Wenhao Wang | Institute of Information Engineering, CAS

Biography

Dr. Wenhao Wang is an associate professor at Institute of Information Engineering (IIE), CAS. His research interests now focus on protecting user privacy data with the help of hardware features, such as Intel SGX, as well as cryptographic techniques (e.g., homomorphic encryption). Ongoing projects also include designing new hardware based TEEs (trusted execution environments) to support large scale data processing. Dr. Wenhao Wang was a visiting scholar of Prof. XiaoFeng Wang’s group in Indiana University Bloomington from April 2016 to August 2018, during which he worked closely with Prof. Wang and Prof. Haixu Tang in organizing the Genomic data privacy and security protection competition. Please find the cv here: in English, 中文.

Please send an email to wangwenhao@iie.ac.cn if you would like to join the group. Students with interests in topics related to operating system/software/virtualization/hardware-assisted security/TEE/privacy preserving technologies/microarchitectural side channels etc., are all welcome.

News

letter [Oct. 2024] A new paper is accepted to appear at NDSS 2025. We proposed NestedSGX, which supports existing SGX toolchains (the adapted SGX SDK and Occlum library OS) and runs SGX applications atop AMD SEV-SNP confidential VMs (CVMs).

letter [July. 2024] A new paper on side channel attacks is accepted by IEEE Transactions on Information Forensics and Security (TIFS). We showed that only 38, 40 and 39 power traces are enough to recover private key s1 of Dilithium 2, 3 and 5 with 100% of success rate.

Selected Publications (Full list: Google Scholar)

* Corresponding authors, [ ] Equal Contributions, Advised by me

NDSS

[ C18 ] The Road to Trust: Building Enclaves within Confidential VMs

Wenhao Wang, Linke Song, Benshan Mei, Shuang Liu, Shijun Zhao, Shoumeng Yan*, XiaoFeng Wang, Dan Meng, Rui Hou*

Network and Distributed System Security Symposium (NDSS) 2025 (CCF-A)

PDF To appear
TIFS

[ J7 ] Screening Least Square Technique assisted Multivariate Template Attack against the Random Polynomial Generation of Dilithium

Haopeng Fan, Hailong Zhang*, Yongjuan Wang*, Wenhao Wang, Yanbei Zhu, Haojin Zhang, Qingjun Yuan

IEEE Transactions on Information Forensics and Security (TIFS) (CCF-A)

PDF
DAC

[ C17 ] ThermalScope: A Practical Interrupt Side Channel Attack Based On Thermal Event Interrupts

Xin Zhang, Zhi Zhang, Qingni Shen, Wenhao Wang, Yansong Gao, Zhuoxi Yang, Zhonghai Wu

The 61st Design Automation Conference (DAC 2024) (CCF-A)
JCS

[ J6 ] Cache attacks on subkey calculation of Blowfish

Haopeng Fan, Wenhao Wang*, Yongjuan Wang, Xiangbin Wang, Yang Gao

Journal of Computer Security (JCS) (CCF-B)

PDF
ICDE

[ C16 ] PP-Stream: A Privacy-Preserving Neural Network Inference Service with Stream Processing

Qingxiu Liu, Qun Huang*, Xiang Chen, Sa Wang, Wenhao Wang, Shujie Han, Patrick P. C. Lee

40th IEEE International Conference on Data Engineering (ICDE 2024) (CCF-A)
ASPLOS

[ C15 ] Verifying Rust Implementation of Page Tables in a Software Enclave Hypervisor

Zhenyang Dai, Shuang Liu, Vilhelm Sjoberg*, Xupeng Li, Yu Chen, Wenhao Wang, Yuekai Jia, Sean Noble Anderson, Laila Elbeheiry, Shubham Sondhi, Yu Zhang, Zhaozhong Ni, Shoumeng Yan*, Ronghui Gu, Zhengyu He

International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS 2024) (CCF-A)

PDF
HPCA

[ C14 ] SegScope: Probing Fine-grained Interrupts via Architectural Footprints

[Xin Zhang, Zhi Zhang], Qingni Shen*, Wenhao Wang, Yansong Gao, Zhuoxi Yang, Jiliang Zhang

30th IEEE International Symposium on High-Performance Computer Architecture (HPCA 2024) (CCF-A)

Code
Security

[ C13 ] Tossing in the Dark: Practical Bit-Flipping on Gray-box Deep Neural Networks for Runtime Trojan Injection

Zihao Wang, Di Tang*, XiaoFeng Wang, Wei He, Zhaoyang Geng, Wenhao Wang*

USENIX Security 2024 (CCF-A)

PDF
CCS

[ C12 ] The Danger of Minimum Exposures: Understanding Cross-App Information Leaks on iOS through Multi-Side-Channel Learning

[Zihao Wang, Jiale Guan], XiaoFeng Wang, Wenhao Wang, Luyi Xing, Fares Alharbi

ACM Conference on Computer and Communications Security (ACM CCS 2023) (CCF-A)

PDF Project Page
TC

[ J5 ] WhistleBlower: A System-level Empirical Study on RowHammer

[Wei He, Zhi Zhang], Yueqiang Cheng, Wenhao Wang*, Wei Song, Yansong Gao, Qifei Zhang, Kang Li, Dongxi Liu, Surya Nepal

IEEE Transactions on Computers (TC) (CCF-A)

PDF
TDSC

[ J4 ] Implicit Hammer: Cross-Privilege-Boundary Rowhammer through Implicit Accesses

[Zhi Zhang, Wei He], Yueqiang Cheng, Wenhao Wang, Yansong Gao*, Dongxi Liu, Kang Li, Surya Nepal, Anmin Fu, Yi Zou

IEEE Transactions on Dependable and Secure Computing (TDSC) (CCF-A)

PDF
ATC

[ C11 ] HyperEnclave: An Open and Cross-platform Trusted Execution Environment

Yuekai Jia, Shuang Liu, Wenhao Wang*, Yu Chen, Zhengde Zhai, Shoumeng Yan, Zhengyu He

2022 USENIX Annual Technical Conference (USENIX ATC) (CCF-A)

PDF Slides
ATC

[ C10 ] SoftTRR: Protect Page Tables Against RowHammer Attacks using Software-only Target Row Refresh

[Zhi Zhang, Yueqiang Cheng], Minghua Wang, Wei He, Wenhao Wang*, Nepal Surya, Yansong Gao, Kang Li, Zhe Wang, Chenggang Wu

2022 USENIX Annual Technical Conference (USENIX ATC) (CCF-A)

PDF Slides
TDSC

[ J3 ] Trust Beyond Border: Lightweight, Verifiable User Isolation for Protecting In-Enclave Services

Wenhao Wang*, Weijie Liu, Hongbo Chen, XiaoFeng Wang, Hongliang Tian, Dongdai Lin

IEEE Transactions on Dependable and Secure Computing (TDSC) (CCF-A)

PDF
TIFS

[ J2 ] BitMine: An End-to-End Tool for Detecting Rowhammer Vulnerability

[Zhi Zhang, Wei He], Yueqiang Cheng, Wenhao Wang, Yansong Gao*, Minghua Wang, Kang Li, Surya Nepal, Yang Xiang

IEEE Transactions on Information Forensics and Security (TIFS) (CCF-A)

PDF
DSN

[ C9 ] Practical and Efficient in-Enclave Verification of Privacy Compliance

Weijie Liu, Wenhao Wang*, Hongbo Chen, XiaoFeng Wang*, Yaosong Lu, Kai Chen, Xinyu Wang, Qingtao Shen, Yi Chen, Haixu Tang

51st IEEE/IFIP International Conference on Dependable Systems and Networks (DSN 2021) (CCF-B)

PDF Slides
S&P

[ C8 ] Randomized Last-Level Caches Are Still Vulnerable to Cache Side-Channel Attacks! But We Can Fix It

Wei Song, Boya Li, Zihan Xue, Zhenzhen Li, Wenhao Wang, Peng Liu

2021 IEEE Symposium on Security and Privacy (S&P) (CCF-A)

PDF
S&P

[ C7 ] Enabling Rack-scale Confidential Computing using Heterogeneous Trusted Execution Environment

Jianping Zhu, Rui Hou*, XiaoFeng Wang*, Wenhao Wang, Jiangfeng Cao, Boyan Zhao, Zhongpu Wang, Yuhui Zhang, Jiameng Ying, Lixin Zhang, Dan Meng

2020 IEEE Symposium on Security and Privacy (S&P) (CCF-A)

PDF
TCHES

[ C6 ] Bluethunder: A 2-level Directional Predictor Based Side-Channel Attack against SGX

Tianlin Huo, Xiaoni Meng, Wenhao Wang*, Chunliang Hao, Pei Zhao, Jian Zhai, Mingshu Li*

IACR Transactions on Cryptographic Hardware and Embedded Systems (CHES 2020) (CCF-B)

PDF
ACSAC

[ C5 ] Beware of Your Screen: Anonymous Fingerprinting of Device Screens for Off-line Payment Protection

Zhe Zhou, Di Tang, Wenhao Wang, XiaoFeng Wang, Zhou Li, Kehuan Zhang

Annual Computer Security Applications Conference (ACSAC 2018) (CCF-B)

PDF
Eurocrypt

[ C4 ] Correlation Cube Attacks: From Weak-Key Distinguisher to Key Recovery

Meicheng Liu, Jingchun Yang, Wenhao Wang, Dongdai Lin

37th Annual International Conference on the Theory and Applications of Cryptographic Techniques (Eurocrypt 2018) (CCF-A)

PDF
S&P

[ C3 ] Racing in Hyperspace: Closing Hyper-Threading Side Channels on SGX with Contrived Data Races

[Guoxing Chen, Wenhao Wang*], Tianyu Chen, Sanchuan Chen, Yinqian Zhang, XiaoFeng Wang, Ten-Hwang Lai, Dongdai Lin

2018 IEEE Symposium on Security and Privacy (S&P) (CCF-A)

PDF
Genomics

[ J1 ] iDASH secure genome analysis competition 2017

XiaoFeng Wang, Haixu Tang, Shuang Wang, Xiaoqian Jiang, Wenhao Wang, Diyue Bu, Lei Wang, Yicheng Jiang, Chenghong Wang

2018 BMC Medical Genomics

PDF
CCS

[ C2 ] Leaky Cauldron on the Dark Land: Understanding Memory Side-Channel Hazards in SGX

Wenhao Wang, Guoxing Chen, Xiaorui Pan, Yinqian Zhang, XiaoFeng Wang, Vincent Bindschaedler, Haixu Tang, Carl A. Gunter

ACM Conference on Computer and Communications Security (ACM CCS 2017) (CCF-A)

PDF Slides
FEAST

[ C1 ] Binary Code Retrofitting and Hardening Using SGX

Shuai Wang, Wenhao Wang, Qinkun Bao, Pei Wang, XiaoFeng Wang, Dinghao Wu

2nd Workshop on Forming an Ecosystem Around Software Transformation, co-located with CCS 2017

PDF Slides

Manuscripts

Arxiv

[ A4 ] The Early Bird Catches the Leak: Unveiling Timing Side Channels in LLM Serving Systems

[Linke Song, Zixuan Pang], Wenhao Wang*, Zihao Wang, XiaoFeng Wang, Hongbo Chen, Wei Song, Yier Jin, Dan Meng, Rui Hou

Arxiv

PDF
Arxiv

[ A3 ] virtCCA: Virtualized Arm Confidential Compute Architecture with TrustZone

Xiangyi Xu, Wenhao Wang*, Yongzheng Wu, Chenyu Wang, Huifeng Zhu, Haocheng Ma, Zhennan Min, Zixuan Pang, Rui Hou, Yier Jin*

Arxiv

PDF
Arxiv

[ A2 ] Understanding TEE Containers, Easy to Use? Hard to Trust

[Weijie Liu, Hongbo Chen], XiaoFeng Wang, Zhi Li, Danfeng Zhang, Wenhao Wang, Haixu Tang

Arxiv

PDF
Arxiv

[ A1 ] Toward Scalable Fully Homomorphic Encryption Through Light Trusted Computing Assistance

Wenhao Wang, Yichen Jiang, Qintao Shen, Weihao Huang, Hao Chen, Shuang Wang, XiaoFeng Wang, Haixu Tang, Kai Chen, Kristin Lauter, Dongdai Lin

Arxiv

PDF

Courses

Paper Readings (2019-Spring, 20 hours)
Security Chips (2021-FALL, 2022-FALL, 40 hours)
Chip and Processor Security (2023-FALL, 40 hours, with Prof. Mingzhe Zhang)
Paper Readings (2024-Spring, 30 hours, with Prof. Ben Niu). Here are some tips for paper reading and writing
Chip and Processor Security (2024-FALL, 40 hours)

Professional Services

Reviewer for journals IEEE TDSC, IEEE Security & Privacy, IEEE TC, ACM Transactions on Privacy and Security, CyberSecurity, SCN, JNCA.
Sub-reviewer for CCS (2018, 2020), NDSS (2017, 2018, 2021), S&P (2017, 2020, 2021), Usenix Security (2017, 2018, 2021), HPCA (2019), ESORICS (2018, 2020), Asiacrypt (2020), AsiaCCS (2017, 2018, 2019) and RECOMB (2019) etc.
TPC member for ACM CCS 2019, GenoPri 2020, SECURWARE 2022, ACNS 2023.
General Chair for Inscrypt 2022.

Awards

2018 ACM SIGSAC China Rising Star Award, and ACM China Rising Star Nomination Award
2017 Young Star Award of Institute of Information Engineering, CAS

Talks

看懂可信执行环境硬件设计 - 浅析TEE的内存加密和完整性保护机制隐私计算联盟安全研讨会
A breif introduction to scalable SGX
可信硬件与密码学的一些思考
硬件安全问题及防护
Mitigating side channels in SGX with software only methods (in Chinese)
Enabling Rack-scale Confidential Computing using Heterogeneous Trusted Execution Environment
China Conference on Data Security and Privacy (ChinaPrivacy2019), Oct. 2019, Guilin, Confidential Computing, in Chinese
Nankai University, July 2019, Tianjin, Confidential Computing, in Chinese
Institute of Software, July 2019, Beijing
ACM TURC 2019 (SIGSAC), May 2019, Chengdu, Side Channel Risks in Hardware Trusted Execution Environments (TEEs)

Students

Master students:
- Mingjie Zhang
- Xinhong Liu
- Saisai Xia
- Zhaoyang Geng
PhD students (unofficially advised by me):
- Benshan Mei

Alumni

Linke Song (in pursuit of a Doctoral Degree with Prof. Wei Song)
Zhennan Min
Huihao Zhang
Jinze She
Wei He (in pursuit of a Doctoral Degree with Prof. Wei Song)
Wenwen Ruan (First job: Intel)
Sitong Chen (First job: Shanghai Academy of Spaceflight Technology)
Bohan Li
Zihao Wang

Useful Links

Top Cyber Security Conferences Ranking
IACR Calendar of Events in Cryptology
Influential Security Papers and Influential Crypto Papers
UCL Crypto Group - Forthcoming calls for papers
System Security Circus
Security and Privacy Conference Deadlines

Last updated: Oct. 2024.