曲宁

email: quning (at) gmail (dot) com

English Version

教育经历

2001.9 – 2007.1 计算机系统结构，理学博士, 北京大学计算机系
助研，北京大学微处理器研究开发中心
1997.9 – 2001.7 计算软件，理学学士, 北京大学计算机系

工作经验

Google Corporation, Software Engineer, Jul. 2011 - Present

Nvidia Corporation, Sr. System Software Engineer, Jul. 2009 - Jul. 2011

Carnegie Mellon University, Postdoctoral Researcher, Feb 2007 - Jul. 2009
Electrical & Computer Engineering Department / Cylab

Peking University, Research Assistant, Sep. 2001 - Jan. 2007
Computer Science and Technology Department

项目经验

Projrects as Software Engineer in Google

2011.7 - present

Platform Security: in Google Search Appliance (Enterprise Search Product).

Projrects as Sr. System Software Engineer in Nvidia

2009.7 - 2011.7

Future GPU Project: Architecture level validation and debugging in future GPU architecture group.

博士后科研项目

2007.3 - 2007.12		SecVisor Project: Tiny Security Hypervisor for OS Kernel Code Integrity. Design and implement a tiny hypervisor to ensure code integrity for commodity OS kernels. This tiny hypervisor protects the kernel against code injection attacks such as kernel rootkits.
2007.12 - 2008.12		Pioneer-NG Project: Externally-verifiable Code Execution. Design and implement a software-based attestation primitive which enables an external verifier to verify the property of untampered code execution on an untrusted computer.
2008.3 - 2009.7		Xtrec Project: Secure Real–time Instruction-level Control Flow Recording on Commodity Platforms.
2008.7 - 2009.7		Lockdown Project: A Safe and Practical Environment for Security Applications.
2008.11 - 2009.7		TrustVisor Porject: Efficient TCB Reduction and Attestation. Design and implement a special-purpose hypervisor called TrustVisor that provides code and execution integrity as well as data secrecy and integrity for protected code, even in the presence of a compromised OS.

博士阶段科研项目

2005.1 ～ 2005.12		“基于北大众志CPU和Linux操作系统的网络计算机系统关键技术研发和应用示范”，国家高技术研究发展计划（863 计划）计算机软硬件主题课题
2003.3 ～ 2004.7		“基于北大众志系统芯片的家庭网络和VOIP电话系统”，国家高技术研究发展计划（863计划）超大规模集成电路设计专项课题
2002.9 ～ 2003.12		“面向网络计算机的系统软件及其配套环境的设计开发”，国家高技术研究发展计划（863 计划）软硬件主题课题
2002.9 ～ 2005.3		“面向网络计算机的众志-863CPU 芯片及系统”，国家高技术研究发展计划（863 计划）超大规模集成电路设计重大专项重点课题
2000.3 ～ 2000.12		“面向高端消费类电子产品的32/16 位嵌入式微处理器及其示范原型系统”，国家高技术研究发展计划（863 计划）重点课题

论文

已发表论文

Amit Vasudevan, Ning Qu, and Adrian Perrig. XTRec: Secure Real-time Execution Trace Recording on Commodity Platforms. In Proc. of the 44th Hawaii International Conference on System Sciences (HICSS 2011), Kauai, HI, Jan. 2011. (pdf, ppt, url)
Amit Vasudevan, Jonathan M. McCune, Ning Qu, Leendert van Doorn, and Adrian Perrig. Requirements for an Integrity-Protected Hypervisor on the x86 Hardware Virtualized Architecture. In Proc. of the 3rd International Conference on Trust and Trustworthy Computing (Trust 2010), Berlin, Germany, Jun. 2010. (pdf, ppt, url)
Jonathan McCune, Yanlin Li, Ning Qu, Zongwei Zhou, Anupam Datta, Virgil Gligor, and Adrian Perrig. TrustVisor: Efficient TCB Reduction and Attestation. In Proc. of the IEEE Symposium on Security and Privacy (Oakland 2010), Oakland, CA, May 2010. (pdf, ppt, url)
Keisuke Takemori, Adrian Perrig, Ning Qu, and Yutaka Miyake. Remote Attestation for HDD Files Using Kernel Protection Mechanism. In Proc. of IEEE ICC 2010 Communication and Information System Security Symposium, Cape Town, South Africa, May 2010. (pdf, ppt, url)
Takamasa Isohara, Keisuke Takemori, Yutaka Miyake, Ning Qu, and Adrian Perrig. LSM-based Secure System Monitoring Using Kernel Protection Schemes. In Proc. of the Fourth International Workshop on Advances in Information Security, Fukuoka, Japan, Feb. 2010. (pdf, ppt, url)
Arvind Seshadri, Mark Luk, Ning Qu, and Adrian Perrig. SecVisor: A Tiny Hypervisor to Provide Lifetime Kernel Code Integrity for Commodity OSes. In Proc. of the 21st ACM Symposium on Operating Systems Principles (SOSP 2007), Stevenson, WA, Oct. 2007. pp. 335-350. (pdf, ppt, url)
刘姝，苟小刚，曲宁，李险峰，程旭。针对顺序数据访问应用的分离式数据缓存器设计。北京大学学报自然科学版，第44卷第三期，2008。 pp. 359-369. (pdf, url)
Ning Qu, Yulai Zhao, Xuetao Guan, Xu Cheng. A Retargetable Full System Simulator for Thin Client Platform. Chinese Journal of Electronics, 16(3): 401-405, Jul. 2007. (pdf)
Ning Qu, Yansong Zheng, Wei Cao, Xu Cheng. GISP: A Transparent Superpage Support Framework for Linux. In Proc. of IEEE 18th International Conference on Application-specific Systems, Architectures and Processors, Montreal, Canada, Jul. 2007. pp. 359-364. (pdf, url)
Ning Qu, Yulai Zhao, Xuetao Guan, Xu Cheng. Unichos: A Full System Simulator for Thin Client Platform. In Proc. of the 22nd Annual ACM Symposium on Applied Computing, Seoul, Korea, Mar. 2007. pp. 1552-1556. (pdf, ppt, url)
曲宁，袁鹏，管雪涛，程旭。网络计算机典型应用程序的d-TLB行为分析。北京大学学报自然科学版，第43卷第一期，2007。 pp. 85-91. (pdf, url)
Ning Qu, Xiaogang Gou, Xu Cheng. Using Uncacheable Memory to Improve Unity Linux Performance. In Proc. of workshop on Interaction between Operating System and Computer Architecture (Held in conjunction with 2005 IEEE International Symposium on Workload Characterization), Austin, TX, Oct. 2005. pp. 27-32. (pdf, ppt)

学位论文

曲宁。面向网络计算机的超页技术研究。北京大学计算机系，博士学位论文，2006年12月。 (pdf, ppt)
曲宁。基于USB协议的虚拟文件系统的设计与实现。北京大学计算机系，学士学位论文，2001年6月。 (pdf, ppt)

技术报告

Amit Vasudevan, Ning Qu, Bryan Parno, and Adrian Perrig. Lockdown: A Practical Red-Green System. Carnegie Mellon University/Cylab, Technical Report CMU-CyLab-09-011, Jul. 2009. (pdf, url)
Amit Vasudevan, Ning Qu, and Adrian Perrig. Xtrec: Secure Real-time Instruction Level Execution Control Flow Recording on Commodity Platforms. Carnegie Mellon University/Cylab, Technical Report CMU-CyLab-09-007, Mar. 2009. (pdf, url)
Jonathan McCune, Ning Qu, Yanlin Li, Anupam Datta, Virgil D. Gligor, and Adrian Perrig. Efficient TCB Reduction and Attestation. Carnegie Mellon University/Cylab, Technical Report CMU-CyLab-09-003, Mar. 2009. (pdf, url)
Jason Franklin, Arvind Seshadri, Ning Qu, Sagar Chaki, and Anupam Datta. Attacking, Repairing, and Verifying SecVisor: A Retrospective on the Security of a Hypervisor. Carnegie Mellon University/Cylab, Technical Report CMU-CyLab-08-008, Jun. 2008. (pdf, url)

(Google Scholar Search and DBLP)

专利

Jonathan M. McCune, Adrian Perrig, Anupam Datta, Virgil D. Gligor, Ning Qu. Methods and Apparatuses for User-Verifiable Trusted Path in the Presence of Malware. International Patent PCT/US2010/040334, WIPO No. WO 2011/037665, pending since June 2010. (url)
Arvind Seshadri, Ning Qu, Adrian Perrig. Systems and methods for preventing unauthorized modification of an operating system . U.S. Patent 12/221,109, pending, filed July 2008. (url)

助教

2002.9 – 2003.1 运行时刻技术 (Intel中国研究中心)
2001.9 – 2002.1 软件项目管理

奖励

2006 北京大学优秀毕业生
2004 北大-Intel信息科学与技术奖学金
2004 北京大学三好学生
2001 北京大学计算机系优秀本科毕业论文

Links

Love Ying

曲宁

最后更新: 07/31/11