Right now I lead AI research at SmartM2M, building SmartX: an all-in-one offensive security harness that runs on a local model, so a client's vulnerability data never leaves their own network. Before that I did a PhD in Busan, where I built CIPHER, a pentesting model that beats models ten times its size, and showed you could take over a DJI drone mid-flight over Wi-Fi.
I also keep two side projects running for the Indonesian Muslim community. I like building things that people actually use.
An all-in-one offensive security harness. It runs on a local model, so customer vulnerability data stays on customer infrastructure. A 30% improvement in vulnerability detection. This is the day job.
A pentesting LLM trained on real write-ups. It outperforms models ten times its size on the hard HackTheBox machines, which still surprises me.
Full control of a DJI Mini SE mid-flight through a passive man-in-the-middle over Wi-Fi. There is a video of it, and it is the demo people ask about most.
A voice assistant for muroja'ah that listens while you recite and answers from Islamic references rather than from vibes.
A live map of Islamic study sessions across Indonesia. Bots read the schedules posted in WhatsApp and Telegram groups and put them on the map, so nobody has to scroll a group chat to find a kajian nearby.
Custom hardware-security-module engines for OpenSSL, mbedTLS, WolfSSL and GnuTLS, plus MECHA, a threaded crypto API that came out 82.8% faster than context switching.
Memory isolation for RISC-V. Tagged memory at under 1% overhead, and instruction-level isolation at 0.88%. Both published, both done.