
Overview
Background
Professor Ryan Ko is Chair and Director of UQ Cyber Research Centre, Director of Research at the School of Electrical Engineering and Computer Science, and an elected member of the Academic Board at the University of Queensland, Australia. He holds a Bachelor of Engineering (Computer Engineering)(Hons.) (2005), and PhD (2011) from Nanyang Technological University, Singapore.
Ko has held senior scientific leadership, executive, and directorship roles across industry and academia, and has more than a decade of board, governance and advisory experience across government, industry and NGOs across Australia, New Zealand, Singapore, and USA.
He currently serves on the Audit and Risk Committee for the board of the global not-for-profit ORCID, and has served on boards and advisory groups for AustCyber, Queensland Government, Meat and Livestock Australia (MLA), and the NZX-listed (NZE:LIC) Livestock Improvement Cooperation (LIC).
He has also served as expert advisor to INTERPOL, the government of Tonga, NZDF, NZ Minister for Communications' Cyber Security Skills Taskforce, and one of four nationally-appointed Technical Adviser for the Harmful Digital Communications Act 2015, Ministry of Justice. He has also served as independent technical expert for court cases.
He is also Adjunct Professor at the Singapore Institute of Technology, and Affiliate Faculty Member at NIATEC at the Idaho State University, USA.
He is co-founder of Dynamic Standards International (DSI), CyberCert, and First Watch Ltd (NZ) – an industrial cybersecurity spin-off based on his patented OT security and provenance research at the University of Waikato.
Since joining UQ in 2019, he has served as:
- Deputy Head of School (External Engagement) (2021-2022)
- Founding Discipline Leader of the Cyber Security and Software Engineering discipline (2020-2021)
- Group Leader - Cyber Security (2019)
Ko has successfully established several university-wide, multi-disciplinary academic research and education programmes, including establishing and leading:
- UQ Cyber - interdisciplinary cyber scurity research centre involving 60+ academics and their respective teams from the 6 Schools (EECS, Business, Economics, Law, Social Science, Mathematics & Physics), the Centre for Policy Futures, and 4 Faculties since 2019.
- UQ's interdisciplinary postgraduate programme (MCyber, PGDipCyber, GCertCyber) involving four UQ faculties in 2019,
- NZ's first cyber security graduate research programme and lab (Cybersecurity Researchers of Waikato (CROW)) in 2012,
- NZ's first Master of Cyber Security (encompassing technical and law courses), the NZ Cyber Security Challenge since 2014, and
- NZ Institute for Security and Crime Science – Te Puna Haumaru as its founding director, the Evidence Based Policing Centre (at Wellington with NZ Police and ESR), and Master of Security and Crime Science in 2017 with the University of Waikato, NZ.
Over his academic career, Ko has been awarded A$20+million in competitive grants as lead Chief Investigator, and ~A$40+million as co-investigator. Prior to UQ, he was the highest funded computer scientist in New Zealand, as Principal Investigator and Science Leader of the largest MBIE-awarded cloud security research funding for STRATUS (NZ$12.2 million; 2014-2018). STRATUS' research was awarded 'Gold' by MBIE (i.e. top performing project, 2017), adopted by INTERPOL and featured in NZ's Department of Prime Minister and Cabinet's NZ Cyber Security Strategy 2016 annual report.
Ko has a track record developing international and national cyber security curricula, including:
- Co-creation of the gold-standard (ISC)2 Certified Cloud Security Professional (CCSP) curriculum (2014-2015)
- Authoring the draft of the NZQA's Level 6 Cybersecurity Diploma qualification as part of the NZ Cyber Security Skills Taskforce on behalf of the Department of Prime Minister and Cabinet.
Ko has also experience developing competitions and coaching competitive cyber security teams, including:
- Co-founding the NZ Cyber Security Challenge in 2014, and leading the NZCSC from 2014 to 2018. NZCSC is now the premier national cyber security competition in NZ.
- Co-founding the Oceania Cybersecurity Challenge (OCC) in 2020, and leading the competition from 2022 to present. OCC is now the regional qualifiers for the International Cybersecurity Challenge
- Co-founding the International Cybersecurity Challenge (ICC) as part of the Steering Committee in 2022. ICC has been held in Athens (2022) and San Diego (2023). It is aiming to be the world cup of cyber competitions.
- Head Coach of Team Oceania for the ICC. 2022 Results: Overall 4th; 2023 Results: Overall 2nd in the world.
He contributed to the establishment of the Government of Tonga CERT and CERT NZ, and has spoken regularly on cyber and cloud security research across the globe, including the OECD, Republic of Korea National Assembly (2018), INTERPOL (2017), TEDx Ruakura (2017), and the NZ Members of Parliament (2016).
Within the ISO/IEC JTC 1/SC 27, Prof Ko was Head of Delegation for the Singapore national body, served as Editor, ISO/IEC 21878 “Security guidelines for design and implementation of virtualized servers”, and hosted the ISO/IEC JTC 1/SC 27 meetings at Hamilton, NZ, in 2017. He is currently one of the editors of the ISO/IEC PWI 5181 Data Provenance Reference Model. In 2022, Ko co-chaired the development of the Singapore standard TR 106:2022 Tiered cybersecurity standards for enterprises in collaboration with the SPSTC and Singapore Cyber Security Agency.
Ko serves as an assessor for the Australian Research Council (ARC), Irish Research Council, Nederlandse Organisatie voor Wetenschappelijk Onderzoek (NWO), and NZ MBIE College of Assessors (since 2015).
He is also an external expert for the Tertiary Education Quality and Standards Agency (TEQSA), and a member of the Australian Computer Society (ACS) Accreditation Committee. He has experience reviewing course proposals and served in governance roles for higher education institutes.
Ko has externally examined 11 PhD and 3 Masters theses for universities in Australia, New Zealand, Canada, Hong Kong and Singapore.
For his contributions to the field, he was elected Fellow of the Australian Computer Society, Fellow of the Queensland Academy of Arts and Sciences, and Fellow of Cloud Security Alliance (CSA) (2016). He was awarded the Singapore Government (Enterprise Singapore)’s Young Professional Award (2018) for his leadership at ISO, and awarded the inaugural CSA Ron Knode Service Award 2012 for the establishment of Cloud Data Governance and Cloud Vulnerabilities Research Working Groups. He is also recipient of the 2015 (ISC)2 Information Security Leadership Award.
For his research and teaching excellence, he was awarded the University of Queensland Awards for Excellence - Leadership (Commendation) (2023), EAIT Nominations for Most Effective Teacher (both semesters of 2020, 2021, 2022, 2023), University of Waikato's Early Career Excellence Award (2014), Faculty Teaching Excellence Awards (2014, 2015, 2018), and the Nola Campbell eLearning Excellence Award (2014). During his PhD, he was also awarded A*STAR SIMTech's Best Student Award (2009), and clinched the 1st Prize of the IEEE Services Cup 2009 at IEEE ICWS (CORE A*) in Los Angeles, CA.
Earlier in his career, Ko was a systems engineer, and subsequently founded two start-ups (one was a social enterprise which became an events/conventions management contractor with IMG at mega-events in Singapore, including the inaugural Youth Olympics in 2010).
He is an active science communicator and is regularly interviewed and featured by Australian (ABC News, SBS News, 7 News, 9 News, Courier Mail, Network 10, AFR), Singaporean (Channel NewsAsia, CNA Radio938), NZ (NZ Herald, Dominion Post, Stuff.co.nz, Waikato Times, TVNZ, Central TV) and international media on topics of cyber security, cybercrime and data privacy.
Availability
- Professor Ryan Ko is:
- Available for supervision
- Media expert
Fields of research
Qualifications
- Bachelor (Honours) of Computer Engineering, Nanyang Technological University
- Doctor of Philosophy, Nanyang Technological University
- Certificate of Management, Harvard University
- Fellow, Australian Computer Society, Australian Computer Society
- Fellow, Cloud Security Alliance, Cloud Security Alliance
- Fellow, Queensland Academy of Arts and Sciences, Queensland Academy of Arts and Sciences
Research interests
-
Automating Cyber Security for Critical Infrastructure
Designing cyber autonomy to empower all end-users.
-
Operational Technology (OT) Security
Focusing on Industrial Control Systems (ICS) and related protocols.
-
Provenance and Traceability
Applications into AgTech, IoT, Edge, Cloud Computing and OT environments.
-
Trusted Computing Applications
Applications into agriculture, regulatory, auditing and media.
-
Data Privacy and Privacy Enhancing Technologies
Enabling secure and private multi-party computation.
-
AI Planning/ Automated Planning
Adapting classical AI planning approaches into cyber security.
-
Applying Situation Crime Prevention to Cybercrime Prevention
Applying SCP techniques into processes and controls to prevent cybercrime.
-
Board and Organisational Structures for Cyber Resilience
Understanding how factors and pressures (e.g. board composition and organisational structures, external pressures) affect an organisation's cyber resilience.
-
Creating Measurable Indicators of Cyber Resilience
Developing a framework to quantify factors allowing senior executives to understand and make decisions about cyber resilience.
Research impacts
Ko's research in cyber security focuses on returning control of data to users. His research reduces users' reliance on trusting third-parties and focusses on (1) provenance logging and reconstruction, traceability and (2) privacy-preserving data processing. His research is adopted internationally (e.g. CERN, INTERPOL, and HP clients such as Apple, Nasa, US Treasury/IRS). His papers have received conference Best Paper Awards (2011, 2015, 2017), and resulted in several technology transfers (e.g. HP), open source contributions (e.g. Kali Linux THC) and spin-offs (e.g. First Watch). He has published in top venues including WWW (The Web), NeurIPS, DCC, ESORICS, IEEE TrustCom, IEEE Comms Surveys and Tutorials, IEEE ICWS, IEEE TDSC, IEEE TSC, Computers & Security, IEEE Trans on Smart Grid, and more than 100 publications including books, refereed conference papers, journal papers, book chapters, encyclopaedia entries, technical reports and international patents (PCT).
Recently, he is researching information integrity and cyber autonomy in critical infrastructure sectors such as energy, manufacturing, regulatory and agriculture sectors. He has served in technical programme committees for more than 30 IEEE conferences/workshops, associate editor for 6 journals, and as series editor for Elsevier's security books.
Works
Search Professor Ryan Ko’s works on UQ eSpace
2022
Journal Article
Editorial: Human-centric security and privacy
Nepal, Surya, Ko, Ryan K. L., Grobler, Marthie and Camp, L. Jean (2022). Editorial: Human-centric security and privacy. Frontiers in Big Data, 5 848058, 848058. doi: 10.3389/fdata.2022.848058
2022
Other Outputs
Dataset for SCP Survey Paper published in the journal Computers & Security.
Ho, Hee Meng and Ko, Ryan (2022). Dataset for SCP Survey Paper published in the journal Computers & Security.. The University of Queensland. (Dataset) doi: 10.48610/213f95d
2022
Conference Publication
SDGen: a scalable, reproducible and flexible approach to generate real world cyber security datasets
Koay, Abigail M. Y., Xie, Miao, Ko, Ryan K. L., Sterner, Charles, Choi, Taejun and Dong, Naipeng (2022). SDGen: a scalable, reproducible and flexible approach to generate real world cyber security datasets. 1st International Conference on Ubiquitous Security (UbiSec), Guangzhou, Peoples Republic of China, 28-31 December 2021. Singapore, Singapore: Springer Singapore. doi: 10.1007/978-981-19-0468-4_8
2022
Conference Publication
FDGATII: Fast Dynamic Graph Attention with Initial Residual and Identity
Kulatilleke, Gayan K., Portmann, Marius, Ko, Ryan and Chandra, Shekhar S. (2022). FDGATII: Fast Dynamic Graph Attention with Initial Residual and Identity. 35th Australasian Joint Conference on Artificial Intelligence: AI 2022, Perth, WA Australia, 5–8 December 2022. Cham, Switzerland: Springer. doi: 10.1007/978-3-031-22695-3_6
2022
Edited Outputs
Ubiquitous Security : First International Conference, UbiSec 2021, Guangzhou, China, December 28–31, 2021, Revised Selected Papers
Wang, Guojun, Choo, Kim-Kwang Raymond, Ko, Ryan K. L., Xu, Yang and Crispo, Bruno eds. (2022). Ubiquitous Security : First International Conference, UbiSec 2021, Guangzhou, China, December 28–31, 2021, Revised Selected Papers. UbiSec: First International Conference on Ubiquitous Security, Guangzhou, China, 28–31 December 2021. Singapore: Springer.
2022
Journal Article
Preface
Ko, Ryan K. L., Xu, Yang and Crispo, Bruno (2022). Preface. Communications in Computer and Information Science, 1557 CCIS, v-vi.
2021
Conference Publication
Plan2Defend: AI planning for cybersecurity in smart grids
Choi, Taejun, Ko, Ryan K. L., Saha, Tapan, Scarsbrook, Joshua, Koay, Abigail M. Y., Wang, Shunyao, Zhang, Wenlu and St Clair, Connor (2021). Plan2Defend: AI planning for cybersecurity in smart grids. 2021 IEEE PES Innovative Smart Grid Technologies - Asia (ISGT Asia), Brisbane, QLD, Australia, 5-8 December 2021. Piscataway, NJ, United States: Institute of Electrical and Electronics Engineers . doi: 10.1109/isgtasia49270.2021.9715679
2021
Conference Publication
Privacy-preserving gradient descent for distributed genome-wide analysis
Zhang, Yanjun, Bai, Guangdong, Li, Xue, Curtis, Caitlin, Chen, Chen and Ko, Ryan K. L. (2021). Privacy-preserving gradient descent for distributed genome-wide analysis. ESORICS 2021 - 26th European Symposium on Research in Computer Security, Darmstadt, Germany, 4–8 October, 2021. Cham, Switzerland: Springer. doi: 10.1007/978-3-030-88428-4_20
2021
Journal Article
Security and privacy in smart cities
Vorakulpipat, Chalee, Ko, Ryan K. L., Li, Qi and Meddahi, Ahmed (2021). Security and privacy in smart cities. Security and Communication Networks, 2021 9830547, 1-2. doi: 10.1155/2021/9830547
2021
Other Outputs
Cyber security governance in the Indo-Pacific: Policy futures in Australia, Indonesia and the Pacific
Nabbs-Keller, G., Ko, R., Mackay, T., Salmawan, N. A., Widodo, W. N. and Reksoprodjo, A. H. S. (2021). Cyber security governance in the Indo-Pacific: Policy futures in Australia, Indonesia and the Pacific. Policy Futures Brisbane, Australia: The University of Queensland. doi: 10.14264/4364b42
2021
Conference Publication
An analytics framework for heuristic inference attacks against industrial control systems
Choi, Taejun, Bai, Guangdong, Ko, Ryan K. L., Dong, Naipeng, Zhang, Wenlu and Wang, Shunyao (2021). An analytics framework for heuristic inference attacks against industrial control systems. 2020 IEEE 19th International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 202, Guangzhou, China, 29 December 2020-1 January 2021. Piscataway, NJ USA: Institute of Electrical and Electronics Engineers. doi: 10.1109/TrustCom50675.2020.00112
2021
Other Outputs
Systems and methods for enhancing data provenance by logging kernel-level events
Ko, Ryan Kok Leong, Choi, Taejun and Anderson-Scott, Christian (2021). Systems and methods for enhancing data provenance by logging kernel-level events. WO2021038527A1.
2021
Conference Publication
Pandora: a cyber range environment for the safe testing and deployment of autonomous cyber attack tools
Jiang, Hetong, Choi, Taejun and Ko, Ryan K. L. (2021). Pandora: a cyber range environment for the safe testing and deployment of autonomous cyber attack tools. 8th International Symposium, SSCC 2020, Chennai, India, 15-17 October 2020. Singapore, Singapore: Springer Singapore. doi: 10.1007/978-981-16-0422-5_1
2021
Journal Article
Multifractal characterization of distribution synchrophasors for cybersecurity defense of smart grids
Cui, Yi, Bai, Feifei, Yan, Ruifeng, Saha, Tapan, Mosadeghy, Mehdi, Yin, Hongzhi, Ko, Ryan K. L. and Liu, Yilu (2021). Multifractal characterization of distribution synchrophasors for cybersecurity defense of smart grids. IEEE Transactions on Smart Grid, 13 (2), 1658-1661. doi: 10.1109/tsg.2021.3132536
2021
Journal Article
Preface
Thampi, Sabu M., Wang, Guojun, Rawat, Danda B., Ko, Ryan and Fan, Chun-I (2021). Preface. Communications in Computer and Information Science, 1364.
2020
Journal Article
Crime script analysis for adult image-based sexual abuse: a study of crime intervention points for retribution-style offenders
O’Hara, Abigail C., Ko, Ryan K. L., Mazerolle, Lorraine and Rimer, Jonah R. (2020). Crime script analysis for adult image-based sexual abuse: a study of crime intervention points for retribution-style offenders. Crime Science, 9 (1) 26. doi: 10.1186/s40163-020-00130-9
2020
Journal Article
Welcome Messages from IEEE TrustCom 2020 Program Chairs
Ko, Ryan, Alam Bhuiyan, Md Zakirul and Pan, Yi (2020). Welcome Messages from IEEE TrustCom 2020 Program Chairs. Proceedings - 2020 IEEE 19th International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2020 9343234. doi: 10.1109/TrustCom50675.2020.00006
2020
Book Chapter
Cyber autonomy: automating the hacker – self-healing, self-adaptive, automatic cyber defense systems and their impact on industry, society, and national security
Ko, Ryan K. L. (2020). Cyber autonomy: automating the hacker – self-healing, self-adaptive, automatic cyber defense systems and their impact on industry, society, and national security. Emerging technologies and international security: machines, the state, and war. (pp. 173-191) edited by Reuben Steff, Joe Burton and Simona R. Soare. London, United Kingdom: Routledge.
2020
Other Outputs
PrivColl: Practical Privacy-Preserving Collaborative Machine Learning
Zhang, Yanjun, Bai, Guangdong, Li, Xue, Curtis, Caitlin, Chen, Chen and Ko, Ryan KL (2020). PrivColl: Practical Privacy-Preserving Collaborative Machine Learning.
2020
Conference Publication
General Data Protection Regulation (GDPR) in Healthcare: Hot Topics and Research Fronts
Fatehi, Farhad, Hassandoust, Farkhondeh, Ko, Ryan K. L. and Akhlaghpour, Saeed (2020). General Data Protection Regulation (GDPR) in Healthcare: Hot Topics and Research Fronts. 30th Medical Informatics Europe (MIE) Conference, Geneva Switzerland, Apr, 2020. Amsterdam, Netherlands: IOS Press. doi: 10.3233/SHTI200336
Funding
Current funding
Past funding
Supervision
Availability
- Professor Ryan Ko is:
- Available for supervision
Before you email them, read our advice on how to contact a supervisor.
Supervision history
Current supervision
-
Doctor Philosophy
Efficient Methods for Automating Reconstruction of Provenance and Cryptocurrency Networks for Crime Attribution
Principal Advisor
Other advisors: Dr Miao Xu
-
Doctor Philosophy
Evaluating and Improving Type Inference Models for Web Application Reverse Engineering
Principal Advisor
Other advisors: Associate Professor Mark Utting, Professor Michael Bruenig
-
Doctor Philosophy
Distributed data collection infrastructure for IT and OT networks for automated early warning detection
Principal Advisor
Other advisors: Associate Professor Guangdong Bai, Dr Naipeng Dong
-
Doctor Philosophy
Secure, Accountable and Provenance-Centric File System
Principal Advisor
Other advisors: Associate Professor Guangdong Bai
-
Doctor Philosophy
Distributed data collection infrastructure for IT and OT networks for automated early warning detection
Principal Advisor
Other advisors: Associate Professor Guangdong Bai, Dr Naipeng Dong
-
Doctor Philosophy
Virtualized Root of Trust in Cloud Computing
Principal Advisor
Other advisors: Dr Naipeng Dong
-
Doctor Philosophy
A Distributed Data Collection Infrastructure For Automating Industrial Control Systems Security
Principal Advisor
Other advisors: Associate Professor Guangdong Bai, Dr Naipeng Dong
-
Doctor Philosophy
Applying Situational Crime Prevention to Business Processes to Prevent Cybercrime
Principal Advisor
-
Doctor Philosophy
Adaptive, secure and resilient programmable logic controllers (PLCs) and data transfer protocols
Principal Advisor
Other advisors: Professor Tapan Saha, Associate Professor Guangdong Bai
-
Doctor Philosophy
Evaluating and Enhancing the Resilience of Regression-Based Anomaly Detectors Against Gradient-Free Evasion Attacks in Industrial Control Systems
Principal Advisor
Other advisors: Associate Professor Guangdong Bai, Dr Naipeng Dong
-
Doctor Philosophy
Distributed data collection infrastructure for IT and OT networks for automated early warning detection
Principal Advisor
Other advisors: Associate Professor Guangdong Bai, Dr Naipeng Dong
-
-
Doctor Philosophy
Informal and formal justice for rape: Digital "court" and court trials in Australia
Associate Advisor
Other advisors: Associate Professor Allison Fish, Dr Jonah Rimer
-
Doctor Philosophy
IoT security analytics
Associate Advisor
Other advisors: Dr Naipeng Dong, Associate Professor Guangdong Bai
-
-
Doctor Philosophy
Examining Changes in Conspiracy Discourse on Reddit from 2019 - 2023
Associate Advisor
Other advisors: Dr Martin Schweinberger
-
Doctor Philosophy
Unified Cyber Security Framework for Distributed Learning
Associate Advisor
Other advisors: Associate Professor Guangdong Bai
-
Doctor Philosophy
Security of Internet of Things (IoT) Integration
Associate Advisor
Other advisors: Associate Professor Guangdong Bai
-
Doctor Philosophy
Advancing cyberworthiness via integration of AI and Model-Based Systems Engineering (MBSE)
Associate Advisor
Other advisors: Dr Priyanka Singh
-
Doctor Philosophy
A corpus-based analysis of conspiracy theory discourse on Reddit: Understanding conspiracy-fuelled anomie and moral panics during COVID-19
Associate Advisor
Other advisors: Dr Martin Schweinberger
-
Doctor Philosophy
The nexus between data breaches, cyber safety and employee productivity in the hybrid work context
Associate Advisor
Other advisors: Associate Professor Remi Ayoko
Completed supervision
-
2024
Doctor Philosophy
Using Situational Crime Prevention (SCP) to Prevent Cybercrimes
Principal Advisor
Other advisors: Professor Lorraine Mazerolle
-
2023
Doctor Philosophy
Security and Performance Evaluation of Software Defined Networking adopting Moving Target Defenses
Associate Advisor
Other advisors: Associate Professor Dan Kim
-
2023
Doctor Philosophy
Investigating the components of a contextual cyber resilience for organisations
Associate Advisor
Other advisors: Associate Professor Sergeja Slapnicar
-
2021
Doctor Philosophy
Privacy-preserving Sharing for Genome-wide Analysis
Associate Advisor
Other advisors: Dr Caitlin Curtis, Associate Professor Guangdong Bai, Professor Xue Li
Media
Enquiries
Contact Professor Ryan Ko directly for media enquiries about:
- AI for Cyber Security
- Cloud Computing Security
- Critical infrastructure security
- Cyber Attack Attribution
- Cyber Crime
- Cyber Security
- Cybersecurity
- Data Accountability
- Data Control
- Data Privacy
- Data Provenance
- Data Tracking
- ICS Security
- Industrial control systems security
- Information Security
- Privacy enhancing technologies
Need help?
For help with finding experts, story ideas and media enquiries, contact our Media team: