Marshall Wu Email & Phone Number

Beijing, China

Cyber security consulting

Beijing, China

Beijing City, China

1. Security standard * Security baseline * Security Policy2. Risk evaluation * Value and probability for Assets/Services * Sensitive Assets/Services identification * PDCA to follow3. Security Team Building(in Process)4. Security Situational Awareness * Security Monitoring * Github sensitive data monitoring * Open ports monitoring * OSSEC HIDS * Bash log collecting and monitoring * Database log monitoring * Security Audit * White-box code audit * Black-box scan * Security test * Weak password generation * Email system weak password collision test * LDAP hash collision test5. Security Architecture Review * 4A fort system/DNS system deployment * Service architecture security review6. Office network security * BYOD plan

1. BMW China * Penetration test for retailer’s website * Pen-test report for each website2. BBA * Changes request security audit * EDI security evaluation3. Volkswagen China * Car-net Penetration test * Architecture security audit4. Willson Parking * Penetration test * Architecture security audit

Sanlitun Soho

1. Web Security * Monthly scan and Pen-test * Anti-scraping for data we offer to clients * Anti-Sharing for client’s account * Unified Password management2. Incidence Management * Review result of Web security * Check with Sales Team to verify Anti-scraping and Anti-Sharing behavior then make the available plan. * Sign tickets for DEV to fix web vulnerabilities and follow util fixed * Response for new 0day vulnerability * Sign tickets for OPS team and follow util fixed3. Security Documents * AWS Security Standard * Unix Security Standard4. AWS Cloud Security * Architecture audited * Monitoring all suspicious behaviors on AWS * Firewall audit5. Unix Security * Monitoring all suspicious behaviors on Linux servers * Access control * System consolidation (Fail2ban, SSL 2FA, LDAP, etc.)

Software Park

1. Web Security( White Hat) * Work details: * Web penetration test for Government websites and bank websites. * Writing reports, vulnerability details are list and How-To-Fix are suggested. * Project Experience: * China Banking Regulatory Commission (CBRC) and China Insurance Regulatory Commission (CIRC) web-examination. * CMB web-examination. * XinJiang Government websites web-examination,etc.2. Security Engineer (PE, APT) * Reverse Engineering for malwares, troys and other mal-programs looking for shellcodes,0day vulnerabilities. * Extracting characteristic from every malware which has an internet connection its server or host, put characteristic into the event-database(Used for IDS, IPS, WAF etc.).3. Security Development Engineer (APT) * Programming the SandBox with Python in the APT products. * Designing the algorithm to control the different kinds of virtual machines and to deal with all kinds of error, such as intranet disconnection, virtual machines damage, decrypting failure, etc.4. Security Test Engineer * Testing for security Products just like: IPS, IDS, WAF and so on. Using testing software and self-wrote scripts to find out the bugs, logical fault or functional faults. * Looking for new resolution for new testing methods. * Design new test process

Master'S Degree On Information Security, Computer And Information Systems Security/Information Assurance

Bechelor Of Management, Statistics

Statistics