江天一色 对孤峰绝顶，云烟竞秀；悬崖峭壁，瀑布争流
About Me
潘蓝兰 (Pan Lanlan)
| Type | URL |
|---|---|
| abbypan@gmail.com | |
| Blog | https://abbypan.github.io/archive |
| Github | https://github.com/abbypan |
| https://www.linkedin.com/in/panlanlan/ | |
| ResearchGate | https://www.researchgate.net/profile/Lanlan-Pan/research |
| Orcid | 0000-0002-1771-2683 |
Education
| Year | School | Degree | Info |
|---|---|---|---|
| 2006 - 2009 | USTC (University of Science and Technology of China) | Master of Information Security | Infonet: http://if.ustc.edu.cn |
| 2002 - 2006 | USTC (University of Science and Technology of China) | Bachelor of Information Security | Cybersec: http://cybersec.ustc.edu.cn/main.htm |
Working Experience
| Year | Company | Position | Experience |
|---|---|---|---|
| 2019 - 2023 | OPPO | Security Architect | Terminal Security |
| 2018 - 2019 | Geely | Cybersecurity Technical Manager | Automotive Security |
| 2013 - 2017 | CNNIC (China Internet Network Information Center) | Primary Security Technology Researcher | Cyberspace Security |
| 2009 - 2013 | Tencent | Network Security Engineer | Cybersecurity |
Paper (First Author)
| Year | Paper |
|---|---|
| IEEE SIN 2024 | A Lightweight Hybrid Signcryption Scheme for Smart Devices |
| IEEE CSR 2024 | Building a Secure Cross-Device Communication Channel for Smart Devices based on App Accounts |
| IEEE SmartNets 2024 | ASDWL: Mitigating DNS Random Subdomain Attacks for Second Level Domain |
| CRIS 2023 | Enhance Calling Definition Security for Android Custom Permission |
| Computing 2022 | Measuring the Resolution Resiliency of Second-Level Domain Name |
| Spaccs 2019 | EPT: EDNS Privacy Tunnel for DNS |
| QShine 2018 | Improving Privacy for GeoIP DNS Traffic |
| IEEE TrustCom 2018 | A Public Key based EDNS Privacy Tunnel for DNS |
| IEEE PST 2018 | Mitigating Client Subnet Leakage in DNS Queries |
| NDSS DNS Privacy Workshop 2017 | EIL: Dealing with the Privacy Problem of ECS |
| IEEE APNOMS 2016 | Mitigating DDoS Attacks towards Top Level Domain Name Service |
| 计算机应用研究 2016 | 一种评估DNS根镜像服务的方法 |
| 计算机应用研究 2015 | 一种快速评估DDOS攻击对DNS权威服务影响的方法 |
| 通信技术 2010 | 基于兴趣相似度的协作式垃圾邮件过滤方案 |
| Masters Dissertation 2009 | 协作式垃圾邮件过滤技术研究 |
Granted Patent (First Author)
Patent: https://patents.google.com/?inventor=%E6%BD%98%E8%93%9D%E5%85%B0
Standard
| Year | Standard |
|---|---|
| 2022 T/TAF 074-2020 | 移动智能终端数字车钥匙信息安全技术要求 |
| 2015 CCSA YD/T 3008-2016 | 域名服务安全状态检测要求 |
| Year | Draft |
|---|---|
| IETF draft-pan-dnsop-explicit-forged-answer-signal | Explicit Forged Answer Signal |
| IETF draft-pan-dnsop-edns-isp-location | ISP Location in DNS Queries |
| IETF draft-pan-dnsop-swild-rr-type | SWILD RR Type (Wildcard on Intermediate Nameservers) |
Participate
| Organization |
|---|
| SECURWARE Technical Program Committee |
| ICANN RSSAC Caucus |
Keywords
| Experience | Keywords |
|---|---|
| Terminal Security | Chip, Cryptography, Connectivity, Android, TEE, SecureBoot, IoT, Privacy, Data Security |
| Automotive Security | Digital Car Key, OTA, Telemetics, TSP, ECU, HSM, BLE, WiFi, NFC, UWB, GDPR |
| Cyberspace Security | Protocol, DNS, BGP, PKI, Cryptography, TLD |
| Cybersecurity | Information Security, DNS, Hijack, DDoS, Network Security, TLS, CDN, HTTP |
