avatar

Wenhao Wang

Associate Professor
Institute of Information Engineering, CAS
wangwenhao (at) iie.ac.cn


Biography

Dr. Wenhao Wang is an associate professor at Institute of Information Engineering (IIE), CAS. His research interests now focus on protecting user privacy data with the help of hardware features, such as Intel SGX, as well as cryptographic techniques (e.g., homomorphic encryption). Ongoing projects also include designing new hardware based TEEs (trusted execution environments) to support large scale data processing. Dr. Wenhao Wang was a visiting scholar of Prof. XiaoFeng Wang’s group in Indiana University Bloomington from April 2016 to August 2018, during which he worked closely with Prof. Wang and Prof. Haixu Tang in organizing the Genomic data privacy and security protection competition. Please find the cv here: in English, 中文.

Please send an email to wangwenhao@iie.ac.cn if you would like to join the group. Students with interests in topics related to operating system/software/virtualization/hardware-assisted security/TEE/privacy preserving technologies/microarchitectural side channels etc., are all welcome.

News

letter [Aug. 2025] Two papers on efficient and privacy-preserving neural network inference have been accepted for presentation at S&P 2025 and NDSS 2026. The first paper leverages sparsity in Transformers to reduce computational costs, while the second introduces performance-efficient fine-tuning (PEFT) adapters specifically designed for private inference.

letter [Aug. 2025] One paper on side channel attacks is accepted by IEEE Transactions on Information Forensics and Security (TIFS). The paper demonstrates that the leakage in Dilithium’s NTT-based polynomial multiplication can be effectively exploited in template attacks, and proposes a multivariate template attack to significantly improve key-recovery efficiency in both simulated and real-world settings.

letter [Oct. 2024] One paper is accepted to appear at NDSS 2025. We proposed NestedSGX, which supports existing SGX toolchains (the adapted SGX SDK and Occlum library OS) and runs SGX applications atop AMD SEV-SNP confidential VMs (CVMs).

letter [July. 2024] One paper on side channel attacks is accepted by IEEE Transactions on Information Forensics and Security (TIFS). We showed that only 38, 40 and 39 power traces are enough to recover private key s1 of Dilithium 2, 3 and 5 with 100% of success rate.

Selected Publications (Full list: Google Scholar)

* Corresponding authors, [ ] Equal Contributions, Advised by me

    0 0 1 2 1 3 2 4 5 6 7 8 3 4 9 10 5 6 11 12 13 14 15 16 17 7 18 19 20 8
  1. NDSS
    [ C20 ] CryptPEFT: Efficient and Private Neural Network Inference via Parameter-Efficient Fine-Tuning
    Saisai Xia, Wenhao Wang*, Zihao Wang*, Yuhui Zhang, Yier Jin, Dan Meng, Rui Hou
    Network and Distributed System Security Symposium (NDSS) 2026 (CCF-A)
    PDF Code To appear
  2. TIFS
    [ J8 ] Multivariate Template Attack against NTT based Polynomial Multiplication of Dilithium
    Haopeng Fan, Hailong Zhang*, Yongjuan Wang*, Wenhao Wang, Haojin Zhang, Qingjun Yuan
    IEEE Transactions on Information Forensics and Security (TIFS) (CCF-A)
    PDF
  3. S&P
    [ C19 ] Comet: Accelerating Private Inference for Large Language Model by Predicting Activation Sparsity
    Guang Yan, Yuhui Zhang*, Zimu Guo, Lutan Zhao, Xiaojun Chen, Chen Wang, Wenhao Wang, Dan Meng, Rui Hou*
    2025 IEEE Symposium on Security and Privacy (S&P) (CCF-A)
  4. NDSS
    [ C18 ] The Road to Trust: Building Enclaves within Confidential VMs
    Wenhao Wang, Linke Song, Benshan Mei, Shuang Liu, Shijun Zhao, Shoumeng Yan*, XiaoFeng Wang, Dan Meng, Rui Hou*
    Network and Distributed System Security Symposium (NDSS) 2025 (CCF-A)
    PDF Code
  5. TIFS
    [ J7 ] Screening Least Square Technique assisted Multivariate Template Attack against the Random Polynomial Generation of Dilithium
    Haopeng Fan, Hailong Zhang*, Yongjuan Wang*, Wenhao Wang, Yanbei Zhu, Haojin Zhang, Qingjun Yuan
    IEEE Transactions on Information Forensics and Security (TIFS) (CCF-A)
    PDF
  6. DAC
    [ C17 ] ThermalScope: A Practical Interrupt Side Channel Attack Based On Thermal Event Interrupts
    Xin Zhang, Zhi Zhang, Qingni Shen, Wenhao Wang, Yansong Gao, Zhuoxi Yang, Zhonghai Wu
    The 61st Design Automation Conference (DAC 2024) (CCF-A)
  7. JCS
    [ J6 ] Cache attacks on subkey calculation of Blowfish
    Haopeng Fan, Wenhao Wang*, Yongjuan Wang, Xiangbin Wang, Yang Gao
    Journal of Computer Security (JCS) (CCF-B)
    PDF
  8. ICDE
    [ C16 ] PP-Stream: A Privacy-Preserving Neural Network Inference Service with Stream Processing
    Qingxiu Liu, Qun Huang*, Xiang Chen, Sa Wang, Wenhao Wang, Shujie Han, Patrick P. C. Lee
    40th IEEE International Conference on Data Engineering (ICDE 2024) (CCF-A)
  9. ASPLOS
    [ C15 ] Verifying Rust Implementation of Page Tables in a Software Enclave Hypervisor
    Zhenyang Dai, Shuang Liu, Vilhelm Sjoberg*, Xupeng Li, Yu Chen, Wenhao Wang, Yuekai Jia, Sean Noble Anderson, Laila Elbeheiry, Shubham Sondhi, Yu Zhang, Zhaozhong Ni, Shoumeng Yan*, Ronghui Gu, Zhengyu He
    International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS 2024) (CCF-A)
    PDF
  10. HPCA
    [ C14 ] SegScope: Probing Fine-grained Interrupts via Architectural Footprints
    [Xin Zhang, Zhi Zhang], Qingni Shen*, Wenhao Wang, Yansong Gao, Zhuoxi Yang, Jiliang Zhang
    30th IEEE International Symposium on High-Performance Computer Architecture (HPCA 2024) (CCF-A)
    Code
  11. Security
    [ C13 ] Tossing in the Dark: Practical Bit-Flipping on Gray-box Deep Neural Networks for Runtime Trojan Injection
    Zihao Wang, Di Tang*, XiaoFeng Wang, Wei He, Zhaoyang Geng, Wenhao Wang*
    USENIX Security 2024 (CCF-A)
    PDF
  12. CCS
    [ C12 ] The Danger of Minimum Exposures: Understanding Cross-App Information Leaks on iOS through Multi-Side-Channel Learning
    [Zihao Wang, Jiale Guan], XiaoFeng Wang, Wenhao Wang, Luyi Xing, Fares Alharbi
    ACM Conference on Computer and Communications Security (ACM CCS 2023) (CCF-A)
    PDF Project Page
  13. TC
    [ J5 ] WhistleBlower: A System-level Empirical Study on RowHammer
    [Wei He, Zhi Zhang], Yueqiang Cheng, Wenhao Wang*, Wei Song, Yansong Gao, Qifei Zhang, Kang Li, Dongxi Liu, Surya Nepal
    IEEE Transactions on Computers (TC) (CCF-A)
    PDF
  14. TDSC
    [ J4 ] Implicit Hammer: Cross-Privilege-Boundary Rowhammer through Implicit Accesses
    [Zhi Zhang, Wei He], Yueqiang Cheng, Wenhao Wang, Yansong Gao*, Dongxi Liu, Kang Li, Surya Nepal, Anmin Fu, Yi Zou
    IEEE Transactions on Dependable and Secure Computing (TDSC) (CCF-A)
    PDF
  15. ATC
    [ C11 ] HyperEnclave: An Open and Cross-platform Trusted Execution Environment
    Yuekai Jia, Shuang Liu, Wenhao Wang*, Yu Chen, Zhengde Zhai, Shoumeng Yan, Zhengyu He
    2022 USENIX Annual Technical Conference (USENIX ATC) (CCF-A)
    PDF Slides Code
  16. ATC
    [ C10 ] SoftTRR: Protect Page Tables Against RowHammer Attacks using Software-only Target Row Refresh
    [Zhi Zhang, Yueqiang Cheng], Minghua Wang, Wei He, Wenhao Wang*, Nepal Surya, Yansong Gao, Kang Li, Zhe Wang, Chenggang Wu
    2022 USENIX Annual Technical Conference (USENIX ATC) (CCF-A)
    PDF Slides
  17. TDSC
    [ J3 ] Trust Beyond Border: Lightweight, Verifiable User Isolation for Protecting In-Enclave Services
    Wenhao Wang*, Weijie Liu, Hongbo Chen, XiaoFeng Wang, Hongliang Tian, Dongdai Lin
    IEEE Transactions on Dependable and Secure Computing (TDSC) (CCF-A)
    PDF
  18. TIFS
    [ J2 ] BitMine: An End-to-End Tool for Detecting Rowhammer Vulnerability
    [Zhi Zhang, Wei He], Yueqiang Cheng, Wenhao Wang, Yansong Gao*, Minghua Wang, Kang Li, Surya Nepal, Yang Xiang
    IEEE Transactions on Information Forensics and Security (TIFS) (CCF-A)
    PDF
  19. DSN
    [ C9 ] Practical and Efficient in-Enclave Verification of Privacy Compliance
    Weijie Liu, Wenhao Wang*, Hongbo Chen, XiaoFeng Wang*, Yaosong Lu, Kai Chen, Xinyu Wang, Qingtao Shen, Yi Chen, Haixu Tang
    51st IEEE/IFIP International Conference on Dependable Systems and Networks (DSN 2021) (CCF-B)
    PDF Slides
  20. S&P
    [ C8 ] Randomized Last-Level Caches Are Still Vulnerable to Cache Side-Channel Attacks! But We Can Fix It
    Wei Song, Boya Li, Zihan Xue, Zhenzhen Li, Wenhao Wang, Peng Liu
    2021 IEEE Symposium on Security and Privacy (S&P) (CCF-A)
    PDF
  21. S&P
    [ C7 ] Enabling Rack-scale Confidential Computing using Heterogeneous Trusted Execution Environment
    Jianping Zhu, Rui Hou*, XiaoFeng Wang*, Wenhao Wang, Jiangfeng Cao, Boyan Zhao, Zhongpu Wang, Yuhui Zhang, Jiameng Ying, Lixin Zhang, Dan Meng
    2020 IEEE Symposium on Security and Privacy (S&P) (CCF-A)
    PDF
  22. TCHES
    [ C6 ] Bluethunder: A 2-level Directional Predictor Based Side-Channel Attack against SGX
    Tianlin Huo, Xiaoni Meng, Wenhao Wang*, Chunliang Hao, Pei Zhao, Jian Zhai, Mingshu Li*
    IACR Transactions on Cryptographic Hardware and Embedded Systems (CHES 2020) (CCF-B)
    PDF
  23. ACSAC
    [ C5 ] Beware of Your Screen: Anonymous Fingerprinting of Device Screens for Off-line Payment Protection
    Zhe Zhou, Di Tang, Wenhao Wang, XiaoFeng Wang, Zhou Li, Kehuan Zhang
    Annual Computer Security Applications Conference (ACSAC 2018) (CCF-B)
    PDF
  24. Eurocrypt
    [ C4 ] Correlation Cube Attacks: From Weak-Key Distinguisher to Key Recovery
    Meicheng Liu, Jingchun Yang, Wenhao Wang, Dongdai Lin
    37th Annual International Conference on the Theory and Applications of Cryptographic Techniques (Eurocrypt 2018) (CCF-A)
    PDF
  25. S&P
    [ C3 ] Racing in Hyperspace: Closing Hyper-Threading Side Channels on SGX with Contrived Data Races
    [Guoxing Chen, Wenhao Wang*], Tianyu Chen, Sanchuan Chen, Yinqian Zhang, XiaoFeng Wang, Ten-Hwang Lai, Dongdai Lin
    2018 IEEE Symposium on Security and Privacy (S&P) (CCF-A)
    PDF
  26. Genomics
    [ J1 ] iDASH secure genome analysis competition 2017
    XiaoFeng Wang, Haixu Tang, Shuang Wang, Xiaoqian Jiang, Wenhao Wang, Diyue Bu, Lei Wang, Yicheng Jiang, Chenghong Wang
    2018 BMC Medical Genomics
    PDF
  27. CCS
    [ C2 ] Leaky Cauldron on the Dark Land: Understanding Memory Side-Channel Hazards in SGX
    Wenhao Wang, Guoxing Chen, Xiaorui Pan, Yinqian Zhang, XiaoFeng Wang, Vincent Bindschaedler, Haixu Tang, Carl A. Gunter
    ACM Conference on Computer and Communications Security (ACM CCS 2017) (CCF-A)
    PDF Slides
  28. FEAST
    [ C1 ] Binary Code Retrofitting and Hardening Using SGX
    Shuai Wang, Wenhao Wang, Qinkun Bao, Pei Wang, XiaoFeng Wang, Dinghao Wu
    2nd Workshop on Forming an Ecosystem Around Software Transformation, co-located with CCS 2017
    PDF Slides

Manuscripts

    0 1 2 3 4
  1. Arxiv
    [ A4 ] The Early Bird Catches the Leak: Unveiling Timing Side Channels in LLM Serving Systems
    [Linke Song, Zixuan Pang], Wenhao Wang*, Zihao Wang, XiaoFeng Wang, Hongbo Chen, Wei Song, Yier Jin, Dan Meng, Rui Hou
    Arxiv
    PDF Code Project Page
  2. Arxiv
    [ A3 ] virtCCA: Virtualized Arm Confidential Compute Architecture with TrustZone
    Xiangyi Xu, Wenhao Wang*, Yongzheng Wu, Chenyu Wang, Huifeng Zhu, Haocheng Ma, Zhennan Min, Zixuan Pang, Rui Hou, Yier Jin*
    Arxiv
    PDF
  3. Arxiv
    [ A2 ] Understanding TEE Containers, Easy to Use? Hard to Trust
    [Weijie Liu, Hongbo Chen], XiaoFeng Wang, Zhi Li, Danfeng Zhang, Wenhao Wang, Haixu Tang
    Arxiv
    PDF
  4. Arxiv
    [ A1 ] Toward Scalable Fully Homomorphic Encryption Through Light Trusted Computing Assistance
    Wenhao Wang, Yichen Jiang, Qintao Shen, Weihao Huang, Hao Chen, Shuang Wang, XiaoFeng Wang, Haixu Tang, Kai Chen, Kristin Lauter, Dongdai Lin
    Arxiv
    PDF

Courses

Professional Services

Awards

Students

Alumni

Last updated: Aug. 2025.


Powered by Jekyll and Minimal Light theme. Unique visitors: .