===== Zhichao Hua (华志超) ===== Associate Professor\\ Shanghai Jiao Tong University\\ 800 Dongchuan Road, Minhang District, Shanghai, P.R.China\\ Zip/Postal Code: 200240\\ Email: [[zchua at sjtu dot edu dot cn]]\\ \\ ===== About Me ===== I am an associate professor at Shanghai Jiao Tong University. I received my Ph.D. degree in computer science from Shanghai Jiao Tong University in 2020. My research area includes the agent OS, system for LLM and heterogeneous systems. ===== Teaching ===== * CS3601 Operating System （2022 fall, 2023 fall, 2024 fall, 2025 fall) * EI6711 Advanced Operating System （2024 spring, 2025 spring) ===== Professional Services ===== * TPC of APSys 2025 * TPC of SysTEX 2025 * TPC of SIGOPS ChinaSys 2024 * Transaction Reviewer of ACM Transactions on Computer Systems (TOCS) * Transaction Reviewer of Journal of Systems Architecture: Embedded Software Design * Transaction Reviewer of CCF Transactions on High Performance Computing ===== Research Interests ===== **Agent OS** I build high-performance, secure, and reliable agent runtime frameworks for agent applications such as mobile agents and embodied agents. My research covers high-performance agent runtime frameworks, reliable agent decision-making mechanisms, and agent evaluation systems. * **AutoEval[arXiv'25]**: an autonomous evaluation framework for mobile UI agents that automatically generates task reward signals via structured substate representation and judges agent performance without manual effort. [ [[https://arxiv.org/abs/2503.02403|pdf]] ] * **AgentFlow**: improves agent application performance by scheduling agent tasks across the multi-turn execution flow. * Ongoing work on agent performance optimization and agent security. **Inference System** I build high-performance and secure inference frameworks for large models such as Large Language Models (LLMs) and Diffusion Models. * **RS-Infer[ATC'26]**: builds a fast and secure LLM serving system for mobile devices with flexible resource isolation (Flex-Mem and Flex-NPU) within Arm TrustZone. * **MosaicKV[arXiv'26]**: serves long-context LLMs with dynamic two-dimensional KV cache compression. [ [[https://arxiv.org/abs/2607.00760|pdf]] ] * **TZ-LLM[EuroSys'26]**: protects on-device LLMs with Arm TrustZone via parsimed CMA allocation and a TEE–REE co-driver for secure NPU sharing. [ [[https://doi.org/10.1145/3767295.3769334|pdf]] ] * Ongoing work on super-node LLM system, dLLM optimization, quantization, and operator fusion for large-model inference. **HW/SW Co-Design for System Security** I use hardware-software co-design to improve the security and performance of system software, including operating systems, virtualization systems, and system services. By introducing architectural support and co-designing it with the software stack, I build more efficient isolation and trusted execution frameworks. * **HSMEM[MICRO'26]**: provides scalable and energy-efficient data transfer for heterogeneous confidential memory between CPU and GPU. * **EIDS[TOCS'26]**: builds a high-performance and maintainable cloud intrusion detection system. [ [[https://doi.org/10.1145/3787966|pdf]] ] * **XpuTEE[TOCS'25]**: builds high-performance and practical TEEs across CPU and GPU for heterogeneous computing. * **ISA-Grid[ISCA'23]**: constructs bit-level isolation domains for instructions and registers to isolate different kernel components and kernel modules. [ [[https://dl.acm.org/doi/10.1145/3579371.3589050|pdf]] ] * **CPS[ASPLOS'23]**: makes VM isolation more efficient in many-core systems via cooperative para-virtualized scheduling. [ [[https://dl.acm.org/doi/10.1145/3623278.3624762|pdf]] ] * **COLONY[TC'22]**: constructs TEE instances at the kernel level to protect OS services. [ [[https://ieeexplore.ieee.org/abstract/document/9340405|pdf]] ] * **TZ-Container[SCIS'21]**: isolates containers from an untrusted OS with ARM TrustZone. [ [[https://link.springer.com/article/10.1007/s11432-019-2707-6|pdf]] ] * **XPC[ISCA'19][TOCS'22]**: provides architectural support for secure and efficient cross-domain calls to speed up IPC for existing OSes. [ [[https://ieeexplore.ieee.org/document/8980352|pdf]] ] [ [[https://dl.acm.org/doi/full/10.1145/3532861|pdf]] ] * **EPTI[ATC'18]**: isolates the kernel of unpatched VMs from user-level Meltdown attacks using the Intel VMFUNC instruction. [ [[https://www.usenix.org/system/files/conference/atc18/atc18-hua.pdf|pdf]] ] * **vTZ[Security'2017]**: the first secure virtualization system for ARM TrustZone, enabling TrustZone for each VM. [ [[https://www.usenix.org/system/files/conference/usenixsecurity17/sec17-hua.pdf|pdf]] ] * **SGXMigration[DSN'2017]**: securely migrates a VM together with its TEEs on untrusted clouds. [ [[https://ieeexplore.ieee.org/abstract/document/8023125|pdf]] ] ===== Selected Papers ===== (* corresponding author) * [**USENIX ATC**] RS-Infer: A Fast and Secure LLM Inference System for Mobile Devices with Recallable Resource Isolation. Yinpeng Wu, Yitong Cheng, Lixiang Wang, Jinyu Gu, **Zhichao Hua***, Yubin Xia. Proceedings of the 2026 ACM SIGOPS Annual Technical Conference (ATC'26), Shatin, Hong Kong, China, November 2026. * [**MICRO**] HSMEM: Heterogeneous Secure Memory with Scalable and Energy-Efficient Data Transfer. Sheng Qiang, Shulin Fan, Jinyu Gu, **Zhichao Hua***, Yubin Xia. The 59th IEEE/ACM International Symposium on Microarchitecture (MICRO), Athens, Greece, 2026. * [**ACM TOCS**] EIDS: A Cloud Intrusion Detection System with High Performance and Maintainability. Xiaokang Hu, **Zhichao Hua***, Naixuan Guan, Yun Xu, Yibin Shen, Yang Yu, Zeyu Mi, Yubin Xia, Ming Wang, Jiesheng Wu. ACM Transactions on Computer Systems, 44(2), May 2026. [ [[https://doi.org/10.1145/3787966|pdf]] ] * [**EuroSys**] TZ-LLM: Protecting On-Device Large Language Models with Arm TrustZone. Xunjie Wang*, Jiacheng Shi*, Zihan Zhao, Yang Yu, **Zhichao Hua**, Jinyu Gu. Proceedings of the 21st European Conference on Computer Systems (EuroSys'26), Edinburgh, UK, April 2026. [ [[https://doi.org/10.1145/3767295.3769334|pdf]] ] * [**ACM TOCS**] XpuTEE: A High-Performance and Practical Heterogeneous Trusted Execution Environment for GPUs. Shulin Fan, **Zhichao Hua***, Yubin Xia, Haibo Chen. ACM Transactions on Computer Systems.2025. * [**ASPLOS**] CPS: A Cooperative Para-virtualized Scheduling Framework for Manycore Machines. Yuxuan Liu, Tianqiang Xu, Zeyu Mi, **Zhichao Hua**, Binyu Zang, Haibo Chen. The 29th ACM International Conference on Architectural Support for Programming Languages and Operating Systems, April 2024. [ [[https://dl.acm.org/doi/10.1145/3623278.3624762|pdf]] ] * [**ISCA**] ISA-grid: Architecture of Fine-grained Privilege Control for Instructions and Registers. Shulin Fan, **Zhichao Hua***, Yubin Xia, Haibo Chen, Binyu Zang. The 50th International Symposium on Computer Architecture (ISCA),June 17–21, 2023, Orlando, FL, USA.[ [[https://dl.acm.org/doi/10.1145/3579371.3589050|pdf]] ] * [**ICPADS**] SecDFS: A Secure and Decentralized File System. Shenglong Zhao, **Zhichao Hua***, Yubin Xia. 2023 IEEE 29th International Conference on Parallel and Distributed Systems (ICPADS), Ocean Flower Island, China, 2023. [ [[https://ieeexplore.ieee.org/abstract/document/10476310|pdf]] ] * [**ACM TOCS**] Boosting Inter-Process Communication with Architectural Support. Yubin Xia, Dong Du, **Zhichao Hua**, Binyu Zang, Haibo Chen, Haibing Guan. ACM Transactions on Computer Systems.2022. [ [[https://dl.acm.org/doi/full/10.1145/3532861|pdf]] ] * [**IEEE TC**] COLONY: A Privileged Trusted Execution Environment with Extensibility. Yubin Xia, **Zhichao Hua***, Jinyu Gu, Haibo Chen, Binyu Zang. IEEE TRANSACTIONS ON COMPUTERS, 2022. [ [[https://ieeexplore.ieee.org/abstract/document/9340405|pdf]] ] * [**SCIS**] TZ-Container: Protecting Container from Untrusted OS with ARM TrustZone. **Zhichao Hua**, Yang Yu, Jinyu Gu, Yubin Xia, Haibo Chen, Binyu Zang. SCIENCE CHINA Information Sciences, 2021. [ [[https://link.springer.com/article/10.1007/s11432-019-2707-6|pdf]] ] * [**ISCA**] XPC: Architectural Support for Secure and Efficient Cross Process Call. Dong Du, **Zhichao Hua**, Yubin Xia, Binyu Zang, Haibo Chen. Proceedings of the 46th ACM/IEEE International Symposium on Computer Architecture, Phoenix, Arizona, USA. June 22-26, 2019. [ [[https://ieeexplore.ieee.org/document/8980352|pdf]] ] * [**USENIX ATC**] EPTI: Efficient Defence against Meltdown Attack for Unpatched VMs. **Zhichao Hua**, Dong Du, Yubin Xia, Haibo Chen, and Binyu Zang, 2018 USENIX Annual Technical Conference, Boston, MA, USA, July 2018 [ [[https://www.usenix.org/system/files/conference/atc18/atc18-hua.pdf|pdf]] ] * [**USENIX Security**] vTZ: Virtualizing ARM TrustZone. **Zhichao Hua**, Jinyu Gu, Yubin Xia, Haibo Chen, Binyu Zang and Haibing Guan. Usenix Security Symposium 2017. Vancouver, Canada, August, 2017. [ [[https://www.usenix.org/system/files/conference/usenixsecurity17/sec17-hua.pdf|pdf]] ] * [**DSN**] Secure Live Migration of SGX Enclaves on Untrusted Cloud. Jinyu Gu, **Zhichao Hua**, Yubin Xia, Haibo Chen, Binyu Zang, Haibing Guan, Jinming Li. The 47th IEEE/IFIP International Conference on Dependable Systems and Networks, June 26-29, 2017. Denver, CO, USA. [ [[https://ieeexplore.ieee.org/abstract/document/8023125|pdf]] ]