Ph.D. Student in Computer Engineering at Arizona State University.

Currently affiliated with SEFCOM led by Dr. Gail-Joon Ahn, Dr. Adam Doupé, Dr. Yan Shoshitaishvili, Dr. Ruoyu (Fish) Wang, and Dr. Tiffany Bao.

My research fields focus on the analysis of anti-phishing ecosystem, including phishing behaviors, sophisticated evasion techniques in phishing, and phishing measurements. I am expanding my research interest to a broad range of topics such as underground forum and systems security.


Email: Penghui.Zhang at asu dot edu | CV (updated at Jun, 2020)

Publications

  1. CrawlPhish: Large-scale Analysis of Client-side Cloaking Techniques in Phishing. (PDF)
    Penghui Zhang, Adam Oest, Haehyun Cho, Zhibo Sun, RC Johnson, Brad Wardman, Shaown Sarker, Alexandros Kapravelos, Tiffany Bao, Ruoyu Wang, Yan Shoshitaishvili, Adam Doupé, and Gail-Joon Ahn.
    To appear in the Proceedings of the 42nd IEEE Symposium on Security & Privacy, May 2021,San Francisco, CA.

  2. PhishTime: Continuous Longitudinal Measurement of the Effectiveness of Anti-phishing Blacklists. (PDF)
    Adam Oest, Yeganeh Safaei, Penghui Zhang, Brad Wardman, Kevin Tyers, Yan Shoshitaishvili, Adam Doupé, and Gail-Joon Ahn.
    In the proceedings of the 29th USENIX Security Symposium, Aug 2020, Boston, MA.

  3. Sunrise to Sunset: Analyzing the End-to-end Life Cycle and Effectiveness of Phishing Attacks at Scale. (PDF)
    Adam Oest, Penghui Zhang, Brad Wardman, Eric Nunes, Jakub Burgis, Ali Zand, Kurt Thomas, Adam Doupé, Gail-Joon Ahn.
    In the proceedings of the 29th USENIX Security Symposium, Aug 2020, Boston, MA.

  4. iCORE: Continuous and Proactive Extrospection on Multi-core IoT Devices. (PDF)
    Penghui Zhang, Haehyun Cho, Ziming Zhao, Adam Doupé, and Gail-Joon Ahn.
    In the proceedings of the 34th ACM/SIGAPP Symposium On Applied Computing (SAC), Limassol, Cyprus, Apr 2019.

  5. Prime+Count: Novel Cross-world Covert Channels on ARM TrustZone. (PDF)
    Haehyun Cho, Penghui Zhang, Donguk Kim, Jinbum Park, Choong-Hoon Lee, Ziming Zhao, Adam Doupé, and Gail-Joon Ahn.
    In the proceedings of the 34th Annual Computer Security Applications Conference (ACSAC), San Juan, Puerto Rico, USA, Dec 2018.

  6. SeCore: Continuous Extrospection with High Visibility on Multi-core ARM Platforms. (PDF)
    Penghui Zhang, Bernard Ngabonziza, Haehyun Cho, Ziming Zhao, Adam Doupé and Gail-Joon Ahn.
    In the proceedings of the 8th ACM Conference on Data and Application Security and Privacy (CODASPY), Tempe, AZ, Mar. 2018
    Distinguished Poster Award.

  7. Temperature Balancing among Servers with Workload Distribution. (PDF)
    Penghui Zhang, Committee: Xiaorui Wang, Ümit Çatalyürek.
    Master Thesis Dissertation in the Ohio State University.

Experience Summary

  • Graduate Research Assistant at Security Engineering for Future Computing (SEFCOM)
    - Jan 2017 ~ Present

  • InfoSec Tech Ph.D. Intern at PayPal Inc.
    - May 2019 ~ Aug 2019

  • Graduate Teaching Assistant at Arizona State University
    on CSE 110(Java), CSE 230(Computer Architecture), and CSE 469(Computer&Network Forensics)
    - Aug 2016 ~ May 2017

Education

  • PhD, Computer Engineering, Arizona State University, Tempe, AZ, Aug 2016 ~ present

  • MS, Electrical and Computer Engineering, the Ohio State University, Columbus, OH, Aug 2014 ~ May 2016
  • - Thesis : Temperature Balancing among Servers with Workload Distribution.