Shuo Chen is a senior researcher at Microsoft Research Redmond. His interest is on studying real-world operational systems to understand their security challenges and flaws. Specifically, he spends significant time studying problems about software-as-a-service, browser, web privacy/security and memory-based issues. He served on the program committees for IEEE S&P, USENIX Security, ACM CCS, WWW, etc. His work resulted in discoveries of many real-world vulnerabilities, including those that compromised HTTPS on all browsers, bypassed payment services of e-commerce and bypassed single-sign-on authentications. These discoveries led to numerous security fixes made by Microsoft, Google, Facebook and other major companies. He won a best practical paper award in IEEE S&P. His research was covered by the news media, including CNN, CNET, Ars Technica, etc. A study about OAuth security that he and a CMU group did was presented in BlackHat USA 2016. Shuo obtained his Ph.D. degree in computer science from University of Illinois at Urbana-Champaign. He obtained his master's and bachelor's degree from Tsinghua University and Peking University, both in computer science.
