Abandon trust. Choose isolation.
I am the Chief Information Security Officer (CISO) of Quant Space, redefining the paradigm of security in response to the advancements in information and communication technology, the rapid spread of artificial intelligence (AI), and the rise of quantum computing. I focus on building future-oriented security solutions through high-security infrastructure, compliance, the secure implementation of classical and Post-Quantum Cryptography (PQC) algorithms, and Zero-Trust-based AI agent security technology.
- Compliance
- Capable of implementing the technical requirements, architecture design, and formal documentation needed to satisfy certification and compliance requirements up to NIST FIPS 140-2/3 L2~4 and Common Criteria (CC) EAL5+.
- Security Engineering
- Possess a deep understanding of next-generation capabilities such as Java JCA/JCE, Project Panama, heap management, efficient data structures, and design-pattern engineering.
- Highly proficient in Rust — have used it natively from Java as well — and capable of developing software with memory safety and extreme security, including constant-time operations and zeroize-logic design.
- AI Security & Technology Development
- Developing technology that applies Zero-Trust principles to AI coding agents. Using kernel-level sandboxing (Landlock, seccomp, Seatbelt) and a capability-based policy engine, I control an agent's file, process, and network activity at the OS boundary and record every action in a tamper-evident hash-chained audit log.
- Designing a verifiable AI agent framework that can operate even in air-gapped environments, covering TEE-based inference, selective verification with zero-knowledge proofs (zkML), jailbreak defense, and model provenance verification.
- Using Python and Rust to build large-scale Vulnerable-to-Patch (V2P) and Chain-of-Thought datasets for a security-vulnerability-analysis AI agent, and designing its fine-tuning (SFT) pipeline and agentic harness.
- Quantum Information Science & Technology Research
- Through rapid learning ability and a curiosity honed over a long time, I have broad knowledge of quantum information science theory, building outward from a foundation in linear algebra.
- Have also written introductory books and academic papers to share quantum information science knowledge with others.
| Languages | Tools & Ecosystems | DevOps & Infra | OS & Arch |
|---|---|---|---|
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
The highest level of security does not compromise with convenience. I prioritize top-tier security and stability & performance at every stage of system development. Based on defensive programming, I continuously review code to create faster and more efficient data flows, but I never write code for the sake of convenience for other developers. Discomfort is the price paid for stronger security.
All data must be protected without exception. This is why I chose the path of security engineering. Recognizing that individuals can never be completely independent, I do not trust the origin of any information collected from a system perspective, and I strive to design architectures that can operate independently. If you have an environment worth protecting, you must protect it completely. Under any circumstances, data must be kept fully secure from everyone except you and your teammates.
To achieve my goal of military- and government-grade security, I embed the principle of “Abandon trust (Zero-Trust), Choose isolation (Air-Gapped)” into all of my technical designs. This philosophy serves as the foundation for every stage, from architecture design to implementation, and there are no exceptions, whether it is code written by a human or an action performed by an AI agent. I acknowledge my limitations every day and continuously work to transform complex abstract concepts into robust code that anyone can understand.