Personal Information
More >>Associate Professor Supervisor of Master's Candidates
Main positions:Associate Professor
Other Post:CISSP,CISA, A member of (ISC)2, ISACA and IAPP.
Profile
Professor Mingqiu Song, CISSP, CISA, System Engineering Institute, School of Management and Economics, Dalian University of Technology. She is a board member of Chinese Software Industry Association,a member of Public Safety Standards Association,Chinese Emergency Management Committee, and a member of (ISC)2, ISACA, IAPP and BCS. Her main research interest is information security risk management, system security development, data & AI ethics and information security economics. She has directed National Natural Science Fund project et. al, and as a main participant in the key project of National Natural Science Foundation of China, the National 863 project and so on.
She has been committed to the research of system security engineering for a long time, especially the research of theory, method, technical standard and engineering application of application software security issues. She has supervised over 10 national, provincial and horizontal application commissioned projects of the National Natural Science Foundation of China. And as one of the main participant, she has contributed in more than 20 major, key and general projects of national Natural Science Foundation of China, national 863 projects and talent projects.
She is one of the first scholars in the field of software security in China. Proposed the software security development model driven by security attributes (SDM), proposed the application software product security and quality measurement model, evaluation method and index system, and the CISA "Ready-to-Use Software Product(RUSP) Security Quality Evaluation Standard" T/SIA 008.2018. As the research results, she won the second prize of Dalian Scientific and Technological Progress in 2021.
She also as the organizer and the first compiler of T/SIA31-2021, "Systems Security Engineering, The Guidelines of Cyber Resiliency Construction". Mainly participated in the compilation of national standards "System and Software Engineering, Software Life Cycle Process" and "Industrial software Industry APP classification and Evaluation" and so on.
Her research results are applied in the software security development talent evaluation textbooks of the National Information Security Certification Center, the National Information security Evaluation Center, and the network security construction planning of large enterprises. And as a security expert to participate in some information system security project review. She is the director of System Security Engineering Branch of China Software Industry Association, and undertook some large security conferences such as "China Information Security Annual Conference" every year. She has published more than 40 academic papers in the field of information security, obtained 2 national invention patents, applied for 5 national invention patents, published 2 monographs and participated in 3 monographs and textbooks. The graduated students whom she had supervised have won the first Outstanding Master's dissertation award of Liaoning Province and the Outstanding Master's dissertation award of Dalian University of Technology for many times.
Course Taught:
(1) Risk analysis and evaluation, for master and PhD students
(2) Data ethics and Security, for undergraduate students
Academic and Social Services:
(1) Director of System Security Engineering Branch of China Software Association
(2) Member of the International Association of Privacy Protection Experts (IAPP) Research Advisory Board, 2018-2019
(3) Golden Member of ISACA,IAPP,BCS
(4) Member of National Information Security Standardization Technical Committee TC260
(5) Member of System and Software Engineering Sub-Technical Committee, National Information Technology Standardization Committee, China
(6) Member of public Safety Standardization Committee of China Emergency Management Society
(7) Expert of National Industrial Internet Pilot Program
(8) Member, National Cyberspace Security Association
Educational Experience
Work Experience
Research Focus
- Information Security Risk Analysis, Secure Software Development