Be Responsible and Global

Botnet is a group of malware infected machines or bots. Botnet has become the main mean for cyber-criminals to send spam email, steal personal data, and launch distributed denial of service (DDoS) attacks. Most bots today rely on Domain Generation Algorithm (DGA) to generate a list of candidate domain names in order to establish the connection with the Command and Control (C&C) server. This algorithm is known as domain fluxing, where domain list is changed over time to avoid the limitations that allow researchers to shut down botnets. Uncovering DGA is critical security community. In this research project, we work on developing deep learning-based algorithm to detect algorithmically generated domains (AGDs). We also investigate the different types, attack and defense techniques to preventing DDoS attacks.

Over the past few years, the world witnessed the emergence of a multitude of Internet of Things (IoT); these are smart identity tags, sensors and actuators embedded in real-life environments while connected ubiquitously to the global Internet. The pervasive and autonomous nature of the IoT devices raise many challenges in system design, and development. Specifically, these devices are highly vulnerable to information security attacks including eavesdropping, spoofing, convert channels and distributed denial-of-service (DDoS) attacks. Effective defense must begin with the provision of strong authentication, data integrity and confidentiality protections that are built upon a scalable federated identity and key management infrastructure that supports ad-hoc deployment of IoT devices. Besides, cryptographic, and key management schemes of low computational and communication costs are needed to harden these resource-constrained devices. This joint project between the School of Information and Communication Technologies at the Hanoi University of Science and Technology (HUST) in Vietnam and the College of Computer Science at the National Chiao Tung University (NCTU) in Taiwan aims at developing a pervasive information security infrastructure for IoT devices and deploy an international testbed to conduct demonstration on e-healthcare applications.

E-Government refers to the use of IT by government agencies who are responsible for transforming information between people, businesses, and all other governmental stakeholders. The objectives of e-government include better delivery of public services to people, enhancing business and industry collaborations, citizen empowerment through access to information, or more effective governance. For e-Government services, cyber security presents a unique problem due to the numerous threats that the government agencies must face on daily basis and the scale of the consequences if the threats are not properly handled. In this research project, we develop an AI-driven security information and event management system. Such a system provides automated, continuous analysis and correlation of all activities collected within the e-Government services.