http://www.shadowserver.org

- Set up the chapter meeting for free in Thailand- Conduct training for Thai people about Web application Security- Promote OWASP in Thailand

Establish PEA-CERT

Government Computer Emergency and Readiness Team (G-CERT) - Establish G-CERT - Setup and train team members to handle incidents - Create the Incident Response processes and policies - Analyze incident cases and response - Advise some government organizations to handle incidents and protect their infrastructure - Organize seminars, meetings, training, and incident drill for Thai Government Educator for the general public - Teach courses on the following topics: Incident Response, Network forensics, IT security awareness for users, Network Security, Risk Management, Web application security, Server auditing, and OS hardening - Interview on the radio, television, and newspaper about IT security - Write articles in Thai about IT securityVulnerabilities review and analysis - Study new threats, vulnerabilities, and malware - Evaluate the impacts of them - Alert to public

Knowledge Management

Organize TISA Pro-talk event in Bangkok

o Security consultant for the National Health Information System project (NHIS - the project to share patients’ records between the targeted hospitals)o Researcher- Design and implement the distributed network-based intrusion detection system (IDS) by using Snort and MySQL- Design and implement the defaced website detecting system- Design and implement the incident response system o Educator for the general public- Teach courses on the following topics: Network forensics, IT security awareness for users, Web application security, Server auditing, and OS hardening in Thailand and neighborhood countries.- Interview on the radio about IT security every 1st Sunday of the month about IT security trends- Write articles in Thai about IT security on the NECTEC’s facebook fanpage, personal web blog and magazines

o Main contact person for the ThaiCERT team with other CERT organizationso Computer security incident handler and analyst - Analyze and investigate log and pcap files - Respond to incident cases - Create and Manage Incident Response process o System and network administratoro Educator for the general public - Teach courses on the following topics: IT security awareness for users, Dynamic malware analysis, CSIRT establishment, Web security, OS hardening and Network forensics - Write articles, documents, and advisories in Thai and English about computer security on http://www.thaicert.orgo Network and computer system auditor (focusing mainly the on Windows OS) for APEC 2003, APECTEL 31st, Ministry of Foreign Affairs and a Thai company called “Thai Smart Card”. o Researcher - Perform runtime malware analysis - Design and implement software that analyzes and presents data regarding botnets in Thailand from ShadowServer. This work results in a publication in a conference in 2009. - Design and implement a system for conference registration that utilizes 2D barcode and 2D barcode encryption - Design and implement simple tools to remove malware in case of there is no removal tools provided by Antivirus vendor called “ThaiCERT Antivirus” and “ThaiCERT Hotfix” - Design and develop the website called "ThaiCERT Virus montoring" to show information gathered from Antivirus vendor website - Design and develop the website called "Web-based Vulnerabilities Scanner" that utilizes Google’s Skipfish to find vulnerabilities of web application - Develop a network intrusion system that uses sampling techniques and Snort