CV

BLOG

• 关于OWASP常见Web漏洞的调研报告(update: 2024-10-28)
• 关于OWASP-TOP10-LLM的调研报告(update: 2024-11-13)
• Claude 3.5与ChatGPT越狱提示(update: 2024-11-20)
• 大语言模型的对抗性攻击（Lilian Weng）(update: 2024-12-07)

CONTACT

• Base: 505, Bldg Diyiguan, Beihang University, 37 Xueyuan Rd, Haidian Dist, Beijing, CHINA
• Tel: (+86)13516305590
• Email: jamiepw214@gmail.com
• GitHub: github.com/JamiePW

EDUCATION

• 2023.09-now: M.S., Beihang University
• 2024.01-2024.06: Exchange student, Université catholique de Louvain
• 2019.09-2023.06: B.E. in Information Security, Beihang University
  • Overall GPA: 3.85/4
  • Rank: 2/50

INTERNSHIP & ACADEMIC EXPERIENCE

• Internship at BITMAIN (2024.10-2025.01, Beijing)
  • Security Operations: Audited over 40 daily/monthly security hosting reports, authored and revised SOP documents totaling approximately 30,000 words for security operations, and maintained the software whitelist.
  • Security Testing: Participated in security testing for internal systems, with hands-on experience addressing OWASP TOP 10 web vulnerabilities (e.g., SQL injection, XSS, CSRF, SSRF).
  • Technical Research: Researched offensive and defensive techniques for large language model (LLM) security, producing 5 in-depth reports totaling over 40,000 words (see my BLOG).
• Graduation Design(Thesis): Research on Implementation of High-Order Correlation Power Analysis of AES Implementation with Combined Countermeasures
  • Tutor: Prof. Lu Jiqiang
  • Abstract: In this paper, we studied an AES implementation that combines countermeasures such as affine masking and shuffling. We reproduce the power consumption model and perform computational optimization to implement higher-order correlation power analysis in 12 different scenarios, and evaluate the results at a finer granularity. We also propose a method to calculate the effectiveness of the attack results.
  • Code: github.com/JamiePW/ASCADv2-Extracted-Analysis
• Internship at Institute for Network Sciences and Cyberspace of Tsinghua University (2022.06-2022.08)
  • Tutor: Associate Prof. Zhang Han
  • Work during internship: I read and studied more than 20 papers in top journals or conferences related to my major, and gave presentations about typical cases. The total code amount of the project is about 2000 lines, and the effective code amount of a single file can reach up to 600 lines.
  • Code: github.com/JamiePW/tpds-socket
• Term Project of Machine Learning: Implementation of a Deep Learning Side-Channel Analysis Scheme for Boolean Masking Protected AES
  • Tutor: Associate Prof. Zhang Xiaoming
  • Abstract: Conduct side-channel analysis using MLP and CNN models based on TensorFlow and scikit-learn frameworks on the ASCAD open-source dataset, and compare attack results under different leakage models.
  • Work during internship: Experimental implementation and result analysis, as well as writing parts of the report.
  • Code: github.com/JamiePW/simple-ASCAD-DLSCA
• Term Project of Network Security Innovative Experiment: Security Vulnerability Exploitation and Defense for Small Networks
  • Tutor: Prof. Mao Jian
  • Responsibility: I built Linux VMs and network environments, implemented specific attacks and defenses in them(buffer overflow, weak password cracking, network scanning, SQL injection, etc.).
• Term Project of Digital Circuit and Systems: FPGA-based SM4 algorithm implementation and optimization
  • Tutor: Prof. Guan Zhenyu
  • Responsibility: Implementation(Verilog) and simulation(Modelsim) of SM4 cryptographic algorithm.

SKILLS

• Languages
  • English: Fluent, IELTS Academic 7.5
  • Mandarin Chinese: Native
• Programming
  • familiar with C/C++/Java/Python
  • Learning TensorFLow/PyTorch
  • beginning at SQL/Assembly Language/Golang/Rust
• Network Tools
  • beginning at OpenSSL/GunPG/OpenVPN/Nmap/Wireshark/netwox/hping3/HashCat/Snort

CURRICULUM ACTIVITIES

• 2024.11-now: Member of Haidian Ballad Singers Association of Beijing
• 2020.04-now: Member of Tianxiao Quyi Troupe of Beihang University

HONORS & AWARDS