个人简介

       周鑫，南京大学软件学院副研究员，软件研发效能实验室核心骨干成员，博士毕业于南京大学软件学院软件工程专业。曾获“东南亚嘉里科教交流基金”资助，赴马来亚大学开展访学研究。本人主要研究方向可信软件与质量保障，具体包括：可信AI、AI攻防渗透测试智能体、软件供应链安全、大模型安全合规评估、漏洞检测等。曾在ICSE、FSE、ASE、TSE、ESE、计算机学报和软件学报等软件工程高水平会议和期刊发表了20余篇论文（其中一篇最佳论文奖，Google学术单引437次）；曾主持江苏省自然科学基金、全国重点实验室创新课题、工信部重点实验室课题、CCF胡杨林基金、华为等知名企业横向科研项目多项，作为骨干核心成员参与多项供应链领域的国家级、省部级重大项目；申请发明专利二十余项（其中10项已授权），部分专利成果已经在知名软件公司转化；担任TSE、JSS、IST、JSEP等权威期刊审稿人。是软件物料清单 (SBOM) 标准社区“SBOM筑链计划”工作组首批成员单位 (南京大学) 的核心成员。 本人所指导本硕毕设学生无一延毕，就业方向包括央国企信息部门、互联网大厂、政府职能部门、金融机构等。

本研究组面向27级保研、26级考研的硕士生（学术型和专业型）及博士生诚邀加入。

在读硕博生的科研论文、毕设论文，由本人及高年级博士专业指导修改，辅助顺利毕业。

欢迎对大语言模型、AI攻防智能体、漏洞检测等研究方向感兴趣，或对工程实践感兴趣的同学联系我。

联系方式：zhouxin@nju.edu.cn

 ※※※※※※※欢迎对相关研究方向感兴趣的学生与我邮件联系，加入我们的科研团队！※※※※※※※

论文成果

● <CCF-A> 徐近伟，周鑫，杨焱景，李晓康，余灏沣，杨岚心，张贺，吴永航，"一种基于大语言模型的多来源漏洞影响库识别方法"[J].计算机学报, 2025.

● <CCF-A> X. Zhou, J. Xu, H. Zhang, Y. Yang, L. Yang, B. Liu and H. Tang. "Securing. Self-Managed Third-Party Libraries." In Proceedings of the 40th International Conference on Automated Software Engineering (ASE'25), Seoul, Korea.

● <CCF-A> Y. Yang, B. Liu, H. Zhang, J. Xu, X. Zhou, J. Lyu, Z. Mao, D. Pan, Towards Robust Detection for Malicious Injection Variants, in TSE, 2026.

● <CCF-A> Y. Wang, Y. Huang, J. Li, S. Li, H. Zhang, J. Lyu, C. Zhong, B. Liu, Y. Liu, Q. Lu, and X. Zhou, Decision Support for Selecting Blockchain-Based Application Design Patterns with Layered Taxonomy and Quality Attributes, in TSE, 2025.

● <CCF-A> J. Xu, H. Zhang, Y. Yang, L. Yang, X. Zhou; et al. One Size Does Not Fit All: Investigating Efficacy of Perplexity in Detecting LLM-Generated Code, in TOSEM, 2025.

 ● <CCF-A> X. Zhou, H. Huang, H. Zhang, X. Huang, Dong Shao, Chenxin Zhong, A Cross-Company Ethnographic Study on Software Teams for DevOps and Microservices: Organization, Benefits, and Issues, in Proceedings of 42nd International Conference on Software Engineering (ICSE'22), Pittsburgh, PA, USA.

● <CCF-A> H. Zhang, X. Zhou, X. Huang, H. Huang, M. Ali Babar, An Evidence-Based Inquiry into the Use of Grey Literature in Software Engineering, in Proceedings of 42nd International Conference on Software Engineering (ICSE'20), Seoul, South Korea.

● <CCF-A> H. Zhang, X. Huang, X. Zhou, H. Huang, and M. Ali Babar, Ethnographic Research in Software Engineering: A Critical Review and Checklist, in Proceedings of 27th ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering (ESEC/FSE'19), Tallinn, Estonia.

● <CCF-A> X. Huang, H. Zhang, X. Zhou, M. Ali Babar and S. Yang, Synthesizing Qualitative Research in Software Engineering: A Critical Review, in Proceedings of 40th International Conference on Software Engineering (ICSE'18), Gothenburg, Sweden.

● <CCF-B> J. Xu, H. Zhang, X. Zhou, Y. Yang; et al. Automated Detection of Affected Libraries from Vulnerability Reports, in ASE, 32 (2), 2025.

● <CCF-B> Y. Yang, X. Zhou, R. Mao; et al. DLAP: A Deep Learning Augmented Large Language Model Prompting Framework for Software Vulnerability Detection, in JSS, 112234. 2025.

● <CCF-B> X. Zhou, J. Xu, X. Li, L. Cao, L. Li, Y. Wang, S. Li, H. Liu, A Blockchain-based and Microservices-architected Software Composition Analysis System, in  Journal of Software: Evolution and Process, 2024.

● <CCF-B> X. Zhou, R. Mao, H. Zhang, Q. Dai, H. Huang, H. Shen, J. Li, and G. Rong, Revisit Security in the Era of DevOps: An Evidence-Based Inquiry into DevSecOps Industry, in IET Software, 2023.

● <CCF-B> X. Zhou, L. Shan, L. Cao, H. Zhang, Z. Jia, C. Zhong, Z. Shan, MA. Babar, Revisiting the practices and pains of microservice architecture in reality: An industrial inquiry, in Journal of Systems and Software, 195(111521), 2022.

● <CCF-B> L. Yang, H. Zhang, H. Shen, X. Huang, X. Zhou, G. Rong, D. Shao, Quality Assessment in Systematic Literature Reviews: A Software Engineering Perspective, in Information and Software Technology, Volume 130, 106397, 2021.

● <CCF-C> X. Huang, H. Zhang, X. Zhou, D. Shao and L. Jaccheri, A Research Landscape of Software Engineering Education, in Proceedings 28th Asia-Pacific Software Engineering Conference (APSEC'21).

● <CCF-C> L. Dong, H. Zhang, L. Yang, Z. Weng, X. Yang, X. Zhou, Z. Pan, Survey on Pains and Best Practices of Code Review, in Proceedings  28th Asia Pacific Software Engineering Conference (APSEC'21).

● <CCF-C> X. Zhou, How to Treat the Use of Grey Literature in Software Engineering, in Proceedings of 16th International Conference on Software and Systems Process (ICSSP'20), Seoul, South Korea.

● <CCF-C> C. Fu, H. Zhang, X. Huang, X. Zhou, and Z. Li, A Review of Meta-ethnographies in Software Engineering, in Proceedings of 23rd International Conference on Evaluation and Assessment in Software Engineering (EASE'19), Copenhagen, Denmark.

● <CCF-C> X. Zhou, Y. Jin, H. Zhang, S. Li, and X. Huang, A Map of Threats to Validity of Systematic Literature Reviews in Software Engineering, 23rd Asia Pacific Software Engineering Conference, in Proceedings of 23rd Asia Pacific Software Engineering Conference (APSEC' 16), New Zealand, Hamilton. (Best Paper Award)