Tong Zhu (祝童)

Department of Computer Science & Engineering Shanghai Jiao Tong University 800 Dongchuan Rd., Shanghai 200240, China Lab: Network Security and Privacy Protection (NSEC) Lab Email 1: tongzhu AT sjtu.edu.cn Email 2 (Commonly Used Email): tong.zh AT foxmail.com [CV_in_English] [CV_in_Chinese]

Short Bios

I received my Ph.D. degree in the field of computer science and technology at the Department of Computer Science & Engineering of Shanghai Jiao Tong University in 2024. Previously, I received a Bachelor of Science degree in the field of computer science and technology from the University of Electronic Science and Technology of China in June 2019. My current research interests are mobile security and privacy, especially mobile advertising fraud detection. I published several international conference and journal papers, including ACM CCS ('21, '24)(CCF-A), USENIX Security'23 (CCF-A), ACM/IEEE TON'25 (CCF-A), IEEE ICDCS (CCF-B), DFRWS (CCF-C), and Digital Investigation (SCI). I received ACM CCS'24 Student Travel Grant Award (2024), the only gold prize of the 2024 China Advertising Great-Wall Award (Academic Category), Outstanding Graduate Student of the University of Electronic Science and Technology of China (2019), and Grand Prize Scholarship (Top 3%) (2018). I have identified and reported multiple security vulnerabilities in various systems. I also serve as the reviewer for academic journals including Peer-to-Peer Networking and Applications (PPNA) and have been hired as a consultant expert for the Service Center for Ecological Security in Brand Marketing at the China Advertising Association.

Research Interest

My research interests focus on identifying and addressing new security threats in mobile systems. I am especially interested in the detection of mobile advertising fraud. I am interested in a set of novel techniques and projects that can improve the security and privacy of mobile systems and have a real-world impact. My research mainly focuses on:
• Static / dynamic analysis on mobile systems such as Android.
  
• Mobile advertising fraud detection.
  
• Digital forensics.
  

Education

• Ph.D., computer science and Engineering, 2019.09 - 2024.12
  Shanghai Jiao Tong University, Shanghai, China
  Advisor: Professor Haojin Zhu
  Area of Study: Mobile Security and Privacy
• B.S., computer science and Engineering, 2015.09 - 2019.06
  University of Electronic Science and Technology of China, Chengdu, China
  Advisor: Professor Ting Chen
  

Honors and Awards

• The only gold prize of the 2024 China Advertising Great-Wall Award (Academic Category), Dec. 2024
  
• Hired as a consultant expert for the Service Center for Ecological Security in Brand Marketing at the China Advertising Association, Sep. 2024
  
• Student Travel Grant, ACM CCS 2024, Sep. 2024
  
• Outstanding Graduate Student of University of Electronic Science and Technology of China, Jun. 2019
  
• Grand Prize Scholarship (Top 3%), Dec. 2018
  
• A-level Certificate of Comprehensive Quality for College Students in Sichuan Province, Oct. 2018
  
• Excellent Student Cadre, May 2017
  
• Second Prize Scholarship, Dec. 2017
  
• Second Prize of Mathematical Contest In Modeling in Sichuan Province, Aug. 2017
  
• First Prize Scholarship, Dec. 2016
  

Publications

Journal Papers

• Tong Zhu, Zhen Huang, Lu Zhou, Guoxing Chen, Yan Meng, and Haojin Zhu. Collaborative Ad Fraud Detection in Ad Networks[J]. IEEE/ACM Transactions on Networking, 2025 (IEEE/ACM TON, CCF-A)
• Xiaodong Lin, Ting Chen,Tong Zhu, Kun Yang, Fengguo Wei. Automated forensic analysis of mobile applications on Android devices[J].Digital Investigation, 2018. 26: p. S59-S66.(The special issue of the DFRWS'18)

Conference Papers

• Tong Zhu, Chaofan Shou, Zhen Huang, Guoxing Chen, Xiaokuan Zhang, Yan Meng, Shuang Hao, Haojin Zhu. Unveiling Collusion-Based Ad Attribution Laundering Fraud: Detection, Analysis, and Security Implications[C]. ACM 31st Conference on Computer and Communications Security (ACM CCS'24, CCF-A). ACM, 2024.
• Lu Zhou, Chengyongxiao Wei, Tong Zhu, Guoxing Chen, Xiaokuan Zhang, Suguo Du, Hui Cao, Haojin Zhu. POLICYCOMP: Counterpart Comparison of Privacy Policies Uncovers Overbroad Personal Data Collection Practices[C]. The 32nd USENIX Security Symposium(USENIX Security'23, CCF-A). USENIX, 2023.
• Tong Zhu, Yan Meng, Haotian Hu, Xiaokuan Zhang, Minhui Xue, Haojin Zhu. Dissecting Click Fraud Autonomy in the Wild[C]. ACM 28th Conference on Computer and Communications Security(ACM CCS'21, CCF-A). ACM, 2021.
• Ting Chen, Zihao Li, Yufei Zhang, Xiapu Luo, Ang Chen, Kun Yang, Bin Hu, Tong Zhu, Shifang Deng, Teng Hu, Jiachi Chen, Xiaosong Zhang. Dataether: Data exploration framework for ethereum[C]. IEEE 39th International Conference on Distributed Computing Systems (ICDCS'19, CCF-B). IEEE, 2019, pp.1369-1380.
• Xiaodong Lin, Ting Chen, Tong Zhu, Kun Yang, Fengguo Wei. Automated forensic analysis of mobile applications on Android devices[C]. Digital Forensics Research Workshop (DFRWS'18, CCF-C). Elsevier, 2018.

Patent

• Haojin Zhu, Tong Zhu, Yan Meng. 2022. Mobile advertising click fraud detection method, system, and terminal based on static analysis. CN (National Invention Patent) CN113191809B, filed May 7, 2021, and issued August 9, 2022. (Authorized)
• Haojin Zhu, Tong Zhu, Yan Meng, Guoxing Chen. 2024. Collusion-based advertising attribution laundering fraud detection method, system, and terminal based on static analysis. CN (National Invention Patent) 2024. (Pending)

Professional Services

• Peer-to-Peer Networking and Applications (PPNA): Reviewer
  

Teaching Assistant

• Network Security, Spring 2021
  

Other Information

Discovered Vulnerabilities

• CNVD-2020-31071, High
• CNVD-2020-31516, Medium
• CNVD-2020-31517, Medium