Career

Research Trend Description

One approach of Android security is the analysis for detecting potential information leaks. The current technical analyses (as static analysis, dynamic analysis, hybrid of static and dynamic analysis) only focus on action within a single application, while the coordinated action of several applications for the malicious purpose is becoming popular. This study proposes a hybrid approach that combines static and dynamic analysis to detect information leak as a result of the coordinated action of multiple applications. In this context, we call it inter-application malware.

Scientific papers accepted by journals in ISI (SCIE):

• Nguyen Tan Cam, Van-Hau Pham, Tuan Nguyen, “Detecting sensitive data leakage via inter-applications on Android using a hybrid analysis technique”, Cluster Computing - The journal of networks software tools and applications, ISSN: 1386-7857, Springer, ISI (SCIE), IF: 2.04, (2017), https://doi.org/10.1007/s10586-017-1260-2
• Ly Hoang Tuan, Nguyen Tan Cam, Van-Hau Pham, “Enhancing the accuracy of static analysis for detecting sensitive data leakage in Android by using dynamic analysis”, Cluster Computing  - The journal of networks software tools and applications, ISSN: 1386-7857, Springer, ISI (SCIE), IF: 2.04, (2017). https://doi.org/10.1007/s10586-017-1364-8

 Papers published on Conference proceedings:

• Nguyen Tan Cam, Van-Hau Pham, Tuan Nguyen, “Sensitive Data Leakage Detection in Pre-Installed Applications of Custom Android Firmware”, in 18th IEEE International Conference on Mobile Data Management (MDM2017). DOI 10.1109/MDM.2017.56.
• Phan The Duy, Nguyen Tan Cam, Van-Hau Pham, “eddLeak: Enhancing precision of detecting inter-app data leakage in Android applications”, in 2017 IEEE 9th International Conference on Communication Software and Networks (ICCSN2017). ISBN: 987-1-5090-3820-6.
• Nguyen Tan Cam, Van-Hau Pham, Tuan Nguyen, “Detect security threat in android custom firmware by analyzing applications framework and default settings”, in Proceedings of the 10th National Conference on Fundamental and Applied Information Technology Research (FAIR'10), ISBN: 978-604-913-614-6, DOI:10.15625/vap.2017.00011.
• Nguyen Tan Cam, Van-Hau Pham, Tuan Nguyen, 2017, “Phát hiện rò rỉ thông tin nhạy cảm trên Android bằng kỹ thuật phân tích động”, in proceeding of 2nd Workshop - Một số vấn đề an toàn thông tin (Symposium on Infomation Sercurity - SoIS) 2017. Accepted to publish on Journal of Information & Communications Technology (Tạp chí Công nghệ thông tin & Truyền thông). ISSN 1859–3526.

 

Job Description

A Software Engineer or Lead Software Engineer is required in the UIT Information Security Laboratory (UIT InSec Lab) in the design, development, implementation and management of technical applications and services.

Duties and Responsibilities

• Participate/lead in the design, implementation, management and maintenance of all the applications and services provided by the UIT Information Security Laboratory (UIT InSec Lab)
• Provide technical support to NCL customers and researchers
• Troubleshoot and bug fix
• Develop new technical applications and maintaining existing ones
• Ensure proper IT security implementation and protection of services

Requirements

• A Bachelor’s Degree in Computer Science or a relevant area
• Minimum 1 year of relevant work experience for Software Engineer, and minimum 5 years of work experience for Lead Software Engineer
• Strong programming background in Java, Python, HTML, PHP, etc
• Experience with applications development under Linux systems
• Familiar with open source projects such as OpenStack, Apache, MySQL etc. would be a plus
• Able to work independently with minimal supervision
• Possesses good analytical, problem-solving, communication and interpersonal skills

Job Description

An IT Analyst or Systems Engineer is required in the UIT Information Security Laboratory (UIT InSec Lab) in infrastructure operations and administration, especially in storage, server, networking, IT security administration, computer room operations, technical application development and maintenance.

Duties and Responsibilities

• Participate in the design, setup, operation and management of all IT equipment related to the UIT Information Security Laboratory (UIT InSec Lab)
• Provide 2nd/3rd level technical support to (UIT InSec Lab) Technical Services
• Troubleshoot and resolve faults
• Develop new technical applications and maintaining existing ones
• Ensure proper IT security implementation and protection of services.

Requirements

• Minimum 3 years of relevant work experience
• Tertiary degree holders with relevant specialization or courses/modules/projects
• Able to work independently with minimal supervision
• Possesses good analytical, problem-solving, communication and interpersonal skills
• Love to do network and systems programming, enjoy learning technical details and experimenting with systems and technologies, e.g
  • - Operating and File Systems (Solaris, NFS, OpenStack, Ceph, VMware, Windows, etc)
  • - Network infrastructure (firewalls, routers, switches)
  • - Network services (DNS, DDNS, DHCP, VPN, Web, VRRP, load balancer)
  • - SSL accelerator and application load balancer.
  • - Open source technologies, in particular Linux, Apache, MySQL.
  • - Programming with Perl, PHP, sh/bash, and C.)
  • - IT security principles, access controls, policies, and vulnerability assessment systems.
  • - Relevant certifications such as CCNA, CISSP, will be an advantage.

Job Description

The UIT Information Security Laboratory (UIT InSec Lab) is a national shared infrastructure that provides computing resources, repeatable and controllable experimentation environments, as well as data and application services for cybersecurity R&D community (https://#). UIT InSec Lab is hosted in the University of Information Technology, Vietnam National University Hochiminh City. UIT InSec Lab invites applications for the positions of Research Fellows and Research Assistants in the areas of cybersecurity. The Research Fellows/Assistants will work closely with the Principal Investigators and lab members on one or more research projects conducted in the lab. He/she should possess experience or interest in at least one of the following research areas:

• Malware Analysis
• Multi-agents systems and human behaviour analysis
• Network Security
• Automated traffic generation & cyber-range
• Data anonymization
• Virtualization

RequirementsFor Research Fellow Position

• A PhD degree in a relevant area
• Good Publication record
• Experience in research

For Research Assistant Position

• A Bachelor degree with Honours in a relevant area
• Experience in research