Wenhao Wang

Wenhao Wang

Associate Professor
Institute of Information Engineering, CAS
wangwenhao (at) iie.ac.cn


Biography

Dr. Wenhao Wang is an Associate Professor at the Institute of Information Engineering, Chinese Academy of Sciences (CAS). His research focuses on hardware security and confidential computing, with particular interests in trusted execution environments, secure processor architecture, side-channel analysis and mitigation, and privacy-preserving systems. His work combines hardware and systems techniques with cryptographic methods to build practical and trustworthy computing platforms. Please find his CV in English or Chinese.

Prospective students interested in system security, hardware security, confidential computing, or privacy-preserving systems are welcome to contact me at wangwenhao@iie.ac.cn.

We are actively recruiting students to work on agentic systems security and embodied AI security. Please contact me if you are interested.

Due to the institute’s policy, I am currently unable to accept international students.

News

I will be serving as a Program Committee (PC) member for USENIX Security 2027.

One paper on TEE container security has been accepted for presentation at FSE 2026, presenting the first comprehensive analysis of TEE containers across OS interfaces, encrypted I/O, and orchestration layers. The paper introduces an automated analysis tool, TBouncer, and uncovers multiple critical vulnerabilities, including 6 attack vectors, 12 new bugs, and 3 CVEs.

Congratulations to Saisai Xia on receiving the 2025 Director’s Special Award (所长特别奖) and the 2025 Huawei Cybersecurity Scholarship (华为网安奖学金).

Selected Publications (Full list on Google Scholar)

* Corresponding authors; [ ] Equal Contributions; Advised by me

    0 0 1 2 1 3 2 4 5 3 6 4 7 8 9 10 11 5 6 12 13 7 8 14 15 16 17 18 19 20 9 21 22 23 10
  1. [ J10 ] System-Wide Ransomware Attack Detection via Perturbation-Resilient Representation Learning
    Fengkai Yuan, Lingbo Zhao, Zhilu Wang, Wenhao Wang, Dan Meng, Rui Hou*
    IEEE Transactions on Information Forensics and Security (TIFS) (CCF-A)
    PDF
  2. [ C23 ] Enjoy the Free Lunch, Someone Paid for Us: Escaping Resource Limits of MicroVM-based Containers
    Shiwen Wang, Wu Luo*, Kaicheng Liu, Zheyuan Xu, Yaowen Zheng, Wenhao Wang, Shijun Zhao, Peinan Li, Rui Hou*
    USENIX Security 2026 (CCF-A)
    PDF Code Distinguished Paper Award Runners-Up
  3. [ C22 ] Improving Counting Thread Consistency via Differential Measurement and Abating Frequency Variance on Modern Xeon Processors
    Wei He, Wei Song*, Da Xie, Hao Ma, Yusi Feng, Wenhao Wang
    Detection of Intrusions and Malware & Vulnerability Assessment (DIMVA 2026)
  4. [ C21 ] Characterizing Trust Boundary Vulnerabilities in TEE Container Systems: An Empirical Study
    [Weijie Liu, Hongbo Chen], Shuo Huai, Zhen Xu, Wenhao Wang*, XiaoFeng Wang*, Danfeng Zhang, Zhi Li, Haixu Tang, Zheli Liu*
    ACM International Conference on the Foundations of Software Engineering (FSE 2026) (CCF-A)
    PDF Code Project Page
  5. [ J9 ] The Early Bird Catches the Leak: Unveiling Timing Side Channels in LLM Serving Systems
    [Linke Song, Zixuan Pang], Wenhao Wang*, Zihao Wang, XiaoFeng Wang, Hongbo Chen, Wei Song, Yier Jin, Dan Meng, Rui Hou
    IEEE Transactions on Information Forensics and Security (TIFS) (CCF-A)
    PDF Code Project Page
  6. [ C20 ] CryptPEFT: Efficient and Private Neural Network Inference via Parameter-Efficient Fine-Tuning
    Saisai Xia, Wenhao Wang*, Zihao Wang*, Yuhui Zhang, Yier Jin, Dan Meng, Rui Hou
    Network and Distributed System Security Symposium (NDSS) 2026 (CCF-A)
    PDF Code
  7. [ J8 ] Multivariate Template Attack against NTT based Polynomial Multiplication of Dilithium
    Haopeng Fan, Hailong Zhang*, Yongjuan Wang*, Wenhao Wang, Haojin Zhang, Qingjun Yuan
    IEEE Transactions on Information Forensics and Security (TIFS) (CCF-A)
    PDF
  8. [ C19 ] Comet: Accelerating Private Inference for Large Language Model by Predicting Activation Sparsity
    Guang Yan, Yuhui Zhang*, Zimu Guo, Lutan Zhao, Xiaojun Chen, Chen Wang, Wenhao Wang, Dan Meng, Rui Hou*
    2025 IEEE Symposium on Security and Privacy (S&P) (CCF-A)
    PDF
  9. [ C18 ] The Road to Trust: Building Enclaves within Confidential VMs
    Wenhao Wang, Linke Song, Benshan Mei, Shuang Liu, Shijun Zhao, Shoumeng Yan*, XiaoFeng Wang, Dan Meng, Rui Hou*
    Network and Distributed System Security Symposium (NDSS) 2025 (CCF-A)
    PDF Code
  10. [ J7 ] Screening Least Square Technique assisted Multivariate Template Attack against the Random Polynomial Generation of Dilithium
    Haopeng Fan, Hailong Zhang*, Yongjuan Wang*, Wenhao Wang, Yanbei Zhu, Haojin Zhang, Qingjun Yuan
    IEEE Transactions on Information Forensics and Security (TIFS) (CCF-A)
    PDF
  11. [ C17 ] ThermalScope: A Practical Interrupt Side Channel Attack Based On Thermal Event Interrupts
    Xin Zhang, Zhi Zhang, Qingni Shen, Wenhao Wang, Yansong Gao, Zhuoxi Yang, Zhonghai Wu
    The 61st Design Automation Conference (DAC 2024) (CCF-A)
  12. [ J6 ] Cache attacks on subkey calculation of Blowfish
    Haopeng Fan, Wenhao Wang*, Yongjuan Wang, Xiangbin Wang, Yang Gao
    Journal of Computer Security (JCS) (CCF-B)
    PDF
  13. [ C16 ] PP-Stream: A Privacy-Preserving Neural Network Inference Service with Stream Processing
    Qingxiu Liu, Qun Huang*, Xiang Chen, Sa Wang, Wenhao Wang, Shujie Han, Patrick P. C. Lee
    40th IEEE International Conference on Data Engineering (ICDE 2024) (CCF-A)
  14. [ C15 ] Verifying Rust Implementation of Page Tables in a Software Enclave Hypervisor
    Zhenyang Dai, Shuang Liu, Vilhelm Sjoberg*, Xupeng Li, Yu Chen, Wenhao Wang, Yuekai Jia, Sean Noble Anderson, Laila Elbeheiry, Shubham Sondhi, Yu Zhang, Zhaozhong Ni, Shoumeng Yan*, Ronghui Gu, Zhengyu He
    International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS 2024) (CCF-A)
    PDF
  15. [ C14 ] SegScope: Probing Fine-grained Interrupts via Architectural Footprints
    [Xin Zhang, Zhi Zhang], Qingni Shen*, Wenhao Wang, Yansong Gao, Zhuoxi Yang, Jiliang Zhang
    30th IEEE International Symposium on High-Performance Computer Architecture (HPCA 2024) (CCF-A)
    PDF Code
  16. [ C13 ] Tossing in the Dark: Practical Bit-Flipping on Gray-box Deep Neural Networks for Runtime Trojan Injection
    Zihao Wang, Di Tang*, XiaoFeng Wang, Wei He, Zhaoyang Geng, Wenhao Wang*
    USENIX Security 2024 (CCF-A)
    PDF
  17. [ C12 ] The Danger of Minimum Exposures: Understanding Cross-App Information Leaks on iOS through Multi-Side-Channel Learning
    [Zihao Wang, Jiale Guan], XiaoFeng Wang, Wenhao Wang, Luyi Xing, Fares Alharbi
    ACM Conference on Computer and Communications Security (ACM CCS 2023) (CCF-A)
    PDF Project Page
  18. [ J5 ] WhistleBlower: A System-level Empirical Study on RowHammer
    [Wei He, Zhi Zhang], Yueqiang Cheng, Wenhao Wang*, Wei Song, Yansong Gao, Qifei Zhang, Kang Li, Dongxi Liu, Surya Nepal
    IEEE Transactions on Computers (TC) (CCF-A)
    PDF
  19. [ J4 ] Implicit Hammer: Cross-Privilege-Boundary Rowhammer through Implicit Accesses
    [Zhi Zhang, Wei He], Yueqiang Cheng, Wenhao Wang, Yansong Gao*, Dongxi Liu, Kang Li, Surya Nepal, Anmin Fu, Yi Zou
    IEEE Transactions on Dependable and Secure Computing (TDSC) (CCF-A)
    PDF
  20. [ C11 ] HyperEnclave: An Open and Cross-platform Trusted Execution Environment
    Yuekai Jia, Shuang Liu, Wenhao Wang*, Yu Chen, Zhengde Zhai, Shoumeng Yan, Zhengyu He
    2022 USENIX Annual Technical Conference (USENIX ATC) (CCF-A)
    PDF Slides Code
  21. [ C10 ] SoftTRR: Protect Page Tables Against RowHammer Attacks using Software-only Target Row Refresh
    [Zhi Zhang, Yueqiang Cheng], Minghua Wang, Wei He, Wenhao Wang*, Nepal Surya, Yansong Gao, Kang Li, Zhe Wang, Chenggang Wu
    2022 USENIX Annual Technical Conference (USENIX ATC) (CCF-A)
    PDF Slides
  22. [ J3 ] Trust Beyond Border: Lightweight, Verifiable User Isolation for Protecting In-Enclave Services
    Wenhao Wang*, Weijie Liu, Hongbo Chen, XiaoFeng Wang, Hongliang Tian, Dongdai Lin
    IEEE Transactions on Dependable and Secure Computing (TDSC) (CCF-A)
    PDF
  23. [ J2 ] BitMine: An End-to-End Tool for Detecting Rowhammer Vulnerability
    [Zhi Zhang, Wei He], Yueqiang Cheng, Wenhao Wang, Yansong Gao*, Minghua Wang, Kang Li, Surya Nepal, Yang Xiang
    IEEE Transactions on Information Forensics and Security (TIFS) (CCF-A)
    PDF
  24. [ C9 ] Practical and Efficient in-Enclave Verification of Privacy Compliance
    Weijie Liu, Wenhao Wang*, Hongbo Chen, XiaoFeng Wang*, Yaosong Lu, Kai Chen, Xinyu Wang, Qingtao Shen, Yi Chen, Haixu Tang
    51st IEEE/IFIP International Conference on Dependable Systems and Networks (DSN 2021) (CCF-B)
    PDF Slides
  25. [ C8 ] Randomized Last-Level Caches Are Still Vulnerable to Cache Side-Channel Attacks! But We Can Fix It
    Wei Song, Boya Li, Zihan Xue, Zhenzhen Li, Wenhao Wang, Peng Liu
    2021 IEEE Symposium on Security and Privacy (S&P) (CCF-A)
    PDF
  26. [ C7 ] Enabling Rack-scale Confidential Computing using Heterogeneous Trusted Execution Environment
    Jianping Zhu, Rui Hou*, XiaoFeng Wang*, Wenhao Wang, Jiangfeng Cao, Boyan Zhao, Zhongpu Wang, Yuhui Zhang, Jiameng Ying, Lixin Zhang, Dan Meng
    2020 IEEE Symposium on Security and Privacy (S&P) (CCF-A)
    PDF
  27. [ C6 ] Bluethunder: A 2-level Directional Predictor Based Side-Channel Attack against SGX
    Tianlin Huo, Xiaoni Meng, Wenhao Wang*, Chunliang Hao, Pei Zhao, Jian Zhai, Mingshu Li*
    IACR Transactions on Cryptographic Hardware and Embedded Systems (CHES 2020) (CCF-B)
    PDF
  28. [ C5 ] Beware of Your Screen: Anonymous Fingerprinting of Device Screens for Off-line Payment Protection
    Zhe Zhou, Di Tang, Wenhao Wang, XiaoFeng Wang, Zhou Li, Kehuan Zhang
    Annual Computer Security Applications Conference (ACSAC 2018) (CCF-B)
    PDF
  29. [ C4 ] Correlation Cube Attacks: From Weak-Key Distinguisher to Key Recovery
    Meicheng Liu, Jingchun Yang, Wenhao Wang, Dongdai Lin
    37th Annual International Conference on the Theory and Applications of Cryptographic Techniques (Eurocrypt 2018) (CCF-A)
    PDF
  30. [ C3 ] Racing in Hyperspace: Closing Hyper-Threading Side Channels on SGX with Contrived Data Races
    [Guoxing Chen, Wenhao Wang*], Tianyu Chen, Sanchuan Chen, Yinqian Zhang, XiaoFeng Wang, Ten-Hwang Lai, Dongdai Lin
    2018 IEEE Symposium on Security and Privacy (S&P) (CCF-A)
    PDF
  31. [ J1 ] iDASH secure genome analysis competition 2017
    XiaoFeng Wang, Haixu Tang, Shuang Wang, Xiaoqian Jiang, Wenhao Wang, Diyue Bu, Lei Wang, Yicheng Jiang, Chenghong Wang
    2018 BMC Medical Genomics
    PDF
  32. [ C2 ] Leaky Cauldron on the Dark Land: Understanding Memory Side-Channel Hazards in SGX
    Wenhao Wang, Guoxing Chen, Xiaorui Pan, Yinqian Zhang, XiaoFeng Wang, Vincent Bindschaedler, Haixu Tang, Carl A. Gunter
    ACM Conference on Computer and Communications Security (ACM CCS 2017) (CCF-A)
    PDF Slides
  33. [ C1 ] Binary Code Retrofitting and Hardening Using SGX
    Shuai Wang, Wenhao Wang, Qinkun Bao, Pei Wang, XiaoFeng Wang, Dinghao Wu
    2nd Workshop on Forming an Ecosystem Around Software Transformation, co-located with CCS 2017
    PDF Slides

Manuscripts

    0 1 2 3
  1. [ A3 ] virtCCA: Virtualized Arm Confidential Compute Architecture with TrustZone
    Xiangyi Xu, Wenhao Wang*, Yongzheng Wu, Chenyu Wang, Huifeng Zhu, Haocheng Ma, Zhennan Min, Zixuan Pang, Rui Hou, Yier Jin*
    Arxiv
    PDF
  2. [ A2 ] Understanding TEE Containers, Easy to Use? Hard to Trust
    [Weijie Liu, Hongbo Chen], XiaoFeng Wang, Zhi Li, Danfeng Zhang, Wenhao Wang, Haixu Tang
    Arxiv
    PDF
  3. [ A1 ] Toward Scalable Fully Homomorphic Encryption Through Light Trusted Computing Assistance
    Wenhao Wang, Yichen Jiang, Qintao Shen, Weihao Huang, Hao Chen, Shuang Wang, XiaoFeng Wang, Haixu Tang, Kai Chen, Kristin Lauter, Dongdai Lin
    Arxiv
    PDF

Courses

Professional Services

Awards

Students

Alumni

Last updated: Oct. 2026.