CORS and S3: The Internet's 'Stranger Danger' Rule
Ever see a spooky red error in your browser console talking about 'CORS'? Don't panic! We explain this security rule simply, using houses, permission slips, and AWS S3.
About me
I'm passionate about intelligent agents for software engineering — bridging the gap between complex code and AI. I received my B.Eng in Computer Science and Engineering from Ho Chi Minh City University of Technology (HCMUT). Currently, I'm a Research Engineer at the SMU School of Computing and Information Systems, under the supervision of Professor Lingxiao JIANG. My work focuses on the critical domain of security, specifically smart contract vulnerability analysis by utilizing Graph Learning and Large Language Models (LLMs). Beyond security, I am exploring the broader AI4SE domain to develop Trustworthy Holistic AI Agents for software engineering challenges, such as bug fixing, code completion/generation, enhanced CI/CDs, and operation monitoring. Balancing academic rigor with entrepreneurial ambition, I am also co-founding MANDO (mandoscan.com) to bring these advanced research solutions to the industry.
Education
B.Eng (Computer Science and Engineering)
2016-09-01
2020-06-30
Ho Chi Minh City University of Technology (HCMUT)
Interests
Software Engineering
AI4SE
Large Language Models
Graph Learning
Software Security
Recent Publications
(2025).
MANDO-LLM: Heterogeneous Graph Transformers with Large Language Models for Smart Contract Vulnerability Detection.
TOSEM.
(2023).
MANDO-HGT: Heterogeneous Graph Transformers for Smart Contract Vulnerability Detection.
MSR.
(2022).
MANDO-GURU: vulnerability detection for smart contract source code by heterogeneous graph embeddings.
ESEC/FSE.
Recent Blogs
The Route 53 Name Server Mistake: Who Points to Whom?
A simple guide for beginners on how to correctly set up domain name servers between your registrar and AWS Route 53. Avoid the classic 'Phone Book' mistake!