Story about UniBean

Story of Transformation

Unibean Consultant is found by Anthony Lai (aka Darkfloyd) since 1999. At the beginning, Anthony and other HKUST fellows work on it for software and system development project, as partners married and Anthony has experienced a hacking incident by a system development manager in a local Hong Konger-invested listed bank, the manager hacked into his fellow's machine and installed a Dameware remote controller software so as to monitor his parnter's work without pre-notification, which is not investigated or even allowed by IT manager and auditor finally even reporting to police, he is inspired to commit to application security and dig the bad guys out, more than less like a dark knight, and the objective is to help the people and companies to against external and internal attackers.

"All that is necessary for the triumph of evil is that good men do nothing" - Edmund Burke

Biography

Anthony is the lead security consultant and researcher, connecting himself to other world class researchers for ideas and projects. He has worked in various banks and MNCs and done various security projects, penetration test assignment and training in government and commercial sectors.

He has spoken in two top security conferences, Blackhat and DEFCON in 2010 and 2010-2012 respectively in US and at Hack-In-Taiwan conference (www.hitcon.org). Anthony has found the first security research group, VXRL(www.vxrl.org), in HK and hold the first security conference, VXCON, since Dec 2010. 

Anthony holds CISSP, CISA, CSSLP and CISM for general security certifications. Committing with specialist professionals, he holds SANS GREM (Gold paper), GCFA and GWAPT. Meanwhile, he is the chairman of OWASP (Hong Kong Chapter) and project committee in PISA.

Research, Presentation and Publication

APT Research (Singapore, Mar 2014)

URL: http://www.suitsandspooks.com/2014/03/suits-and-spooks-singapore/

DDoS Black and White Kungfu (lead by Tony MIU, co-author with Kelvin Wong and Alan Chung),

presented in DEF CON 20 and AVTokyo Security Conference in 2012

URL: http://www.youtube.com/watch?v=GrvKtMJbCQE

URL: http://en.avtokyo.org/avtokyo2012/speakers#LAI

Evidence of Advanced Persistent Threat: A case study of malware for political espionage in IEEE

Malware 2011 Conference, co-author with Frankie Li and DDL:

URL: http://www.computer.org/csdl/proceedings/malware/2011/0031/00/06112333-abs.html

Facebook Forensics (lead by Kelvin Wong and co-author with Jason Yeung, Dr. Leng Lee, P.H

Chan) in 2011:

URL: www.fbiic.gov/public/2011/jul/ facebook forensics -finalized.pdf

URL: http://hakin9.org/hakin9-extra-711-7/

Comprehensive Blended Malware Threat Dissection: Analyze Fake Anti-Virus Software and PDF

Payload. Published in SANS in 2010

URL: http://www.sans.org/reading-room/whitepapers/malicious

APT Secrets in Asia presentation in DEF CON 19 conference and AVTokyo in Y2011 as well as

Codegate security conferences in 2012, co-author with his Taiwanese APT research fellows from

Xecure Lab.

URL: http://www.youtube.com/watch?v=S8cyDdyVHAc

URL: http://en.avtokyo.org/avtokyo2011/speakers#Anthony

Power of Chinese Security with Jacob Appelbaum and Jon Oberheide in DEF CON 18 (in 2010)

conference (Analyzing China Green Dam software security):

URL: http://www.youtube.com/watch?v=687aMDiHqyQ

Balancing Pwn Trade Deficit with Val Smith and Colin Ames in Blackhat USA 2010 and DEF CON

18 (Analyzing China-made malware).

URL: http://www.youtube.com/watch?v=kEYziNBrltA

URL: http://www.youtube.com/watch?v=IHU_YiO0rkQ

Google Scholar

URL: http://scholar.google.com.hk/citations?user=YcjzoFkAAAAJ&hl=en

Training and Lecture

Reference Clients

Media and Interview

Anthony has been interviewed to express expert and technical opinion by media including TVB, Cable TV, Hong Kong Police, RTHK, SCMP, MingPao and Apple Daily.

TVB新聞透視: 看不見的戰爭

URL:http://www.youtube.com/watch?v=IArMn-hbBSU

捷旅700客私隱任睇 22機構網上泄3000個人資料

URL:http://hk.news.yahoo.com/%E6%8D%B7%E6%97%85700%E5%AE%A2%E7%A7%81%E9%9A%B1%E4%BB%BB%E7%9D%87-22%E6%A9%9F%E6%A7%8B%E7%B6%B2%E4%B8%8A%E6%B3%843000%E5%80%8B%E4%BA%BA%E8%B3%87%E6%96%99-211413090.html

補習網1.2萬人私隱任下載 告知資料外泄仍懶理 議員促修例嚴懲

URL:http://hk.news.yahoo.com/%E8%A3%9C%E7%BF%92%E7%B6%B21-2%E8%90%AC%E4%BA%BA%E7%A7%81%E9%9A%B1%E4%BB%BB%E4%B8%8B%E8%BC%89-%E5%91%8A%E7%9F%A5%E8%B3%87%E6%96%99%E5%A4%96%E6%B3%84%E4%BB%8D%E6%87%B6%E7%90%86-%E8%AD%B0%E5%93%A1%E4%BF%83%E4%BF%AE%E4%BE%8B%E5%9A%B4%E6%87%B2-211020070.html

網上保安專家組隊 年尋萬人外泄資料

URL: http://news.sina.com.hk/news/20130123/-2-2878493/1.html

Achievement and Award

Senior information security professional category, ISLA (ISC)2 (2013)

https://www.isc2.org/PressReleaseDetails.aspx?id=10857

http://finance.yahoo.com/news/isc-2-r-announces-honorees-010000266.html

Community

VXRL has been invited as one of the advisory members in OGCIO (www.ogcio.gov.hk) Information Security Roundtable meeting in Y2013 after Swoden's case. Moreover, VXRL officially reported over 100,000 leaked personal records to PCPD (www.pcpd.org.hk) before the real criminals manipulate the victims' privacy. In addition, Anthony has partnered with other researchers to give workshops at Law Enforcement and NGOs.