Lai Quan Thien

Research and implementation of an Intelligent SOC Ecosystem integrating SIEM, SOAR, and a proposed SmartXDR model. The system aggregates multi-layer telemetry from Wazuh, Suricata, Zeek, and pfSense. By leveraging AI for semantic alert analysis, it effectively reduces false positives and orchestrates automated response playbooks. The architecture was validated against MITRE ATT&CK scenarios (Brute-force, SQLi, Malware) to demonstrate optimized MTTD/MTTR metrics.

Deployed a Security Information and Event Management (SIEM) solution leveraging the Elastic Stack (ELK) to collect, process, analyze, and visualize cybersecurity events within a simulated environment. The project focused on monitoring logs from Windows and Linux systems, along with security devices like Suricata and pfSense, to detect, investigate, and respond to threats.

Comprehensive network security monitoring solution using Security Onion platform. Implemented full-spectrum threat detection with Suricata IDS, Zeek network analysis, and Elasticsearch SIEM integration for real-time security monitoring.

Advanced database protection system combining AES-GCM-256 encryption with CP-ABE (Ciphertext-Policy Attribute-Based Encryption) for fine-grained access control. Features ABAC authentication and secure data management in Amazon RDS MySQL.

A hybrid encryption library combining Ciphertext-Policy Attribute-Based Encryption (CP-ABE) with AES-GCM to enable fine-grained access control and secure data confidentiality. This library supports ABAC (Attribute-Based Access Control) authentication and facilitates robust encryption/decryption workflows for secure data sharing and management across distributed systems.

WAGIC is a Windows desktop application built with WPF that offers an intuitive interface for managing the MAGIC threat detection model. It allows users to train and evaluate models on various cybersecurity datasets, monitor progress in real time, and generate visual analytics for performance assessment—streamlining APT detection workflows for analysts and researchers.