Ning Qu

I left CMU at the end of July 2009. Reach me by quning at gmail, or find me here: quning.org

I am affiliated with CyLab of Carnegie Mellong University. I work primarily with my advisor, Adrian Perrig, on system security, trusted computing and sensor network security. Before coming to CMU, I got my Ph.D and Bachelor degree from Computer Science Department of Peking University.

Ph.D in Computer Architecture at Computer Science Department, Peking University, China, Jan. 2007
RA in Microprocessor Research & Development Center, Peking University
B.S. in Computer Software at Computer Science Department, Peking University, China, Jul. 2001

2007.3 - 2007.12		SecVisor Project: Tiny Security Hypervisor for OS Kernel Code Integrity. Design and implement a tiny hypervisor to ensure code integrity for commodity OS kernels. This tiny hypervisor protects the kernel against code injection attacks such as kernel rootkits.
2007.12 - 2008.12		Pioneer-NG Project: Externally-verifiable Code Execution. Design and implement a software-based attestation primitive which enables an external verifier to verify the property of untampered code execution on an untrusted computer.
2008.3 - present		Xtrec Project: Secure Real–time Instruction-level Control Flow Recording on Commodity Platforms.
2008.7 - present		Lockdown Project: A Safe and Practical Environment for Security Applications.
2008.11 - present		TrustVisor Porject: Efficient TCB Reduction and Attestation. Design and implement a special-purpose hypervisor called TrustVisor that provides code and execution integrity as well as data secrecy and integrity for protected code, even in the presence of a compromised OS.

2005.1 - 2006.12		"Network Computer System Key Technology Research and Development based on PKUnity CPU and Linux"，Major Project in Computer Software and Hardware Area supported by National 863 Program, China.
2003.3 - 2004.7		"Home Gateway and VOIP Phone based on PKU Unity CPU", Key Project in VLSI Area supported by National 863 Program, China
2002.9 - 2005.3		"PKU Unity-863 CPU and System for Network Computer", Key Project in VLSI Area supported by National 863 Program, China.
2002.9 - 2003.12		"System Software Platform Design and Development for Network Computer", Major Project in Computer Software and Hardware Area supported by National 863 Program, China.
2000.3 - 2000.12		"32/16 Embedded Microprocessor and Prototype System for High-end Consume Electronic Products", Major Project supported by National 863 Program, China

Arvind Seshadri, Mark Luk, Ning Qu, and Adrian Perrig. SecVisor: A Tiny Hypervisor to Provide Lifetime Kernel Code Integrity for Commodity OSes. In Proc. of the 21st ACM Symposium on Operating Systems Principles (SOSP 2007), Stevenson, WA, Oct. 2007. pp. 335-350. (pdf, ppt, url)

Shu Liu, Xiaogang Gou, Ning Qu, Xianfeng Li, Xu Cheng. SSDC: A split data cache design for sequential access intensive applications. Journal(Natural Science) of Peking University (JNSPU), 44(3), May 2008. pp. 359-369. (in Chinese) (pdf, url)
Ning Qu, Yulai Zhao, Xuetao Guan, Xu Cheng. A Retargetable Full System Simulator for Thin Client Platform. Chinese Journal of Electronics, 16(3): 401-405, Jul. 2007. (pdf)
Ning Qu, Yansong Zheng, Wei Cao, Xu Cheng. GISP: A Transparent Superpage Support Framework for Linux. In Proc. of IEEE 18th International Conference on Application-specific Systems, Architectures and Processors, Montreal, Canada, Jul. 2007. pp. 359-364. (pdf, url)
Ning Qu, Yulai Zhao, Xuetao Guan, Xu Cheng. Unichos: A Full System Simulator for Thin Client Platform. In Proc. of the 22nd Annual ACM Symposium on Applied Computing, Seoul, Korea, Mar. 2007. pp. 1552-1556. (pdf, ppt, url)
Ning Qu, Peng Yuan, Xuetao Guan, Xu Cheng. Characterizing the d-TLB Behavior of Typical Applications on Network Computer. Journal(Natural Science) of Peking University (JNSPU), 43(1), Jan. 2007. pp. 85-91. (in Chinese) (pdf, url)
Ning Qu, Xiaogang Gou, Xu Cheng. Using Uncacheable Memory to Improve Unity Linux Performance. In Proc. of workshop on Interaction between Operating System and Computer Architecture (Held in conjunction with 2005 IEEE International Symposium on Workload Characterization), Austin, TX, Oct. 2005. pp. 27-32. (pdf, ppt)

Ning Qu. Research on Superpage Support for Network Computer. Computer Science Department of Peking University, Ph.D Degree thesis, Dec. 2006. (in Chinese) (pdf, ppt)
Ning Qu. Virtual File System Design and Implementation based on USB Protocol. Computer Science Department of Peking University, Bachelor Degree thesis, Jun. 2001. (in Chinese) (pdf, ppt)

Amit Vasudevan, Ning Qu, Bryan Parno, and Adrian Perrig. Lockdown: A Practical Red-Green System. Carnegie Mellon University/Cylab, Technical Report CMU-CyLab-09-011, Jul. 2009. (pdf, url)

Amit Vasudevan, Ning Qu, and Adrian Perrig. Xtrec: Secure Real-time Instruction Level Execution Control Flow Recording on Commodity Platforms. Carnegie Mellon University/Cylab, Technical Report CMU-CyLab-09-007, Mar. 2009. (pdf, url)

Jonathan McCune, Ning Qu, Yanlin Li, Anupam Datta, Virgil D. Gligor, and Adrian Perrig. Efficient TCB Reduction and Attestation. Carnegie Mellon University/Cylab, Technical Report CMU-CyLab-09-003, Mar. 2009. (pdf, url)

Jason Franklin, Arvind Seshadri, Ning Qu, Sagar Chaki, and Anupam Datta. Attacking, Repairing, and Verifying SecVisor: A Retrospective on the Security of a Hypervisor. Carnegie Mellon University/Cylab, Technical Report CMU-CyLab-08-008, Jun. 2008. (pdf, url)

Arvind Seshadri, Ning Qu, Adrian Perrig. SecVisor: A Tiny Hypervisor to Provide Lifetime Kernel Code Integrity for Commodity OSes. U.S. Patent 12/221,109, pending, filed July 2008.

2006 Outstanding Graduates of Peking University
2004 PKU-Intel Information Science and Technology Scholarship
2004 Tri-good Student of Peking University
2001 Excellent Bachelor Theses of Computer Science Department, Peking University

Love Ying

Last Update: 07/31/09