Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 
avatar of Arun

Arun

Arun has asked 4 questions and find answers to 0 problems.

Stats

20
EtPoint
0
Vote count
4
questions
0
answers

About

Arun is pursuing his career in Information security and working in Netskope, One of a leading CASB as a Cloud Security Researcher & Developer from past 5.5 + years at Bangalore,India.

His role is to do security analysis of cloud apps,vulnerability research,assessing cloud apps & its risks , threat research.

Before turning to security researcher at Netskope and IT Administrator,He did his Masters of Science in Advanced Computer Network @ Glasgow Caledonian University,Glasgow,Scotland and Bachelors of Technology in Information Technology from Anna University,Chennai. He is also a certified CCNA ( Cisco Certified Network Associate Certificate),ITIL Foundation Certified and he is a CCIE R&S(Written) personnel too. His specialization in programming language includes Python,Shell scripting,SQL & MongoDB Basics.

He is pursuing and aiming to obtain his ISC^2 CISSP certification with in end of 2019.

His interests include malware analysis, vulnerability research and threat intelligence. He likes to meet new people and love to share his ideology and like to know more into information security & threat space in-order to diagnose and deliver effective solutions for complex problems.

At Netskope ,He does work on

►Developing internal frame works for data collection & reporting using Python/Shell scripting.

►Vulnerability and Security Research & Analysis on Cloud Apps.

►Basic Malware Analysis ( Static & Dynamic ) and Writing signatures to hunt them.

►Ransomware Behavioral Analysis ( Automated way of replicating ransomware and gathering intelligence Using open source Cuckoo Sandbox ) and Hunting for new variants of them daily from various resources.

►Keeping track of new vulnerabilities/Malware that poses significant risk from SaaS Apps.

► Netskope's Threat Detection Capabilities ( Sandbox , Heuristic Engines , File Decomposers etc ) QA.

►Threat ( Ex: End-Point-Response Services like ( Carbon Black EDR ) , Cylance , Juniper Threat Protection , Farsight pDNS( Passive DNS ) and NOD ( Newly Observed Domains and More etc. ) Product Evaluation & Integration and Testing.

► Developing new vulnerability scanning framework & Conducting vulnerability scans on SaaS apps on a routine or ad-hoc basis.

►Blogging on identified vulnerabilities on SaaS Apps.

► Creating a ‘Malware Lab’ on an isolated network and Collected & Maintaining around 2 Million + Malware Artifacts from various resources and managing them using open source Malware Management framework called VIPER.

►In-house malware processing framework using various Dynamic & Static Analysis Engines which can process/replicate the malicious samples in a daily manner and gives a complete verdict of each file sample analyzed.

► Developed a robust blacklist threat Intelligence content generation ( Domain , URL , IP , File Hash ) framework.

Arun answers