Kitisak Jirawannakool Email & Phone Number

Bangkok, Th

Thailand

http://www.shadowserver.org

- Set up the chapter meeting for free in Thailand- Conduct training for Thai people about Web application Security- Promote OWASP in Thailand

Bangkok Metropolitan Area, Thailand

Establish PEA-CERT

Bangkok Metropolitan Area, Thailand

Government Computer Emergency and Readiness Team (G-CERT) - Establish G-CERT - Setup and train team members to handle incidents - Create the Incident Response processes and policies - Analyze incident cases and response - Advise some government organizations to handle incidents and protect their infrastructure - Organize seminars, meetings, training, and incident drill for Thai Government Educator for the general public - Teach courses on the following topics: Incident Response, Network forensics, IT security awareness for users, Network Security, Risk Management, Web application security, Server auditing, and OS hardening - Interview on the radio, television, and newspaper about IT security - Write articles in Thai about IT securityVulnerabilities review and analysis - Study new threats, vulnerabilities, and malware - Evaluate the impacts of them - Alert to public

Knowledge Management

Organize TISA Pro-talk event in Bangkok

o Security consultant for the National Health Information System project (NHIS - the project to share patients’ records between the targeted hospitals)o Researcher- Design and implement the distributed network-based intrusion detection system (IDS) by using Snort and MySQL- Design and implement the defaced website detecting system- Design and implement the incident response system o Educator for the general public- Teach courses on the following topics: Network forensics, IT security awareness for users, Web application security, Server auditing, and OS hardening in Thailand and neighborhood countries.- Interview on the radio about IT security every 1st Sunday of the month about IT security trends- Write articles in Thai about IT security on the NECTEC’s facebook fanpage, personal web blog and magazines

o Main contact person for the ThaiCERT team with other CERT organizationso Computer security incident handler and analyst - Analyze and investigate log and pcap files - Respond to incident cases - Create and Manage Incident Response process o System and network administratoro Educator for the general public - Teach courses on the following topics: IT security awareness for users, Dynamic malware analysis, CSIRT establishment, Web security, OS hardening and Network forensics - Write articles, documents, and advisories in Thai and English about computer security on http://www.thaicert.orgo Network and computer system auditor (focusing mainly the on Windows OS) for APEC 2003, APECTEL 31st, Ministry of Foreign Affairs and a Thai company called “Thai Smart Card”. o Researcher - Perform runtime malware analysis - Design and implement software that analyzes and presents data regarding botnets in Thailand from ShadowServer. This work results in a publication in a conference in 2009. - Design and implement a system for conference registration that utilizes 2D barcode and 2D barcode encryption - Design and implement simple tools to remove malware in case of there is no removal tools provided by Antivirus vendor called “ThaiCERT Antivirus” and “ThaiCERT Hotfix” - Design and develop the website called "ThaiCERT Virus montoring" to show information gathered from Antivirus vendor website - Design and develop the website called "Web-based Vulnerabilities Scanner" that utilizes Google’s Skipfish to find vulnerabilities of web application - Develop a network intrusion system that uses sampling techniques and Snort

Master, Computer Science

Research about "DEVELOPMENT OF INTRUSION DETECTION SOFTWARE SUITE USING TRAFFIC SAMPLING" in Thai language

Bachelor, Computer Engineering

Activities and Societies: 1999 - 2002 : Student representer at the department of computer engineering 2000 : Staff of CESCA II summer camp.

High School, Agriculture, General