Swan's Lab

About me

• 03.26.94 M
• 이승환 (Lee SeungHwan / Swan Lee)
• South Korean

• chamchist@gmail.com

  • Malware researcher
  • Reverse engineer
  • Digital forensicator

Educations

• 2013 ~ 2017 B.En. Computer Engineering
  • YoungNam university
    • Member of @Xpert (Security research club)
    • Intern of Software security and optimization Lab
• 2017 ~ 2019 Complete a course in M.En. Computer Engineering
  • ChungNam university
    • Researcher of Software structure and security Lab
    • Teaching Assistant of Logic circuit, System & Network security, Web programming class
• 2014.7 “Principle and response of web hacking attack” by KISA (Korea Internet & Security Agency) Academy
• 2014.8 “Infringement Incident Response Practice” by KISA Academy
• 2015.8 “Digital Forensics” Completion by KISA Academy

Skills

• Malware analysis & Reverse engineering
  • ‘Malicious code discrimination system based on API call sequence of malicious code’ Copyright registration
  • Anti-Reversing bypass research
    • Branch Observation Tool (B.O.T)
    • Wrote thesis about Anti-Reversing skills based on API
    • Python scripts editing of Cuckoo Sandbox for printing (executed instrucutions / total instuructions)
  • Malicious mail analyst in Republic of Korea Army’s cyber defense department
  • Research for classifying malware families to using code coverage softwares
• Server & Network managing
  • Build IDS cluster using Bro(now changed to Zeek) and visualization for ‘Traffic distribution control system for Super Computer 5’ at KISTI Super Computer Center Vid1
  • Developed ‘Attendance System for foreign language course’ at Yeungnam University (DBMS: Mysql, Language: PHP)
  • Server admin and build IDS/IPS using Suricata for @Xpert
  • Made video lecture “How to use wireshark for newbie”
• Pentest
  • StageFright vulnerability test to AndroidWear OS in ’SmartWatch Security Threat Identification Study with AndroidWear’ at NSR (National Security Research Institute)
  • Smart car key’s RF signal analysis for in ‘Research on vulnerability of car and wireless keyboard using RF communication’ at Yeungnam University Vid1 Vid2
  • Drone’s zigbee signal analysis for ‘Zigbee protocol analysis technology research’ at NSR
• Digital Forensics
  • Windows Jump list parser
  • Digital Forensic Challenge 2018 World 5th, Domestic 4th Team : XyzzyShift
• AI (Deep learning)
  • Still working..
• Awarded
  • Republic of Korea Army Cyber defense competition, 3rd, 2-Star general award
• Presentations
  • 2015.5 ‘64bits Stripped ELF Reversing’ topic at the KUCIS (Korea University Clubs Information Security) SeoGyeongGang Seminar hosted by the National Police Agency and KISA
  • 2016.9 ‘Let’s hack wireless devices’ topic at KUCIS SeoGyeongGang Seminar hosted by the National Police Agency and KISA
• Eng to Kor Translations
  • The Gost Vulnerability
  • Experts Found a Unicorn in the Heart of Android
  • SECUINSIDE CTF 2013 Write-Up by PPP
  • 2016 Holyshield Write-up
  • 64bits stack based buffer overflow
  • Exploit IE Using Scriptable ActiveX Controls

Hobbies

• All of cultural things (Movie, Music, Reading, Arts etc..) especially classics!
• Traveling
  • Hongkong
  • Macau
  • Singapore
  • Japan
  • Romania
  • Turkey
  • Los Angeles
• Learning Languages (Level 1 to 10)
  • Korean - Level 10
  • English - Level 5
  • Japanese - Level 1
  • Chinese - Level 1
  • French - Level 1
  • Romanian - Level 0
  • .. and more