Matthew Yu Email & Phone Number

The way I think about security is to imagine a room where you keep your valuables. You secure this room with a lock and you can bypass this lock with a key. Now replace the lock with a server challenge and the key with a password. By providing the password, the treasure is revealed. So what happens if someone takes a photo of your key? Well, they can recreate the key and get into the room (see research by Professor Savage @ UCSD: http://www.jacobsschool.ucsd.edu/news/news_releases/release.sfe?id=791). This can be likened to eavesdropping on the line. Great, so what can you do? You can obfuscate the ability to see the key (encryption), but is that enough? You can add a keypad to the door so now it only opens with a pin (something you know) along with the key (something you have). You can even put a fingerprint reader (something you are), etc etc. But what happens if your key is stolen, your thumbprint is lifted, and your PIN is leaked?My point is this -- there are many ways to make it more difficult for a motivated individual to get into your room, but you can never forget that by having the concept of a key you must be ready to defend against the attackers that will line up at your door. I am a security enthusiast with an interest in new research and breach analysis. I don't declare to be an expert in any one topic, but I am an agile leader eager to learn more.

Listed skills include Java, Apache, Software Engineering, Python, and 28 others.