程式控制流程劫持反制措施 Program Control Hijacking Countermeasures

• 趨勢科技(Trend Micro) 經理
• 工業技術研究院資通所(ITRI) 技術經理
• 中央大學資訊工程系博士班
• 英特爾 (Intel) 技術實習生

Reversible Information Hiding Techniques for Medical Images

Gemini detector-Client side solutions to detect the evil twin access point

亞旭電腦

針對遠端緩衝區溢位攻擊之自動化即時反擊系統 ARCS: Automatic Real-Time Counterback System against Remote Buffer Overflow Attacks

中央大學資訊工程系博士班 中華電信研究所

CIDP Treatment: An Innovative Mobile Botnet Covert Channel based on Caller IDs with P8 Treatment

中華電信數據分公司

Shark: Phishing Information Recycling from Spam Mails

國立中央大學資訊工程學系博士班 中華電信研究所

Security.

• Research Topics: USB Peripherals Security, Mobile Security, Honeypot & Honeynet Technology
• Dissertation: "USBIPS: A Framework for Protecting A Host against Malicious Behaviors behind USB Peripherals"

Cyber Security Engineer, Ministry of National Defense, 2000-present

SCP: A System Call Protector against Buffer Overflow Attacks 以保護系統呼叫為基礎防禦緩衝區溢位攻擊

趨勢科技

MP: A Memory Protector against Stack-Based Buffer Overflow Attacks 記憶體保護者用來防禦堆疊型緩衝區溢位攻擊

聯詠科技

IP Spoofing Detector 一精確度可至單一主機單一Port之IP Spoofing 偵測法

建漢科技

CFD: A TCP Splicing-based Solution to Click Fraud Attacks 建構於系統核心之點擊造假攻擊防禦系統

盛達電業

針對遠端緩衝區溢位攻擊之自動化即時反擊系統 ARCS: Automatic Real-Time Counterback System against Remote Buffer Overflow Attacks

中央大學資訊工程系博士班 中華電信研究所

程式控制流程劫持反制措施 Program Control Hijacking Countermeasures

• 趨勢科技(Trend Micro) 經理
• 工業技術研究院資通所(ITRI) 技術經理
• 中央大學資訊工程系博士班
• 英特爾 (Intel) 技術實習生

一個根植於作業系統核心之防止網頁竄改機制 WsP: A Website Protector Against Web Defacement Attacks

中華電信研究所

一個以TCP連線行為基礎來防禦後門程式的機制 A Novel Behavior-Based Solution to Backdoors

趨勢科技

自動偵測程式緩衝區溢位錯誤的測試輔助工具 ARMORY: An Auxiliary Testing Tool for Automatic Buffer Overflow Vulnerability Detection

中華電信研究所

Infections Real-time Serum System: Automatic Worm Curing System 即時血清系統: 具攻性防壁之自動化蠕蟲治癒系統

中央大學資訊工程系博士班 Carnegie Mellon University

一種在瀏覽器端偵測並阻擋網頁惡意程式的解決方案 A Browser-side Solution to Drive-by-Download-Based Malicious Web Pages

• 中央大學資訊工程系博士班
• HTC
• Google

在行動裝置上以攔截檔案處理函式機制防止病毒擴散 Kernel-mode File Monitoring on Windows Mobile Device

ASUS

Return Protector: A Protection Mechanism for Return-into-libc Attacks by Checking the Return Address

中央大學資訊工程系博士班

A more accurate and sybil resistant reputation system for products

HTC

A Server Solution for Cookie-Stealing-Based XSS Attacks 一個伺服器端關於cookie竊取之XSS攻擊的防禦機制

資訊工業策進會 中華電信研究所

SYSTEM AND METHOD FOR DYNAMIC DATA BACKUP DoS/DDoS Attacks

中華數據分公司

TransSQL: A Translation and Validation-based Solution for SQL-Injection Attacks

趨勢科技

A Spam Mail-based Solution for Botnet Detection and Network Bandwidth Protection

Google

HTC

Shark: Phishing Information Recycling from Spam Mails

國立中央大學資訊工程學系博士班 中華電信研究所

DNSPD: Entrap Botnets Through DNS Cache Poisoning Detection

中華電信研究所

Block Active Shell Style Backdoors

MAC-YURI : My ACcount, YoUr ResponsIbility

服役

KKBB: Kernel Keylogger Bye-Bye

趨勢科技

CIDP Treatment: An Innovative Mobile Botnet Covert Channel based on Caller IDs with P8 Treatment

中華電信數據分公司

USB WORM KILLER: Cure USB Flash Worms Through a USB Flash Worm

趨勢科技

FFRTD: Beat Fast-Flux by Response Time Differences

台灣積體電路製造公司

Antivirus Software Shield against Antivirus Terminators

中華電信研究所

The research of attacking TOR network users

PrivacyGuard: A Kernel-based Solution to Enhance the User Privacy When Using Private Browsing

中華電信研究所

DEH : dynamic extensible two-way honeypot

中山科學研究院

LETDoWN : A client-based solution to detect an evil twin access point

威盛電子

STEALTH: A Method of Hiding and Encrypting Files in NTFS

鴻璟科技

Windows AutoUpdate Service Guardian

京晨科技

RootGuard: A Behavioral-based Solution to Android Root Privilege Escalation

中華電信研究所

Hawkeye : Finding Spamming Accounts Hidden in Normal Mail Servers

中華電信研究所

SMS Guardian: Protect a Smartphone against Incoming SMS Message Interception.

鴻海科技

Detect Web-Based Botnet according to Bot communication traffic

A Solution to Protect Your Android from Sending Unknown SMS Messages

中華電信研究所

ArcticTern: A Live Migration-based Mechanism to Maintain the Availability of Network Services

和沛科技

TCGM: An Automatic Solution to Browserless Tapjacking Attacks

IBM

The Dark Side of Auto-Upgrade: Solution of New Auto-Upgrade Weaknesses

Synology

Libra: A Compatiable Method for Defending Against Arbitrary Memory Overwrite

PrivCat: Private Protector of Facebook Users

中華電信研究所

Itus: Behavior-based Spamming Groups Detection on Facebook

臺積電

An Automatic Malicious Website Blocking Mechanism Based on a Hypervisor Architecture

中華電信研究所

Security

達創科技

AHA: An Event-Driven Solution to Activity Hijacking Attacks

聯發科

****NINJA：A New Android UI State Inference Attack and Defense Mechanism

瑞昱半導體

CatPaw: A Cloud-based Real-Time Mechanism to Protect End Hosts

聯發科技

TRAP: A TCP Three-Way Handshake Server for TCP Connection Establishment

Cloud Support Engineer - Amazon Web Services (AWS)

A Solution to Router-Hijacking ARP Spoofing Attacks.

神準科技

RSDroid: A Solution to Detect and Block SMS Scams on Android Phones

Heap Detective: Detect Heap-based Memory Corruption by Simulation Heap

中央研究院

RGuard: A Light-weight Minifilter-based Solution to Ransomware

國家中山科學研究院

CPJ: A Cloud-Based Protection Mechanism against JavaScript Style Attacks

A Light-weight Method to Send and Receive SMS message in an Emulator

Team T5

Handover: A Mechanism to Improve the Availability of Network Services after Live Migration under Private Networks

雙子星雲端運算公司

SSDC：A Server Side Solution to Detect Coremelt and Crossfire DDoS Attacks

中華電信研究院 (惡意流量分析, 資安軟體開發, Cloud Architect & Security)

Security.

Security.

聯發科技

Security.

台積電

Fake GPS Defender A Server-side Solution to Detect Fake GPS

趨勢科技

Android framework security

1. CHT RDSS 2018～2022
2. Akohub 2022 ～

Master’s thesis

DFGUARD: A Method for Solving Double-Fetch Vulnerabilities in the Linux Kernel

• Software Engineer - Foxconn Industrial Internet (FII) 2019/04~2021/10
• Software Engineer - Woodpecker Technology Inc. 2021/10~

Security.

MinerGuard: A Solution to Detect Browser-Based Cryptocurrency Mining through Machine Learning

• Trend Micro - Sr. Engineer 2019/01~

IoTD:An SMTP-Based Approach to Identify IoT Devices

• Synology - Product Developer

Security.

****Security.

Security.

Software Engineer, A10Networks, Sep. 2019~

Security.

• USB attack
• DMA attack

• Participated in IPCam, NVR, NAS project.
• Implemented RTSP/RTP Server, SMTP Client, UPnP port forward...etc.
• Implemented Linux Driver
• Modify Linux Kernel
• Work at Linux embedded system and Linux x86 11 years from now.
• my github URL : https://github.com/betterman5240

Security.

LSM

****Security.

Virtual Machine | DDoS

LSProxy: A Low Bandwidth Tolerable Solution to Protect Systems Against Low and Slow DoS Attacks

Software Engineer

IoV Digital Forensics ( DFIR System Architecture IoT macOS

• 資健科技
• 天網資安

實習： FitiVision

Detecting Phishing Websites Based on Webpage Content Features of Page Jumping