An Empirical Measurement Study of Authentication Mechanisms in Cloud-Based Password Managers
The 28th International Conference on Information and Communications Security (ICICS), 2026.
“Be real, stay curious, keep dreaming.”
I study the fragile boundary between convenience and security in identity systems. My work focuses on password managers, authentication, and usable security, with the aim of making real-world protection both dependable and humane.
I am a final-year Eng.D. candidate at Nankai University, advised by Professor Ding Wang.
Outside research, I enjoy yoga, running, and reading.
fuyanduo@foxmail.com · Google Scholar · GitHub · ResearchGate
My name is Yanduo Fu (付彦铎 in Chinese). I am currently a final-year Eng.D. candidate at Nankai University, fortunate to be supervised by Professor Ding Wang.
Prior to this, I earned a joint Master of Engineering degree with the University of Chinese Academy of Sciences (UCAS) and the Institute of Information Engineering (IIE), Chinese Academy of Sciences. I was supervised by Professor-Level Senior Engineer Qiongxiao Wang in the research team led by Professor Jingqiang Lin. During this period, I also participated in an academic seminar led by Professor Bingyu Li.
I have also been interning with Professor Huawei Mei's Dreamtech group since my sophomore year at North China Electric Power University (NCEPU) in Baoding.
My research mainly focuses on identity authentication, password managers, and usable security. I am also interested in empirical security studies, digital forensics, and software testing. More broadly, I hope to build security technologies that better protect users' privacy and improve the trustworthiness of real-world systems.
Outside research, I enjoy indoor climbing, yoga, reading, and other forms of movement that help me better understand the body and maintain balance.
An Empirical Measurement Study of Authentication Mechanisms in Cloud-Based Password Managers
The 28th International Conference on Information and Communications Security (ICICS), 2026.
Security Analysis of Master-Password-Protected Password management Protocols
The 46th IEEE Symposium on Security and Privacy (IEEE S&P), 2025.
The 40th Annual Computer Security Applications Conference (ACSAC), 2024.
The Broken Verifying: Inspections at Verification Tools for Windows Code-Signing Signatures
The 22nd IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom), 2023.
The 21st IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom), 2022.
Exploring the Security Issues of Trusted CA Certificate Management
The 23rd International Conference on Information and Communications Security (ICICS), 2021.