Pei Wang

Pei Wang

I am a software engineer at Google. Previously, I was a Security Researcher at Baidu X-Lab. I finished my Ph.D. at the College of Information Sciences and Technology, The Pennsylvania State University, in 2018. I received my master's degree from University of Waterloo and my bachelor's degree from Peking University. My research interest subsumes dependable software engineering, program analysis, formal methods, trusted execution environments, and software obfuscation. Recently I started to work on web security, mostly to fight XSS. I am actively exploring multiple security research domains. My work has been regularly recognized by both the industry and academia. See my publication list for the latest peer-reviewed work. Visit my personal website to learn more about my research.
Authored Publications
Sort By
  • Title
  • Title, descending
  • Year
  • Year, descending
    Google
Adopting Trusted Types in Production Web Frameworks to Prevent DOM-Based Cross-Site Scripting: A Case Study
Bjarki Ágúst Guðmundsson
Proceedings of the 2021 IEEE European Symposium on Security and Privacy Workshops, IEEE (to appear)
If It’s Not Secure, It Should Not Compile: Preventing DOM-Based XSS in Large-Scale Web Development with API Hardening
Julian Bangert
Proceedings of the 43rd International Conference on Software Engineering (ICSE '21), IEEE (2021)
Building and maintaining a third-party library supply chain for productive and secure SGX enclave development
Mingshen Sun
Huibo Wang
Tongxin Li
Rundong Zhou
Zhaofeng Chen
Yiming Jing
Proceedings of the ACM/IEEE 42nd International Conference on Software Engineering: Software Engineering in Practice (2020), pp. 100-109
Towards Memory Safe Enclave Programming with Rust-SGX
Huibo Wang
Mingshen Sun
Yiming Jing
Ran Duan
Long Li
Yulong Zhang
Tao Wei
Zhiqiang Lin
Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security (2019), pp. 2333-2350
Generating Precise Dependencies for Large Software
Jinqiu Yang
Lin Tan
Robert Kroeger
J. David Morgenthaler
Proceedings of the Forth International Workshop on Managing Technical Debt, IEEE (2013), pp. 47-50