Xiang Pan 潘翔

I am a 5th year PhD student at Northwestern University, advised by professor Yan Chen. I received my B.S. degree in Computer Science from Nanjing University, Nanjing, China in 2011. Beforing majoring Computer Science, I studied Education Science in Nanjing University from 2006 to 2008.


Research Interests

I work in the areas of web security, web privacy, SDN security and Android security.



  1. CSPAutoGen: Black-box Enforcement of Content Security Policy upon Real-world Websites
    Xiang Pan, Yinzhi Cao, Shuangping Liu, Yu Zhou, Yan Chen, and Tingzhe Zhou
    to appear in ACM Conference on Computer and Communications Security (CCS), 2016 (137/831 = 16.5%).

  2. HogMap: Using SDNs to Incentivize Collaborative Security Monitoring
    Xiang Pan, Vinod Yegneswaran, Yan Chen, Phillip Porras and Seungwon Shin
    ACM Workshop on Security in Software Defined Networks & Network Function Virtualization, 2016

    Adopted by SRI International.

  3. Are These Ads Safe: Detecting Hidden Attacks through the Mobile App-Web Interfaces
    Vaibhav Rastogi, Rui Shao, Yan Chen, Xiang Pan, Shihong Zou and Ryan Riley
    Proceeding of the Annual Network & Distributed System Security Symposium (NDSS), 2016 (60/389=15% )

    Featured in ScienceDaily, Sciencecodex, Northwestern McComick News, air cast on KCSN Latin Alternative.

  4. SafePay: Protecting against Credit Card Forgery with Existing Magnetic Card Readers
    Yinzhi Cao, Xiang Pan and Yan Chen
    IEEE Conference on Communications and Network Security (CNS), 2015 (48/171=28%)

    Won the Best Paper Award
    Featured in CCTV-America and over 30 news periodicals, such as: NSF Science360 News,  Yahoo! NewsScienceDailyTech News TodayTimes Today News, and The Economics Times. View a more extensive list of publications

  5. I Do Not Know What You Visited Last Summer - Protecting users from third-party web tracking with TrackingFree browser
    Xiang Pan, Yinzhi Cao, and Yan Chen
    Proceeding of the Annual Network & Distributed System Security Symposium (NDSS), 2015 (51/302 = 16.9%).

  6. JShield: Towards Real-time and Vulnerability-based Detection of Polluted Drive-by Download Attacks
    Yinzhi Cao, Xiang Pan, Yan Chen and Jianwei Zhuge
    Annual Computer Security Applications Conference (ACSAC), 2014 (19.9%). 2014 (19.9%).

    Adopted by Huawei, the world's largest telecommunication equipment maker, in their high-end Web Firewall products.


xiangpan2011 AT u.northwestern.edu
Ford 2.207
2133 Sheridan Road
Evanston, IL 60208