| Cyber Security Researcher

Last Updated: 2023/02/25

Work Experience

2022.11 - present

Elastic, Disributed (Senior Security Research Engineer)

Endpoint Security, mainly research and development related to EDR (Elastic Defend)

2013.04 - 2022.10

NTT, Tokyo, Japan. (Security Researcher)

ResearchTopic1: A Detection Method of CodeClone Vulnerability based on Similarity of Assembly code
ResearchTopic2: An Investigation of Method to Assist Identification of Patched Part of the Vulnerable Software Based on Patch Diffing
ResearchTopic3: A Pilot Study on Consumer IoT Device Vulnerability Disclosure and Patch Release in Japan and the United States
ResearchTopic4: OEM Finder: Hunting Vulnerable OEM IoT Devices at Scale
Visiting Researcher at Carnegie Mellon University, CyLab, Pittsburgh, USA (2016.10-2016.12)

2012.08 - 2012.09

JPCERT Coordination Center, Analysis Center, Tokyo, Japan. (Summer Internship)

Studied how to analyze malware and exploit code

2011.09 - 2011.11

Microsoft Corporation, Security Response Team, Tokyo, Japan. (Summer Internship)

Involved in the project which is related to Windows Security Update

2011.08 - 2011.09

Google Inc., Search Team, Tokyo, Japan. (BOLD Internship)

Involved in the project which is related to large-scale distributed processing system

Award & Honors

2019 Cybersecurity Encouragement Prizes from The Minister for Internal Affairs and Communications
2019 15th Information Security Culture Award from INSTITUTE of INFORMATION SECURITY
2018 Special Award from Head of the NTT Service Innovation Laboratory Group
2017 Young Researcher Award from Multimedia, Distributed, Cooperative, and Mobile Symposium (DICOMO) [link]
2016 Achievement Award from Head of the NTT Secure Platform Laboratories
2015 Special Award from Japan Network Security Association (JNSA) for CTF for GIRLS (Leader) [link]
2014 Special Award from Head of the NTT Service Innovation Laboratory Group
2013 1st Place, IWSEC Cup(Malware Analysis Competition), Team:TeamEnu (Leader) [link]
2013 Artistic Award MWS Cup(Malware Analysis Competition), Team:TeamEnu (Leader) [link]
2013 SFC STUDENT AWARD from Keio University Shonan Fujisawa Campus [link]
2012 1st Place, Hardening One(Security Contest), Team: PacketMonster (Leader) [link]
2012 1st Place, Hardening Zero(Security Contest), Team:PacketMonster (Leader) [link]
2009 Artistic Award MWS Cup(Malware Analysis Competition),Team:ISC [link]

Research Papers & Posters

Asuka Nakajima, Takuya Watanabe, Eitaro Shioji, Mitsuaki Akiyama, Maverick Woo, "A Pilot Study on Consumer IoT Device Vulnerability Disclosure and Patch Release in Japan and the United States" Proceedings of the 14th ACM ASIA Conference on Information, Computer and Communications Security (ASIACCS 2019) July 2019,pp.485-492. [slide] [doi]
Asuka Nakajima, Ren Kimura, Yuhei Kawakoya, Makoto Iwamura, Takeo Hariu, “An Investigation of Method to Assist Identification of Patched Part of the Vulnerable Software Based on Patch Diffing”, Multimedia, Distributed, Cooperative, and Mobile Symposium, June 2017, Japan [Young Researcher Award] [paper]
Asuka Nakajima, Makoto Iwamura, Takeshi Yada, "A Detection Method of Reproduced Vulnerability Based on Similarity of Machine Code Instruction", Computer Security Symposium, October 2015, Japan [paper]
Asuka Nakajima, “Design and Implementation of a Network Sonification System for Anomaly Detection”, Poster Presentation, Grace Hopper Celebration 2011, Oregon, USA
Asuka Nakajima, Kunihiko Shigematu, Masayoshi Mizutani, Keiji Takeda, Jun Murai, “Design and Implementation of a Network Sonification System for Anomaly Detection” Proceedings of the 73th Annual Convention IPS Japan, vol.1, 485-487, March 2011, Japan [paper]
Asuka Nakajima, “Design and Implementation of a Network Sonification System for Anomaly Detection”, Poster Presentation, Open Research Forum 2010, Japan

Research Presentations (International Conferences only)

Asuka Nakajima, "OEM Finder: Hunting Vulnerable OEM IoT Devices at Scale", BlackHatEurope 2019, December 2019, United Kingdom [pdf]
Asuka Nakajima, "Pilot Study on Semi-Automated Patch Diffing by Applying Machine-Learning Techniques", ROOTCON 13, September 2019, Republic of the Philippines [pdf]
Asuka Nakajima, “Similarity Calculation Method for Binary Executables”, Malware Analysis: From Large-Scale Data Triage to Targeted Attack Recognition, Dagstuhl Seminar 17281, July 2017, Germany [pdf]
Asuka Nakajima, “If You Find One, There are Probably More! A Detection Method of “Reproduced” Vulnerability.”, Positive Hack Days VI, May 2016, Russia [slideshare]

Invited Talks & Lectures

Mika Devonshire, Seungjoo Kim, Asuka Nakajima, Neil Wyler, "Locknote: Conclusions and Key Takeaways from Day 2", BlackHatAsia 2020, Virtual Conference, 2020.10 [link]
Asuka Nakajima, "Current State of IoT Security Hosted By Asuka Nakajima", BlackHat Europe 2019 Community Session, United Kingdom, 2019.12 [link]
Mika Devonshire, Asuka Nakajima, Ashley Shen ,"Women in Security Meet Up", BlackHatAsia 2019 Community Session, Republic of Singapore, 2019.04 [link]
Asuka Nakajima, "Finding and Addressing "Software Vulnerabilities", Law and Computers Association of Japan, Japan, 2019.01
Asuka Nakajima, "About My Activities Related to Software Vulnerabilities", Poc Meeting, JPCERT Coordination Center, Japan, 2018.11
Asuka Nakajima, "Reverse Engineering Dojo: Enhancing Assembly Reading Skills", Advanced Information Security Summer School(AIS3), Taiwan, 2018.07 [link]
Asuka Nakajima, "About my New Book", Kodansha Ltd., Japan, 2017.11 [link]
Asuka Nakajima, "Reverse Engineering Dojo: Enhancing Assembly Reading Skills", Advanced Information Security Summer School(AIS3), Taiwan, 2016.08 [link]
Asuka Nakajima, "About CTF for GIRLS", The 43rd ISS Square Horizontal Workshop, Japan, 2016.01. [link]
Asuka Nakajima, "Our Activities Related to the Countermeasures Against Malware", Seikei University, 2015.12
Asuka Nakajima, "Assembly Dokkyo", Security Camp Caravan in Osaka, Japan, 2015.11 [link]
Asuka Nakajima, "Working at Security Industry", Panel Discussion, Japan Network Security Association(JNSA), Japan, 2015.05. [link]
Asuka Nakajima, "About my Personal Experiences", IT Human Resources Working Group, Ministry of Economy, Trade and Industry, Japan, 2015.03 [link]
Asuka Nakajima, "Our Activities Related to the Countermeasures Against Malware", Seikei University, 2014.12
Asuka Nakajima, "Reccomendation to Participate the Security Contest", Nara Institute of Science and Technology(NAIST), 2014.11　 [link]
Asuka Nakajima, "Cybersecrity, from the point of the view of top young security engineer", Panel Discussion, U.S.‐Japanese Cybersecrity Symposium, National center of Incident readiness and Strategy for Cybersecurity(NISC) / American Chamber of Commerce in Japan(ACCJ), Japan, 2014.10 [link]
Asuka Nakajima, "How to become Security Engineer", Edomae Security Study Meeting, Japan, 2014.10 [SlideShare]
Asuka Nakajima, "About CTF for GIRLS",Woman in Information Technology(WiT), Education Network for Practical Information Technologies(enPiT) 2014.10 [link]
Asuka Nakajima, "Working at Security Industry", Panel Discussion, Japan Network Security Association(JNSA), Japan, 2015.04. [link]
Asuka Nakajima, "Me and Security and Past and Future", Security Camp Forum, Japan, 2014.02 [link]
Asuka Nakajima, "Me and Security and Past and Future", JUAS(Japan User Association of Information Systems) Future Project, Japan, 2014.01 [link]
Asuka Nakajima, "Report of DEFCON 2011", Trusted Computing Group, Japan Regional Forum, November,Japan 2011.12 [link]

Commitee

2020.04 - Present

Black Hat USA (Guset Review Board)

2017.11 - Present

Black Hat Asia (Regional Review Board)

The world's leading information security event, providing attendees with the very latest in research, development and trends. [Web Site]

2014.04 - Present

SECCON Executive Commitee (Member)

The largest CTF organizer in Japan [Web Site]
SECCON CTF is one of the qualified contest from DEFCON CTF in 2014, 2015

2014.04 - Present

CTF for GIRLS (Founder & Leader)

The first female infosec community in Japan [Web Site]
Established with the goal of creating a community to be able to share issues and ask any questions in an informal environment for women who are interested in information security technology
Held female only CTF workshop 16 times and female only CTF 4 times.

2020.08

14th USENIX Workshop on Offensive Technologies (WOOT '20) (Program Committee)

WOOT aims to present a broad picture of offense and its contributions, bringing together researchers and practitioners in all areas of computer security. WOOT provides a forum for high-quality, peer-reviewed work discussing tools and techniques for attack. [Web Site]

2019.05

Microsoft BlueHat Shanghai 2019 (Content Advisory Board)

Invitation-only international security conference presented by Microsoft [Web Site]

Education

2009.04 - 2013.03

Keio University, Faculty of Information and Environment

Bachelor of Arts in Environmental Information
Bachelor Thesis:“Design and Implementation of a Network Traffic Sonification System for Anomaly Detection” [pdf]

Misc

Capture The Flag (CTF)

19th Place, DEFCON 20 Capture the Flag, Finals *
12th Place, DEFCON 19 Capture the Flag, Finals *
4th Place, CODEGATE 2011 International Hacking Defense Contest(CTF) *
*As a member of team sutegoma2 (Mainly as a support member) [CTF time]

Book

"Cyber Attack", Bluebacks, Kodansha Ltd. 2018.01 [Amazon]
Yougest author in Bluebacks series
Best Seller in Japan.

Drama

"CODE:MIRAGE", TOHOKUSHINSHA FILM CORPORATION, OMNIBUS JAPAN INC. [Staff List]
Supported and supervised the acting which is related to the hacking scene

CVE

CVE-2019-5922 (Microsoft Teams), [Mitre]
CVE-2018-0692 (Baidu Browser), [Mitre]
CVE-2013-6932 (IrfanView), [Mitre]

Patent(TBD)

Security Camp

Multi-day group training programs for selected students throughout Japan
Tutor of Software Security Class, 2014.08
Participant of Binary Analysis Class, 2009.08

Qualification

TOEIC IP Test 950 (2020/02)
Information Security Specialist (National Qualification in Japan)
Grade 2 LockSmith

Asuka Nakajima | Cyber Security Researcher