I am an Assistant Professor in the Department of Computer Science at the University of Texas at Dallas. My research interests are in security and privacy, particularly using empirical analytics and machine learning to identify and mitigate malicious activities on the Internet. My current work focuses on the security problems of deep learning systems, social media, and next-generation network systems.

I am a recipient of the NSF CAREER Award (2022), IETF Applied Networking Research Prize (ANRP 2020), IEEE/IFIP DSN Best Paper Award (2020), IMC Best Paper Award Runner-up (2019), Top 10 Finalist of CSAW Best Applied Security Paper Award (2022, 2017), and Yahoo! Key Scientific Challenges Program Award (2012).

I obtained my Ph.D. in Computer Science at the Georgia Institute of Technology advised by Prof. Nick Feamster. I also worked closely with Prof. Vern Paxson and spent two summers at the University of California, Berkeley/ICSI. Before joining the University of Texas at Dallas, I was a postdoc at the University of California, Santa Barbara working with Prof. Giovanni Vigna and Prof. Christopher Kruegel.

RA positions available: I am looking for self-motivated PhD students who have strong interests in deep learning and cybersecurity research. If you are interested, feel free to send me an email.

Selected Recent Publications

• CCS'22 Don't Kick Over the Beehive: Attacks and Security Analysis on Zigbee PDF
  Xian Wang and Shuang Hao
  29th ACM Conference on Computer and Communications Security, Los Angeles, CA, November 2022.
• CCS'21 Understanding and Detecting Mobile Ad Fraud Through the Lens of Invalid Traffic PDF
  Suibin Sun, Le Yu, Xiaokuan Zhang, Minhui Xue, Ren Zhou, Haojin Zhu, Shuang Hao, and Xiaodong Lin
  28th ACM Conference on Computer and Communications Security, Seoul, South Korea, November 2021.
  Finalist at the CSAW Best Applied Security Paper Award
• USENIX Security'21 Weak Links in Authentication Chains: A Large-scale Analysis of Email Sender Spoofing Attacks PDF
  Kaiwen Shen, Chuhan Wang, Xiaofeng Zheng, Minglei Guo, Chaoyi Lu, Baojun Liu, Yuxuan Zhao, Shuang Hao, Haixin Duan, Qinfeng Pan, and Min Yang
  30th USENIX Security Symposium, Vancouver, Canada, August 2021.
• NDSS'21 From WHOIS to WHOWAS: A Large-Scale Measurement Study of Domain Registration Privacy under the GDPR PDF
  Chaoyi Lu, Baojun Liu, Yiming Zhang, Zhou Li, Fenglu Zhang, Haixin Duan, Ying Liu, Joann Chen, Jinjin Liang, Zaifeng Zhang, Shuang Hao, and Min Yang
  28th Network and Distributed System Security Symposium, San Diego, CA, February 2021.
• CCS'20 Talking with Familiar Strangers: An Empirical Study on HTTPS Context Confusion Attacks PDF
  Mingming Zhang, Xiaofeng Zheng, Kaiwen Shen, Ziqiao Kong, Chaoyi Lu, Yu Wang, Haixin Duan, Shuang Hao, Baojun Liu, and Min Yang
  27th ACM Conference on Computer and Communications Security, Orlando, FL, November 2020.
• CCS'20 Lies in the Air: Characterizing Fake-base-station Spam Ecosystem in China PDF
  Yiming Zhang, Baojun Liu, Chaoyi Lu, Zhou Li, Haixin Duan, Shuang Hao, Mingxuan Liu, Ying Liu, Dong Wang, and Qiang Li
  27th ACM Conference on Computer and Communications Security, Orlando, FL, November 2020.
• USENIX Security'20 Poison Over Troubled Forwarders: A Cache Poisoning Attack Targeting DNS Forwarding Devices PDF
  Xiaofeng Zheng, Chaoyi Lu, Jian Peng, Qiushi Yang, Dongjie Zhou, Baojun Liu, Keyu Man, Shuang Hao, Haixin Duan, and Zhiyun Qian
  29th USENIX Security Symposium, Boston, MA, August 2020.
• DLS'20 Attributing and Detecting Fake Images Generated by Known GANs PDF Code
  Matthew Joslin and Shuang Hao
  3rd Deep Learning and Security Workshop, co-located with the 41st IEEE Symposium on Security and Privacy, San Francisco, CA, May 2020.
• NDSS'20 CDN Judo: Breaking the CDN DoS Protection with Itself PDF
  Run Guo, Weizhong Li, Baojun Liu, Shuang Hao, Jia Zhang, Haixin Duan, Kaiwen Shen, Jianjun Chen, and Ying Liu
  27th Network and Distributed System Security Symposium, San Diego, CA, February 2020.
• S&P'19 Measuring and Analyzing Search Engine Poisoning of Linguistic Collisions PDF
  Matthew Joslin, Neng Li, Shuang Hao, Minhui Xue, and Haojin Zhu
  40th IEEE Symposium on Security and Privacy, San Francisco, CA, May 2019.
• USENIX Security'18 Rampart: Protecting Web Applications from CPU-Exhaustion Denial-of-Service Attacks PDF Code
  Wei Meng, Chenxiong Qian, Shuang Hao, Kevin Borgolte, Giovanni Vigna, Christopher Kruegel, and Wenke Lee
  27th USENIX Security Symposium, Baltimore, MD, August 2018.
• USENIX Security'18 Who Is Answering My Queries: Understanding and Characterizing Interception of the DNS Resolution Path PDF
  Baojun Liu, Chaoyi Lu, Haixin Duan, Ying Liu, Zhou Li, Shuang Hao, and Min Yang
  27th USENIX Security Symposium, Baltimore, MD, August 2018.
  Media coverage The Register, Hackread, and Rambler.
• S&P'18 Enumerating Active IPv6 Hosts for Large-scale Security Scans via DNSSEC-signed Reverse Zones PDF Data
  Kevin Borgolte, Shuang Hao, Tobias Fiebig, and Giovanni Vigna
  39th IEEE Symposium on Security and Privacy, San Francisco, CA, May 2018.
• NDSS'18 Cloud Strife: Mitigating the Security Risks of Domain-Validated Certificates PDF
  Kevin Borgolte, Tobias Fiebig, Shuang Hao, Christopher Kruegel, and Giovanni Vigna
  25th Network and Distributed System Security Symposium, San Diego, CA, February 2018.
• NDSS'18 Smoke Screener or Straight Shooter: Detecting Elite Sybil Attacks in User-Review Social Networks PDF
  Haizhong Zheng, Minhui Xue, Hao Lu, Shuang Hao, Haojin Zhu, Xiaohui Liang, and Keith Ross
  25th Network and Distributed System Security Symposium, San Diego, CA, February 2018.
  
• CCS'17 DIFUZE: Interface Aware Fuzzing for Kernel Drivers PDF
  Jake Corina, Aravind Machiry, Christopher Salls, Yan Shoshitaishvili, Shuang Hao, Christopher Kruegel, and Giovanni Vigna
  24th ACM Conference on Computer and Communications Security, Dallas, TX, October 2017.
  Finalist at the CSAW Best Applied Security Paper Award
• CCS'16 Lurking Malice in the Cloud: Understanding and Detecting Cloud Repository as a Malicious Service PDF
  Xiaojing Liao, Sumayah Alrwais, Kan Yuan, Luyi Xing, XiaoFeng Wang, Shuang Hao, and Raheem Beyah
  23rd ACM Conference on Computer and Communications Security, Vienna, Austria, October 2016.
  Media coverage SC Magazine and Daily Mail.
• CCS'16 PREDATOR: Proactive Recognition and Elimination of Domain Abuse at Time-Of-Registration PDF
  Shuang Hao, Alex Kantchelian, Brad Miller, Vern Paxson, and Nick Feamster
  23rd ACM Conference on Computer and Communications Security, Vienna, Austria, October 2016.
  Media coverage The Wall Street Journal, Dark Reading, and Daily Mail.
• CCS'15 Drops for Stuff: An Analysis of Reshipping Mule Scams PDF Slides
  Shuang Hao, Kevin Borgolte, Nick Nikiforakis, Gianluca Stringhini, Manuel Egele, Michael Eubanks, Brian Krebs, and Giovanni Vigna
  22nd ACM Conference on Computer and Communications Security, Denver, CO, October 2015.
  Media coverage Krebs on Security, Schneier on Security, Slashdot, and CNN.