Qi Wang

About Me

Hi! I’m Qi Wang, also known as Eki. I’m a PhD student at the Institute for Network Sciences and Cyberspace, Tsinghua University. I conduct my research in the Network and Information Security Lab (NISL), under the supervision of Prof. JianJun Chen. My work primarily focuses on Web security and network protocol security. By identifying vulnerabilities and designing secure protocol solutions, I aim to help build a more robust and resilient internet infrastructure.

In addition to my academic research, I’m an active Capture the Flag (CTF) player. I currently serve as captain of Tsinghua University’s CTF team Redbud , and a former member of Dubhe. My main strengths in CTF competitions lie in Web and Misc challenges.

Research Interests

• Web Security: Web application security, web vulnerability detection, web attack defense
• Protocol Security: Network protocol security, protocol vulnerability analysis
• AI & Security: Applying AI to enhance security measures, and ensuring the security of AI

News

• [Dec. 2025] I’m so excited and honoured to have been selected as an Internet Society NDSS Fellow. I’m really excited to be able to contribute to the community and to get to meet so many of you in San Diego.
• [Dec. 2025] Our paper about JWT Vulnerability is accepted to NDSS 2026. Congratulations to Jingcheng!
• [Aug. 2025] Our paper about SIP Spoofing Vulnerability is accepted to NDSS 2026. See you in San Diego!
• [Jul. 2025] Our paper about Zip Parsing Vulnerability is accepted to USENIX Security 2025. Congratulations to Yufan!
• [May 2025] Our research about New Cross-Origin Web Attacks is accepted to Blackhat USA 2025. Congratulations to Pinji!

Publications

Rewards

• [Dec. 2025] Got 5th 🏅 at Blackhat MEA Final with 「Redbud」
• [Feb. 2025] Got 🥈 at Aliyun CTF 2025 with 「Redbud」
• [Dec. 2024] Got 🥇 at TSGCTF 2024 with 「blue-lotus」
• [Nov. 2024] Got 🥈 at Byte AI Security Competition with 「一般通过」
• [Oct. 2024] Got 🥇 at Geekcon DAF with 「Redbud」
• [Jun. 2024] Got 🥈 at XCTF-Final with 「Redbud」
• [Dec. 2023] Got 🥈 at TCTF2022 Rising Star Final with 「Redbud」
• [May 2023] Got 🥈 at D^3CTF 2023 with 「满分冰美式」
• [Dec. 2022] Got 🥇 at 5th "Qiangwang" (cyberspace power) International Elite Challenge on Cyber Mimic Defense with 「Dubhe」
• [Sep. 2022] Got 🥇 at 6th "Blue Hat Cup" National College Students' Cyber Security Skills Competition with 「一般通过」
• [Oct. 2021] Got 🥇 at XCTF-SCTF2021 with 「Dubhe」
• [Sep. 2021] Got 🥈 at TCTF2021 Rising Star with 「emmmm」

Services

Teaching Assistant

• Web Security (Course No. 84120252). Fall 2024

Head of Club

• Tsinghua University Cyber Security Technology Association. 2025-Present

Education

• Ph.D. in Cyberspace Security, 2023-2028 (expected)
  Institute for Network Sciences and Cyberspace, Tsinghua University
• Bachelor in Cyberspace Security, 2019-2023
  School of Cyberspace Security, Beijing University of Posts and Telecommunications