Ning Qu


email: quning (at) gmail (dot) com

Education

Ph.D in Computer Architecture at Computer Science Department, Peking University, China, Jan. 2007
RA in Microprocessor Research & Development Center, Peking University
B.S. in Computer Software at Computer Science Department, Peking University, China, Jul. 2001

Work Experience

Nvidia Corporation, Sr. System Software Engineer, Jul. 2009 - Present

Carnegie Mellon University, Postdoctoral Researcher, Feb 2007 - Jul. 2009
Electrical & Computer Engineering Department / Cylab

Peking University, Research Assistant, Sep. 2001 - Jan. 2007
Computer Science and Technology Department

Projects

Projrects as Sr. System Software Engineer in Nvidia

Projrects as Postdoctoral Researcher in Carnegie Mellon University

2007.3 - 2007.12		SecVisor Project: Tiny Security Hypervisor for OS Kernel Code Integrity. Design and implement a tiny hypervisor to ensure code integrity for commodity OS kernels. This tiny hypervisor protects the kernel against code injection attacks such as kernel rootkits.
2007.12 - 2008.12		Pioneer-NG Project: Externally-verifiable Code Execution. Design and implement a software-based attestation primitive which enables an external verifier to verify the property of untampered code execution on an untrusted computer.
2008.3 - 2009.7		Xtrec Project: Secure Real–time Instruction-level Control Flow Recording on Commodity Platforms.
2008.7 - 2009.7		Lockdown Project: A Safe and Practical Environment for Security Applications.
2008.11 - 2009.7		TrustVisor Porject: Efficient TCB Reduction and Attestation. Design and implement a special-purpose hypervisor called TrustVisor that provides code and execution integrity as well as data secrecy and integrity for protected code, even in the presence of a compromised OS.

Projects as Ph.D candidate in Peking University

2005.1 - 2006.12		"Network Computer System Key Technology Research and Development based on PKUnity CPU and Linux"，Major Project in Computer Software and Hardware Area supported by National 863 Program, China.
2003.3 - 2004.7		"Home Gateway and VOIP Phone based on PKU Unity CPU", Key Project in VLSI Area supported by National 863 Program, China
2002.9 - 2005.3		"PKU Unity-863 CPU and System for Network Computer", Key Project in VLSI Area supported by National 863 Program, China.
2002.9 - 2003.12		"System Software Platform Design and Development for Network Computer", Major Project in Computer Software and Hardware Area supported by National 863 Program, China.
2000.3 - 2000.12		"32/16 Embedded Microprocessor and Prototype System for High-end Consume Electronic Products", Major Project supported by National 863 Program, China

Papers

Publications

Amit Vasudevan, Jonathan M. McCune, Ning Qu, Leendert van Doorn, and Adrian Perrig. Requirements for an Integrity-Protected Hypervisor on the x86 Hardware Virtualized Architecture. In Proc. of the 3rd International Conference on Trust and Trustworthy Computing (Trust 2010), Berlin, Germany, Jun. 2010. (pdf, ppt, url)
Jonathan McCune, Yanlin Li, Ning Qu, Zongwei Zhou, Anupam Datta, Virgil Gligor, and Adrian Perrig. TrustVisor: Efficient TCB Reduction and Attestation. In Proc. of the IEEE Symposium on Security and Privacy (Oakland 2010), Oakland, CA, May 2010. (pdf, ppt, url)
Keisuke Takemori, Adrian Perrig, Ning Qu, and Yutaka Miyake. Remote Attestation for HDD Files Using Kernel Protection Mechanism. In Proc. of IEEE ICC 2010 Communication and Information System Security Symposium, Cape Town, South Africa, May 2010. (pdf, ppt, url)
Takamasa Isohara, Keisuke Takemori, Yutaka Miyake, Ning Qu, and Adrian Perrig. LSM-based Secure System Monitoring Using Kernel Protection Schemes. In Proc. of the Fourth International Workshop on Advances in Information Security, Fukuoka, Japan, Feb. 2010. (pdf, ppt, url)
Arvind Seshadri, Mark Luk, Ning Qu, and Adrian Perrig. SecVisor: A Tiny Hypervisor to Provide Lifetime Kernel Code Integrity for Commodity OSes. In Proc. of the 21st ACM Symposium on Operating Systems Principles (SOSP 2007), Stevenson, WA, Oct. 2007. pp. 335-350. (pdf, ppt, url)
Shu Liu, Xiaogang Gou, Ning Qu, Xianfeng Li, Xu Cheng. SSDC: A split data cache design for sequential access intensive applications. Journal(Natural Science) of Peking University (JNSPU), 44(3), May 2008. pp. 359-369. (in Chinese) (pdf, url)
Ning Qu, Yulai Zhao, Xuetao Guan, Xu Cheng. A Retargetable Full System Simulator for Thin Client Platform. Chinese Journal of Electronics, 16(3): 401-405, Jul. 2007. (pdf)
Ning Qu, Yansong Zheng, Wei Cao, Xu Cheng. GISP: A Transparent Superpage Support Framework for Linux. In Proc. of IEEE 18th International Conference on Application-specific Systems, Architectures and Processors, Montreal, Canada, Jul. 2007. pp. 359-364. (pdf, url)
Ning Qu, Yulai Zhao, Xuetao Guan, Xu Cheng. Unichos: A Full System Simulator for Thin Client Platform. In Proc. of the 22nd Annual ACM Symposium on Applied Computing, Seoul, Korea, Mar. 2007. pp. 1552-1556. (pdf, ppt, url)
Ning Qu, Peng Yuan, Xuetao Guan, Xu Cheng. Characterizing the d-TLB Behavior of Typical Applications on Network Computer. Journal(Natural Science) of Peking University (JNSPU), 43(1), Jan. 2007. pp. 85-91. (in Chinese) (pdf, url)
Ning Qu, Xiaogang Gou, Xu Cheng. Using Uncacheable Memory to Improve Unity Linux Performance. In Proc. of workshop on Interaction between Operating System and Computer Architecture (Held in conjunction with 2005 IEEE International Symposium on Workload Characterization), Austin, TX, Oct. 2005. pp. 27-32. (pdf, ppt)

Degree Thesis

Ning Qu. Research on Superpage Support for Network Computer. Computer Science Department of Peking University, Ph.D Degree thesis, Dec. 2006. (in Chinese) (pdf, ppt)
Ning Qu. Virtual File System Design and Implementation based on USB Protocol. Computer Science Department of Peking University, Bachelor Degree thesis, Jun. 2001. (in Chinese) (pdf, ppt)

Technical Report

Amit Vasudevan, Ning Qu, Bryan Parno, and Adrian Perrig. Lockdown: A Practical Red-Green System. Carnegie Mellon University/Cylab, Technical Report CMU-CyLab-09-011, Jul. 2009. (pdf, url)

Amit Vasudevan, Ning Qu, and Adrian Perrig. Xtrec: Secure Real-time Instruction Level Execution Control Flow Recording on Commodity Platforms. Carnegie Mellon University/Cylab, Technical Report CMU-CyLab-09-007, Mar. 2009. (pdf, url)

Jonathan McCune, Ning Qu, Yanlin Li, Anupam Datta, Virgil D. Gligor, and Adrian Perrig. Efficient TCB Reduction and Attestation. Carnegie Mellon University/Cylab, Technical Report CMU-CyLab-09-003, Mar. 2009. (pdf, url)

Jason Franklin, Arvind Seshadri, Ning Qu, Sagar Chaki, and Anupam Datta. Attacking, Repairing, and Verifying SecVisor: A Retrospective on the Security of a Hypervisor. Carnegie Mellon University/Cylab, Technical Report CMU-CyLab-08-008, Jun. 2008. (pdf, url)

(Google Scholar Search and DBLP)

Patents

Jonathan M. McCune, Adrian Perrig, Anupam Datta, Virgil D. Gligor, Ning Qu. Methods and Apparatuses for User-Verifiable Trusted Path in the Presence of Malware. International Patent, pending, filed June 2010. (url)

Jonathan M. McCune, Adrian Perrig, Anupam Datta, Virgil D. Gligor, Amit Vasudevan, Yanlin Li, Bryan J. Parno, Ning Qu. Methods and Apparatuses for User-Verifiable Execution of Security-Sensitive Code. U.S. Patent 12/720,008, pending, filed March 2010. (url)

Arvind Seshadri, Ning Qu, Adrian Perrig. Systems and methods for preventing unauthorized modification of an operating system . U.S. Patent 12/221,109, pending, filed July 2008. (url)

Teaching Assitant

2002.9 – 2003.1 Runtime Technology (by Intel China Research Center)
2001.9 – 2002.1 Software Project Management

Awards

2006 Outstanding Graduates of Peking University
2004 PKU-Intel Information Science and Technology Scholarship
2004 Tri-good Student of Peking University
2001 Excellent Bachelor Theses of Computer Science Department, Peking University

Links

Love Ying

Ning Qu

Last Update: 07/27/10