📍 Taichung, Taiwan · 🌐 bernie6401.github.io · ✉️ bernie6401@gmail.com

• 🎓 M.S. student in Electrical Engineering (Cybersecurity) at NTU, GPA 3.87/4.3 — concentrations in Computer Security, Machine Learning, and Malware Reverse Engineering
• 🕵️ Currently a Penetration Tester @ CHT Security — conducting security assessments and penetration tests for enterprise clients
• 🛡️ Former IT Security Engineer Intern @ National Taiwan University Hospital — built firewall/threat-intel automation and a GPU-accelerated credential auditing pipeline
• 📄 Published in Applied Sciences (2024) on SQL injection test prioritization; second paper on LLM-assisted API discovery under review at IEEE TIFS
• 🚩 CTF player — finalist at AIS3 EOF 2023/2024 and Cyber Security Competition 2023; ranked in DeadFace CTF, PicoCTF, and TSCCTF
• 🔍 Focus areas: reverse engineering, malware analysis, and web/DFIR security using IDA Pro, x64dbg, and Burp Suite
• 📝 I write notes and walkthroughs on Personal Blog Website
• 💬 Ask me about CTF challenges, reverse engineering, or malware analysis

Penetration Tester, CHT Security — Jul 2026 – Present

• Perform penetration tests and security assessments for enterprise and government clients

IT Security Engineer (Intern), National Taiwan University Hospital — Dec 2023 – Jun 2024

• Built and maintained a firewall management system integrating external threat intelligence feeds for automated IP filtering
• Resolved frontend Out-of-Memory issues by redesigning data structures and indexing for large-scale IP queries
• Designed an IP normalization/aggregation module handling mixed formats (IPs, ranges, wildcards, domains)
• Built a GPU-accelerated weak-password auditing system with hashcat and enhanced wordlists

Publications

• TPSQLi — Test Prioritization for SQL Injection Vulnerability Detection in Web Applications, Applied Sciences, 2024 (DOI: 10.3390/app14188365)
• ProDirScan-GPT — A Hybrid LLM-Powered Framework for Enhancing API Discovery in Mobile Application Security Audits (under review, IEEE TIFS)

IDA Pro · x64dbg · Sysinternals Suite · hashcat