duc-phong le

* Identify use cases used in banks required data privacy and data protection * Identify requirements as well as potential technical solutions for each use case * Study cryptographic techniques (FHE, Multiparty computation, ZKP) as well as non-cryptographic techniques (data obsfucation, data anonymization, synthetic data) to provide the data privacy * Evaluate the existing commercial solutions based on a list a testing criteria

Working at Canadian Institute for Cybersecurity, a comprehensive multidisciplinary training, research and development, and entrepreneurial unit that draws on the expertise of researchers in the social sciences, business, computer science, engineering, law and science.

* Profiling online user behaviors based on event log files * Extracting features of user behaviors * Applying machine learning techniques to detect anomalies * Assessing threats and risks of user activities based on the models trained. * Proposing countermeasures to mitigate risks.

* Surveying threat models * Extracting and analysing CVE, CWE, NVD and CAPEC databases * Building a threat modeling based databases from CVE, CWE, NVD and CAPEC * Performing vulnerabilities and risk scoring

* Analyze customers' security requirements for automotive industry with a focus on Instrument Clusters * Define corresponding security & privacy concepts * Apply STRIDE model to perform Security and Privacy Threat Analysis, Risk Assessment (TARA) * Analyze HW/SW requirements/Architecture specification to propose Risk Treatment approaches for potential threats and risks

* Working in projects related to either Industry or Academy. * Generating expertise project technical reports. * Creating Patents and Technical Discloures * Writing academic papers submitted to local/international conferences/journals. * Following-up the latest technical developments and to contributing to the internal innovation in the security in cryptography area. * Representing I2R to present in conferences, exhibitions, and key industry events. * Project "SAT Solvers" * Performing cryptanalysis (algebraic attacks) against lightweight block ciphers such as Present, Simon. * Project "Blockchain-based Asset and Process Tracking" * Developing a blockchain-based application for tracking digital asset and process in manufacturing firms.

Doing code review and Identifying vulnerabilities cryptographic algorithms, more particularly on payment systems with regards to side-channel and fault injection attacks. Penetration Testing and Certifying the security of these cryptographic algorithms. Generating expertise reports in compliance with industry best standards. R&D the state-of-the-art side-channel attacks such as SPA, CPA, Template Attacks on various algorithms used in embedded systems (AES, DES, RSA, …) Developing new methodology/Improving the existing testing tools

Working on the project: OSA (Open Simulation Architecture), an open component-based architecture for discrete-event simulations based on the ObjectWeb's Fractal component model and the Eclipse platform.

Applied Cryptography, Implementations, Security