Jiangshan

Prospective PhD Students:

My life would be happier if I found very good PhD students to work with. If this is you, do apply!
More info.

Contact:

(PGP Key)

Jiangshan Yu (于江山)

I'm a lecturer (equivalent to U.S. assistant professor) at Monash University , Australia, and an honorary research fellow working with Prof. Mark Ryan ( HP Chair in Cybersecurity ) at the University of Birmingham, UK, where I received my PhD in computer science. I did my postdoc with Prof. Paulo Esteves-Verissimo (IEEE and ACM Fellow) at SnT, University of Luxembourg.

My research interests are in the area of cybersecurity and cryptography. In particular, the focus of my research has been on (designing and attacking) Blockchain consensus, Blockchain security and privacy, cryptographic key management, and ledger-based applications.

icon

[2019-04-26] I'd been nominated and selected as a finalist (Technology Application) for Endeavour Awards, which is Australia's Premier Awards Program within the manufacturing industry.

[2019-04-22] Our two papers on blockchain transaction untraceability have been accepted by CSF'19 and AsiaCCS'19.

[2019-03-25] RepuCoin has been covered by over 60 news media globally including our Monash News, Finder, 今日头条(Toutiao), ZDNet, Sohu, BTC Wires, ScienceDaily, Ethereum World News, EurekAlert!, The US Breaking news, Homeland Security Today, etc.

[2019-01-31] Our paper "RepuCoin: Your Reputation is Your Power" has been accepted for publication by IEEE Transactions on Computers (IEEE TC).

[2018-12-09] Our paper "ANCHOR: logically-centralized security for Software-Defined Networks" has been accepted for publication by ACM Transactions on Privacy and Security (ACM TOPS, previously known as ACM TISSEC.)

[2018-11-30] I'm delighted to be invited to attend the 75th Meeting of the IFIP WG 10.4 Working Group on Dependable Computing and Fault Tolerance.

[2018-11-15] A paper on "New Empirical Traceability Analysis of CryptoNote-Style Blockchains" has been accepted by Financial Cryptography and Data Security 2019 (FC19, 33/178=18.5%).

[2018-07-01] As co-chair, I'm delighted to see the 74th Meeting of the IFIP WG 10.4 on Blockchain has been very successful. All the material will be available at here.

[2018-05-22] CHARITY. Prof. Mark Ryan's Supporting for Aframano, a village in Ghana, Africa. See more detail at markryan.eu/aframano

[2017-10-11] Interviewed by Eldo Radio to explain end-to-end encryption in messaging and DECIM.

[2017-10-05] DECIM has been covered by dozens of international news media, such as Science Daily. The news was originally published by the University of Luxembourg (link) and the University of Birmingham (link).

[2017-06-29] A paper on "DECIM: Detecting Endpoint Compromise In Messaging" has been accepted by IEEE Transactions on Information Forensics and Security (IEEE TIFS), 2017.

[2017-05-15] A paper on "Authenticating compromisable storage systems" has been accepted by the 16^th IEEE TrustCom, 2017.

[2017-04-30] I have been awarded for the ``Chinese Government Award for outstanding PhD scholar abroad''. The success rate is 3% in UK and 1% worldwide. Here is the news press.

[2017-04-21] A paper on "Automatically Detecting the Misuse of Secrets: Foundations, Design Principles, and Applications" has been accepted by the 30^th IEEE CSF, 2017.

IMPACT

Main research impact:

Our research on blockchain consensus, called RepuCoin, provides the first blockchain system that is able to tolerate 51% attacks. This system may save potentially millions of US dollars every month from the attacks, and increase the confidence of enterprise in adapting blockchains. (For example, from April 2018 to Feb 2019, at least ten successful 51% attacks are identified, with a total loss of over 28 million US dollars.) This work has been reported by over 60 news media globally including Monash News, Finder, 今日头条(Toutiao), ZDNet, Sohu, BTC Wires, ScienceDaily, Ethereum World News, EurekAlert!, The US Breaking news, Homeland Security Today, etc.

Our work on the ledger-based end-to-end secure messaging system, called DECIM, provides the first end-to-end secure messaging system that is able to detect the compromise of secret keys. This system has been further developed by a University of Birmingham spin-off as open source software, and have attracted funding support from Innovate UK. The system has attracted news media's attention as a breakthrough in messaging privacy, and has been featured in more than 40 international and national news media including Science Daily, Phys.org, ACM TechNews, EurekAlert, Futurism, and Silicon Republic. The news has been released in more than 7 languages by media from more than 10 countries including UK, US, Germany, Ireland, Luxembourg, Turkey, Spain, and India. I have also been invited for an interview (to explain my innovation to general listeners) by Eldoradio --- a member of RTL group which is one of the world's leading producers of television content and the leading European entertainment network.

Our work on attacking and analysing CryptoNote-style blockchains ( CSF'19 , FC'19 , and AsiaCCS'19) has traced 70%-91% transactions of supposed-to-be privacy-preserving cryptocurrencies, including Monero, ByteCoin, and DigitalNote. We also provided optimal solutions within our formal model. Here is a news article reporting our works.

I've co-designed a secure booting solution for Huawei Ltd, the largest telecommunications equipment manufacturer in the world, to manage their next generation network devices securely.

PUBLICATIONS

Selected Recent Publications:

(My Google scholar and a full list of publications.)

Book Chapter:
1. Jiangshan Yu and Mark Ryan.
  "Evaluating web PKIs".
  Software Architecture for Big Data and the Cloud, 1st Edition, Chapter 7, June 2017.

Journal:
1. Jiangshan Yu, David Kozhaya, Jeremie Decouchant, and Paulo Verissimo.
  "RepuCoin: Your Reputation is Your Power".
  IEEE Transactions on Computers (IEEE TC). 2019.
2. Diego Kreutz, Jiangshan Yu, Fernando Ramos, and Paulo Verissimo.
  "ANCHOR: logically-centralized security for Software-Defined Networks".
  ACM Transactions on Privacy and Security (ACM TOPS, previously known as ACM TISSEC.) 2019. (Tamarin code)
3. Jiangshan Yu, Mark Ryan, and Cas Cremers.
  "DECIM: Detecting Endpoint Compromise In Messaging".
  IEEE Transactions on Information Forensics and Security (IEEE TIFS), Vol. 13, No.1, pp. 106-118, 2018. (Tamarin code)
4. Jiangshan Yu, Vincent Cheval, and Mark Ryan.
  "DTKI: a new formalized PKI with verifiable trusted parties".
  The computer Journal , Vol. 59, No. 11, pp. 1695-1713, 2016. (Tamarin code and Technical Report)
Conference:
1. Jiangshan Yu, Man Ho Allen Au, and Paulo Veríssimo.
  Re-thinking untraceability in the CryptoNote-style blockchain.
  IEEE Computer Security Foundations Symposium (CSF) 2019.
2. Zuoxia Yu, Man Ho Au, Jiangshan Yu, Rupeng Yang, Qiuliang Xu, and Wang Fat Lau.
  "New Empirical Traceability Analysis of CryptoNote-Style Blockchains".
  Financial Cryptography and Data Security (FC) 2019.
3. Dimaz Ankaa Wijaya, Joseph Liu, Ron Steinfeld, Dongxi Liu, Jiangshan Yu.
  "On The Unforkability of Monero".
  ACM Asia Conference on Information, Computer and Communications Security (ASIACCS) 2019.
4. Kevin Milner, Cas Cremers, Jiangshan Yu, and Mark Ryan.
  "Automatically Detecting the Misuse of Secrets: Foundations, Design Principles, and Applications".
  IEEE CSF 2017.
5. Jiangshan Yu, Mark Ryan, and Liqun Chen.
  "Authenticating compromisable storage systems",
  IEEE TrustCom 2017.
Patent:
- Jiangshan Yu and Mark Ryan. 'Key usage detection'.
  UK Patent Application GB 1416188.9
  US Patent Application US 14/852,342
Thesis:
- Jiangshan Yu.
  "Remote User Authentication in Distributed Networks and Systems".
  Master of Research (MPhil) in Computer Science (Network security and Cryptography).
  University of Wollongong, Australia, 2012. (Supervised by Dr. Guilin Wang and Prof. Yi Mu)
- Jiangshan Yu.
  "Mitigating private key compromise".
  Doctor of Philosophy (PhD) in Computer Science (cyber security).
  University of Birmingham, UK, 2016. (Supervised by Prof. Mark Ryan)

GRANT & AWARDS

Grant, Awards, and scholarships:

Grant:
- "Technology inspired feasibility study for secure email and cloud storage", GBP33,000 from Technology Strategy Board (Innovate UK), 2015.

Awards:
1. Finalist (Technology Application) for Endeavour Awards, Premier Awards Program (Manufacturing Industry), Australia, 2019.
2. Chinese Government Award For Outstanding PhD Scholar Abroad, 2016. (3% in UK, 1% worldwide.)
3. Finalist for RAEng Enterprise Fellowship , Royal Academy of Engineering (RAEng), UK. 2015.
4. First place award, the Coniston poster competition, University of Birmingham, UK, 2014.
5. Outstanding Graduates of Heilongjiang Province, Heilongjiang, China, 2009.
6. Outstanding Graduates of Northeast Agricultural University, Harbin, Heilongjiang, China, 2009.
7. Best Undergraduate Thesis Award, Northeast Agricultural University, Harbin, Heilongjiang, China, 2009.
8. First National Prize of China Contemporary Undergraduate Mathematical Contest in Modeling, China, 2007.
9. Second National Prize of China Contemporary Undergraduate Mathematical Contest in Modeling, China, 2006.

Scholarships:
1. Universitas 21 scholarship from the University of Birmingham, 2015.
2. EPSRC project funding for PhD studies at University of Birmingham, 2012 - 2015.
3. Overseas top up scholarship from the University of Birmingham for PhD studies, 2012 - 2015.
4. First class scholarship, Northeast Agricultural University, Harbin, Heilongjiang, China, 2008.
5. First class scholarship, Northeast Agricultural University, Harbin, Heilongjiang, China, 2007.
6. First class scholarship, Northeast Agricultural University, Harbin, Heilongjiang, China, 2006.

SERVICES

Professional Activities:

Conference (Co-)Chair

74th Meeting of the IFIP WG 10.4 - Technological and societal challenges to blockchain dependability and security, Clervaux, Luxembourg, 2018.
Workshop on BlockChain , Birmingham, United Kingdom, 2015.

Comference Program Committee Member

2019

The 38th IEEE International Symposium on Reliable Distributed Systems (SRDS)
The 15th International Conference on Information Security and Cryptology Inscrypt (Inscrypt)
The 20th International Conference on Cryptology in India (Indocrypt)
The 18th IEEE International Conference on Trust, Security and Privacy in Computing and Communications (IEEE TrustCom)
The 13th International Conference on Network and System Security (NSS)

2018

IEEE Global Communications Conference (GLOBECOM)
DSN Workshop on Byzantine Consensus and Resilient Blockchains (BCRB)
IEEE International Conference on Communications (ICC)

2017

International Conference on Information Security Practice and Experience (ISPEC)

2016

Software Architecture for Big Data and the Cloud, 2016.

Invited Reviewer (Journal):

ACM Transactions on Transactions on Privacy and Security (ACM TOPS)
IEEE Transactions on Information Forensics & Security (IEEE TIFS)
IEEE Transactions on Computers (IEEE TC)
IEEE Transactions on Dependable and Secure Computing (IEEE TDSC)
IEEE Transactions on Cloud Computing (IEEE TCC)
IEEE Transactions on Industrial Informatics (IEEE TII)
IEEE Wireless Communications
IEEE Access
IEEE Software
Future Generation Computer Systems
Security and Communication Networks
The Computer Journal
Computers & Security
International Journal of Information Security
Journal of Information Security and Applications
International Journal of Distributed Sensor Networks
Journal of Computer Science and Technology
PLOS ONE

Invited Reviewer (Conference):

2018: ESORICS
2017: EuroSys, AsiaCCS, DSN, IFIP SEC, ESORICS.
2016: IEEE Euro S&P, IFIP SEC, ESSoS, ESORICS, WISTP.
2015: POST (ETAPS), ASIACCS, IFIP SEC.
2014: ACNS, SEC, FMS, WPES,
2013: ACISP, ESORICS, DPM.