Jiangshan

Prospective PhD Students:

My life would be happier if I found very good PhD students to work with. If this is you, do apply!
More info.

Contact:

(PGP Key)

I'm a lecturer (equivalent to U.S. assistant professor) at Cybersecurity Lab, Faculty of Information Technology, Monash University , Australia, and an honorary research fellow working with Prof. Mark Ryan ( HP Chair in Cybersecurity ) in the Centre for Cyber Security and Privacy , University of Birmingham, UK, where I received my PhD in computer science. I did my postdoc with Prof. Paulo Esteves-Verissimo (IEEE and ACM Fellow) at SnT, University of Luxembourg .

My research interests are in the area of cybersecurity and cryptography. In particular, the focus of my research has been on (designing and attacking) Blockchain consensus, Blockchain security and privacy, cryptographic key management, and ledger-based applications.

icon

[2019-04-22] Our two papers on blockchain transaction untraceability have been accepted by CSF'19 and AsiaCCS'19.

[2019-03-25] RepuCoin has been covered by over 60 news media globally including our Monash News, Finder, 今日头条(Toutiao), ZDNet, Sohu, BTC Wires, ScienceDaily, Ethereum World News, EurekAlert!, The US Breaking news, Homeland Security Today, etc.

[2019-01-31] Our paper "RepuCoin: Your Reputation is Your Power" has been accepted for publication by IEEE Transactions on Computers (IEEE TC).

[2018-12-09] Our paper "ANCHOR: logically-centralized security for Software-Defined Networks" has been accepted for publication by ACM Transactions on Privacy and Security (ACM TOPS, previously known as ACM TISSEC.)

[2018-11-30] I'm delighted to be invited to attend the 75th Meeting of the IFIP WG 10.4 Working Group on Dependable Computing and Fault Tolerance.

[2018-11-15] A paper on "New Empirical Traceability Analysis of CryptoNote-Style Blockchains" has been accepted by Financial Cryptography and Data Security 2019 (FC19, 33/178=18.5%).

[2018-07-01] As co-chair, I'm delighted to see the 74th Meeting of the IFIP WG 10.4 on Blockchian has been very successful. All the material will be available at here.

[2018-05-22] CHARITY. Prof. Mark Ryan's Supporting for Aframano, a village in Ghana, Africa. See more detail at markryan.eu/aframano

[2017-10-11] Interviewed by Eldo Radio to explain end-to-end encryption in messaging and DECIM.

[2017-10-05] DECIM has been covered by dozens of international news media, such as Science Daily . The news was originally published by the Universituy of Luxembourg (link) and the University of Birmingham (link).

[2017-06-29] A paper on "DECIM: Detecting Endpoint Compromise In Messaging" has been accepted by IEEE Transactions on Information Forensics and Security (IEEE TIFS), 2017.

[2017-05-15] A paper on "Authenticating compromisable storage systems" has been accepted by the 16^th IEEE TrustCom, 2017.

[2017-04-30] I have been awarded for the ``Chinese Government Award for outstanding PhD scholar abroad''. The success rate is 3% in UK and 1% worldwide. Here is the news press.

[2017-04-21] A paper on "Automatically Detecting the Misuse of Secrets: Foundations, Design Principles, and Applications" has been accepted by the 30^th IEEE CSF, 2017.

RESEARCH

Research

Main research impact:
Our research on blockchain consensus, called RepuCoin, provides the first blockchain system that is able to tolerate 51% attacks. This system may save potentially millions of US dollars every month from the attacks, and increase the confidence of enterprise in adapting blockchains. (For example, from April 2018 to Feb 2019, at least ten successful 51% attacks are identified, with a total loss of over 28 million US dollars.) This work has been reported by over 60 news media globally including Monash News, Finder, 今日头条(Toutiao), ZDNet, Sohu, BTC Wires, ScienceDaily, Ethereum World News, EurekAlert!, The US Breaking news, Homeland Security Today, etc.

Our work on the ledger-based end-to-end secure messaging system, called DECIM, provides the first end-to-end secure messaging system that is able to detect the compromise of secret keys. This system has been further developed by a University of Birmingham spin-off as open source software, and have attracted funding support from Innovate UK. The system has attracted news media's attention as a breakthrough in messaging privacy, and has been featured in more than 40 international and national news media including Science Daily, Phys.org, ACM TechNews, EurekAlert, Futurism, and Silicon Republic. The news has been released in more than 7 languages by media from more than 10 countries including UK, US, Germany, Ireland, Luxembourg, Turkey, Spain, and India. I have also been invited for an interview (to explain my innovation to general listeners) by Eldoradio --- a member of RTL group which is one of the world's leading producers of television content and the leading European entertainment network.

Our work on blockchain forensics has traced >70% transactions of supposed-to-be privacy-preserving cryptocurrencies, including Monero, ByteCoin, and DigitalNote.

I've co-designed a secure booting solution for Huawei Ltd, the largest telecommunications equipment manufacturer in the world, to manage their next generation network devices securely.

Selected Publications:
(My Google scholar and DBLP page.)

Book Chapter:
1. Jiangshan Yu and Mark Ryan.
  "Evaluating web PKIs".
  Software Architecture for Big Data and the Cloud, 1st Edition, Chapter 7, June 2017.

Journal:
1. Jiangshan Yu, David Kozhaya, Jeremie Decouchant, and Paulo Verissimo.
  "RepuCoin: Your Reputation is Your Power".
  IEEE Transactions on Computers. 2019.
2. Diego Kreutz, Jiangshan Yu, Fernando Ramos, and Paulo Verissimo.
  "ANCHOR: logically-centralized security for Software-Defined Networks".
  ACM Transactions on Privacy and Security (ACM TOPS, previously known as ACM TISSEC.) 2019. (Tamarin code)
3. Diego Kreutz, Jiangshan Yu, Paulo Verissimo, Catia Magalhaes, and Fernando Ramos.
  "The KISS principle in Software-Defined Networking: a framework for secure communications".
  IEEE Security & Privacy , Vol. 16, No.5, pp. 60-70, 2018.
4. Jiangshan Yu, Mark Ryan, and Cas Cremers.
  "DECIM: Detecting Endpoint Compromise In Messaging".
  IEEE Transactions on Information Forensics and Security (TIFS), Vol. 13, No.1, pp. 106-118, 2018. (Tamarin code)
5. Jiangshan Yu, Vincent Cheval, and Mark Ryan.
  "DTKI: a new formalized PKI with verifiable trusted parties".
  The computer Journal , Vol. 59, No. 11, pp. 1695-1713, 2016. (Tamarin code and Technical Report)
6. Jiangshan Yu, Guilin Wang, Yi Mu, and Wei Gao.
  "An Efficient and Improved Generic Framework for Three-Factor Authentication with Provably Secure Instantiation".
  IEEE Transactions on Information Forensics and Security (TIFS), Vol.9, No.12 , pp. 2302-2313, 2014.
7. Guilin Wang, Jiangshan Yu, Qi Xie.
  "Security Analysis of A Single Sign-On Mechanism for Distributed Computer Networks".
  IEEE Transactions on Industrial Informatics (TII), Vol.9, No.1, pp.294-302, 2013.
Conference:
1. Jiangshan Yu, Man Ho Allen Au, and Paulo Veríssimo.
  Re-thinking untraceability in the CryptoNote-style blockchain..
  IEEE Computer Security Foundations Symposium (CSF) 2019.
2. Zuoxia Yu, Man Ho Au, Jiangshan Yu, Rupeng Yang, Qiuliang Xu, and Wang Fat Lau.
  "New Empirical Traceability Analysis of CryptoNote-Style Blockchains".
  Financial Cryptography and Data Security 2019 (FC19).
3. Kevin Milner, Cas Cremers, Jiangshan Yu, and Mark Ryan.
  "Automatically Detecting the Misuse of Secrets: Foundations, Design Principles, and Applications".
  IEEE CSF 2017.
4. Jiangshan Yu, Mark Ryan, and Liqun Chen.
  "Authenticating compromisable storage systems",
  IEEE TrustCom 2017.
5. Jiangshan Yu and Mark Ryan.
  "Device attacker models: fact and fiction".
  Security Protocols XXIII, pp. 158-167, 2015.
Patent:
- Jiangshan Yu and Mark Ryan. 'Key usage detection'.
  UK Patent Application GB 1416188.9
  US Patent Application US 14/852,342
Thesis:
- Jiangshan Yu.
  "Remote User Authentication in Distributed Networks and Systems".
  Master of Research (MPhil) in Computer Science (Network security and Cryptography).
  University of Wollongong, Australia, 2012. (Supervised by Dr. Guilin Wang and Prof. Yi Mu)
- Jiangshan Yu.
  "Mitigating private key compromise".
  Doctor of Philosophy (PhD) in Computer Science (cyber security).
  University of Birmingham, UK, 2016. (Supervised by Prof. Mark Ryan)

Grant, Awards, and scholarships:

Grant:
- "Technology inspired feasibility study for secure email and cloud storage", GBP33,000 from Technology Strategy Board (Innovate UK), 2015.

Awards:
1. Chinese Government Award For Outstanding PhD Scholar Abroad, 2016. (3% in UK, 1% worldwide.)
2. Finalist for RAEng Enterprise Fellowship , Royal Academy of Engineering (RAEng), UK. 2015.
3. First place award, the Coniston poster competition, University of Birmingham, UK, 2014.
4. Outstanding Graduates of Heilongjiang Province, Heilongjiang, China, 2009.
5. Outstanding Graduates of Northeast Agricultural University, Harbin, Heilongjiang, China, 2009.
6. Best Undergraduate Thesis Award, Northeast Agricultural University, Harbin, Heilongjiang, China, 2009.
7. Outstanding Academic Award, The Northeast Agricultural University, China, 2008.
8. First National Prize of China Contemporary Undergraduate Mathematical Contest in Modeling, China, 2007.
9. Second National Prize of China Contemporary Undergraduate Mathematical Contest in Modeling, China, 2006.
10. Outstanding Student Award of The Northeast Agricultural University, China, 2006.
11. Outstanding Student Leadership Award, The Northeast Agricultural University, China, 2006.

Scholarships:
1. Universitas 21 scholarship from the University of Birmingham, 2015.
2. EPSRC project funding for PhD studies at University of Birmingham, 2012 - 2015.
3. Overseas top up scholarship from the University of Birmingham for PhD studies, 2012 - 2015.
4. First class scholarship, Northeast Agricultural University, Harbin, Heilongjiang, China, 2008.
5. First class scholarship, Northeast Agricultural University, Harbin, Heilongjiang, China, 2007.
6. First class scholarship, Northeast Agricultural University, Harbin, Heilongjiang, China, 2006.

Selected projects:

Co-Designer. Huawei SoC Secure Boot Solution, UK. September - December, 2016. (Funded by Huawei Ltd.)
Co-leader, Innovate UK project on user-friendly security and privacy to increase confidence in cloud-based systems, UK. June - September, 2015. (Funded by Innovate UK.)

Professional Activities:

Program (Co-)Chair

74th Meeting of the IFIP WG 10.4 - Technological and societal challenges to blockchain dependability and security, Clervaux, Luxembourg, 2018.
Workshop on BlockChain , Birmingham, United Kingdom, 2015.

Comference Program Committee Member

The 38th IEEE International Symposium on Reliable Distributed Systems (SRDS), 2019.
The 20th International Conference on Cryptology in India (Indocrypt), 2019.
The 18th IEEE International Conference on Trust, Security and Privacy in Computing and Communications (IEEE TrustCom) , 2019.
IEEE Global Communications Conference (GLOBECOM), 2018.
DSN Workshop on Byzantine Consensus and Resilient Blockchains (BCRB'18), 2018.
IEEE International Conference on Communications (ICC), 2018.
International Conference on Information Security Practice and Experience (ISPEC), 2017.
Software Architecture for Big Data and the Cloud, 2016.

Invited Reviewer (Journal):

ACM Transactions on Transactions on Privacy and Security (ACM TOPS)
IEEE Transactions on Information Forensics & Security (IEEE TIFS)
IEEE Transactions on Computers (IEEE TC)
IEEE Transactions on Cloud Computing (IEEE TCC)
IEEE Transactions on Industrial Informatics (IEEE TII)
IEEE Wireless Communications
IEEE Access
IEEE Software
Future Generation Computer Systems
Security and Communication Networks
The Computer Journal
Computers & Security
International Journal of Information Security
Journal of Information Security and Applications
International Journal of Distributed Sensor Networks
Journal of Computer Science and Technology
PLOS ONE

Invited Reviewer (Conference):

2018: ESORICS
2017: EuroSys, AsiaCCS, DSN, IFIP SEC, ESORICS.
2016: IEEE Euro S&P, IFIP SEC, ESSoS, ESORICS, WISTP.
2015: POST (ETAPS), ASIACCS, IFIP SEC.
2014: ACNS, SEC, FMS, WPES,
2013: ACISP, ESORICS, DPM.

Other Links:

The University of Birmingham Hacking Club
Calendar of events in the Security, Privacy, and Cryptography, from
Cipher CFP , IACR, and UCL Crypto Group
Crypto and Security Conferences Ranking (for reference only) at
Google Scholar Metrics, CIF-based ranking , or another view.
An Automatic Crypto Research Topic or Paper Title Generator
SCIgen - An Automatic CS Paper Generator