About Me - Sze Yiu Chau (original) (raw)

Biography

I am currently an associate professor in the School of Computing Science at Simon Fraser University, where I teach and conduct research on cybersecurity. Prior to joining Simon Fraser, I was an assistant professor of Information Engineering at The Chinese University of Hong Kong. Before that, I was a postdoctoral researcher at the CyLab of Carnegie Mellon University, after obtaining my PhD in Computer Science from Purdue University. My research interests lie in the broad area of network and software security, with a focus on finding and mitigating human errors in system implementations and deployments. Blessed with the fortune of having some very talented students, my research group has published at top-tier venues in the fields of cybersecurity, software engineering, and human-computer interaction. In addition to writing academic papers, over the years, my students and I have also discovered and fixed many real-world vulnerabilities in mission-critical products and systems.

Selected Recent Publications

A full list of my publications and the relevant CVEs can be found here.

  1. On the Unnecessary Complexity of Names in X.509 and Their Impact on Implementations
    Yuteng Sun; Joyanta Debnath; Wenzheng Hong; Omar Chowdhury; Sze Yiu Chau
    [The ACM International Conference on the Foundations of Software Engineering (FSE) 2025] (Paper)
  2. SeQR: A User-Friendly and Secure-by-Design Configurator for Enterprise Wi-Fi
    S Mahmudul Hasan; Che Wei Tu; Endadul Hoque; Omar Chowdhury; Sze Yiu Chau
    [The ACM CHI conference on Human Factors in Computing Systems (CHI) 2025] (Paper)
  3. A Multifaceted Study on the Use of TLS and Auto-detect in Email Ecosystems
    Ka Fun Tang; Che Wei Tu; Sui Ling Angela Mak; Sze Yiu Chau
    [Network and Distributed System Security (NDSS) Symposium 2025] (Paper)
  4. ARMOR: A Formally Verified Implementation of X.509 Certificate Chain Validation
    Joyanta Debnath; Christa Jenkins; Yuteng Sun; Sze Yiu Chau; Omar Chowdhury
    [IEEE Symposium on Security and Privacy (S&P) 2024] (Paper)
  5. Towards Precise Reporting of Cryptographic Misuses
    Yikang Chen; Yibo Liu; Ka Lok Wu; Duc V. Le; Sze Yiu Chau
    [The Network and Distributed System Security (NDSS) Symposium 2024] (Paper)
  6. The Devil is in the Details: Hidden Problems of Client-side Enterprise Wi-Fi Configurators
    Ka Lok Wu; Man Hong Hue; Ka Fun Tang; Sze Yiu Chau
    [The 16th ACM Conference on Security and Privacy in Wireless and Mobile Networks (WiSec 2023)] (Paper)
    ※ Best Paper Award from ACM WiSec '23
  7. Back to School: On the (In)Security of Academic VPNs
    Ka Lok Wu; Man Hong Hue; Ngai Man Poon; Kin Man Leung; Wai Yin Po; Kin Ting Wong; Sze Ho Hui; Sze Yiu Chau
    [The 32nd USENIX Security Symposium (USENIX Security '23)] (Paper)
  8. All your credentials are belong to us: On Insecure WPA2-Enterprise Configurations
    Man Hong Hue; Joyanta Debnath; Kin Man Leung; Li Li; Mohsen Minaei; M. Hammad Mazhar; Kailiang Xian; Endadul Hoque; Omar Chowdhury; Sze Yiu Chau
    [The 28th ACM Conference on Computer and Communications Security (CCS 2021)] (Paper)
    ※ CUEngineering Jul 2022 Issue 19 coverage
  9. On Reengineering the X.509 PKI with Executable Specification for Better Implementation Guarantees
    Joyanta Debnath; Sze Yiu Chau; Omar Chowdhury
    [The 28th ACM Conference on Computer and Communications Security (CCS 2021)] (Paper)
    ※ Best Paper Award Runner-Up from ACM CCS 2021
  10. Morpheus: Bringing The (PKCS) One To Meet the Oracle
    Moosa Yahyazadeh; Sze Yiu Chau; Li Li; Man Hong Hue; Joyanta Debnath; Sheung Chiu Ip; Chun Ngai Li; Endadul Hoque; Omar Chowdhury
    [The 28th ACM Conference on Computer and Communications Security (CCS 2021)] (Paper)

Professional Activities

Current Research Students

Alumni

Awards & Recognitions

Invited Talks

Press & Media Coverage

Contact

If you want to send me encrypted emails, here is my PGP public key.

Miscellaneous

My Erdös number is 4, with multiple paths through my PhD advisors: