Demo Data from EDBT 2026 / reviewers in the wild / expert
Sheung Chiu Ip
dblp:306/1531
· DBLP profile ↗
1ranked-venue papers
0as first author
1since 2021 · last 2021
—ORCID · none
Domains — the database's venue-derived domains; a paper can count in several
Security and privacy · 1 · 1 since 2021
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Network and information security
1 paper |
Cryptographic primitives and cryptanalysis · 77% Systems and software security · 23% | |
| Software engineering, system software, and programming languages
1 paper |
Software testing · 100% |
Topics — the 2 heaviest of 4, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Cryptographic primitives and cryptanalysis › public-key cryptography › digital signatures › factorization-based signature
RSA signature |
0.5 | 1 | 2021 | Morpheus: Bringing The (PKCS) One To Meet the Oracle · CCS 2021 |
Software testing
black-box testing |
0.5 | 1 | 2021 | Morpheus: Bringing The (PKCS) One To Meet the Oracle · CCS 2021 |
Methods — techniques the papers use, named apart from their topics
oracle-based testing · 1.0black-box testing · 1.0adaptive test case generation · 1.0
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2021 | Morpheus: Bringing The (PKCS) One To Meet the OracleabstractThis paper focuses on developing an automatic, black-box testing approach called Morpheus to check the non-compliance of libraries implementing PKCS#1-v1.5 signature verification with the PKCS#1-v1.5 standard. Non-compliance can not only make implementations vulnerable to Bleichenbacher-style RSA signature forgery attacks but also can induce interoperability issues. For checking non-compliance, Morpheus adaptively generates interesting test cases and then takes advantage of an oracle, a formally proven correct implementation of PKCS#1-v1.5 signature standard, to detect non-compliance in an implementation under test. We have used Morpheus to test 45 implementations of PKCS#1-v1.5 signature verification and discovered that 6 of them are susceptible to variants of the Bleichenbacher-style low public exponent RSA signature forgery attack, 1 implementation has a buffer overflow, 33 implementations have incompatibility issues, and 8 implementations have minor leniencies. Our findings have been responsibly disclosed and positively acknowledged by the developers. Moosa Yahyazadeh, Sze Yiu Chau, Li Li 0101, Man Hong Hue, Joyanta Debnath, Sheung Chiu Ip, Chun Ngai Li, Md. Endadul Hoque, Omar Chowdhury |
CCS | 6 |