Lai Quan Thien

Deployed a Security Information and Event Management (SIEM) solution leveraging the Elastic Stack (ELK) to collect, process, analyze, and visualize cybersecurity events within a simulated environment. The project focused on monitoring logs from Windows and Linux systems, along with security devices like Suricata and pfSense, to detect, investigate, and respond to threats.

KVM is an open-source Type 1 hypervisor built into the Linux kernel, offering high-performance virtualization with strong resource isolation. It's widely used in cloud and enterprise environments. Our project explores KVM's features, compares it to VMware, and demonstrates practical uses like VM creation, SSH networking, and database management.

Advanced database protection system combining AES-GCM-256 encryption with CP-ABE (Ciphertext-Policy Attribute-Based Encryption) for fine-grained access control. Features ABAC authentication and secure data management in Amazon RDS MySQL.

WAGIC is a Windows desktop application built with WPF that offers an intuitive interface for managing the MAGIC threat detection model. It allows users to train and evaluate models on various cybersecurity datasets, monitor progress in real time, and generate visual analytics for performance assessment—streamlining APT detection workflows for analysts and researchers.

A hybrid encryption library combining Ciphertext-Policy Attribute-Based Encryption (CP-ABE) with AES-GCM to enable fine-grained access control and secure data confidentiality. This library supports ABAC (Attribute-Based Access Control) authentication and facilitates robust encryption/decryption workflows for secure data sharing and management across distributed systems.

Comprehensive network security monitoring solution using Security Onion platform. Implemented full-spectrum threat detection with Suricata IDS, Zeek network analysis, and Elasticsearch SIEM integration for real-time security monitoring.