Spinpx

Chen Peng 陈鹏

Emai1: spinpx (a) gmai1
Github | Twitter | Wechat

About

I am an independent researcher exploring the intersection of AI and security.

Open Source

Angora: search-based fuzzing without symbolic execution.

libdft64: 64-bit dynamic taint tracking on Intel Pin.

Hopper: interpretative fuzzing for library APIs.

PromptFuzz: prompt fuzzing for fuzz driver generation.

Publications

Google Scholar

Posts

@InProceedings{Cottontail,
      title={Large Language Model-Driven Concolic Execution for Highly Structured Test Input Generation},
      author={Tu, Haoxin and Lee, Seongmin and Li, Yuxian and Chen, Peng and Jiang, Lingxiao and B{\"o}hme, Marcel},
      booktitle = {IEEE Symposium on Security and Privacy (S\&P)},
      address = {San Francisco, CA},
      year={2026}
    }
    
    @InProceedings{AgentSentinel,
      title={AgentSentinel: An End-to-End and Real-Time Security Defense Framework for Computer-Use Agents},
      author = {Haitao Hu and Peng Chen and Yanpeng Zhao and Yuqi Chen},
      booktitle={ACM Conference on Computer and Communications Security (CCS)},
      year={2025}
    }

@InProceedings{Promptfuzz,
            author = {Lyu, Yunlong and Xie, Yuxuan and Chen, Peng and Chen, Hao},
            title = {Prompt Fuzzing for Fuzz Driver Generation},  
            booktitle = {ACM Conference on Computer and Communications Security (CCS)},
            year = {2024},
            month = {10},
            address = {Salt Lake City, UT, USA},
      }
    
      @InProceedings{Hopper,
        author = {Peng Chen and Yuxuan Xie and Yunlong Lyu and Yuxiao Wang and Hao Chen},
        title = {{HOPPER}: Interpretative Fuzzing for Libraries},
        booktitle = {ACM Conference on Computer and Communications Security (CCS)},
        year = {2023},
        month = {11},
        address = {Copenhagen, Denmark},
      }

@InProceedings{Miner,
        author = {Chenyang Lyu and Jiacheng Xu and Shouling Ji and Xuhong Zhang and Qinying Wang and Binbin Zhao and Gaoning Pan and Wei Cao and Peng Chen and Raheem Beyah},
        title = {{MINER}: A Hybrid Data-Driven Approach for REST API Fuzzing},
        booktitle = {{USENIX} Security Symposium ({USENIX} Security)},
        year={2023},
        address = {Ananeim, CA},
        month = aug,
      }

@InProceedings{Greyone,
        author = 	 {Shuitao Gan and Chao Zhang and Peng Chen and Bodong Zhao and Xiaojun Qin and Dong Wu and Zuoning Chen},
        title = {{GREYONE}: Data Flow Sensitive Fuzzing},
        booktitle = {{USENIX} Security Symposium ({USENIX} Security)},
        year={2020},
        address = {Boston, MA},
        month = aug,
      }
      
      @inproceedings{Integrity,
          author = {Rong, Yuyang and Chen, Peng and Hao Chen},
          title = {Integrity: Finding Integer Errors by Targeted Fuzzing},
          booktitle = {International Conference on Security and Privacy in Communication Networks (SECURECOMM)},
          year = {2020},
          month = {10}
      }
    
      @InProceedings{Matryoshka,
          author = {Peng Chen and Jianzhong Liu and Hao Chen},
          title = {{Matryoshka}: fuzzing deeply nested branches},
          booktitle = {ACM Conference on Computer and Communications Security (CCS)},
          address = {London, UK},
          year = {2019},
          month = {11},
      }
      
      @InProceedings{Angora,
        author = 	 {Peng Chen and Hao Chen},
        title = 	 {Angora: efficient fuzzing by principled search},
        booktitle = {IEEE Symposium on Security and Privacy (S\&P)},
        address = {San Francisco, CA},
        year = {2018},
        month = {5},
      }
      
      @InProceedings{UAV,
        author = 	 {Peng Chen and Hao Chen},
        title = 	 {POSTER: Security analysis of personal unmanned aerial vehicles},
        booktitle = {International Conference on Security and
      Privacy in Communication Networks (SECURECOMM)},
        year = {2016},
        month = {10}
      }