Jiangshan

Prospective PhD Students:

My life would be happier if I found very good PhD students to work with. If this is you, do apply!
More info.

Contact:

(PGP Key)

I'm a lecturer (equivalent to U.S. assistant professor) at Monash Unviersity, Australia, and an honorary research fellow working with Prof. Mark Ryan ( HP Chair in Cybersecurity ) in the School of Computer Science, University of Birmingham, UK, where I received my PhD in computer science. I did my postdoc with Prof. Paulo Esteves-Verissimo (IEEE and ACM Fellow) at SnT , University of Luxembourg .

My research interests are in the area of cyber security and cryptography. In particular, the focus of my research has been on design and analysis of cryptographic protocols, cryptographic key management, blockchain consensus, and ledger-based applications.

icon

[2018-05-22] CHARITY. Prof. Mark Ryan's Supporting for Aframano, a village in Ghana, Africa. See more detail at markryan.eu/aframano

[2017-10-11] Interviewed by Eldo Radio to explain end-to-end encryption in messaging and DECIM.

[2017-10-05] DECIM has been covered by dozens of international news media, such as Science Daily . The news was originally published by the Universituy of Luxembourg (link) and the University of Birmingham (link).

[2017-06-29] A paper on "DECIM: Detecting Endpoint Compromise In Messaging" has been accepted by IEEE Transactions on Information Forensics and Security (TIFS), 2017.

[2017-05-15] A paper on "Authenticating compromisable storage systems" has been accepted by the 16^th IEEE TrustCom, 2017.

[2017-04-30] I have been awarded for the ``Chinese Government Award for outstanding PhD scholar abroad''. The success rate is 3% in UK and 1% worldwide. Here is the news press.

[2017-04-21] A paper on "Automatically Detecting the Misuse of Secrets: Foundations, Design Principles, and Applications" has been accepted by the 30^th IEEE CSF, 2017.

RESEARCH

Research

Main research impact:
My work on ledger-based end-to-end secure messaging system has attracted news media's attention and has been covered by more than 30 international and national news media including Science Daily, Phys.org, ACM TechNews, EurekAlert, Futurism, and Silicon Republic. The news has been released in more than 7 languages by media from more than 10 countries including UK, US, Germany, Ireland, Luxembourg, Turkey, Spain, and India. I have also been invited for an interview (to explain my innovation to general listeners) by Eldoradio --- a member of RTL group which is one of the world's leading producers of television content and the leading European entertainment network.

My patent-pending ledger-based applications have been further developed by a University of Birmingham spin-off, and have attracted funding support from Innovate UK.

I've co-designed a secure booting solution for Huawei Ltd, the largest telecommunications equipment manufacturer in the world, to manage their next generation network devices securely.

Publications and Manuscripts:
(My Google scholar and DBLP page.)

Book Chapter:
1. Jiangshan Yu and Mark Ryan.
  "Evaluating web PKIs".
  Software Architecture for Big Data and the Cloud, 1st Edition, Chapter 7, June 2017.

Journal:
1. Diego Kreutz, Jiangshan Yu, Paulo Verissimo, Catia Magalhaes, Fernando Ramos.
  "The KISS principle in Software-Defined Networking: a framework for secure communications".
  IEEE Security & Privacy , 2018, to appear.
2. Jiangshan Yu, Mark Ryan, and Cas Cremers.
  "DECIM: Detecting Endpoint Compromise In Messaging".
  IEEE Transactions on Information Forensics and Security (TIFS), Vol. 13, No.1, pp. 106-118, 2018. (Tamarin code)
3. Jiangshan Yu, Vincent Cheval, and Mark Ryan.
  "DTKI: a new formalized PKI with verifiable trusted parties".
  The computer Journal , Vol. 59, No. 11, pp. 1695-1713, 2016. (Tamarin code and Technical Report)
4. Jiangshan Yu, Guilin Wang, Yi Mu, and Wei Gao.
  "An Efficient and Improved Generic Framework for Three-Factor Authentication with Provably Secure Instantiation".
  IEEE Transactions on Information Forensics and Security (TIFS), Vol.9, No.12 , pp. 2302-2313, 2014.
5. Guilin Wang, Jiangshan Yu, Qi Xie.
  "Security Analysis of A Single Sign-On Mechanism for Distributed Computer Networks".
  IEEE Transactions on Industrial Informatics (TII), Vol.9, No.1, pp.294-302, 2013.
Conference:
1. Kevin Milner, Cas Cremers, Jiangshan Yu, Mark Ryan.
  "Automatically Detecting the Misuse of Secrets: Foundations, Design Principles, and Applications".
  IEEE CSF 2017.
2. Jiangshan Yu, Mark Ryan and Liqun Chen.
  "Authenticating compromisable storage systems",
  IEEE TrustCom 2017.
3. Marcus Völp, Francisco Rocha, Jérémie Decouchant, Jiangshan Yu and Paulo Verissimo.
  "Permanent Reencryption: How to Survive Generations of Cryptanalysts to Come".
  Security Protocols XXV, 2017.
4. Jiangshan Yu and Mark Ryan.
  "Device attacker models: fact and fiction".
  Security Protocols XXIII, pp. 158-167, 2015.
5. Jiangshan Yu, Guilin Wang, and Yi Mu.
  "Provably Secure Single Sign-on Scheme in Distributed Systems and Networks".
  IEEE TrustCom, pp. 271-278, 2012
Patent:
- Jiangshan Yu and Mark Ryan. 'Key usage detection'.
  UK Patent Application GB 1416188.9
  US Patent Application US 14/852,342
Thesis:
- Jiangshan Yu.
  "Remote User Authentication in Distributed Networks and Systems".
  Master of Research (MPhil) in Computer Science (Network security and Cryptography).
  University of Wollongong, Australia, 2012. (Supervised by Dr. Guilin Wang and Prof. Yi Mu)
- Jiangshan Yu.
  "Mitigating private key compromise".
  Doctor of Philosophy (PhD) in Computer Science (cyber security).
  University of Birmingham, UK, 2016. (Supervised by Prof. Mark Ryan)

Draft:
- Diego Kreutz, Jiangshan Yu, Fernando M. V. Ramos, and Paulo Jorge Esteves Veríssimo. "ANCHOR: logically-centralized security for Software-Defined Networks." CoRR abs/1711.03636, 2017. (Tamarin code)
- Jiangshan Yu, David Kozhaya, Jeremie Decouchant, and Paulo Esteves-Verissimo. "RepuCoin: Your Reputation is Your Power." Cryptology ePrint Archive: Report 2018/239.

Grant, Awards, and scholarships:

Grant:
- "Technology inspired feasibility study for secure email and cloud storage", GBP33,000 from Technology Strategy Board (Innovate UK), 2015.

Awards:
1. Chinese Government Award For Outstanding PhD Scholar Abroad, 2016. (3% in UK, 1% worldwide.)
2. Finalist for RAEng Enterprise Fellowship , Royal Academy of Engineering (RAEng), UK. 2015.
3. First place award, the Coniston poster competition, University of Birmingham, UK, 2014.
4. Outstanding Graduates of Heilongjiang Province, Heilongjiang, China, 2009.
5. Outstanding Graduates of Northeast Agricultural University, Harbin, Heilongjiang, China, 2009.
6. Best Undergraduate Thesis Award, Northeast Agricultural University, Harbin, Heilongjiang, China, 2009.
7. Outstanding Academic Award, The Northeast Agricultural University, China, 2008.
8. First National Prize of China Contemporary Undergraduate Mathematical Contest in Modeling, China, 2007.
9. Second National Prize of China Contemporary Undergraduate Mathematical Contest in Modeling, China, 2006.
10. Outstanding Student Award of The Northeast Agricultural University, China, 2006.
11. Outstanding Student Leadership Award, The Northeast Agricultural University, China, 2006.

Scholarships:
1. Universitas 21 scholarship from the University of Birmingham, 2015.
2. EPSRC project funding for PhD studies at University of Birmingham, 2012 - 2015.
3. Overseas top up scholarship from the University of Birmingham for PhD studies, 2012 - 2015.
4. First class scholarship, Northeast Agricultural University, Harbin, Heilongjiang, China, 2008.
5. First class scholarship, Northeast Agricultural University, Harbin, Heilongjiang, China, 2007.
6. First class scholarship, Northeast Agricultural University, Harbin, Heilongjiang, China, 2006.

Selected projects:

Co-Designer. Huawei SoC Secure Boot Solution, UK. September - December, 2016. (Funded by Huawei Ltd.)
Co-leader, Innovate UK project on user-friendly security and privacy to increase confidence in cloud-based systems, UK. June - September, 2015. (Funded by Innovate UK.)

Professional Activities:

Workshop Organization

Co-Chair, 74th Meeting of the IFIP WG 10.4 - Technological and societal challenges to blockchain dependability and security, Clervaux, Luxembourg, 2018.
Chair, Workshop on BlockChain , Birmingham, United Kingdom, 2015.

Comference Committee

PC member, 38th IEEE International Symposium on Reliable Distributed Systems (SRDS), 2019.
PC member, IEEE Global Communications Conference (GLOBECOM), 2018.
PC member, DSN Workshop on Byzantine Consensus and Resilient Blockchains (BCRB'18), 2018.
PC member, IEEE International Conference on Communications (ICC), 2018.
PC member, International Conference on Information Security Practice and Experience (ISPEC), 2017.
PC member, Software Architecture for Big Data and the Cloud, 2016.

Invited Reviewer (Journal):

ACM Transactions on Transactions on Privacy and Security (ACM TOPS)
IEEE Transactions on Information Forensics & Security (IEEE TIFS)
IEEE Transactions on Cloud Computing (IEEE TCC)
IEEE Transactions on Industrial Informatics (IEEE TII)
IEEE Wireless Communications
IEEE Access
Future Generation Computer Systems
Security and Communication Networks
The Computer Journal
Computers & Security
International Journal of Information Security
Journal of Information Security and Applications
International Journal of Distributed Sensor Networks
Journal of Computer Science and Technology
PLOS ONE

Invited Reviewer (Conference):

2018: ESORICS
2017: EuroSys, AsiaCCS, DSN, IFIP SEC, ESORICS.
2016: IEEE Euro S&P, IFIP SEC, ESSoS, ESORICS, WISTP.
2015: POST (ETAPS), ASIACCS, IFIP SEC.
2014: ACNS, SEC, FMS, WPES,
2013: ACISP, ESORICS, DPM.

PhD Student supervision:

Tong Cao, 2018-2021 (expected).
Cristian Mirto, 2018-2021 (expected).

Other Links:

The University of Birmingham Hacking Club
Calendar of events in the Security, Privacy, and Cryptography, from
Cipher CFP , IACR, and UCL Crypto Group
Crypto and Security Conferences Ranking (for reference only) at
Google Scholar Metrics, CIF-based ranking , or another view.
An Automatic Crypto Research Topic or Paper Title Generator
SCIgen - An Automatic CS Paper Generator