
◾Cyber Security researcher & expert. ◾OSes, hypervisors, malware, and protection technologies, including their limitations. ◾Speaker, author & developer.
AI is analyzing your overall score…
Identifying your key strengths…
Evaluating your skill match against the job requirements…
Assessing your cultural and operational fit
PPL
July 31, 2021 – July 31, 2021
The demo of RtlTestProtectedAccess() and RtlProtectedAccess involved in creation Protected Process.
View Projectresearch
January 7, 2021 – January 2, 2023
The section includes all the information about my research result: papers, slides, speeches, etc.
View ProjectMemoryRanger
July 14, 2018 – July 26, 2020
MemoryRanger protects kernel data and code by running drivers and hosting data in isolated kernel enclaves using VT-x and EPT features. MemoryRanger has been presented at the BlackHat, HITB, CDFSL.
View ProjectMemAttacker
March 6, 2018 – March 6, 2018
This project demonstares an illegal read- and write- access to the kernel-mode data for both allocated by 3rd party drivers and EPROCESS structures
View ProjectMemAllocator
March 6, 2018 – March 6, 2018
This project demonstrates allocation and legal access to the allocated data in the kernel mode.
View ProjectAllMemProTestBedPatcher
January 15, 2018 – January 15, 2018
Illegal access: the driver and console app to demo unauthorized read- and write- access to the kernel-mode memory
View ProjectAllMemProTestBed
January 15, 2018 – January 15, 2018
Legal access: The driver and console app to demonstrate the basic memory access in kernel mode
View Projecttestbed
October 16, 2017 – October 25, 2017
This project demonstrates the privilege escalation for a user-mode process - cmd.exe using stack overflow in the kernel mode driver. The user-mode component 'testbed_console.exe' sends CTL_CODE with a payload to the vulnerable driver 'testbed_driver.sys', which call RtlCopyMemory without any checks. 'testbed_console.exe' includes 'testbed_driver.sys' has a resource.
View ProjectHypervisorsDetection
May 11, 2015 – June 16, 2015
This is the first software system, which can detect a stealthy hypervisor and calculate several nested ones even under countermeasures.
View ProjectCultural Fit Analysis
The candidate's project portfolio is heavily skewed towards low-level systems, kernel development, and cybersecurity, with significant use of C++ and Assembly. While these are highly technical fields, they do not directly align with the 'Data Scientist' target role, which typically requires strong skills in statistics, machine learning, data modeling, and relevant programming languages like Python/R for data analysis. The breadth of skills shown (C++, Assembly, Java, Python, Matlab, Objective C, HTML, JavaScript, CSS) is diverse but the focus is not on data science. This indicates a potential mismatch with the target role's typical cultural and technical demands.
Soft Skills & Operational Fit
The candidate's project descriptions suggest a strong focus on independent research and development in highly specialized technical areas. While this demonstrates initiative and deep technical drive, there is insufficient data to assess collaboration, communication, or stress handling skills in a team or operational context. The projects are primarily personal and security-focused, which may not directly align with typical Data Scientist operational requirements.