Publications

Assessing the Security of Vibe Coding: Baseline vs. Security-Oriented Prompts in LLM Code Generation

Runtong He, Huishan Lai, Jingxue Chen, Chunhua Su

ISPEC 2025: 20th International Conference on Information Security Practice and Experience

Large Language Models (LLMs) are increasingly used in software development through so-called “vibe coding,” where developers specify tasks in natural language and rely on the model to produce executable code. While this paradigm lowers barriers to entry and accelerates prototyping, it raises concerns about security. Prior studies show that a substantial fraction of AI-generated code contains exploitable vulnerabilities, and functional correctness does not guarantee safety. This paper investigates whether security-oriented prompting improves the security of LLM-generated code. We design ten representative Python tasks inspired by OWASP Top 10 and CWE categories, and evaluate outputs from an open-source 20B-parameter model using static analysis (Bandit) and lightweight runtime probes.

Enhancing VR Mandala Drawing and Natural Immersion for Attention Restoration with AI-Driven Bioadaptive Multimodal Interaction

Tiantian Geng, Huishan Lai, Lei Jing

AHs 2026: The Augmented Humans International Conference 2026

Digital attention fatigue is a pervasive challenge, yet most virtual reality (VR) interventions for restoration rely on passive nature exposure that lacks responsiveness to the user's internal state. Integrating Attention Restoration Theory (ART) with physiological computing, we propose a bioadaptive VR system that combines active mandala drawing within a 360° nature scene, using real-time heart rate variability (HRV) to modulate visual fog, ambient music, and haptic feedback. In a within-subject pilot study (N=11), we compared an AI-driven bioadaptive multimodal condition (AI) against an otherwise identical VR condition without bioadaptive multimodal feedback (NF), using behavioral (Oddball task), neural (EEG), autonomic (HRV), and subjective measures.

Research in Progress

Cost-Aware Confidence-Gated Two-Stage Network Intrusion Detection under a Cross-File Cross-Class Stress Test

Jiaming Zhang, Huishan Lai, Runtong He, Jingxue Chen, Chunhua Su

ICICS 2026 · Short paper · Publication pending

A cost-aware two-stage NIDS pipeline for cross-file, cross-class distribution shift. An LSTM fast path escalates ambiguous flows to a lightweight verifier, while LLMs are limited to generating structured audit rationales rather than primary decisions.

Efficient AI for Network Security

Double-blind submission · Details withheld during review

Ongoing research on efficient machine-learning approaches for network security. The manuscript title, venue, methods, datasets, and results will remain private until the double-blind review process has concluded.

Robust Evaluation for Multimodal Machine Learning

Double-blind submission · Details withheld during review

Ongoing research on reliable evaluation for multimodal machine-learning systems. The manuscript title, venue, methods, datasets, and results will remain private until the double-blind review process has concluded.

Human-Centered XR Interaction Research

International HCI submission in preparation · Venue undecided

Ongoing research on human-centered interaction in immersive environments. The project identity, system concept, implementation, study design, collaborators, and target venue will remain private while the work is being developed.

Interactive World Models Research

Early-stage research on interactive world models that connect visual world generation, simulation, and decision support for agents. The current phase focuses on refining the research question and evidence plan before choosing the next experimental direction.

Privacy-Preserving Analytics Research

Collaborative research on cryptographic and policy-aware approaches to privacy-preserving data analysis. The next scope and timeline remain open pending coordination and progress confirmation with collaborators.

Resilient Wireless Systems Research

Revisiting an earlier line of work on resilient wireless and delay-tolerant communication. The previous prototype is being reorganized before the research question and evaluation scope are developed further.

VR/XR Projects

AR Image tracking

Unity AR image-tracking practice project that places and controls 3D dragon assets in an AR scene.

Mamba Project

University of Aizu CFS03 Unity VR project using an Oculus/XR scene and human anatomy model assets.

Master Project

Unity VR classroom research prototype with an embodied avatar, speech services, and a Python backend.

Unity Projects

Solar System

Unity practice scene simulating the rotation and revolution of the Sun, Earth, and Moon.

2D Platformer

Unity 2D platformer practice project; the repository is not currently public.

2D Shooter Game

Unity 2D spaceship shooter with enemies, projectiles, level scenes, score UI, and menu flow.

Kitchen Chaos

Overcooked-style Unity cooking practice project with counters, ingredients, cutting recipes, and player input.

Web Projects

SHAN-VERSE

My personal portfolio and blog built with Astro, MDX, custom styling, sitemap, and project data tooling.

Notion Next Chinese Blog

Forked NotionNext deployment for a Notion-powered blog using Next.js and the Notion API.

Math-Note

AI math canvas app with a React/Vite frontend and FastAPI backend that sends drawn equations to Gemini.

Yumemi Test

Yumemi frontend test SPA that visualizes Japanese prefecture population trends with charts and filters.

Weather App

Static weather lookup app using OpenWeather data, city search, and weather-specific UI illustrations.

Falling Sand

Interactive falling-sand sandbox with p5-style rendering, material rules, draggable controls, and pause/step tools.

Dark Light Toggle

Small HTML, CSS, and JavaScript UI experiment for an animated dark/light mode toggle.

DreamLight

Static promotional site for a BitSummit 2024 light-show and drone game concept.

Hexo Page

Hexo blog deployment experiment on Vercel for testing static blog generation and theme structure.

Notion Resume

Minimal Notion-based personal page and resume hub linking to my public Notion home.

Silver Game

Hackathon frontend for an elderly-focused social platform with realtime multimodal emotion analysis.

AI-ImageForge

Streamlit AI image-generation app with Hugging Face models, style prompts, and GPU detection.

School Project

Human Activity Pattern Processing

University of Aizu ITA09 coursework with Python scripts and Jupyter notebooks for activity-pattern processing.

Advanced Robotics

University of Aizu ITC03A Advanced Robotics coursework implemented mainly with MATLAB scripts.

Biosignal Processing and Data Mining

University of Aizu ITA25 coursework with MATLAB assignments for biosignal processing and data mining.

Applied Statistics

University of Aizu CSC03F applied statistics coursework notes and assignment records.

Software Engineering

University of Aizu SEC01F software engineering coursework notes and assignment records.

NWPU Undergraduate Thesis

Undergraduate thesis records for a quadrotor UAV formation digital-twin system using AirSim/PX4 references.

Other Project

Tetris Clone

Native Windows C++ Tetris clone with scoring, hold piece, ghost preview, levels, and best-score tracking.

OpenGL Practice

OpenGL learning project covering windows, triangles, buffers, shaders, textures, and basic 3D rendering.

C# Exercises

Collection of C#/.NET practice projects, including console, WPF, MVC, and Azure-style samples.

C# Snake Game

Classic Windows C# Snake game with keyboard controls and a simple desktop executable.

Beecrowd Practice

C# solutions archive for Beecrowd online judge problems, organized by problem number.

PTA Practice

PTA online judge practice record; the repository is not currently public.

Paiza Practice

Paiza online judge practice record; the repository is not currently public.

Rockfall Game

Pygame avoidance game with data collection, Random Forest training, and AI-controlled play mode.

Go 11 Projects

Go learning repo following a project-based course, including a web server, CRUD API, MySQL app, and Slack bots.