Auray Technology, an OTIC Laboratory ,the directors of information security technology, mainly responsible for 1.5G O-RAN E2E testing and information security SCAS testing2.IoT information security testing 3.EN 303-645, IEC62443-4-24.App testing5.elevator information Security testing6.smart pole testing7.IEC 62351 power grid testing8.ISO 27001Expertise: Information security detection, 5G architecture, Docker, K8s, LinuxCertificate: RHCE, RHCSA, CEH, ECSA, CHFI, ISO 27001 lead auditor, ISO-17025Professional training: CCNA, CCNP, CISSP, RHCAExperience: 1. Have experience in red team attack drills and penetration testing of large technology companies. 2. Have experience in using AWS or GCP cloud platform. 3. Have experience in Linux operating system installation, maintenance, security monitoring, optimization, and troubleshooting. 4. Penetration testing tools: BurpSuite, Kali Linux, WebInspect, Nessus, Nexpose, Metasploit, Openvas, acunetix, Wireshark, Appscan, etc. 5. Source code detection tools: Sonarqube, checkmarx, fortify. 6. IoT detection tools: FACT, remnux, AFL++, Binwalk 7. App detection tools: Appuse, Mobsf, Inspectage, Santoku, 8. Malicious program analysis: IDA pro, pestudio, OllyDbg, PDF Tools, Snort, Tor, VirusTotal, Windbg, etc. 9.Binary analysis, reverse engineering Familiar with the equipment Keysight, Viavi 5G detection Large projects: 1. BAS purple team drill of 13 financial institutions of the Financial Supervisory Commission 2. Penetration testing projects for large listed technology companies Iso27001 information security consultant: Experience in importing ISO27001 from Yaodeng Technology, Green Power Credential Center, Xiangzheng Electric and many other companies上市公司耀登科技，OTIC實驗室擔任資安技術主管，主要負責5G O-RAN E2E測試及資安SCAS檢測，物聯網資安檢測EN 303-645,IEC62443-4-2、App檢測，電梯資安檢測，智慧杆檢測，IEC 62351電網檢測、一般企業資安評估業務、ISO17025 O-ran檢測實驗室簽署人 專長:資安檢測、5G架構、Docker、K8s、Linux證照:RHCE、RHCSA、CEH、ECSA、CHFI、ISO 27001 lead auditor,ISO-17025 專業訓練:CCNA、CCNP、CISSP、RHCA 1. 具有紅隊攻擊演練、大型科技公司滲透測試經驗。 2. 具有 AWS or GCP 雲端平使用經驗。 3. 具有Linux操作系统安裝、維護、安全監控、優化、故障處理經驗. 4.滲透測試工具:BurpSuite, Kali Linux, WebInspect, Nessus, Nexpose, Metasploit，Openvas,acunetix、Wireshark,Appscan 等。 5.源碼檢測工具：Sonarqube、checkmarx，fortify。6.物聯網檢測工具:FACT,remnux、AFL++、Binwalk7.App檢測工具: Appuse、Mobsf、Inspectage、Santoku、8.惡意程式分析:IDA pro、pestudio、OllyDbg 、PDF Tools、Snort、Tor、VirusTotal、Windbg等9.Binary analysis,逆向工程熟悉設備Keysight,Viavi 5G檢測大型專案：1.金管會13家金融機構BAS紫隊演練2.上市大型科技公司滲透測試專案Iso27001資安顧問:耀登科技、綠電憑證中心、祥正電機等多家公司iso27001導入經驗