|
After
6 years of hands on experience and specialize in large scale systems
integration, solutions design, and information security,I
have got expert knowledge of many operating systems such as Sun
Solaris, FreeBSD, Linux, and all Microsoft Windows platforms. Including
a significant focus on information and network security, performing
many risks and security assessments as well as technical remediation in
the last two years. I believe my ability to build strong relationships
with internal engineers, and the high level of my technical expertise,
will provide a company with a dual resource / asset. In fact, I have
got a proven track record of positively impacting a company's bottom
line.
Professional Experience
Information Security - System Architecture
. I am working on network security solutions, design, and support for large healthcare organizations, the finance industry, information technology firms, and government agencies.
We are primarily working with the telecommunications industry
developing applications that can support a Bandwidth management, detect
and Block the DDOS attack. As a systems architect and security
application designer, I am involving in part of the product design and
technical architecture, especially in Deep Packet Inspection.
Information Security - software engineer
In December of 2007,I Made a business trip to CNCERT/CC, This
organization was faced with many technology challenges. I was able to
address many of these challenges in a short period of time prior to
becoming a member of the NCSIRT team.
I worked
on a highly classified project around Information Countermeasure/
Warfare Technology. I have some experience focus on IM robot, botnet,
Distributed Honeypot, distributed DNS Service and etc.
|
July 2007 - December 2007
|
NetEye, Neusoft, Inc.
|
Beijing, CN
|
Information Security - software engineer
In July of 2007 I was offered a position in Neusoft,Inc.
Neusoft was a large software company that offered a broad range of
technical services and products. The company had significant contracts
with state and local government as well as private sector organizations
ranging from banking to healthcare.
I was
hired by Neusoft to research attacking and defending Technical under
*nix system with a specific focus on network security, to perform
network security assessments for government, information technology
firms, market research firms, In many cases, I am contracted to perform
secondary / tertiary penetration tests. This is due to my ability to
identify vulnerabilities, exploits, system configuration errors, and
entry points that many others overlook. The primary reason for my
ability to identify critical security issues is my broad range of
platform and network skills and many years of experience performing
these tasks.
In
addition to network security services I work with businesses to design,
implement, and support a broad range of secure technology solutions.
This includes platform migrations, highly available cluster solutions,
complex data communications, and perimeter defense systems, all with
security in mind from the ground up.
chief editor- - security Technical Services
I wrote a book about electronic commerce which was published as a university textbook
I set up the S++ workshop With another twelve members to provide
security services for small-to-medium-sized enterprises.
Cooperating with Oberlin University, We made a website together in
order to meet our centennial celebration of my University.
|
Sep 2005 - Sep 2006
|
Shanxi Agricultural University
|
Shanxi,CN
|
E-commerce courses Teacher
I taught E-commerce courses instead of a professor of my university.
At the same time, I continued to provide support for Network Center,
and keep following the security technology closely. I became a security
consultant to some company.
Network Engineer
I was hired to provide customer with network engineering support services in Network Center of Shanxi Agricultural University.
I joined the ph4nt0m security group with a great interest in web security, system security and network security.
I gained significant operating system and LAN/WAN experience during
this portion of my career because I worked very closely with the
Technical Operations Department at the University of Delaware. Here I
received early exposure to large scale UNIX and VMS systems as well as
routing and switching communications technology. I have been well
versed in major routing and routable protocols for many years.
Web Designer and developer
I started my technical career as an independent Web UI designer and Web application developer, I have successfully developed my personal home page and web site for Shanxi Agricultural University Archives .
Technology
|
Category
|
Item
|
Level of Expertise
|
|
Security
|
Nessus, Saint, Sarah, LANGuard
|
Expert
|
|
|
Social Engineering Techniques
|
Expert
|
|
LDAP Security (Various Platforms)
|
Expert
|
|
|
Protocol Security
|
Expert
|
|
|
Ethereal / Analyzer-2
|
Expert
|
|
|
Port Scanners, Enumeration
|
Expert
|
|
|
RFID Scanners
|
Advanced
|
|
|
SQL Security
|
Expert
|
|
|
Spoofing / Reverse Attacks
|
Expert
|
|
|
Custom / Proprietary Techniques
|
Expert
|
|
|
Wireless Security Tools
|
Expert
|
|
|
Penetration Testing
|
Expert
|
|
|
Social Engineering / Red Teaming
|
Expert
|
|
|
Vulnerability Assessment
|
Expert
|
|
|
Content Filtering
|
Expert
|
|
|
XSS
|
Expert
|
|
Category
|
Item
|
Level of Expertise
|
|
Protocols,
|
TCP/IP, UDP,
|
Expert
|
|
Services,
|
L2TP, SNMP, SMTP, IMAP
|
Expert
|
|
& Topology
|
POP3, NFS,
|
Expert
|
|
|
Static Routing, RIP
|
Expert
|
|
|
OSPF, BGP, Other Routable
|
Expert
|
|
|
DHCP
|
Expert
|
|
|
DNS
|
Expert
|
|
|
SSH, SSL/TLS
|
Expert
|
|
|
Ethernet, FEthernet, GEthernet
|
Expert
|
|
|
Wi-Fi, Fiber, Channel
|
Expert
|
|
|
|
|
|
Category
|
Item
|
Level of Expertise
|
|
Application /
|
MS Terminal Services / RDP
|
Expert
|
|
Services
|
MySQL, MS-SQL
|
Advanced
|
|
|
Document Management Solutions
|
Advanced
|
|
|
VERITAS Backup Exec
|
Expert
|
|
|
VERITAS Data Replication
|
Expert
|
|
|
VERITAS Volume Management
|
Expert
|
|
|
IIS / Apache Web Services
|
Expert
|
|
|
|
|
|
Category
|
Item
|
Level of Expertise
|
|
Hardware
|
Intel Platforms (Major Brand)
|
Expert
|
|
|
Sun Sparc (Entry - Server Class)
|
Advanced
|
|
Add a reaction