Serves as one of the founding engineers for a cybersecurity startup. Main contributor of cybersecurity domain knowledge to the team. Spearheads the research and development effort for the Pangolin Smart Firewall device.Tasks• Design and implement security modules• Optimize kernel, distro, and hardware for firewalling• Develop threat-intelligence strategies for curating policies• Ensure a seamless developer-customer code pipeline• Handle internal audit and compliance tasks for certifications• Plan UI/UX that is accessible to non-technical customersResults• Custom Linux kernel and distro, tailor-made for fast firewalling• OpenEmbedded board support packages for the firewall hardware• OTA updater integration with the firewall platform• Netfilter optimizations for rapid packet forwarding and scheduling• Fast "deep-enough" packet inspection gateways for Layer 7 security• Automatically updating malware and phishing blacklists• Rapid device discovery, fingerprinting, and vulnerability scans• Easy plug-and-play deployment with minimal configuration• Cybersecurity Level 2 label from Cyber Security Agency of Singapore • InnoVEX 2022 Pitch Contest Winner (KPMG Special Award)Links• Pangolin Smart Firewall (https://www.pangolinsecured.com/)• InnoVEX 2022 Pitch Contest Result (https://web.archive.org/web/20220531065920/https://innovex.computex.biz/show/pitchTeam.aspx?BNA=3540&pitchID=711)

Participated in the research and development of Fortify-on-Demand's Mobile Application Security testing framework for Google Android and Apple iOS by conducting inquiry on common mobile application assets, vulnerabilities, and attack surfaces. Wrote procedures and signatures for automatically detecting said assets, vulnerabilities, and attack surfaces. Wrote automated test cases for verifying the quality of existing automated checks. Test cases include specially-crafted control mobile application samples.Tasks• Research common mobile application assets, vulnerabilities, and attack surfaces• Implement automated checks for the detection of the above• Write test cases to verify the quality of automated checks• Implement specially-crafted control mobile apps for test casesResults• Fortify-on-Demand, Mobile Application Security Scanner

Responsible for contributing to the research, development, and testing of prototype Fortify-on-Demand services and various internal tools that automate various organizational processes. Participated in the prototyping of Fortify-on-Demand's Continuous Application Monitoring service and its Digital Discovery component.Tasks• Contribute to research and development of prototype services• Develop and maintain various internal toolsResults• Fortify-on-Demand, Continuous Application Monitoring• Fortify-on-Demand, Digital Discovery

Performed automated dynamic security assessments on the websites and web applications of various multinational companies in contract with Hewlett-Packard's Fortify-on-Demand. Ensured the compliance of security assessment results with the team’s data safety standards before releasing them to customer representatives. Generated reports according to customer requests and made sure that reports were delivered properly and safely. Implemented an Assessment Coverage Verification Tool which automated a portion of the quality assurance process - improving the overall quality of assessments for the entire team. Also implemented a Computing Resource Availability Tracking Tool which tracks use of computing resources currently in use for assessments - removing the need to manually track which resources cannot be used.Tasks• Perform pre-scan assessment of target customer web assets• Determine appropriate thoroughness of scans depending on size of targets• Configure automated scans against target customer web assets• Apply appropriate policies to scans depending on customer requirements• Monitor ongoing scans against target customer web assets• Apply appropriate fixes in case of execution errors• Conduct scan quality validation, ensuring proper coverage of target web assets• Perform data safety processes, ensuring proper delivery of results to customersResults• Completed Assessments: 46 (96% Success Rate)• Assessment Coverage Verification Tool (improved overall quality of assessments)• Computing Resource Availability Tracking Tool (removed manual resource tracking process)• Manual Site Crawler Extension for Google Chrome

Designed and implemented a test suite for the communications component of Navitaire's New Skies Airline Reservation System. The test suite is meant to automatically run the system through various common transactions and check for any results that may indicate a bug.Tasks• Study and understand the format of the messages being transceived by the system• Design and implement a test suite for the communications component of the system• Document each test case, indicating their purpose and the process involved in their execution• Prepare a report at the end of the project indicating the results of the effortResults• A working test suite which targets the communications component of the system• A documentation of the test suite highlighting each test case's purpose and mode of execution• A document containing instructions on how to invoke the test suite• A report indicating the progress of the team as well as the results of the effort

Ensured compliance of student-developed mobile applications with the quality standards of various mobile application marketplaces such as the Windows Phone App Store, and Nokia’s Ovi Store. Applied appropriate patches to mobile applications that fail to comply with marketplace standards. Developed mobile applications for Symbian and Windows Phone as contributions to the University’s effort to publish mobile applications for Symbian and Windows Phone devices.Tasks• Submit mobile applications developed by students to the appropriate marketplaces• Develop my own mobile applications in order to increase the University's output• Handle the quality issues raised by Ovi or Microsoft and then apply the appropriate fixesResults• The quota of around 26+ successful submissions have been met• My submission racked up the highest number of downloads among the submitted applicationsReferences• Manager: Ralph Vince Regalado (rvregalado)