π- AI ( 18 )
- Jul 19 Agentic Assurance Engineering: Bringing AI Coding into Real-World Engineering
- Jul 19 Agentic Assurance Engineering: Bringing AI Coding into Real-World Engineering
- Aug 4 Action Plan for a Chief Security Architect
- Feb 24 A Practical Security Guideline for Generative AI
- Apr 5 How to Build a Customized ChatGPT
- Oct 29 DGA Detection with fasttext
- Oct 1 Feature Engineering Notes (Part 2)
- Aug 26 Malware Analysis and Data Science
- May 10 IsolationForest for Anomaly Detection
- May 5 Machine Learning Notes Compilation
- May 4 First Attempt at Anomaly Detection
- May 3 Built an AutoML Project
- Apr 24 Plugging Keras Models into Sklearn's Pipeline
- Apr 24 Sklearn and Feature Engineering
- Mar 30 Text Summarization
- Feb 13 ELK Notes
- Jan 1 CNN Study Notes
- Sep 14 My First Machine Learning Training Session - A Summary
- & ( 2 )
- Apr 5 How to Build a Customized ChatGPT
- Mar 25 Getting Out of the Anti-Scraping Trap
- Machine ( 14 )
- Apr 5 How to Build a Customized ChatGPT
- Oct 29 DGA Detection with fasttext
- Oct 1 Feature Engineering Notes (Part 2)
- Aug 26 Malware Analysis and Data Science
- May 10 IsolationForest for Anomaly Detection
- May 5 Machine Learning Notes Compilation
- May 4 First Attempt at Anomaly Detection
- May 3 Built an AutoML Project
- Apr 24 Plugging Keras Models into Sklearn's Pipeline
- Apr 24 Sklearn and Feature Engineering
- Mar 30 Text Summarization
- Feb 13 ELK Notes
- Jan 1 CNN Study Notes
- Sep 14 My First Machine Learning Training Session - A Summary
- Learning ( 14 )
- Apr 5 How to Build a Customized ChatGPT
- Oct 29 DGA Detection with fasttext
- Oct 1 Feature Engineering Notes (Part 2)
- Aug 26 Malware Analysis and Data Science
- May 10 IsolationForest for Anomaly Detection
- May 5 Machine Learning Notes Compilation
- May 4 First Attempt at Anomaly Detection
- May 3 Built an AutoML Project
- Apr 24 Plugging Keras Models into Sklearn's Pipeline
- Apr 24 Sklearn and Feature Engineering
- Mar 30 Text Summarization
- Feb 13 ELK Notes
- Jan 1 CNN Study Notes
- Sep 14 My First Machine Learning Training Session - A Summary
- Coding ( 1 )
- Jul 19 Agentic Assurance Engineering: Bringing AI Coding into Real-World Engineering
- Security ( 68 )
- Jul 19 Agentic Assurance Engineering: Bringing AI Coding into Real-World Engineering
- May 9 Git Workflow for the Multi-Agent Era
- Mar 9 The Vibe Coding Survival Guide
- Jan 17 AI Software Engineering in Practice: Building an Enterprise-Grade Agentic SOC Platform
- Nov 30 AI Coding Best Practices β What I've Learned
- Oct 19 Applied Cryptography Operations: What Practitioners Must Know
- Sep 4 From Dropping the DB to Running Away: My Python Full-Stack Pitfall Log
- Aug 4 Action Plan for a Chief Security Architect
- Jul 1 Software Engineering in Practice: Python Edition
- Jun 10 Some Thoughts on Passing the CISSP Exam
- Apr 5 Understanding Clearing Networks: Business, Technology, and Security
- Feb 24 A Practical Security Guideline for Generative AI
- Feb 24 A Practical Security Guideline for Generative AI
- Dec 16 Self-Cultivation of a Security Architect: From Principles to Practice
- Sep 19 Reflections on Security Architecture Design in Financial Services
- May 24 Security Operations β Design for Failure
- Mar 17 Summary of Network and Cloud Security Architecture Design
- Jan 5 What Are We Really Talking About When We Say Security by Default
- Aug 15 Study Notes on Data Security Regulations
- Jul 19 Security Operations Center (SOC) and Collective Intelligence
- Jun 19 Data Security Architecture Summary and Case Studies
- Jun 12 System and Architecture
- Feb 9 Security Architecture in Practice: From Security Governance to Security Verification
- Jan 15 Process Design and Optimization
- Jan 5 Building Security Architecture
- Nov 16 Building Security Specifications - A Practical Guide
- Nov 3 Has Security Actually Shifted Left?
- Oct 23 Modern SDLC and Security Architecture Review
- Sep 17 The Difficulty of Security Architecture
- Aug 22 Let's Talk About Data Security Again
- Jul 6 Design Your Security Architecture OKR
- Jun 13 A Brief Introduction to Privacy Computing and Data Security
- May 31 Architecture Discussion
- Mar 16 More on Security Architecture, Part II
- Sep 27 Applied Cryptography and Crypto Infrastructure
- Aug 19 Revisiting Security Architecture (Part 1)
- Aug 5 Thoughts on Business Unit Security Programs
- Jun 24 Architecture Outline
- May 31 My Take on Enterprise Security
- Mar 9 Hashicorp Vault Advanced Tutorial For Enterprise
- Dec 28 What is Security Architecture Part III
- Dec 23 FTP services with Data At Rest Encryption
- Dec 16 Encryption As A Services with softhsm2 and flask
- Dec 14 Build a internal CA with Openssl and SoftHsm2
- Nov 12 How to initialized Hashicorp Vault safely
- Aug 7 Ramblings on Certificates in Enterprise
- Jul 5 Working with Commercial Security Appliances
- Jun 22 A Brief Talk on Data Security
- Jun 2 Some Takeaways from CA/RA
- May 4 What is Security Architecture (Part II)
- Apr 15 A Few Lessons Learned from KMS/HSM
- Mar 21 How to use mkcert
- Mar 21 How to build your own Certificate Authority
- Mar 21 Use Openssl To Convert Certificate Format
- Feb 11 Talking About K8S Secret Manager
- Nov 20 What is Security Architecture
- Nov 3 A Few Lessons Learned from Jump Server
- Jun 24 A Casual Take on Anti-Intrusion
- May 9 "Massive Security" and Anti-Intrusion
- Apr 14 DSMM Session 4 and My Take on Data Security
- Mar 25 Getting Out of the Anti-Scraping Trap
- Jan 7 Time to Play Around with Golang
- Dec 8 A Survey of Computer Threat Detection
- Aug 6 Anti-Spam (Registration / Login / KYC)
- May 3 Built an AutoML Project
- Apr 7 GIL and Python Parallel Programming (Part 1)
- Dec 19 Writing YARA Modules and Cross-Platform Compilation with GYP
- Jul 22 New Start: Webshell Detection
- Software ( 1 )
- Jul 19 Agentic Assurance Engineering: Bringing AI Coding into Real-World Engineering
- Engineering ( 2 )
- Jul 19 Agentic Assurance Engineering: Bringing AI Coding into Real-World Engineering
- Jan 17 AI Software Engineering in Practice: Building an Enterprise-Grade Agentic SOC Platform
- and ( 20 )
- Aug 20 ATT&CK and Intrusion Detection
- Jun 29 Intrusion Through the Lens of HW
- Jun 24 A Casual Take on Anti-Intrusion
- May 9 "Massive Security" and Anti-Intrusion
- Dec 8 A Survey of Computer Threat Detection
- Oct 29 DGA Detection with fasttext
- Oct 1 Feature Engineering Notes (Part 2)
- Aug 26 Malware Analysis and Data Science
- Jul 7 Thoughts on Content Security and an Anti-Spam Registration Incident Response
- May 10 IsolationForest for Anomaly Detection
- May 5 Machine Learning Notes Compilation
- May 4 First Attempt at Anomaly Detection
- May 3 Built an AutoML Project
- Apr 24 Plugging Keras Models into Sklearn's Pipeline
- Apr 24 Sklearn and Feature Engineering
- Mar 30 Text Summarization
- Feb 13 ELK Notes
- Jan 1 CNN Study Notes
- Sep 14 My First Machine Learning Training Session - A Summary
- Jul 22 New Start: Webshell Detection
- Data ( 27 )
- Aug 22 Let's Talk About Data Security Again
- Jun 13 A Brief Introduction to Privacy Computing and Data Security
- Sep 27 Applied Cryptography and Crypto Infrastructure
- Mar 9 Hashicorp Vault Advanced Tutorial For Enterprise
- Dec 28 What is Security Architecture Part III
- Dec 23 FTP services with Data At Rest Encryption
- Dec 16 Encryption As A Services with softhsm2 and flask
- Dec 14 Build a internal CA with Openssl and SoftHsm2
- Nov 12 How to initialized Hashicorp Vault safely
- Aug 7 Ramblings on Certificates in Enterprise
- Jun 22 A Brief Talk on Data Security
- Jun 2 Some Takeaways from CA/RA
- Apr 15 A Few Lessons Learned from KMS/HSM
- Mar 21 How to use mkcert
- Mar 21 How to build your own Certificate Authority
- Mar 21 Use Openssl To Convert Certificate Format
- Apr 14 DSMM Session 4 and My Take on Data Security
- Oct 29 DGA Detection with fasttext
- Oct 1 Feature Engineering Notes (Part 2)
- Aug 26 Malware Analysis and Data Science
- May 10 IsolationForest for Anomaly Detection
- May 4 First Attempt at Anomaly Detection
- Apr 24 Plugging Keras Models into Sklearn's Pipeline
- Apr 24 Sklearn and Feature Engineering
- Mar 30 Text Summarization
- Jan 1 CNN Study Notes
- Sep 14 My First Machine Learning Training Session - A Summary
- Mining ( 10 )
- Oct 29 DGA Detection with fasttext
- Oct 1 Feature Engineering Notes (Part 2)
- Aug 26 Malware Analysis and Data Science
- May 10 IsolationForest for Anomaly Detection
- May 4 First Attempt at Anomaly Detection
- Apr 24 Plugging Keras Models into Sklearn's Pipeline
- Apr 24 Sklearn and Feature Engineering
- Mar 30 Text Summarization
- Jan 1 CNN Study Notes
- Sep 14 My First Machine Learning Training Session - A Summary
- Intrusion ( 10 )
- Aug 20 ATT&CK and Intrusion Detection
- Jun 29 Intrusion Through the Lens of HW
- Jun 24 A Casual Take on Anti-Intrusion
- May 9 "Massive Security" and Anti-Intrusion
- Dec 8 A Survey of Computer Threat Detection
- Oct 29 DGA Detection with fasttext
- Feb 13 ELK Notes
- Jan 5 Cuckoo Sandbox Gotchas You Should Know
- Dec 19 Writing YARA Modules and Cross-Platform Compilation with GYP
- Jul 22 New Start: Webshell Detection
- Detection ( 10 )
- Aug 20 ATT&CK and Intrusion Detection
- Jun 29 Intrusion Through the Lens of HW
- Jun 24 A Casual Take on Anti-Intrusion
- May 9 "Massive Security" and Anti-Intrusion
- Dec 8 A Survey of Computer Threat Detection
- Oct 29 DGA Detection with fasttext
- Feb 13 ELK Notes
- Jan 5 Cuckoo Sandbox Gotchas You Should Know
- Dec 19 Writing YARA Modules and Cross-Platform Compilation with GYP
- Jul 22 New Start: Webshell Detection
- Tool ( 1 )
- May 3 Built an AutoML Project
- R&D ( 3 )
- Mar 9 The Vibe Coding Survival Guide
- May 3 Built an AutoML Project
- Jul 22 New Start: Webshell Detection
- AI-and-ML ( 2 )
- Sep 20 Randomness in Fuzzing and Sample Generation with Char-RNN
- Apr 9 Text Classification with Keras and CNN
- Fuzzing ( 8 )
- Jul 31 Fuzzing Learning Notes - binutils with AFL
- Jul 31 Fuzzing Learning Notes - Firefox with Grizzly
- Jul 31 Fuzzing Learning Notes: libssh with fuzzer-test-suite
- Jul 30 Fuzzing Learning Notes: sqlite3 with fuzzer-test-suite
- Jul 27 Fuzzing Learning Notes - Getting Started with AFL
- Jul 27 Fuzzing Learning Notes: libfuzzer and Chromium
- Jul 27 Fuzzing Tutorial - Linux Kernel Fuzzing
- Sep 20 Randomness in Fuzzing and Sample Generation with Char-RNN
- Learning-Data-Mining ( 1 )
- Apr 9 Text Classification with Keras and CNN
- AI-and-machine-learning ( 1 )
- May 15 Lessons Learned Using Machine Learning in Web Security Detection
- learning-data-mining ( 2 )
- May 15 Lessons Learned Using Machine Learning in Web Security Detection
- Mar 2 Before the Data Breach
- intrusion-detection-and-anti-intrusion ( 1 )
- May 15 Lessons Learned Using Machine Learning in Web Security Detection
- AWS ( 2 )
- Jul 7 Deploy Cryptocurrency Wallet Nodes Across Multiple AWS Regions with Terraform
- Jul 2 K8S and SecDevOps on AWS
- IAC ( 2 )
- Oct 12 Terraform Training
- Jul 7 Deploy Cryptocurrency Wallet Nodes Across Multiple AWS Regions with Terraform
- Tools ( 13 )
- Mar 9 Hashicorp Vault Advanced Tutorial For Enterprise
- Nov 12 How to initialized Hashicorp Vault safely
- Mar 21 How to use mkcert
- Mar 21 How to build your own Certificate Authority
- Mar 21 Use Openssl To Convert Certificate Format
- Sep 1 Getting Started with Openresty
- Jul 7 Deploy Cryptocurrency Wallet Nodes Across Multiple AWS Regions with Terraform
- Feb 13 Notes on Man-in-the-Middle (MITM) Attacks
- Feb 13 ELK Notes
- Jan 5 Cuckoo Sandbox Gotchas You Should Know
- Dec 19 Writing YARA Modules and Cross-Platform Compilation with GYP
- Sep 10 Nginx SubDomain and Proxypass Jupyter notebook
- Aug 19 Building Redis Cluster with Ansible
- basic-security ( 1 )
- Jul 2 K8S and SecDevOps on AWS
- Agentic ( 1 )
- Jul 19 Agentic Assurance Engineering: Bringing AI Coding into Real-World Engineering
- SDLC ( 1 )
- Jul 19 Agentic Assurance Engineering: Bringing AI Coding into Real-World Engineering
- Crawlers ( 1 )
- Jul 7 Thoughts on Content Security and an Anti-Spam Registration Incident Response
- Anti-Crawlers ( 1 )
- Jul 7 Thoughts on Content Security and an Anti-Spam Registration Incident Response
- Operations ( 12 )
- Oct 19 Applied Cryptography Operations: What Practitioners Must Know
- May 24 Security Operations β Design for Failure
- Nov 12 How to initialized Hashicorp Vault safely
- Aug 7 Ramblings on Certificates in Enterprise
- Jul 5 Working with Commercial Security Appliances
- Jun 2 Some Takeaways from CA/RA
- Apr 15 A Few Lessons Learned from KMS/HSM
- Nov 3 A Few Lessons Learned from Jump Server
- Jun 24 A Casual Take on Anti-Intrusion
- May 9 "Massive Security" and Anti-Intrusion
- Mar 25 Getting Out of the Anti-Scraping Trap
- Dec 8 A Survey of Computer Threat Detection
- Archive ( 9 )
- Dec 10 Thoughts on Fast Incident Response(FIR)
- Nov 12 How to initialized Hashicorp Vault safely
- Mar 21 How to use mkcert
- Mar 21 How to build your own Certificate Authority
- Mar 21 Use Openssl To Convert Certificate Format
- Jul 31 Fuzzing Learning Notes - binutils with AFL
- Jul 31 Fuzzing Learning Notes - Firefox with Grizzly
- Jul 31 Fuzzing Learning Notes: libssh with fuzzer-test-suite
- Jul 30 Fuzzing Learning Notes: sqlite3 with fuzzer-test-suite
- Legacy ( 1 )
- Jul 27 Fuzzing Tutorial - Linux Kernel Fuzzing
- Migration ( 1 )
- Jul 27 Fuzzing Tutorial - Linux Kernel Fuzzing
- archived ( 1 )
- Jul 27 Fuzzing Learning Notes - Getting Started with AFL
- tools ( 3 )
- Oct 12 Terraform Training
- Feb 10 The "Small" Matter of Watermarks
- Aug 25 Memory Forensics, Password Extraction, and Using Volatility
- Incident ( 1 )
- Dec 10 Thoughts on Fast Incident Response(FIR)
- Response ( 1 )
- Dec 10 Thoughts on Fast Incident Response(FIR)
- Development ( 10 )
- May 9 Git Workflow for the Multi-Agent Era
- Nov 30 AI Coding Best Practices β What I've Learned
- Dec 23 FTP services with Data At Rest Encryption
- Dec 16 Encryption As A Services with softhsm2 and flask
- Dec 14 Build a internal CA with Openssl and SoftHsm2
- Jan 7 Time to Play Around with Golang
- Aug 6 Anti-Spam (Registration / Login / KYC)
- Apr 7 GIL and Python Parallel Programming (Part 1)
- Mar 26 OWASP Top 10 and the Security Developer's Guide
- Dec 19 Writing YARA Modules and Cross-Platform Compilation with GYP
- Anti-Intrusion ( 2 )
- Jun 24 A Casual Take on Anti-Intrusion
- May 9 "Massive Security" and Anti-Intrusion
- Counter-Intrusion ( 4 )
- Aug 20 ATT&CK and Intrusion Detection
- Jun 29 Intrusion Through the Lens of HW
- Dec 8 A Survey of Computer Threat Detection
- Jul 22 New Start: Webshell Detection
- Multi-Agent ( 1 )
- Jul 19 Agentic Assurance Engineering: Bringing AI Coding into Real-World Engineering
- Secure ( 1 )
- Mar 26 OWASP Top 10 and the Security Developer's Guide
- Architecture ( 44 )
- Jul 19 Agentic Assurance Engineering: Bringing AI Coding into Real-World Engineering
- May 9 Git Workflow for the Multi-Agent Era
- Mar 9 The Vibe Coding Survival Guide
- Jan 17 AI Software Engineering in Practice: Building an Enterprise-Grade Agentic SOC Platform
- Nov 30 AI Coding Best Practices β What I've Learned
- Aug 4 Action Plan for a Chief Security Architect
- Jun 10 Some Thoughts on Passing the CISSP Exam
- Apr 5 Understanding Clearing Networks: Business, Technology, and Security
- Feb 24 A Practical Security Guideline for Generative AI
- Dec 16 Self-Cultivation of a Security Architect: From Principles to Practice
- Sep 19 Reflections on Security Architecture Design in Financial Services
- Mar 17 Summary of Network and Cloud Security Architecture Design
- Jan 5 What Are We Really Talking About When We Say Security by Default
- Aug 15 Study Notes on Data Security Regulations
- Jul 19 Security Operations Center (SOC) and Collective Intelligence
- Jun 19 Data Security Architecture Summary and Case Studies
- Jun 12 System and Architecture
- Feb 9 Security Architecture in Practice: From Security Governance to Security Verification
- Jan 15 Process Design and Optimization
- Jan 5 Building Security Architecture
- Nov 16 Building Security Specifications - A Practical Guide
- Nov 3 Has Security Actually Shifted Left?
- Oct 23 Modern SDLC and Security Architecture Review
- Sep 17 The Difficulty of Security Architecture
- Aug 22 Let's Talk About Data Security Again
- Jul 6 Design Your Security Architecture OKR
- Jun 13 A Brief Introduction to Privacy Computing and Data Security
- May 31 Architecture Discussion
- Mar 16 More on Security Architecture, Part II
- Sep 27 Applied Cryptography and Crypto Infrastructure
- Aug 19 Revisiting Security Architecture (Part 1)
- Aug 5 Thoughts on Business Unit Security Programs
- Jun 24 Architecture Outline
- May 31 My Take on Enterprise Security
- Mar 9 Hashicorp Vault Advanced Tutorial For Enterprise
- Dec 28 What is Security Architecture Part III
- Jul 5 Working with Commercial Security Appliances
- Jun 22 A Brief Talk on Data Security
- Jun 2 Some Takeaways from CA/RA
- May 4 What is Security Architecture (Part II)
- Apr 15 A Few Lessons Learned from KMS/HSM
- Feb 11 Talking About K8S Secret Manager
- Nov 20 What is Security Architecture
- Nov 3 A Few Lessons Learned from Jump Server
- Application ( 1 )
- Oct 23 Modern SDLC and Security Architecture Review
- Fundamental ( 1 )
- May 4 What is Security Architecture (Part II)
- Insights ( 1 )
- Aug 4 Action Plan for a Chief Security Architect
- Co-creation ( 1 )
- Aug 4 Action Plan for a Chief Security Architect
- Products ( 4 )
- May 9 Git Workflow for the Multi-Agent Era
- Mar 9 The Vibe Coding Survival Guide
- Jan 17 AI Software Engineering in Practice: Building an Enterprise-Grade Agentic SOC Platform
- Nov 30 AI Coding Best Practices β What I've Learned
- Dev ( 2 )
- Sep 4 From Dropping the DB to Running Away: My Python Full-Stack Pitfall Log
- Jul 1 Software Engineering in Practice: Python Edition
- Spider ( 1 )
- Mar 25 Getting Out of the Anti-Scraping Trap
- Anti-Spider ( 1 )
- Mar 25 Getting Out of the Anti-Scraping Trap
- intrusion ( 2 )
- Oct 24 Reading Notes: Advanced Guide to Internet Enterprise Security
- Sep 7 How to Design Your Anti-Intrusion KPI
- detection ( 2 )
- Oct 24 Reading Notes: Advanced Guide to Internet Enterprise Security
- Sep 7 How to Design Your Anti-Intrusion KPI
- security ( 11 )
- Aug 24 Do We Really Need Security Architects?
- Feb 27 Talking About Defense in Depth in Security Design
- Nov 6 Modern Security Products
- Oct 27 Operations Inside the Security Architect Role
- Oct 18 A Quick Look at Microsoft's Security Products
- Aug 31 A Practical Look at Endpoint Security and DLP Governance
- Mar 21 A Quick Look at Imperva WAF Deployment Options
- Feb 10 The "Small" Matter of Watermarks
- Oct 24 Reading Notes: Advanced Guide to Internet Enterprise Security
- Sep 30 On Major Security Events and How to Handle Them
- Sep 7 How to Design Your Anti-Intrusion KPI
- architecture ( 6 )
- Aug 24 Do We Really Need Security Architects?
- Feb 27 Talking About Defense in Depth in Security Design
- Oct 27 Operations Inside the Security Architect Role
- Aug 31 A Practical Look at Endpoint Security and DLP Governance
- Mar 21 A Quick Look at Imperva WAF Deployment Options
- Oct 24 Reading Notes: Advanced Guide to Internet Enterprise Security
- operations ( 4 )
- Oct 27 Operations Inside the Security Architect Role
- Mar 21 A Quick Look at Imperva WAF Deployment Options
- Sep 30 On Major Security Events and How to Handle Them
- Sep 7 How to Design Your Anti-Intrusion KPI
- intrusion-detection ( 1 )
- Aug 5 An Overview of Log Collection Solutions
- security-operations ( 1 )
- Aug 5 An Overview of Log Collection Solutions
- data-mining ( 1 )
- Aug 5 An Overview of Log Collection Solutions
- learning ( 1 )
- May 4 Automatic Content Extraction from Web Pages and Word Cloud Visualization
- data ( 2 )
- Aug 31 A Practical Look at Endpoint Security and DLP Governance
- May 4 Automatic Content Extraction from Web Pages and Word Cloud Visualization
- mining ( 1 )
- May 4 Automatic Content Extraction from Web Pages and Word Cloud Visualization
- endpoint ( 1 )
- Aug 31 A Practical Look at Endpoint Security and DLP Governance
- fundamentals ( 1 )
- Feb 27 Talking About Defense in Depth in Security Design
- insight ( 1 )
- Aug 24 Do We Really Need Security Architects?
- development ( 1 )
- Feb 10 The "Small" Matter of Watermarks
- legacy ( 2 )
- Mar 21 A Quick Look at Imperva WAF Deployment Options
- Sep 30 On Major Security Events and How to Handle Them
- post ( 1 )
- Mar 21 A Quick Look at Imperva WAF Deployment Options
- products ( 2 )
- Nov 6 Modern Security Products
- Oct 18 A Quick Look at Microsoft's Security Products
- tips ( 1 )
- Mar 2 Before the Data Breach
- data-security ( 1 )
- Mar 2 Before the Data Breach
- forensics ( 1 )
- Aug 25 Memory Forensics, Password Extraction, and Using Volatility