Research Publications

RFID Security and Applied Cryptography

RFID security:

 

2010:

Kuo-Hui Yeh, Nai-Wei Lo, Yingjiu Li: Cryptanalysis of Hsiang-Shih’s Authentication Scheme for Multi-Server Architecture. Accepted by International Journal of Communication Systems (IJCS), Wiley, 2010.

 

Kuo-Hui Yeh, Chunhua Su, Nai-Wei Lo, Yingjiu Li, Yi-Xiang Hung: Two Robust Remote User Authentication Protocols Using Smart Cards. Accepted by Journal of Systems and Software (JSS), Elsevier, 2010.

 

Kevin Chiew, Yingjiu Li, Tieyan Li, Robert Deng, Manfred Aigner: Time Cost Evaluation for Executing RFID Authentication Protocols, accepted by Internet of Things 2010 Conference (IOT), Tokyo, Nov 29-Dec 1, 2010 (acceptance ratio 28/104=26.9%).

 

Robert Deng, Yingjiu Li, Moti Yung, Yunlei Zhao: A New Framework for RFID Privacy. Accepted by 15th European Symposium on Research in Computer Security (ESORICS), Athens, Greece, September 20-22, 2010 (acceptance ratio 42/201=20.8%).

 

Qiang Yan, Robert Deng, Ivy Zheng, Yingjiu Li, Tieyan Li: Pseudonym-based RFID Discovery Service to Mitigate Unauthorized Tracking in Supply Chain Management. Accepted by 2nd International Symposium on Data, Privacy and E-Commerce (ISDPE), Buffalo/Niagara Falls, September 13-14, 2010.

 

Junzuo Lai, Robert H. Deng, Yingjiu Li: Revisiting Unpredictability-Based RFID Privacy Models. 8th International Conference on Applied Cryptography and Network Security (ACNS), pages 475-492, Beijing, China, June 22-25 2010 (acceptance ratio 33/178 =18.5%).

 

Shaoying Cai, Yingjiu Li, Tieyan Li, Robert Deng, Haixia Yao: Achieving High Security and Efficiency in RFID-Tagged Supply Chains. Accepted by International Journal of Applied Cryptography (IJACT), 2010.

 

Pedro Peris-Lopez, Julio C. Hernandez-Castro, Juan M. E. Tapiador, Tieyan Li, Yingjiu Li: Vulnerability Analysis of RFID Protocols for Tag Ownership Transfer. Computer Networks 54(9): 1502-1508, Elsevier, 2010.

 

Kuo-Hui Yeh, N.W. Lo, Yingjiu Li, Enrico Winata: An Adaptive n-Resolution Anti-Collision Algorithm for RFID Tag Identification. Sixth IEEE International Workshop on Heterogeneous Wireless Networks (AINA Workshop), pages 335-338, Perth, Australia, April 20-23, 2010.

 

2009:

Changshe Ma, Yingjiu Li, Robert Deng, Tieyan Li: RFID Privacy: Relation Between Two Notions, Minimal Condition, and Efficient Construction. 16th ACM Conference on Computer and Communications Security (CCS 2009), pages 54-65, Chicago, US, November 9-13, 2009 (acceptance ratio 58/315 = 18.4%).

 

Bing Liang, Yingjiu Li, Changshe Ma, Tieyan Li, Robert Deng: On Untraceability of Anonymous RFID Authentication Protocol with Constant Key-Lookup. 5th International Conference on Information Systems Security (ICISS), pages 71-85, Kolkata, India, December 14-18, 2009. (acceptance ratio 18/91=19.8%)

 

Shaoying Cai, Tieyan Li, Changshe Ma, Yingjiu Li, Robert Deng: Flexible and Secure Secret Updating for Unidirectional Key Distribution in RFID-enabled Supply Chains. 11th International Conference on Information and Communications Security (ICICS), pages 150-164, Beijing, China, December 14-17, 2009. (acceptance ratio 31/164 = 18.9%)

 

Shaoying Cai, Tieyan Li, Yingjiu Li, Robert Deng: Ensuring Dual Security Modes in RFID-Enabled Supply Chain Systems. 5th Information Security Practice and Experience Conference (ISPEC 2009), pages 372-383, LNCS 5451, Xi'an, China, April 13-15, 2009.

 

Shaoying Cai, Yingjiu Li, Tieyan Li, Robert Deng: Attacks and improvements to an RFID mutual authentication protocol (short paper). 2nd ACM Conference on Wireless Network Security (WiSec' 09), pages 51-58, Zurich, Switzerland, March 16-18, 2009.

 

Qiang Yan, Yingjiu Li, Tieyan Li, Robert Deng: A comprehensive study for RFID malwares on mobile devices. 5th Workshop on RFID Security (RFIDsec 2009 Asia), Taipei, Taiwan, January 9- 11, 2009.

Pedro Peris-Lopez, Julio Cesar Hernandez-Castro, Juan Estevez-Tapiador, Tieyan Li, Yingjiu Li: Vulnerability analysis of RFID protocols for tag ownership transfer. 5th Workshop on RFID Security (RFIDsec 2009 Asia), Taipei, Taiwan, January 9- 11, 2009.

 

2008:

Tong-Lee Lim, Tieyan Li, Yingjiu Li: A Security and Performance Evaluation of Hash-based RFID Protocols.  4th International Conferences on Information Security and Cryptology (Inscrypt), pages 406-424, LNCS 5487, Beijing, December 14-17, 2008.  

 

2007:

Yingjiu Li, Xuhua Ding: Protecting RFID Communications in Supply Chains. ACM Symposium on InformAtion, Computer, and Communication Security (ASIACCS’07), pages 234-241, Singapore, March 20-22, 2007 (acceptance ratio 33/188 = 17.6%).

 

 

Applied cryptography:

 

2010:

Yanjiang Yang, Yingjiu Li, Robert Deng, Feng Bao: Shifting Inference Control to User Side: Architecture and Protocol. IEEE Transactions on Dependable and Secure Computing (TDSC), 7(2): 189-202, 2010.

 

Changshe Ma, Jian Weng, Yingjiu Li, Robert Deng: Efficient Discrete Logarithm Based Multi-Signature Scheme in the Plain Public Key Model. Des. Codes Cryptography 54(2): 121-133, Springer, 2010.

 

2009:

Yanjiang Yang, Yingjiu Li, Jian Weng, Jianying Zhou, Feng Bao: Self-Enforcing Private Inference Control. Provable Security, Third International Conference (ProvSec 2009), pages 260-274, Guangzhou, China, November 11-13, 2009.

 

2008:

Shaoying Cai, Yingjiu Li, Yunlei Zhao, Yiming Zhao: Analysis and improvements of a secure e-tender submission protocol (short paper).  4th International Conferences on Information Security and Cryptology (Inscrypt), pages 153-163, Short Paper Proceedings (Science Press), Beijing, China, December 14-17, 2008.

 

2005:

Shuhong Wang, Yingjiu Li, Bo Zhu, Nan Hu: A Generic Protocol for Controlling Access to Mobile Services. Applied Public Key Infrastructure, Fourth International Workshop (IWAP’05), pages 95-110, J. Zhou et al. (Eds.) IOS Press, 2005.

 

Yingjiu Li, Xinwen Zhang: Securing Credit Card Transactions with One-Time Payment Scheme. Electronic Commerce Research and Applications (ECRA), 4(4): 413-426, Elsevier, 2005.

 

2004:

Yingjiu Li, Xinwen Zhang: A Security-Enhanced One-Time Payment Scheme for Credit Card. 14th International Workshop on Research Issues on Data Engineering: Web Services for E-Commerce and E-Government Applications (RIDE), pages 40-47, Boston, USA, March 2004. 

 

Data Applications Security

Database security:

 

2010:

Bing Liang, Kevin Chiew, Yingjiu Li, Yanjiang Yang: Privacy Disclosure Analysis and Control for 2D Contingency Tables Containing Inaccurate Data. Accepted by Privacy in Statistical Databases (PSD), Corfu, Greece, September 22-24, 2010.

 

2009:

Ge Fu, Hong Zhu, Yingjiu Li: Robust Damage Assessment for Corrupted Database Systems Based on Inter-Transaction Dependencies. 5th International Conference on Information Systems Security (ICISS), pages 237-251, Kolkata, India, December 14-18, 2009. (acceptance ratio 18/91=19.8%)
 

Haibing Lu, Yingjiu Li, Jaideep Vaidya, Vijay Atluri: An Efficient Online Auditing Approach to Limit Private Data Disclosure. 12th International Conference on Extending Database Technology (EDBT), pages 636-647, Saint-Petersburg, Russia, March 23-26, 2009.

 

2008:

Yingjiu Li, Haibing Lu: Disclosure analysis and control in statistical databases. 13th European Symposium on Research in Computer Security (ESORICS), pages 146-160, LNCS 5283, Malaga, Spain, October 6-8, 2008. (acceptance ratio 37/176=21%).

 

Haibing Lu, Yingjiu Li: Practical Inference Control for Data Cubes. IEEE Transactions on Dependable and Secure Computing (TDSC), 5(2):87-98, IEEE, 2008.

 

2007:

Yanjiang Yang, Yingjiu Li, Robert Deng: New Paradigm of Inference Control with Trusted Computing. Data and Applications Security (DBSEC) 2007, LNCS 4602, pages 243-258, Redondo Beach, CA, USA, July 8-11, 2007.

 

Lingyu Wang, Yingjiu Li, Sushil Jajodia, Duminda Wijesekera: Parity-Based Inference Control for Multi-Dimensional Range Sum Queries. Journal of Computer Security, 15(5):417-445, IOS Press, 2007

 

2006:

Haibing Lu, Yingjiu Li, Xintao Wu: Disclosure Risk in Dynamic Two-Dimensional Contingency Tables (Extended Abstract). 2nd International Conference on Information System Security (ICISS’06), pages 349-352, Kolkata, India, December 17-21, 2006.

 

Haibing Lu, Yingjiu Li, Xintao Wu: Disclosure Analysis for Two-Way Contingency Tables. Privacy in Statistical Databases (PSD'2006), pages 57-67, Springer LNCS 4302/2006, Rome, December 13-15, 2006.

 

Yingjiu Li, Haibing Lu, Robert Deng: Practical Inference Control for Data Cubes (Extended Abstract). IEEE Symposium on Security and Privacy (S&P’06), pages 115-120, Oakland, USA, May 21-24, 2006 (acceptance ratio 32/251=12.7%).

 

2005:

Xinwen Zhang, Yingjiu Li, Divya Nalla: An Attribute-Based Access Matrix Model. 20th ACM Symposium on Applied Computing (SAC’05), Track on Computer Security (SEC), Santa Fe, New Mexico, USA, March 13-17, 2005.

 

2003:

Lingyu Wang, Yingjiu Li, Duminda Wijesekera, Sushil Jajodia: Precisely Answering Multi-dimensional Range Queries without Privacy Breaches. ESORICS 2003: 100-115

 

2002:

Yingjiu Li, Lingyu Wang, Xiaoyang Sean Wang, Sushil Jajodia: Auditing Interval-Based Inference. CAiSE 2002: 553-567

 

Yingjiu Li, Sencun Zhu, Lingyu Wang, Sushil Jajodia: A Privacy-Enhanced Microaggregation Method. FoIKS 2002: 148-159

 

Yingjiu Li, Lingyu Wang, Sushil Jajodia: Preventing Interval-Based Inference by Random Data Perturbation. Privacy Enhancing Technologies 2002: 160-170

 

 

Information security management:

 

2010:

Hasan Cavusoglu, Nan Hu, Yingjiu Li, Dan Ma: Information Technology Diffusion with Influentials, Imitators, and Opponents: Model and Preliminary Evidence. Accepted by Journal of Management Information Systems (JMIS), 36 pages, 2010.

 

Chengpo Mu, Yingjiu Li: An Intrusion Response Decision-Making Model Based on Hierarchical Task Network Planning. Expert Systems with Applications 37(3): 2465-2472, Elsevier, 2010.

 

Qiang Yan, Robert Deng, Yingjiu Li, Tieyan Li: On the potential of limitation-oriented malware detection and prevention on mobile phones. International Journal of Security and Its Applications (IJSIA), 4(1): 21-30, January 2010.

 

2009:

Nan Hu, Giri K. Tayi, Chengyu Ma, Yingjiu Li: Certificate Revocation Release Policies. Journal of Computer Security (JCS) , 17(2): 127-157, IOS Press, 2009.

 

Nan Hu, Jianhui Huang, Ling Liu, Yingjiu Li, Dan Ma: Wake up or Fall Asleep -- Value Implication of Trusted Computing. Information Technology and Management, 10(4):177-192, Springer, 2009.

 

Qiang Yan, Yingjiu Li, Tieyan Li, Robert Deng: Insights into Malware Detection and Prevention on Mobile Phones. 2009 International Conference on Security Technology (SecTech), pages 242-249, Jeju Island, Korea, December 10-12, 2009. (invited paper session)

 

Kevin Chiew, Yingjiu Li: Multistage Off-line Permutation Packet Routing on a Mesh: an Approach with Elementary Mathematics.  Journal of Computer Science and Technology (JCST), 24(1): 175-180, Springer, 2009.

 

2008:

Daryl Walleck, Yingjiu Li, Shouhuai Xu: Empirical Analysis of Certificate Revocation Lists. 22nd Annual IFIP WG 11.3 Working Conference on Data and Applications Security (DBSEC), pages 159-174, LNCS 5094, Strand Palace Hotel, UK, July 13-16, 2008.

  

2006:

Chengyu Ma, Nan Hu, Yingjiu Li:  On the Release of CRLs in Public Key Infrastructure.  15th USENIX Security Symposium (USENIX Security 2006), pages 17-28, Vancouver, Canada, July 31-August 4, 2006 (acceptance ratio 22/179 = 12.3%).

 

 

Data rights management:

 

2008:

Yingjiu Li, Huiping Guo, Shuhong Wang: A Multiple Bits Watermark for Relational Data. Journal of Database Management (JDM), 19(3):1-21, IGI Global, 2008.

 

2007:

Yingjiu Li: Database Watermarking, A Systematic View (book chapter). Handbook of Database Security: Applications and Trends, edited by Sushil Jajodia and Michael Gertz, Springer, 2007.

 

Huiping Guo, Yingjiu Li, Sushil Jajodia: Chaining Watermarks for Detecting Malicious Modifications to Streaming Data. Information Sciences. 177(1):281-298, 2007.

 

2006:

Jie Guo, Yingjiu Li, Robert Deng, Kefei Chen: Rights Protection for Data Cubes. 9th Information Security Conference (ISC'06), pages 359-372, Springer LNCS 4176/2006, Samos Island, Greece, August 30-September 2, 2006 (acceptance ratio 38/188 = 20%).

 

Huiping Guo, Yingjiu Li, Anyi Liu, Sushil Jajodia: A Fragile Watermarking Scheme for Detecting Malicious Modifications of Database Relations. Information Sciences 176(10): 1350-1378, Elsevier, 2006.

 

Yingjiu Li, Robert Deng: Publicly Verifiable Ownership Protection for Relational Databases.  ACM Symposium on InformAtion, Computer, and Communication Security (ASIACCS), pages 78-89, Taipei, Taiwan, March 21-24, 2006 (acceptance ratio 33/189 = 17.7%).

 

2005:

Yingjiu Li, Vipin Swarup, Sushil Jajodia: Fingerprinting Relational Databases: Schemes and Specialties. IEEE Transactions on Dependable and Secure Computing (TDSC), 2(1): 34-45, 2005.

 

2004:

Yingjiu Li, Vipin Swarup, Sushil Jajodia: Defending Against Additive Attacks with Maximal Errors in Watermarking Relational Databases. DBSEC 2004: 81-94.

Yingjiu Li, Huiping Guo, Sushil Jajodia: Tamper detection and localization for categorical data using fragile watermarks. ACM Digital Rights Management Workshop (DRM 2004): 73-82

2003:

Yingjiu Li, Vipin Swarup, Sushil Jajodia: Constructing a virtual primary key for fingerprinting relational data. ACM Digital Rights Management Workshop (DRM 2003): 133-141

Yingjiu Li, Vipin Swarup, Sushil Jajodia: A Robust Watermarking Scheme for Relational Data. 13th Workshop on Information Technology and Systems (WITS), pages 195-200, Seattle, USA, December 2003. 

 

Data mining and security:

 

2008:

Songtao Guo, Xintao Wu, Yingjiu Li: Determining Error Bounds for Spectral Filtering Based Reconstruction Methods in Privacy Preserving Data Mining.  Knowledge and Information Systems, An International Journal (KAIS), 17(2):217-240, Springer, 2008.

 

Ling Qiu, Yingjiu Li, Xintao Wu: Outsourcing Data Mining Tasks While Protecting Business Intelligence and Customer Privacy.  Knowledge and Information Systems, An International Journal (KAIS), 17(1):99-120, Springer, 2008.

 

2007:

Ling Qiu, Yingjiu Li, Xintao Wu: Preserving Privacy in Association Rule Mining with Bloom Filters. Journal of Intelligent Information Systems (JIIS), 29(3):253-278, Springer Netherlands, 2007.

 

2006:

Ling Qiu, Yingjiu Li, Xintao Wu: An Approach to Outsourcing Data Mining Tasks While Protecting Business Intelligence and Customer Privacy. International Workshop on Privacy Aspects of Data Mining (PADM 2006), pages 551-558, Hong Kong Convention and Exhibition Centre, December 18, 2006.

 

Songtao Guo, Xintao Wu, Yingjiu Li: On the Lower Bound of Reconstruction Error for Spectral Filtering. 10th European Conference on Principles and Practice of Knowledge Discovery in Databases (PKDD 2006), pages 520-527, Berlin, Germany, September 18-22, 2006 (acceptance ratio 122/685 = 17.8%).

 

Xintao Wu, Songtao Guo, Yingjiu Li: Towards Statistical Modeling Based Value Disclosure Analysis in General Databases.  21st ACM Symposium on Applied Computing (SAC’06), Track on Data Mining, pages 617-621, Dijon, France, April 23-27, 2006.

 

Songtao Guo, Xintao Wu, Yingjiu Li: Deriving Private Information from Perturbed Data Using IQR Based Approach.  2nd International Workshop on Privacy Data Management (PDM’06), Atlanta, USA, April 3-7, 2006.

 

Yingjiu Li, Sencun Zhu, X. Sean Wang, Sushil Jajodia: Looking into the Seeds of Time: Discovering Temporal Patterns in Large Transaction Sets. Information Sciences, 176:1003–1031, Elsevier, 2006.

 

2005:

Xintao Wu, Ying Wu, Yongge Wang, Yingjiu Li: Privacy Aware Market Basket Data Set Generation: A Feasible Approach for Inverse Frequent Set Mining. 2005 SIAM International Conference on Data Mining (SDM’05), pages 103-114, Newport Beach, CA, USA, April 21-23, 2005.

 

2003:

Yingjiu Li, Peng Ning, Xiaoyang Sean Wang, Sushil Jajodia: Discovering Calendar-Based Temporal Association Rules (preliminary version appeared in TIME’01). Data Knowl. Eng. 44(2): 193-218 (2003)

 

2002:

Yingjiu Li, Ningning Wu, Xiaoyang Sean Wang, Sushil Jajodia: Enhancing Profiles for Anomaly Detection Using Time Granularities. Journal of Computer Security 10(1/2): 137-158 (2002)

 

2001:

Yingjiu Li, Peng Ning, X. Sean Wang, Sushil Jajodia: Generating Market Basket Data with Temporal Information (poster paper). ACM Workshop on Temporal Data Mining, San Francisco, CA, USA, August 2001.

Yingjiu Li, Peng Ning, X. Sean Wang, Sushil Jajodia: Discovering Calendar-based Temporal Association Rules. 8th International Symposium on Temporal Representation and Reasoning (TIME), pages 111-118, Cividale, Italy, June 2001.

2000:

Yingjiu Li, Xiaoyang Sean Wang, Sushil Jajodia: Discovering Temporal Patterns in Multiple Granularities. TSDM 2000: 5-19

 

 

US Patents Approved

 

Method and Apparatus for Watermarking Stream Data. United States Patent 20060277410. Status: approved in May 2010. http://patft.uspto.gov/netacgi/nph-Parser?Sect1=PTO2&Sect2=HITOFF&p=1&u=%2Fnetahtml%2FPTO%2Fsearch-bool.html&r=1&f=G&l=50&co1=AND&d=PTXT&s1=jajodia.INNM.&OS=IN/jajodia&RS=IN/jajodia

Fragile Watermarks. United States Patent 20060095775 (http://www.freepatentsonline.com/y2006/0095775.html). Status: approved in June 2010.

 

Last updated: June 2010.