Program analysis tools for hard-to-detect threats
Uncovering evasive threats and hard-to-find business logic vulnerabilities
Meng Wang
Ph.D. student at CISPA Helmholtz Center for Information Security advised by Dr. Ali Abbasi . My work focuses on system and firmware security. Previously, I worked with AWS Proactive Security on a web vulnerability scanner for AWS-owned websites.
System securityFirmware analysisFuzzingWeb security
What I Work On
Low-level firmware security
Finding bugs below the OS in firmware, bootloaders, system management mode, and hardware-adjacent stacks.
Scalable vulnerability discovery
Building automated systems that make deep security testing practical across large, real-world codebases.
Updates
News
- PyFEX accepted to CCS 2026.
- Anota accepted to NDSS 2026.
- SmuFuzz accepted to IEEE Symposium on Security and Privacy 2026.
- Two papers accepted to NDSS 2025 on video acceleration stacks and bootloader memory safety.