- 2026
- 05/09 Git Workflow for the Multi-Agent Era
- 03/09 The Vibe Coding Survival Guide
- 01/17 AI Software Engineering in Practice: Building an Enterprise-Grade Agentic SOC Platform
- 2025
- 11/30 AI Coding Best Practices β What I've Learned
- 10/19 Applied Cryptography Operations: What Practitioners Must Know
- 09/04 From Dropping the DB to Running Away: My Python Full-Stack Pitfall Log
- 08/24 Do We Really Need Security Architects?
- 08/04 Action Plan for a Chief Security Architect
- 07/01 Software Engineering in Practice: Python Edition
- 06/10 Some Thoughts on Passing the CISSP Exam
- 04/05 Understanding Clearing Networks: Business, Technology, and Security
- 02/24 A Practical Security Guideline for Generative AI
- 2024
- 12/16 Self-Cultivation of a Security Architect: From Principles to Practice
- 09/19 Reflections on Security Architecture Design in Financial Services
- 05/24 Security Operations β Design for Failure
- 03/17 Summary of Network and Cloud Security Architecture Design
- 01/05 What Are We Really Talking About When We Say Security by Default
- 2023
- 08/15 Study Notes on Data Security Regulations
- 07/19 Security Operations Center (SOC) and Collective Intelligence
- 06/19 Data Security Architecture Summary and Case Studies
- 06/12 System and Architecture
- 04/05 How to Build a Customized ChatGPT
- 02/27 Talking About Defense in Depth in Security Design
- 02/09 Security Architecture in Practice: From Security Governance to Security Verification
- 01/15 Process Design and Optimization
- 01/05 Building Security Architecture
- 2022
- 11/16 Building Security Specifications - A Practical Guide
- 11/06 Modern Security Products
- 11/03 Has Security Actually Shifted Left?
- 10/27 Operations Inside the Security Architect Role
- 10/23 Modern SDLC and Security Architecture Review
- 10/18 A Quick Look at Microsoft's Security Products
- 10/12 Terraform Training
- 09/17 The Difficulty of Security Architecture
- 08/31 A Practical Look at Endpoint Security and DLP Governance
- 08/22 Let's Talk About Data Security Again
- 07/06 Design Your Security Architecture OKR
- 06/13 A Brief Introduction to Privacy Computing and Data Security
- 05/31 Architecture Discussion
- 03/16 More on Security Architecture, Part II
- 2021
- 09/27 Applied Cryptography and Crypto Infrastructure
- 08/19 Revisiting Security Architecture (Part 1)
- 08/05 Thoughts on Business Unit Security Programs
- 06/24 Architecture Outline
- 05/31 My Take on Enterprise Security
- 03/09 Hashicorp Vault Advanced Tutorial For Enterprise
- 2020
- 12/28 What is Security Architecture Part III
- 12/23 FTP services with Data At Rest Encryption
- 12/16 Encryption As A Services with softhsm2 and flask
- 12/14 Build a internal CA with Openssl and SoftHsm2
- 12/10 Thoughts on Fast Incident Response(FIR)
- 11/12 How to initialized Hashicorp Vault safely
- 08/07 Ramblings on Certificates in Enterprise
- 07/05 Working with Commercial Security Appliances
- 06/22 A Brief Talk on Data Security
- 06/02 Some Takeaways from CA/RA
- 05/04 What is Security Architecture (Part II)
- 04/15 A Few Lessons Learned from KMS/HSM
- 03/21 How to use mkcert
- 03/21 How to build your own Certificate Authority
- 03/21 Use Openssl To Convert Certificate Format
- 03/21 A Quick Look at Imperva WAF Deployment Options
- 02/11 Talking About K8S Secret Manager
- 02/10 The "Small" Matter of Watermarks
- 2019
- 11/20 What is Security Architecture
- 11/03 A Few Lessons Learned from Jump Server
- 10/24 Reading Notes: Advanced Guide to Internet Enterprise Security
- 09/30 On Major Security Events and How to Handle Them
- 09/07 How to Design Your Anti-Intrusion KPI
- 09/01 Getting Started with Openresty
- 08/20 ATT&CK and Intrusion Detection
- 08/05 An Overview of Log Collection Solutions
- 07/31 Fuzzing Learning Notes - binutils with AFL
- 07/31 Fuzzing Learning Notes: libssh with fuzzer-test-suite
- 07/31 Fuzzing Learning Notes - Firefox with Grizzly
- 07/30 Fuzzing Learning Notes: sqlite3 with fuzzer-test-suite
- 07/27 Fuzzing Learning Notes: libfuzzer and Chromium
- 07/27 Fuzzing Tutorial - Linux Kernel Fuzzing
- 07/27 Fuzzing Learning Notes - Getting Started with AFL
- 06/29 Intrusion Through the Lens of HW
- 06/24 A Casual Take on Anti-Intrusion
- 05/09 "Massive Security" and Anti-Intrusion
- 04/14 DSMM Session 4 and My Take on Data Security
- 03/25 Getting Out of the Anti-Scraping Trap
- 01/07 Time to Play Around with Golang
- 2018
- 12/08 A Survey of Computer Threat Detection
- 10/29 DGA Detection with fasttext
- 10/01 Feature Engineering Notes (Part 2)
- 09/20 Randomness in Fuzzing and Sample Generation with Char-RNN
- 08/26 Malware Analysis and Data Science
- 08/06 Anti-Spam (Registration / Login / KYC)
- 07/07 Deploy Cryptocurrency Wallet Nodes Across Multiple AWS Regions with Terraform
- 07/07 Thoughts on Content Security and an Anti-Spam Registration Incident Response
- 07/02 K8S and SecDevOps on AWS
- 05/15 Lessons Learned Using Machine Learning in Web Security Detection
- 05/10 IsolationForest for Anomaly Detection
- 05/05 Machine Learning Notes Compilation
- 05/04 First Attempt at Anomaly Detection
- 05/04 Automatic Content Extraction from Web Pages and Word Cloud Visualization
- 05/03 Built an AutoML Project
- 04/24 Plugging Keras Models into Sklearn's Pipeline
- 04/24 Sklearn and Feature Engineering
- 04/09 Text Classification with Keras and CNN
- 04/07 GIL and Python Parallel Programming (Part 1)
- 03/30 Text Summarization
- 03/26 OWASP Top 10 and the Security Developer's Guide
- 03/02 Before the Data Breach
- 02/13 Notes on Man-in-the-Middle (MITM) Attacks
- 02/13 ELK Notes
- 01/05 Cuckoo Sandbox Gotchas You Should Know
- 01/01 CNN Study Notes
- 2017
- 12/19 Writing YARA Modules and Cross-Platform Compilation with GYP
- 09/14 My First Machine Learning Training Session - A Summary
- 09/10 Nginx SubDomain and Proxypass Jupyter notebook
- 08/25 Memory Forensics, Password Extraction, and Using Volatility
- 08/19 Building Redis Cluster with Ansible
- 07/22 New Start: Webshell Detection