Wenbo Guo (郭文博) is a third-year Ph.D. candidate in the School of Computer and Data Science at Nanyang Technological University (NTU), advised by Prof. Yang Liu.

In 2020, he graduated with honors and earned his Bachelor’s degree from Sichuan University. He was subsequently offered direct admission to graduate school at the School of Cyber Security at Sichuan University, where he continued his academic journey towards a Master’s degree. During this stage, he was co-advised by Prof. Fang Yong and Prof. Cheng Huang.

His research interests include supply chain security and open-source intelligence.

🔥 News

• 2026.06:  🎉🎉 Our security platform Maliverse is now online, integrating our IntelliRadar, PyGuard, and SkillGuard tools into one supply-chain & AI-agent security platform!
• 2026.06:  🎉🎉 Our project was approved for OpenAI Startup Credits ($2,500 USD)!
• 2026.06:  🎉🎉 He was appointed as a member of the Artifact Evaluation Committee (AEC) for NDSS 2027 and ISSTA 2027!
• 2026.04:  🎉🎉 One paper was accepted by ISSTA 2026!
• 2026.01:  🎉🎉 One paper was accepted by USENIX Security 2026!
• 2026.01:  🎉🎉 One paper was accepted by WWW 2026!
• 2025.12:  🎉🎉 One paper was accepted by FSE 2026!

📄 Preprints

• MalSkillBench: A Runtime-Verified Benchmark of Malicious Agent Skills
  • Wenbo Guo, Wei Zeng, Chengwei Liu, Xiaojun Jia, Yijia Xu, Lei Tang, Yong Fang, Yang Liu
  • arXiv preprint, 2026
  • This paper presents MalSkillBench, the first runtime-verified benchmark of malicious agent skills—3,944 malicious skills labeled along a three-dimensional taxonomy—showing that detecting malicious skills requires reasoning jointly over task intent, code, and instructions.
• Understanding NPM Malicious Package Detection: A Benchmark-Driven Empirical Analysis
  • Wenbo Guo, Zhongwen Chen, Zhengzi Xu, Chengwei Liu, Ming Kang, Shiwen Song, Chengyue Liu, Yijia Xu, Weisong Sun, Yang Liu
  • arXiv preprint, 2026
  • This paper presents a benchmark-driven empirical analysis for understanding NPM malicious package detection.

📝 Publications

• Characterizing and Repairing Obsolete Android GUI Tests under UI Evolution
  • Shiwen Song, Yiheng Xiong, Wenbo Guo, Manqi Sun, Jiaolong Kong, Xiaofei Xie
  • ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA), 2026
  • This paper characterizes obsolete Android GUI tests caused by UI evolution and proposes an automated approach to repair them.
• Cutting the Gordian Knot: Detecting Malicious PyPI Packages via a Knowledge-Mining Framework
  • Wenbo Guo, Chengwei Liu, Ming Kang, Yiran Zhang, Jiahui Wu, Zhengzi Xu, Vinay Sachidananda, Yang Liu
  • USENIX Security Symposium (USENIX Security), 2026
  • This paper proposes a knowledge-mining framework that transforms false positives from existing tools into knowledge to drive malicious package detection, discovering over 500 new malicious packages in the PyPI ecosystem.
• Bridging Expert Reasoning and LLM Detection: A Knowledge-Driven Framework for Malicious Packages
  • Wenbo Guo, Shiwen Song, Jiaxun Guo, Zhengzi Xu, Chengwei Liu, Haoran Ou, Mengmeng Ge, Yang Liu
  • The Web Conference (WWW), 2026
  • This paper proposes a knowledge-driven framework that extracts and summarizes knowledge from historical expert malware analysis reports to drive LLM-based malicious package detection.
• Casting a SPELL: Sentence Pairing Exploration for LLM Limitation-breaking
  • Yifan Huang, Xiaojun Jia, Wenbo Guo, Yuqiang Sun, Yihao Huang, Chong Wang, Yang Liu
  • ACM International Conference on the Foundations of Software Engineering (FSE), 2026
  • This paper proposes SPELL, a testing framework that evaluates security alignment weaknesses in LLM code generation through time-division sentence pairing strategies, achieving high attack success rates across major code models.
• IntelliRadar: A Comprehensive Platform to Pinpoint Malicious Packages from Cyber Intelligence
  • Wenbo Guo, Chengwei Liu, Limin Wang, Yiran Zhang, Jiahui Wu, Zhengzi Xu, Yang Liu
  • 48th International Conference on Software Engineering (ICSE), 2026
  • This paper presents IntelliRadar, a comprehensive platform designed to identify and pinpoint malicious packages using cyber intelligence.
• BinStruct: Binary Structure Recovery Combining Static Analysis and Semantics
  • Yiran Zhang, Zhengzi Xu, Zhe Lang, Chengyue Liu, Yuqiang Sun, Wenbo Guo, Chengwei Liu, Weisong Sun, Yang Liu
  • 40th IEEE/ACM International Conference on Automated Software Engineering (ASE), 2025
  • This paper proposes BinStruct, a novel framework that combines static analysis and semantics for binary structure recovery.
• Evolaris: A Roadmap to Self-Evolving Software Intelligence Management
  • Chengwei Liu, Wenbo Guo, Yuxin Zhang, Limin Wang, Sen Chen, Lei Bu, Yang Liu
  • 29th International Conference on Engineering of Complex Computer Systems (ICECCS), 2025 (Position Paper)
  • This paper presents Evolaris, a roadmap to self-evolving software intelligence management.
• SpearBot: Leveraging Large Language Models in a Generative-Critique Framework for Spear-Phishing Email Generation
  • Qinglin Qi, Yun Luo, Yijia Xu, Wenbo Guo, Yong Fang
  • Information Fusion, Volume 122, 2025
  • This paper proposes SpearBot, a novel framework that leverages large language models in a generative-critique approach for automated spear-phishing email generation.
• An Empirical Study of Malicious Code In PyPI Ecosystem
  • Wenbo Guo, Zhengzi Xu, Chengwei Liu, Cheng Huang, Yong Fang, Yang Liu
  • 2023 38th IEEE/ACM International Conference on Automated Software Engineering (ASE)
  • This paper is the empirical study paper for the malicious packages in the PyPI Package Manager.
  • We constructed the largest PyPI malicious package dataset and open-sourced the dataset at here
• HyVulDect: a hybrid semantic vulnerability mining system based on graph neural network
  • Wenbo Guo, Yong Fang, Cheng Huang, Haoran Ou, Chun Lin, Yongyan Guo
  • Computers & Security, 2022
  • This paper is about vulnerability detection based on the graph neural network.

🌐 Platform

• Maliverse is now online — a unified software supply chain & AI agent security platform that brings together three of our research tools:
  • IntelliRadar: pinpointing malicious packages from cyber threat intelligence (ICSE 2026).
  • PyGuard: knowledge-driven detection of malicious PyPI packages (USENIX Security 2026 & WWW 2026).
  • SkillGuard: detection of malicious AI agent skills (MalSkillBench).

📖 Educations

• 2024.01 - Now, Ph.D. Student at College of Computing and Data Science, Nanyang Technological University, Singapore.
• 2020.09 - 2023.06, Postgraduate student at School of Cyber Science and Engineering, Sichuan University, Chengdu, Sichuan, P.R.C.
• 2016.09 - 2020.06, Undergraduate student at School of Cyber Science and Engineering, Sichuan University, Chengdu, Sichuan, P.R.C.

🎖 Honors and Awards

• 2026.06 OpenAI, Startup Credits ($2,500 USD).
• 2025.12 CCF ChinaSoft (中国软件大会), First Prize (Top 2), Prototype System Competition.
• 2025.01 OpenAI, Researcher Access Program ($8,000 USD in API credits).
• 2023.06 Sichuan Province Government, Excellent Graduates.
• 2021.12 Sichuan University, Dahua Scholarship.
• 2019.10 Chinese Ministry of Education, National Inspirational Scholarship.

💬 Talks

• 2026.04, IntelliRadar: A Comprehensive Platform to Pinpoint Malicious Packages from Cyber Intelligence. ICSE 2026 @ Rio de Janeiro, Brazil

📫 Services

• Artifact Evaluation Committee (AEC): NDSS 2027
• Artifact Evaluation Committee (AEC): ISSTA 2027
• Reviewer: IEEE Transactions on Dependable and Secure Computing (TDSC) (2025)
• Reviewer: Transactions on Information Forensics & Security (TIFS) (2025, 2026)
• Reviewer: Expert Systems with Applications (2026)
• Reviewer: ACM International Conference on AI-powered Software (AIware) (2026)
• Reviewer: Journal of Intelligent & Fuzzy Systems (2022)

📚 Teaching

• Part-time Student Mentor: School of Cyber Science and Engineering @ SCU, 2020-2023