Skip to content
View samhsu-dev's full-sized avatar
🎯
Focusing
🎯
Focusing
20 followers · 26 following

Achievements

Achievement: Pull Sharkx2Achievement: Pair ExtraordinaireAchievement: QuickdrawAchievement: Arctic Code Vault Contributor

Achievements

Achievement: Pull Sharkx2Achievement: Pair ExtraordinaireAchievement: QuickdrawAchievement: Arctic Code Vault Contributor

Highlights

  • Pro

Block or report samhsu-dev

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
samhsu-dev/README.md

Hi, I'm Yichao Xu. Computer Science PhD candidate at Johns Hopkins, studying software security.

Website · Resume · LinkedIn · Google Scholar · Email

Research

{
  "programAnalysis": {
    "focus": ["unsafe data flows", "business-rule violations"],
    "direction": "Extending static analysis and fuzzing with agents"
  },
  "agenticSecurity": {
    "studying": "How context changes LLM cybersecurity responses",
    "exploring": "Task and authorization boundaries in tool-using agents"
  }
}

Selected research

CoBrA snake logo

CoBrA · PHP analysis
Static analysis for dynamic PHP code, uncovering 54 previously unknown vulnerabilities in 19 web applications.
First author · ICSE 2026 · Paper · Code

FAST · Node.js analysis
Scalable JavaScript analysis through abstract interpretation, uncovering 242 previously unknown vulnerabilities in npm packages.
Second author · IEEE S&P 2023 · Paper · Code

Selected project

Pixel-art farmer and crops

Harvest Claude
A Rust terminal app that visualizes running Claude Code agents as pixel-art characters.
Rust · Terminal UI

Popular repositories Loading

  1. TChecker TChecker Public

    Forked from cuhk-seclab/TChecker

    tchecker with python script wrapper

    HTML 2 1

  2. cwe-tree cwe-tree Public

    A tree structure for quering Common Weakness Enumeration (CWE) types relationship

    Python 2 3

  3. repo_classifier repo_classifier Public

    A python library for classify the type of the git repo based on the README.md file

    Python 2

  4. Homeworks-UoL Homeworks-UoL Public archive

    The assignment of the liverpool univeristy computer science lecture

    C# 1 2

  5. ripsv0.5-cli ripsv0.5-cli Public

    Forked from ripsscanner/rips

    A **command-line interface (CLI) version** of [RIPS v0.5](https://github.com/ripsscanner/rips) – a static source code analyzer for detecting vulnerabilities in PHP applications.

    PHP 1

  6. cve-extractor cve-extractor Public

    A Python tool for automatically extracting vulnerable repositories from CVEListV5

    Python 1 1