Mingqing Kang

I am a Ph.D. candidate in the Department of Computer Science at the Johns Hopkins University. My current research focuses on program analysis for JavaScript, but I am also interested in human-computer interaction (HCI), usable security, and the broader area of web security, privacy and language-based security.

Work: +1 (410) 516-4050
Malone 360

Education

Ph.D. Student in Computer Science
Johns Hopkins University, Advised by Yinzhi Cao 		Sep 2020–Present
M.S in Security Informatics
Johns Hopkins University, Advised by Xiangyang Li 		Sep 2017–Dec 2018
B.E. in Software Enginerring
Harbin Engineering University 		Sep 2012–Jul 2016

Publications

[FAST] Scaling JavaScript Abstract Interpretation to Detect and Exploit Node.js Taint-style Vulnerability [GitHub]
Mingqing Kang, Yichao Xu, Song Li, Rigel Gjomemo, Jianwei Hou, V.N. Venkatakrishnan, and Yinzhi Cao
In the Proceedings of the IEEE Symposium on Security and Privacy (Oakland), 2023
CHKPLUG: Checking GDPR Compliance of WordPress Plugins via Cross-language Code Property Graph
Faysal Hossain Shezan, Zihao Su, Mingqing Kang, Nicholas Phair, Patrick William Thomas, Michelangelo van Dam, Yinzhi Cao, and Yuan Tian
In the Proceedings of Network & Distributed System Security Symposium (NDSS), 2023
[ODGen] Mining node.js vulnerabilities via object dependence graph and query [GitHub]
Song Li, Mingqing Kang, Jianwei Hou, and Yinzhi Cao.
In 31st USENIX Security Symposium (USENIX Security 22), Boston, MA, August 2022, USENIX Association
USENIX Badges: Artifacts Available, Artifacts Functional, Results Reproduced
[ObjLupAnsys] Detecting Node.js prototype pollution vulnerabilities via object lookup analysis [GitHub]
Song Li, Mingqing Kang, Jianwei Hou, and Yinzhi Cao
In Proceedings of the 29th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering, pages 268–279, 2021
Understanding Security Behavior of Real Users: Analysis of a Phishing Study
Mingqing Kang, Matthew Shonman, Anshul Subramanya, Haoruo Zhang, Xiangyang Li, and Anton Dahbura
In 2021 Hawaii International Conference on System Sciences (HICSS-54), Virtual Event, January 5-8, 2021
Using a Computational Cognitive Model to Understand Phishing Classification Decisions of Email Users
Matthew Shonman, Xiaoyu Shi, Mingqing Kang, Zuo Wang, Xiangyang Li, Anton Dahbura
In the proceedings of 35th International BCS Human-Computer Interaction Conference (HCI2022)
RogueOne: Detecting Rogue Updates via Differential Data-flow Analysis Using Trust Domains
Raphael J. Sofaer, Yaniv David, Mingqing Kang, Jianjia Yu, Yinzhi Cao, Junfeng Yang, and Jason Nieh
In the proceedings of 46th International Conference on Software Engineering (ICSE), 2024
CoBrA: Context-, Branch-sensitive Static Analysis for Detecting Taint-style Vulnerabilities in PHP Web Applications
Yichao Xu, Mingqing Kang, Neil Thimmaiah, Rigel Gjomemo, V. N. Venkatakrishnan, and Yinzhi Cao
In 48th International Conference on Software Engineering (ICSE), 2026

Professional Experience

Teaching Assistant: EN.601.740 Language-based Security.
Course Assistant: EN.601.441/641 Blockchains and Cryptocurrencies, EN.601.340/440/640 Web Security.
Research Asssistant: Advised by Dr. Xiangyang Li, Advised by Dr. Yinzhi Cao.
Internship: May 2023–Aug 2023 at Visa Inc.

Trivia

I'm an amateur photographer. You can find some of my photos at .
Last Updated: 2026-03