I am Linh Cao, a Software Engineer at Yahoo!. I got my Master's degree in Library and Information Science at the University of Illinois (UIUC). My research focused on building distributed honeypot networks connecting national labs and universities. The system is being deployed at the National Center for Supercomputing Applications (NCSA) for real-time sharing of security alerts.
During my Master training, I have accumulated:
(1) a strong theoretical foundation of information sciences (probabilities, statistics, mining unstructured data coursework), and
(2) practical experience of operating large scale, secure data pipeline (continuous integration, SSH honeypot, automated peer-to-peer security intelligence gossiping up to millions of events per second).
Research
I have participated in the following research projects.
-
Distributed Honeypot and Security Intelligence Sharing
The SDAIA project addresses a critical need for security solutions for open science networks, such as the Science DMZ model, and addresses the special architecture of these networks through a virtual security appliance that benefits from shared intelligence to protect the site, and further provide intelligence to the wider community. The poster will present the unique architecture of SDAIA and its reliance on Apache Kafka. Apache Kafka is designed to distribute message extensively and it is easy to scale out. This system helps sharing real-time attacks from honeypot to other components in event store for quickly spreading threat among open science networks.
Teaching
Teaching Assistant for Instructional and Technology Design Office, School of Information Sciences, UIUC
Code Samples
A state machine implementation of TCP transport layer in Python.
A HTTP proxy that supports caching and partial content streaming.
A Python client that links Kafka and ZeroMQ.
Affiliations
