Hi! I am Ziyu Lin (林子瑜 in Chinese). I am a first-year PhD Student in the School of Computer Science and Engineering at Nanyang Technological University, co-advised by Prof. XiaoFeng Wang and Prof. Wei Dong. My research focuses on 5G security and network protocol security. My research results have received acknowledgments from well-known CDN vendors such as Azure, Alibaba, Baidu, Cloudflare, Cachefly, Edgio, G-Core, Qiniu, and Tencent

🔥 News

• 2026.07:  🎉🎉 Our paper “CDN Tsunami: Exploiting HTTP/3-HTTP/1.1 Conversion for DoS Attacks” was accepted by SRDS, Rome, Italy, 2026.
• 2026.05:  🎉🎉 Our paper “Understanding Implicit Trust Errors in Core Carrier Networks through Multi-Agent Flaw Discovery and Analysis” was accepted by Usenix Security, Baltimore, MD, 2026.
• 2025.03:  🎉🎉 Zhiwei and I will present CDN Cannon at Black Hat Asia 2025.
• 2024.09:  🎉🎉 Our paper “Detecting and Measuring Security Implications of Entangled Domain Verification in CDN” was available on Arxiv!
• 2024.03:  🎉🎉 Our paper “CDN Cannon: Exploiting CDN Back-to-Origin Strategies for Amplification Attacks” was accepted by Usenix Security, Philadelphia, PA, 2024.

📝 Publications

• Understanding Implicit Trust Errors in Core Carrier Networks through Multi-Agent Flaw Discovery and Analysis
  • Ziyu Lin, Ziting Wang, Xinfeng Li, Wei Dong, XiaoFeng Wang
  • The 35rd USENIX Security Symposium
• CDN Cannon: Exploiting CDN Back-to-Origin Strategies for Amplification Attack
  • Ziyu Lin, Zhiwei Lin, Ximeng Liu, Jianjun Chen, Run Guo, Cheng Chen, Shaodong Xiao
  • The 33rd USENIX Security Symposium
  • This paper is about exploiting CDN Back-to-Origin strategies to launch a new class of amplification attacks.
• CDN Tsunami: Exploiting HTTP/3-HTTP/1.1 Conversion for DoS Attacks
  • Ziyu Lin, Tianlong Su, Yingjie Lin, Prosanta Gope, Yinzhi Cao, Ximeng Liu, Biplab Sikdar
  • The 45th International Symposium on Reliable Distributed Systems
• Detecting and Measuring Security Implications of Entangled Domain Verification in CDN
  • Ziyu Lin, Zhiwei Lin, Run Guo, Jianjun Chen, Mingming Zhang, Ximeng Liu, Tianhao Yang, Zhuoran Cao, Robert H. Deng
  • This paper is about automatically detecting Domain Verification vulnerabilities in CDN.

📝 Talks

• CDN Cannon: Exploiting CDN Back-to-Origin Strategies for Amplification Attack
  • Ziyu Lin, Zhiwei Lin

📖 Educations

• 2026.01 - present, PhD, Nanyang Technological University, Singapore.
• 2022.09 - 2025.06, Master, Fuzhou University, P.R.C.
• 2018.09 - 2022.06, Undergraduate, Fujian Agriculture and Forestry University, P.R.C.

🎖 Honors and Awards

• 2024.10 Chinese National Scholarship
• 2024.01 Best Paper Award, 2024 2nd International Conference on Big Data and Privacy Computing.
• 2022.12 3rd Place of TEE Track in 2022 World Privacy-Preserving Computing Competition (WPPCC)

💻 Internships

• 2025.05 - 2025.11, National University of Singapore, Research Assistant (supervised by Prof. Sikdar Biplab).
• 2024.05 - 2025.05, Singapore Management University, Research Assistant (supervised by Prof. Robert Deng).
• 2023.01 - 2024.05, Tsinghua University, Research Assistant (supervised by Prof. Jianjun Chen).