Xiangmin Shen

3410 Mudd Hall

2233 Tech Dr, 3rd Floor

Evanston, IL 60208

I’m a final year PhD candidate working with Prof. Yan Chen at Northwestern University Computer Science Department. I am broadly interested in system security and security measurement. My current research focuses on enhancing system security by applying AI techniques in defense and offense.

news

Feb 16, 2025	We are pleased to announce the release of PentestAgent, an LLM-driven automated penetration testing framework. Feel free to try out the tool, share your thoughts, and let us know if you run into any issues. If you find PentestAgent useful, do give it a star on GitHub.
Feb 04, 2025	Our poster “LLM-Driven Automated Exploit Assessment for Penetration Testing” is accepted to appear in NDSS’25.
Aug 30, 2024	Our paper “Incorporating Gradients to Rules: Towards Lightweight, Adaptive Provenance-based Intrusion Detection” is accepted by NDSS’25.
Dec 19, 2023	Our paper “Decoding the MITRE Engenuity ATT&CK Enterprise Evaluation: An Analysis of EDR Performance in Real-World Environments” is accepted by AsiaCCS’24.

selected publications

NDSS

Incorporating Gradients to Rules: Towards Lightweight, Adaptive Provenance-based Intrusion Detection

Xiangmin Shen*, Lingzhi Wang* , Weijian Li , Zhenyuan Li, R Sekar , and 2 more authors

Proceedings of the 32nd Annual Network and Distributed System Security Symposium (NDSS), 2025

arXiv Bib HTML PDF

@article{wang2024incorporating,
  title = {Incorporating Gradients to Rules: Towards Lightweight, Adaptive Provenance-based Intrusion Detection},
  author = {Shen*, Xiangmin and Wang*, Lingzhi and Li, Weijian and Li, Zhenyuan and Sekar, R and Liu, Han and Chen, Yan},
  journal = {Proceedings of the 32nd Annual Network and Distributed System Security Symposium (NDSS)},
  year = {2025},
  annotation = {The first two authors made equal contribution},
}

AsiaCCS

Decoding the MITRE Engenuity ATT&CK Enterprise Evaluation: An Analysis of EDR Performance in Real-World Environments

Xiangmin Shen, Zhenyuan Li, Graham Burleigh , Lingzhi Wang, and Yan Chen

Proceedings of the 19th ACM Asia Conference on Computer and Communications Security (AsiaCCS), 2024

arXiv Bib HTML PDF

@article{shen2024decoding,
  title = {Decoding the MITRE Engenuity ATT\&CK Enterprise Evaluation: An Analysis of EDR Performance in Real-World Environments},
  author = {Shen, Xiangmin and Li, Zhenyuan and Burleigh, Graham and Wang, Lingzhi and Chen, Yan},
  journal = {Proceedings of the 19th ACM Asia Conference on Computer and Communications Security (AsiaCCS)},
  year = {2024},
}