Steve Sheng's Homepage

Home About Me What's New Publications Press Resume

STEVE SHENG

I am a fifthyear Ph.D. student at Carnegie Mellon University, and I am interested in protecting people’s identities and privacy online using technology and public policy. One of my main areas of concentration is anti-phishing, which protects people from online criminals that try to steal personal information. My advisor is Lorrie Cranor.

If you are here regarding a potential employment opportunity within academia, industry, or other fields, please click on "Resume".

Contact Information

Email Address	xsheng [at] andrew [dot] cmu [dot] edu
Phone	+1 412-608-7237
Office	Collaborative Innovation Center 2222B
Mailing Address	Carnegie Mellon University Department of Engineering & Public Policy Baker Hall 129 Pittsburgh, PA 15213

Education

Ph.D. Candidate, Department of Engineering & Public Policy, Carnegie Mellon University

M.S., Department of Engineering & Public Policy, Carnegie Mellon University

B.S., Computer and Information Science , University of Pennsylvania (Magna Cum Laude)

Selected Publications

(for a complete list, see my resume)

An Evaluation of the Effectiveness of US Financial Privacy Legislation Through the Analysis of Privacy Policies. Xinguang Sheng and Lorrie Faith Cranor. I/S: A Journal of Law and Policy for the Information Society, Volume 2, Number 3, Fall 2006, pp. 943-979.

Anti-Phishing Phil: The Design and Evaluation of a Game That Teaches People Not to Fall for Phish. S. Sheng, B. Magnien, P. Kumaraguru, A. Acquisti, L. Cranor, J. Hong, and E. Nunge. In Proceedings of the 2007 Symposium On Usable Privacy and Security, 18-20 July 2007, Pittsburgh, PA

Getting Users Pay Attention to Anti-Phishing Education: Evaluation of Retention and Transfer. P. Kumaraguru, S. Sheng, A. Acquisti, L. Cranor, and J. Hong. In Proceedgins of the 2007 eCrime Research Summit, 4-5 October 2007, Pittsburgh, PA

Finding an Effective Sustainable Model for a Wireless Metropolitan-Area Network: Analyzing the Case of Pittsburgh. J. M. Peha, B. E. Gilden, R. J. Savage, S. Sheng, B. L. Yankiver. In The 35th Research Conference on Communication, Information and Internet Policy (TPRC), Sep 29 - Sep 30, 2007, The National Center for Technology and Law, George Mason University School of Law, USA.

What's New

(for a complete list of activities, click here)

Nov 19, 2008	Our group's work on anti-phishing has been published in Scientific American. Read the article here.
Oct 15, 2008	Gave a talk titled “An Empirical Study of Anti-phishing Tools” at the 2008 APWG member's meeting in Atlanta, Georgia
May 19, 2008	Gave a talk titled “Teaching Johnny Not to Fall for Phish” at the 2008 Counter eCrime Operations Summit in Tokyo, Japan.
Jan 30, 2008	Gave a talk titled "Overview of Supporting Trust Decisions" at the Institute of Information Science in Academia Sinica, Taipei, Taiwan ROC.

Selected Media Coverage

(for a complete list, click here)

25 radical network research projects you should know about , (Antiphishing Phil was No. 9 on the list), NetworkWorld, April 16, 2008

CMU group discusses city's Wi-Fi options, Pittsburgh Tribune Review, February 9, 2007, by Kim Leonard

Phishing Game Warns Users, PC World, September 29, 2007

CMU develops scam-busting online game, CNet News, September 28, 2007, by Stefanie Olsen

Fish named Phil helps foil phishers, CBC News, September 26, 2007