Hasso-Plattner-Institut für Softwaresystemtechnik
Feng Cheng

Contact

Prof. Dr. Christoph Meinel

Hasso-Plattner-Institut
an der Universität Potsdam

Tel: +49 0331/5509-222
Fax: +49 0331/5509-325
Mobil: +49 176 10010727
meinel"at"hpi.uni-potsdam.de

Books

Feng Cheng

(last update on 22.04.2012)

Contact  About  Preofessional Activities  Teaching Activities  Publications  Misc.

Contact

  • Office: H-1.13
  • Tel: +49-(0)331-5509-519
  • Fax: +49-(0)331-5509-325
  • Email:
  • Post Address:
  • Chair of "Internet Technologies and Systems"
    Hasso-Plattner-Institute at University of Potsdam
    Postfach 900460
    14440, Potsdam,
    Germany

About

  • Dr. Feng Cheng is now a senior research associate at Hasso Plattner Institute (HPI) at University of Potsdam (Uni Potsdam), Germany. His research is mainly focused on network security, firewall, IDS/IPS, protocol analysis, attack modeling and penetration testing, SOA and Cloud Security, etc. He has been the principal investigator and project manager for many research projects in the area of IT security since 2003, including the project “Physical Separation and its Lock-Keeper Implementation”, which was commercialized as a product by Seimens Switzerland in 2005. He has published more than 30 papers in the international conferences and Journals. He served as coordinator, program committee member, or reviewer for many international workshops and conferences. Now, He is conducting research, development and teaching activities around new technologies of Network Security at HPI. He holds BEng. from Beijing University of Aeronautics and Astronautics (BUAA), MEng. from Beijing University of Technology (BJUT), and PhD from University of Potsdam. 

Professional Activities

Teaching Activities

  • Lecture and Seminar:

SS2012

WS2011

SS2011

WS2010

SS2010

WS2009

  • Master/Diplom Thesis:
    • open topics (if you are interested, just drop me a line):
      • Virtualization for Security Lab Manufacturing Platform
      • Attack Graph Construction using Unified Data Input
    • Robert Schuppenies: Automatic Extraction of Vulnerability Information for Attack Graphs (Apr. 2008 -- Mar. 2009, finished, now with Google Inc.)
    • Sebastian Roschke: IDS Management on Lock-Keeper (Apr. -- Nov. 2008 , finished, now with Google Inc.)
    • Michael Menzel: Securing Web Services using Lock-Keeper (Jan. -- Aug. 2006. finished, now with HPI)
    • Christian Liesegang: A Network Security Measurement Framework (Jan. -- Aug. 2006. finished, now with Bombardier)
     
  • Bachelor Project: 
    • BP-M3: Lock-Keeper Web Services Gateway for Advanced Management and High Security of Service-oriented Applications (cooperated with Siemens and Actisis GmBH, Oct. 2008 -- Sept. 2009. finished)
    • BP-B2: Development of a Service-Oriented  Architecture for Police Brandenburg's Internetwache based on Lock-Keeper (cooperated with Police Brandenburg,  Oct. 2006 -- Sept. 2007. finished)
    • BP-M2: Database Replication over Lock-Keeper  (cooperated with Siemens Switzerland, Apr. 2006 -- Mar. 2007. finished)
    •  
  • Intern Student: 
    • David Jaeger (Jul. 2009 -- , ongoing)
    • Florian Westphal (Sept. 2010 -- , ongoing)
    • Marian Gawron (April. 2012 -- , ongoing)
    • Hubert Hesse (April. 2012 -- , ongoing)
    • Bjoern Groneberg (Sept. 2010 -- Jun. 2011, finished)
    • Piotr Szymanski (Visiting Student from Poland, Feb. -- Sept. 2010. finished)
    • Thanh Dien Tran (Nov. 2008 -- Sept. 2009. finished
    • Robert Schuppenies (Jan. 2007 -- Mar. 2009. finished)
    • Sebastian Roschke (Apr. 2007 -- Oct. 2008. finished)
    • Ge Zhang (Oct. 2007 -- May. 2008. finsihed)
    • Alberto Diniz Bueno Filho (Visiting Student from Brazil, Jul. -- Sept. 2004. finished)

Publications

  • Journal & Book Chapter Paper
    • F.Cheng, Ch.Meinel, Research on the Lock-Keeper Technology: Architectures, Advancements and Applications, International Journal of Computer and Information Science(IJCIS), ACIS Press, USA, 5(3), 2004.
    • F. Cheng, Ch. Meinel, Lock-Keeper: A New Implementation of Physical Separation Technology, Securing Electronic Business Processes - Highlights of the Information Security Solutions Europe (Eds: S. Paulus, N. Pohlmann, and H. Reimer, ISSE), Vieweg-Verlag, 2006. (Book Chapter)
    • S. Roschke, F. Cheng, Ch. Meinel, An Advanced IDS Management Architecture, Journal of Information Assurance and Security (JIAS), Dynamic Publishers, Inc., USA, 5(4), 2010. 
    • S. Roschke, F. Cheng, Ch. Meinel, Modeling Alerts for IDS Correlation, Journal of Information Assurance and Security (JIAS), Dynamic Publishers, Inc., USA, 6(2), 2011. 
    • S. Roschke, F. Cheng, Ch. Meinel, An Alert Correlation Platform for Memory-Supported Techniques, Journal of Concurrency and Computation: Practise and Experience (CCPE), Wiley Blackwell, 24(2), 2011. 
    • S. Roschke, F. Cheng, Ch. Meinel, High Quality Attack Graph based IDS Correlation, Logic Journal of the IGPL (JIGPAL), Oxford University Press, 20(3), 2012 (to appear)
    • S. Zhang, H. Zhang, F.Cheng, Digital Image Watermarking Based on Discrete Wavelet Transform, Journal of Beijing Polytechnic University (JBJUT), 27(3), 2001 (in Chinese).
  • Conference Paper

  •   2011
    • A. AlSa'deh, F. Cheng, and Ch. Meinel, CS-CGA: Compact and More Secure CGA, in Proceedings of the 17th IEEE International Conference on Networks (ICON'11), IEEE Press, Singapore, December 14-16, 2011. (AR=64/143)
    • S. Roschke, F. Cheng, Ch. Meinel, A New Correlation Algorithm based on Attack Graph, in Proceedings of the 4th International Conference on Computational Intelligence in Security for Information Systems (CISIS'11), Springer LNCS 6694,Torremolinos, Spain, June 8-10, 2011. (AR=38/67)
    • S. Roschke, F. Cheng, Ch. Meinel, BALG: Bypassing Application Layer Gateways Using Multi-Staged Encrypted Shellcodes, in Proceedings of the 12th IFIP/IEEE International Symposium on Integrated Network Management (IM'11), IEEE Press, Dublin, Ireland, May 23-27, 2011. (AR=47/160)
    • F. Cheng, S. Roschke, Ch. Meinel, An Integrated Network Scanning Tool for Attack Graph Construction, in Proceedings of the 6th International Conference on Grid and Pervasive Computing (GPC'11), Springer LNCS 6646, Oulu, Finland, May 11-13, 2011. (AR=28/62)
    • A. AlSa'deh, F. Cheng, S. Roschke, Ch. Meinel, IPv4/IPv6 Handoff on Lock-Keeper for High Flexibility and Security, in Proceedings of the 4th IFIP/IEEE International Conference on Network and System Security (NTMS'11), IEEE Press, Paris, France, Februry 7-10, 2011. (AR=104/335)

2010

    • S. Roschke, F. Cheng, Ch. Meinel, Flexible and Efficient Alert Correlation Platform for Distributed IDS, in Proceedings of the 4th International Conference on Network and System Security (NSS'10), IEEE Press, Melbourne, Australia, September 1 - 3, 2010. (AR=33/131)
    • S. Roschke, F. Cheng, Ch. Meinel, Using Vulnerability Information and Attack Graphs for Intrusion Detection , in Proceedings of the 6th International Conference on Information Assurance and Security(IAS'10), IEEE Press, Atlanta, USA, August 23-25, 2010. (AR=34/131)
    • S. Roschke, L. Ibraimi, F. Cheng, Ch. Meinel, Secure Communication Using Identity Based Encryption, in Proceedings of Joint IFIP TC6 and TC11 Conference on Communications and Multimedia Security (CMS'10), Springer LNCS 6109, Linz, Australia, May 31 - June 2, 2010. (AR=23/55)
    • F. Cheng, T.-D. Tran, S. Roschke, Ch. Meinel, A Specialized Tool for Simulating Lock-Keeper Data Transfer, in Proceedings of the 24th IEEE International Conference on Advanced Information Networking and Applications (AINA'10), IEEE Press, Perth, Australia, April 20-23, 2010. (AR=181/700)

2009

    • S. Roschke, F. Cheng, Ch. Meinel, Intrusion Detection in the Cloud, in Prodeedings of the 1st International Workshop on Security in Cloud Computing (SCC'09), IEEE Press, Chengdu, China, December 12-14, 2009.
    • F. Cheng, S. Roschke, R. Schuppenies, Ch. Meinel, Remodeling Vulnerability Information, in Post-Proceedings (selected revised paper) of the 5th SKLOIS Conference on Information Security and Cryptology (INSCRYPT'09), Springer LNCS 6151. Beijing, China. December 12 - 15, 2009. (AR=34/147)
    • S. Roschke, F. Cheng, T.-D. Tran, Ch. Meinel, A Theoretical Model of Lock-Keeper Data Exchange and its Practical Verification, in Proceedings of the 6th IFIP International Conference on Network and Parallel Computing (NPC'09), IEEE Press, Gold Coast, Australia, October 19 - 21, 2009. (AR=25/85)
    • S. Roschke, F. Cheng, R. Schuppenies, Ch. Meinel, Towards Unifying Vulnerability Information for Attack Graph Construction, in Proceedings of the 12th  Information Security Conference (ISC'09), Springer LNCS 5735, Pisa, Italy, September 7 - 9, 2009. (AR=29/105)
    • S. Roschke, F. Cheng, Ch. Meinel, An Extensible and Virtualization-Compatible IDS Management Architecture, in Proceedings of the5th  International Symposium on Information Assurance and Security (IAS'09), IEEE Press, Xi'an, China, August 18 - 20, 2009.
    • F. Cheng, S. Roschke, Ch. Meinel, Implementing IDS Management on Lock-Keeper, in Proceedings of the 5th Information Security Practice and Experience Conference (ISPEC'09), Springer LNCS 5451, Xi’an, China, April 13 - 15, 2009. (AR=36/160)
    • F. Cheng, Ch. Meinel, Design of Lock-Keeper Federated Authentication Gateway, in Proceedings of the 11th IEEE International Conference on Advanced Communication Technology (ICACT'09), IEEE Press, Phoenix Park, Korea, February 15 - 18, 2009.

2008

    • G. Zhang, F. Cheng, Ch. Meinel, SIMPA: A SIP-Based Mobile Payment Architecture, in Proceedings of the 7th IEEE International Conference on Computer and Information Science (ICIS'08), IEEE Press. Portland, Oregon, USA. May 14 - 16, 2008. (AR=108/320)
    • G. Zhang, F. Cheng, Ch. Meinel, Towards Secure Mobile Payment Based on SIP, in Proceedings of the 15th IEEE International Conference on the Engineering of Computer Based Systems (ECBS'08), IEEE Press. Belfast, Northern Ireland, UK. March 31st - 4th April, 2008.
    • F. Cheng, Ch. Meinel, Strong Authentication over Lock-Keeper, in Proceedings of the 34th International Conference on Current Trends in Theory and Practice of Computer Science (SOFSEM'08), Springer LNCS 4910.  High Tatras, Slovakia. January 19-25, 2008. (AR=57/162)

2007

    • M. Menzel, F. Cheng, Ch. Meinel, Providing Secure Web Services Using Physical Separation, in the Second-Proceedings of the 9th International Conference on Information and Communications Security (ICICS'07), Zhengzhou, Henan Province, China. December 12-15, 2007
    • F. Cheng, M. Menzel, Ch. Meinel, A Secure Web Services Providing Framework based on Lock-Keeper, in Proceedings of the 10th Asia-Pacific Network Operations and Management Symposium (APNOMS'07) , Springer LNCS 4773. Sapporo, Japan. October 10-12, 2007. (AR=48/160)
    • F. Cheng, Ch. Wolter, Ch. Meinel, A Simple, Smart and Extensible Framework for Network Security Measurement, in Post-Proceedings (selected revised paper) of the 3rd SKLOIS Conference on Information Security and Cryptology (INSCRYPT'07), Springer LNCS 4990. Xining, China. August 31-September 5, 2007. (regular paper, AR=31/176)

2006

    • F. Cheng, Ch. Meinel, Deployment of Virtual Machines in Lock-Keeper, in Proceedings of the 7th International Workshop on Information Security Application (WISA'06), Springer LNCS 4298. Cheju Island, Korea. August 28-30, 2006. (AR=31/146)

Prior to 2005

    • X. Zhang, F. Cheng, Ch. Meinel, An Http-based Implementation of OpenSST, in Proceedings of the 16th International Conference on Computer Communication (ICCC'04). Beijing, China. September 15-17, 2004.
    • F. Cheng, P. Ferring, Ch. Meinel, et.al., The DualGate Lock-Keeper: A Highly Efficient, Flexible and Applicable Network Security Solution, in Proceedings of the 4th ACIS International Conference on Software Engineering, Artificial Intelligence, Networking, and Parallel/Distributed Computing (SNPD'03). Luebeck, Germany. October 16-18, 2003.
    • F. Cheng, Ch. Meinel, et.al., A Complete Solution for Highly Secure Data Exchange: Lock-Keeper and its Advancements, in Proceedings of the 4th International Conference on Parallel and Distributed Computing, Applications and Technologies (PDCAT'03), IEEE Press. Chengdu, China. August 27-29, 2003. 
  • Technical Report
    • F. Cheng, P. Ferring, Ch. Meinel, Lock-Keeper Technology - A New Network Security Solution, Mathematik/Informatik Forchungsbericht Nr. 03-5, University of Trier, December, 2003.
    • F. Cheng, H. Zhang, B. Liu, Flexible Image Watermarking in JPEG2000 Domain, Technical Report, Beijing University of Technology (in Chinese).
    • F. Cheng, H. Zhang, Watermarking for Image Authentication Based on JPEG2000, Technical Report, Beijing University of Technology (in Chinese).

(My entries in DBLP)

Miscellaneous

some important persons on this picture: Dr. Angela Merkel (German Chanceller), Dr. Annette Schavan (German Minister of Education and Research) , Prof. Dr. Hasso Plattner (SAP Co-founder and Chairman), Prof. Dr. Christoph Meinel (HPI Director), More pictures can be accessed here, or here.