I'm a PhD graduate from the School of Cybersecurity & Privacy at Georgia Institute of Technology. I am advised by Professor Brendan Saltaformaggio.
My research focuses on fraud and abuse detection, including forensic techniques for Android malware and LLMs, leveraging program analysis and machine learning for behavior modeling.
I'm interested in LLM security, Android security, large-scale malware analysis, banking and blockchain security, and privacy leakage discovery.
Malware Platforms Engineering Team @ Meta 
Menlo Park, CA
05/2025 - 08/2025
Built an end-to-end full-stack pipeline to ingest and query VirusTotal malware behavioral data.
Developed a PHP backend to handle report ingestion, parsing, storage, and LiveHunt rule matching.
Crafted a React UI to display VirusTotal report data, author LiveHunt rules, and visualize matched results.
Cyber Threat Defense Team @ Bank of America 
Addison, TX
05/2024 - 08/2024
Identified 10K fraud transactions by modeling behaviors of PoC Android malware.
Deployed proactive defense against Android malware in the BofA app by collaborating with development team.
Streamlined BofA's malware response process and improved efficiency by creating a mobile malware defense playbook and operationalizing it with the malware analytics team.
Haichuan Xu, David Oygenblik, Runze Zhang, Mingxuan Yao, Muhammad Ibrahim, Brendan Saltaformaggio
47th IEEE Symposium on Security and Privacy (S&P '26)
Acceptance Rate: TBD
Haichuan Xu, Mingxuan Yao, Runze Zhang, Mohamed Moustafa Dawoud, Jeman Park, Brendan Saltaformaggio
33rd USENIX Security Symposium (Security '24)
Acceptance Rate: 17.6%
Artifact Evaluation: 
Available, Functional
Media: [Georgia Tech Research][hackerdose][Tech Xplore][Hypepotamus][TechRadar][NY Breaking][MSN][Sensi Tech Hub][WizCase][Science of Security][Hackread]
Haichuan Xu, Runze Zhang, Mingxuan Yao, David Oygenblik, Yizhi Huang, Jeman Park, Brendan Saltaformaggio
32nd ACM Conference on Computer and Communications Security (CCS '25)
Acceptance Rate: 13.8%
Artifact Evaluation: Available, Functional
CVE-2022-32530, 2022
IEEE Secure Development Conference (SecDev) 2021 - 2023
IEEE Symposium on Security and Privacy (S&P) 2021 - 2024
Network and Distributed System Security Symposium (NDSS) 2021, 2023 - 2024
USENIX Security Symposium (USENIX) 2021 - 2023
ACM Computer and Communications Security (CCS) 2020, 2023
European Symposium on Research in Computer Security (ESORICS) 2020, 2023
Annual Computer Security Applications Conference (ACSAC) 2020, 2022 - 2023
Computers & Security Journal (COSE) 2020, 2022
Language-Theoretic Security (LangSec) 2022
IEEE International Conference on Trust, Privacy and Security in Intelligent Systems, and Applications (TPS), 2022
Research in Attacks, Intrusions, and Defenses (RAID) 2020 - 2021
Transactions on Information Forensics and Security (TIFS) 2020-2021
IEEE European Symposium on Security and Privacy (Euro S&P) 2021
Digital Forensics Research Workshop (DFRWS) 2021