I am a first, second, third, fourth-year Ph.D. student at Penn State University, advised by Prof. Hong Hu. Before joining Penn State University, I obtained my Bachelor's degree and Master's degree from Huazhong University of Science and Technology, advised by Prof. Deqing Zou and Prof. Bin Yuan. My research interests include software and system security.

Zhechang Zhang

zhechang at psu dot edu

Ph.D. student in the College of Information Sciences and Technology (IST) at Penn State University.


Google Scholar

X (formerly Twitter)

LinkedIn

Publications

  • ContractGuard: Auditing Semantic Contracts of MCP Tools for Security Violations.
    Hengkai Ye*, Zhechang Zhang*, Ruibo Lu, Jinyuan Jia and Hong Hu.
    In Proceedings of the 33rd ACM Conference on Computer and Communications Security (CCS 2026).
    CCS 2026
    Code Slides PDF
  • SACK: Systematic Generation of Function Substitution Attacks Against Control-Flow Integrity
    Zhechang Zhang, Hengkai Ye, Song Liu and Hong Hu.
    In Proceedings of the 33rd Annual Network and Distributed System Security Symposium (NDSS 2026).
    NDSS 2026
    Code Slides PDF
  • CountDown: Refcount-guided Fuzzing for Exposing Temporal Memory Errors in Linux Kernel
    Shuangpeng Bai, Zhechang Zhang, and Hong Hu.
    In Proceedings of the 31st ACM Conference on Computer and Communications Security (CCS 2024).
    CCS 2024
    Code Slides PDF
  • VIPER: Spotting Syscall-Guard Variables for Data-Only Attacks
    Hengkai Ye, Song Liu, Zhechang Zhang and Hong Hu.
    In Proceedings of the 32nd USENIX Security Symposium (USENIX 2023).
    USENIX 2023
    Code Slides PDF
  • StateDiver: Testing Deep Packet Inspection Systems with State-Discrepancy Guidance
    Zhechang Zhang, Bin Yuan, Kehan Yang, Deqing Zou and Hai Jin.
    In Proceedings of the 38th Annual Computer Security Applications Conference (ACSAC 2022).
    ACSAC 2022
    Code Slides PDF

Others

  • How Close Are We? Measuring the Gap Between Dynamically and Statically Identified Indirect-Call Targets. (Poster)
    Zhechang Zhang and Hong Hu.
    USENIX 2026
    Link
  • One Flip is All It Takes: Identifying Syscall-Guard Variables for Data-Only Attacks.
    (Industry Conference)
    Hengkai Ye, Song Liu, Zhechang Zhang and Hong Hu.
    BlackHat Asia Briefings 2024
    Link
Plain Academic