Song Li

CS Programmer Researcher

I am Song Li
Computer Science
Ph.D. student
Johns Hopkins University
Information and Network Security

About Me

Name: Song Li
Date of birth: Oct 13 1992
Nationality: Chinese
Email: [email protected]

What I Do ?

As a Ph.D. student in computer science, I'm doing research related to Web/Information/Software security. Currently, I'm focusing on Static Code Analysis, Browser Fingerprinting techniques and other security researches. What's more, I'm also interested in Cryptography and IoT security.

Web Security
Software Security
Browser Security
Algorithm
Data Analyzing

download my cv

Resume

Submited Vulnerabilities

2020
Command Injection
- CVE-2020-7596 codecov
- CVE-2020-7597 codecov
- CVE-2019-10792 bodyman
- CVE-2019-10794 component-flatten
- CVE-2019-10793 dot-object
- CVE-2020-7600 querymen
- CVE-2019-10795 undefsafe
- CVE-2019-10798 rdf-graph-array
2019
Command Injection
- CVE-2019-10777 aws-lambda
- CVE-2019-10776 git-diff-apply
- CVE-2019-10796 RPI
- CVE-2019-10801 enpeem
- CVE-2019-10802 giting
- CVE-2019-10787 im-resize
- CVE-2019-10783 lsof
- CVE-2019-10786 network-manager
- CVE-2019-10803 push-dir
- CVE-2019-10804 serial-number
- CVE-2019-10791 promise-probe

Education

Aug. 2018-present

Ph.D. Student
Johns Hopkins University, Baltimore, MD, USA

I'm a Ph.D. student of computer science in Johns Hopkins University.
Aug. 2017-Aug. 2018

Ph.D. Student
Lehigh University, Bethlehem, PA, USA

I was a Ph.D. student of computer science, focusing on web/network security.
Aug. 2015-May 2017

Master Student
Lehigh University, Bethlehem, PA, USA

Master student and research assistant in computer science, focusing on browser fingerprinting
Aug. 2011-May 2015

Undergraduate Student
Beijing Institute of Technology, Beijing, China

I was a undergraduate student of software engineering in Beijing Institute of Technology.

Experience

Jun. 2017-Oct. 2018

A Large-scale Measurement Study of Browser Fingerprint
Software Engineer & Web Privacy Research Assistant

Description: Made a large-scale measurement of browser fingerprint, including popular features introduced by multiple research papers. Collected more than 15,500,788 visiting records from 226 countries, 960,853 pieces of dynamics information belonging to 661,827 browser instances. We analyzed the robustness, uniqueness of each feature and also extracted the dynamics of browser fingerprints and the reason for fingerprints changing.

Github Repository: https://github.com/Song-Li/dynamic_fingerprinting
Oct. 2016-May 2017

Deterministic Browser
Software Engineer & Web Privacy Research Assistant

Description: Built the first execution time deterministic browser, DeterFox (deterfox.com), based on Firefox open-source project to defend against timing channel attacks. The paper has been accepted by The ACM Conference on Computer and Communications Security, 2017

Github Repository: https://github.com/nkdxczh/gecko-dev/tree/deterfox
Feb. 2016-Jul. 2016

Cross-browser Fingerprinting
Software Engineer & Web Privacy Research Assistant

Description: Implemented the first cross-browser fingerprinting framework that relies on novel hardware and OS level features, such as graphics cards and installed writing scripts. The project paper has been accepted by Network & Distributed System Security Symposium, 2017

Github Repository: https://github.com/Song-Li/cross_browser
Feb. 2016-Jul. 2016

Freelancer
Programmer

Description: Developed more than 20 projects, such as physical simulation of water flow, parallel version of PageRank, the ant colony optimization algorithm and the genetic optimization algorithm for train station management and Tabu Search algorithm for logistics activities

Programming Languages: C++, Python, JavaScript, R and MATLAB
Jul. 2014-Dec. 2014

Online Contribution Management System
J2EE Developer Intern in IBM

Description: Implemented some new features and fixed some bugs in a J2EE based management tool used by the IBM CICS Lv3 team

Implementation: Java, Spring2 and Hibernate

Skills

Browser Security

95%

C++

90%

Python

85%

Algorithm

95%

JavaScript

90%

Data Structure

85%