Ziyu Lin (ζεη in Chinese) is a third-year Master Student in the Department of Software Engineering at Fuzhou University, supervised by Prof. Ximeng Liu. My research pursuits revolve around network security, with a primary focus on Content Delivery Network (CDN) security, 5G security and protocol security. My current work aims to discover and solve the security risks posed by CDN forwarding request inconsistencies to build safer, better CDN. My research results have received acknowledgments from well-known CDN vendors such as Cloudflare, Azure, Aliyun, G-core, Cachefly, Qiniu, and Upyun.
π₯ News
- 2025.03: Β ππ Zhiwei and me will present CDN Cannon at Black Hat Asia 2025.
- 2024.09: Β ππ Our paper Detecting and Measuring Security Implications of Entangled Domain Verification in CDN was available on Arxiv!
- 2024.03: Β ππ Our paper βCDN Cannon: Exploiting CDN Back-to-Origin Strategies for Amplification Attacksβ was accepted by Usenix Security, Philadelphia, PA, 2024.
π Publications
- CDN Cannon: Exploiting CDN Back-to-Origin Strategies for Amplification Attack
- Ziyu Lin, Zhiwei Lin, Ximeng Liu, Jianjun Chen, Run Guo, Cheng Chen, Shaodong Xiao
- The 33rd USENIX Security Symposium
- This paper is about exploiting CDN Back-to-Origin strategies to launch a new class of amplification attacks.
- Detecting and Measuring Security Implications of Entangled Domain Verification in CDN
- Ziyu Lin, Zhiwei Lin, Run Guo, Jianjun Chen, Mingming Zhang, Ximeng Liu, Tianhao Yang, Zhuoran Cao, Robert H. Deng
- This paper is about automatically detecting Domain Verification vulnerabilities in CDN.
π Talks
- CDN Cannon: Exploiting CDN Back-to-Origin Strategies for Amplification Attack
- Ziyu Lin, Zhiwei Lin
π Educations
- 2024.05 - 2025.05, Master (Visiting Student), Sigapore Management University, Sigapore.
- 2022.09 - present, Master, Fuzhou University, Fuzhou.
- 2018.09 - 2022.06, Undergraduate, Fujian Agriculture and Forestry University, Fuzhou.
π Honors and Awards
- 2024.10 Chinese National Scholarship
- 2024.01 Best Paper Award, 2024 2nd International Conference on Big Data and Privacy Computing.
- 2022.12 3rd Place of TEE Track in 2022 World Privacy-Preserving Computing Competition (WPPCC)
π» Internships
- 2025.05 - present, National University of Singaprore, Research Assistant (supervised by Prof. Sikdar Biplab and Prof. Prosanta Gope).
- 2024.05 - 2025.05, Sigapore Management University, Research Assistant (supervised by Prof. Robert Deng).
- 2023.01 - 2024.05, NISL at Tsinghua University, Research Assistant (supervised by Prof. Jianjun Chen and Dr. Run Guo).