software engineering venues such as ICSE, ASE, FSE, IEEE TRANSACTIONS ON SOFTWARE ENGINEERING, and Empirical Software Engineering. Holds four patents. Recent academic achievements include:
- Paper accepted by TOSEM: 'An empirical study on vulnerability disclosure management of open source software systems'.
- Two papers accepted by FSE 2025: 'One-for-All Does Not Work! Enhancing Vulnerability Detection by Mixture-of-Experts (MoE)' and 'Code Change Intention, Development Artifact and History Vulnerability: Putting Them Together for Vulnerability Fix Detection by LLM'.
- Paper accepted by MSR 2025: 'From Industrial Practices to Academia: Uncovering the Gap in Vulnerability Research and Practice'.
Research Experience
Worked as a senior software developer at Alibaba Group for two years. Currently leads a research team at Huawei Canada, focusing on designing and implementing research protocols to improve open source supply chain security.
Education
Received a Ph.D. degree in Computer Science from the Software Analysis and Intelligence Lab (SAIL Lab) at Queen’s University, Canada, under the supervision of Professor Ahmed E. Hassan and Professor Shaowei Wang. The thesis focused on studying extrinsic rewards in open source software communities, such as leveraging bounties (monetary incentives) to address GitHub issue reports and the impact of bounties on Stack Overflow.
Background
Research interests include intelligent vulnerability management, mining software repositories, and extrinsic incentives in crowdsourced software engineering. Currently a principal researcher at Huawei Canada (Software Engineering Application Technology Lab), leading a team to conduct and apply cutting-edge techniques to design and implement research protocols for improving supply chain security in open source. Collaborates closely with global researchers and product teams to help them improve OSS asset management/OSS supply chain security and integrate our solutions into the product.
Miscellany
Personal website powered by Jekyll with the al-folio theme and hosted on GitHub Pages.