Research Experience
Research Assistant
Pennsylvania State University• 08.2023 - Present
- Reinforcement Learning for Advanced Persistent Threat
- Analyzing real-world enterprise login data and network data to reconstruct the actual network environment.
- Simulating the attack behavior of APT groups such as APT28 or APT41.
Academia Sinica • 09.2021 - 06.2023
- Graph-based Neural Attack Behavior Detection and Alignment with Kernel Audit Logs for Advanced Persistent Threats
- Simulated APT attack on Linux and Windows
- Developed a theory for efficiently reducing kernel audit logs to ensure the high quality of behavior detection
- Developed models leveraging graph embedding to correlate and mine suspicious behavior in audit logs
- Modeling Threat Representation through Building Cyber Threat Knowledge Base for Advanced Persistent Threats
- Developed models to extract semantic context from cyber threat intelligence platforms for generating provenance graphs
- Using Honeypot Logs and Packets for Identifying Network Attack Patterns and their Signature
- Utilizing BERT-based models to analyze packets and logs from honeypots provided by Soft Bank
M.S.
National Chung Cheng University • 09.2019- 07.2021
- Driving Behavior Recognition based on Generative Adversarial Networks
- Developed a redesigned model for identifying whether drivers are the owners of cars
- Developed a mechanism for ensuring the reliability of the detection system
- Evaluating the accuracy of several types of GAN in different situations
Work Experience
Network administrator
College of Engineering in CCU• 09. 2019 - 09. 2020
- Maintained and administered the college's firewalls and network infrastructures
- Managed the college's services, such as websites, VPN, and DNS
Education
PhD in Informatics
Penn State University• 08. 2023 - present
M.S . in Computer Science and Information Engineering
National Chung Cheng University • 09. 2019 - 07.2021
Publication
- P.-Y. Tseng, P.-C. Lin, Edy Kristianto, Vehicle Theft Detection by Generative Adversarial Networks on Driving Behavior. Engineering Applications of Artificial Intelligence (published) [Paper]
Project
- Reinforcement Learning for Advanced Persistent Threat
- A novel approach to defend against APT attacks, specifically targeting lateral movement.
- To formulate APT attack into Observable Markov Decision Process (POMDP) problems
- APT Discovery using OSINT and Network & System Logs
- Integrated Open-source intelligence, Cyber threat intelligence, and MITRE ATT&CK framework into a cyber threat knowledge base, and developed neural network architectures to analyze and detect APT attacks in a multi-host environment.
- Aligned the observed evidence to adversary lifecycle and correlated the relation between the detected
attacks and known attackers.
Skills
- Python
- TensorFlow
- PyTorch
- Bash scripting
- Neo4J
- Linux Shell
- Java
- C#
- C
