STEVE SHENG

I am a fourth-year Ph.D. student at Carnegie Mellon University. I am interested in protecting people's identiy and privacy online using technology and public policy. One current thrust is antiphishing, protecting people from online criminals that try to steal personal information. My advisor is Lorrie Cranor.

Before coming to CMU, I graduated from University of Pennsylvania in Computer Science and spent two years working. I grew up in Northern China but spent my teens in Shen zhen, a costal city near Hong Kong.

CONTACT INFORMATION

Email Address xsheng AT andrew.cmu.edu
Phone +1 412-268-5952
Desk CIC (Collaborative Innovation Center) 2222B
Mailing Address Carnegie Mellon University
Department of Engineering & Public Policy
Baker Hall 129
Pittsburgh, PA 15213

EDUCATION

Ph.D. Candidate, Department of Engineering & Public Policy, Carnegie Mellon University

M.S., Department of Engineering & Public Policy, Carnegie Mellon University

B.S., Computer and Information Science , University of Pennsylvania (Magna Cum Laude)

PUBLICATIONS

P3P Deployment on Websites. Lorrie Faith Cranor, Serge Egelman, Steve Sheng, Aleecia M. McDonald, and Abdur Chowdhury. Electronic Commerce Research and Applications, forthcoming 2007.

An Evaluation of the Effectiveness of US Financial Privacy Legislation Through the Analysis of Privacy Policies. Xinguang Sheng and Lorrie Faith Cranor. I/S: A Journal of Law and Policy for the Information Society, Volume 2, Number 3, Fall 2006, pp. 943-979.

Anti-Phishing Phil: The Design and Evaluation of a Game That Teaches People Not to Fall for Phish. S. Sheng, B. Magnien, P. Kumaraguru, A. Acquisti, L. Cranor, J. Hong, and E. Nunge. In Proceedings of the 2007 Symposium On Usable Privacy and Security, 18-20 July 2007, Pittsburgh, PA

Getting Users Pay Attention to Anti-Phishing Education: Evaluation of Retention and Transfer. P. Kumaraguru, S. Sheng, A. Acquisti, L. Cranor, and J. Hong. In Proceedgins of the 2007 eCrime Research Summit, 4-5 October 2007, Pittsburgh, PA

Finding an Effective Sustainable Model for a Wireless Metropolitan-Area Network: Analyzing the Case of Pittsburgh. J. M. Peha, B. E. Gilden, R. J. Savage, S. Sheng, B. L. Yankiver. In The 35rd Research Conference on Communication, Information and Internet Policy (TPRC), Sep 29 - Sep 30, 2007, The National Center for Technology and Law, George Mason University School of Law, USA.

2006 Privacy Policy Trends Report. Lorrie Faith Cranor, Aleecia M. McDonald, Serge Egelman, and Steve Sheng. CyLab Privacy Interest Group, January 31, 2007 Presentation PDF

Teaching Johnny not to fall for phish. Kumaraguru, P., Sheng, S., Acquisti, A., Cranor, L. F., and Hong, J. 2007. Teaching Johnny not to fall for phish. Tech. rep., Carnegie Mellon University.

RECENT ACTIVITIES

Invited speaker for APWG Member Meeting , Pittsburgh, PA, Oct 2 - 3, 2007.    
Presentation on Antiphishing Phil, for the Symposium On Usable Privacy and Security (SOUPS), Pittsburgh, PA, July 18 - 20, 2007.   PPT
Antiphishing Phil Poster for the Cylab Corporate Partner Conference, Pittsburgh, PA, May 9 - 11, 2007.   PPT
"A Content-Based Approach to Detecting Phishing Web Sites" Poster for the Cylab Corporate Partner Conference, Pittsburgh, PA, May 9 - 11, 2007.   PPT
"WHY JOHNNY STILL CAN'T ENCRYPT: EVALUATING THE USABILITY OF EMAIL ENCRYPTION SOFTWARE" Poster for the Symposium On Usable Privacy and Security (SOUPS), Pittsburgh, PA, July 12 - 14, 2006.   PDF

SELECTED PRESS


CMU group discusses city's Wi-Fi options, Pittsburgh Tribune Review, February 9, 2007, by Kim Leonard

Phishing Game Warns Users, PC World, September 29, 2007

CMU develops scam-busting online game, CNet News, September 28, 2007, by Stefanie Olsen

Fish named Phil helps foil phishers, CBC News, September 26, 2007