IPADS

Associate Professor
Shanghai Jiao Tong University
800 Dongchuan Road, Minhang District, Shanghai, P.R.China
Zip/Postal Code: 200240
Email: zchua at sjtu dot edu dot cn

I am an associate professor at Shanghai Jiao Tong University. I received my Ph.D. degree in computer science from Shanghai Jiao Tong University in 2020. My research area includes the agent OS, system for LLM and heterogeneous systems.

• CS3601 Operating System （2022 fall, 2023 fall, 2024 fall, 2025 fall)
• EI6711 Advanced Operating System （2024 spring, 2025 spring)

• TPC of APSys 2025
• TPC of SysTEX 2025
• TPC of SIGOPS ChinaSys 2024
• Transaction Reviewer of ACM Transactions on Computer Systems (TOCS)
• Transaction Reviewer of Journal of Systems Architecture: Embedded Software Design
• Transaction Reviewer of CCF Transactions on High Performance Computing

Agent OS I build high-performance, secure, and reliable agent runtime frameworks for agent applications such as mobile agents and embodied agents. My research covers high-performance agent runtime frameworks, reliable agent decision-making mechanisms, and agent evaluation systems.

• AutoEval[arXiv'25]: an autonomous evaluation framework for mobile UI agents that automatically generates task reward signals via structured substate representation and judges agent performance without manual effort. [ pdf ]
• AgentFlow: improves agent application performance by scheduling agent tasks across the multi-turn execution flow.
• Ongoing work on agent performance optimization and agent security.

Inference System I build high-performance and secure inference frameworks for large models such as Large Language Models (LLMs) and Diffusion Models.

• RS-Infer[ATC'26]: builds a fast and secure LLM serving system for mobile devices with flexible resource isolation (Flex-Mem and Flex-NPU) within Arm TrustZone.
• MosaicKV[arXiv'26]: serves long-context LLMs with dynamic two-dimensional KV cache compression. [ pdf ]
• TZ-LLM[EuroSys'26]: protects on-device LLMs with Arm TrustZone via parsimed CMA allocation and a TEE–REE co-driver for secure NPU sharing. [ pdf ]
• Ongoing work on super-node LLM system, dLLM optimization, quantization, and operator fusion for large-model inference.

HW/SW Co-Design for System Security

I use hardware-software co-design to improve the security and performance of system software, including operating systems, virtualization systems, and system services. By introducing architectural support and co-designing it with the software stack, I build more efficient isolation and trusted execution frameworks.

• HSMEM[MICRO'26]: provides scalable and energy-efficient data transfer for heterogeneous confidential memory between CPU and GPU.
• EIDS[TOCS'26]: builds a high-performance and maintainable cloud intrusion detection system. [ pdf ]
• XpuTEE[TOCS'25]: builds high-performance and practical TEEs across CPU and GPU for heterogeneous computing.
• ISA-Grid[ISCA'23]: constructs bit-level isolation domains for instructions and registers to isolate different kernel components and kernel modules. [ pdf ]
• CPS[ASPLOS'23]: makes VM isolation more efficient in many-core systems via cooperative para-virtualized scheduling. [ pdf ]
• COLONY[TC'22]: constructs TEE instances at the kernel level to protect OS services. [ pdf ]
• TZ-Container[SCIS'21]: isolates containers from an untrusted OS with ARM TrustZone. [ pdf ]
• XPC[ISCA'19][TOCS'22]: provides architectural support for secure and efficient cross-domain calls to speed up IPC for existing OSes. [ pdf ] [ pdf ]
• EPTI[ATC'18]: isolates the kernel of unpatched VMs from user-level Meltdown attacks using the Intel VMFUNC instruction. [ pdf ]
• vTZ[Security'2017]: the first secure virtualization system for ARM TrustZone, enabling TrustZone for each VM. [ pdf ]
• SGXMigration[DSN'2017]: securely migrates a VM together with its TEEs on untrusted clouds. [ pdf ]

(* corresponding author)

• [USENIX ATC] RS-Infer: A Fast and Secure LLM Inference System for Mobile Devices with Recallable Resource Isolation. Yinpeng Wu, Yitong Cheng, Lixiang Wang, Jinyu Gu, Zhichao Hua*, Yubin Xia. Proceedings of the 2026 ACM SIGOPS Annual Technical Conference (ATC'26), Shatin, Hong Kong, China, November 2026.

• [MICRO] HSMEM: Heterogeneous Secure Memory with Scalable and Energy-Efficient Data Transfer. Sheng Qiang, Shulin Fan, Jinyu Gu, Zhichao Hua*, Yubin Xia. The 59th IEEE/ACM International Symposium on Microarchitecture (MICRO), Athens, Greece, 2026.

• [ACM TOCS] EIDS: A Cloud Intrusion Detection System with High Performance and Maintainability. Xiaokang Hu, Zhichao Hua*, Naixuan Guan, Yun Xu, Yibin Shen, Yang Yu, Zeyu Mi, Yubin Xia, Ming Wang, Jiesheng Wu. ACM Transactions on Computer Systems, 44(2), May 2026. [ pdf ]

• [EuroSys] TZ-LLM: Protecting On-Device Large Language Models with Arm TrustZone. Xunjie Wang*, Jiacheng Shi*, Zihan Zhao, Yang Yu, Zhichao Hua, Jinyu Gu. Proceedings of the 21st European Conference on Computer Systems (EuroSys'26), Edinburgh, UK, April 2026. [ pdf ]

• [ACM TOCS] XpuTEE: A High-Performance and Practical Heterogeneous Trusted Execution Environment for GPUs. Shulin Fan, Zhichao Hua*, Yubin Xia, Haibo Chen. ACM Transactions on Computer Systems.2025.

• [ASPLOS] CPS: A Cooperative Para-virtualized Scheduling Framework for Manycore Machines. Yuxuan Liu, Tianqiang Xu, Zeyu Mi, Zhichao Hua, Binyu Zang, Haibo Chen. The 29th ACM International Conference on Architectural Support for Programming Languages and Operating Systems, April 2024. [ pdf ]

• [ISCA] ISA-grid: Architecture of Fine-grained Privilege Control for Instructions and Registers. Shulin Fan, Zhichao Hua*, Yubin Xia, Haibo Chen, Binyu Zang. The 50th International Symposium on Computer Architecture (ISCA),June 17–21, 2023, Orlando, FL, USA.[ pdf ]

• [ICPADS] SecDFS: A Secure and Decentralized File System. Shenglong Zhao, Zhichao Hua*, Yubin Xia. 2023 IEEE 29th International Conference on Parallel and Distributed Systems (ICPADS), Ocean Flower Island, China, 2023. [ pdf ]

• [ACM TOCS] Boosting Inter-Process Communication with Architectural Support. Yubin Xia, Dong Du, Zhichao Hua, Binyu Zang, Haibo Chen, Haibing Guan. ACM Transactions on Computer Systems.2022. [ pdf ]

• [IEEE TC] COLONY: A Privileged Trusted Execution Environment with Extensibility. Yubin Xia, Zhichao Hua*, Jinyu Gu, Haibo Chen, Binyu Zang. IEEE TRANSACTIONS ON COMPUTERS, 2022. [ pdf ]

• [SCIS] TZ-Container: Protecting Container from Untrusted OS with ARM TrustZone. Zhichao Hua, Yang Yu, Jinyu Gu, Yubin Xia, Haibo Chen, Binyu Zang. SCIENCE CHINA Information Sciences, 2021. [ pdf ]

• [ISCA] XPC: Architectural Support for Secure and Efficient Cross Process Call. Dong Du, Zhichao Hua, Yubin Xia, Binyu Zang, Haibo Chen. Proceedings of the 46th ACM/IEEE International Symposium on Computer Architecture, Phoenix, Arizona, USA. June 22-26, 2019. [ pdf ]

• [USENIX ATC] EPTI: Efficient Defence against Meltdown Attack for Unpatched VMs. Zhichao Hua, Dong Du, Yubin Xia, Haibo Chen, and Binyu Zang, 2018 USENIX Annual Technical Conference, Boston, MA, USA, July 2018 [ pdf ]

• [USENIX Security] vTZ: Virtualizing ARM TrustZone. Zhichao Hua, Jinyu Gu, Yubin Xia, Haibo Chen, Binyu Zang and Haibing Guan. Usenix Security Symposium 2017. Vancouver, Canada, August, 2017. [ pdf ]

• [DSN] Secure Live Migration of SGX Enclaves on Untrusted Cloud. Jinyu Gu, Zhichao Hua, Yubin Xia, Haibo Chen, Binyu Zang, Haibing Guan, Jinming Li. The 47th IEEE/IFIP International Conference on Dependable Systems and Networks, June 26-29, 2017. Denver, CO, USA. [ pdf ]