Personal portfolio / September 2026

Understand the system.
Test the assumptions.

I’m Bao, a cybersecurity student in Da Nang. I study how systems fail, how security controls behave, and where AI can help an analyst make a better decision.

171 labs completed · PortSwigger Web Security Academy

Working toward CWES · COAE · CPTS →

Proof at a glance

View evidence →
171PortSwigger labs completed
GoogleCybersecurity Professional Certificate
HTBAcademy paths & machine study
NextCWES · COAE · CPTS

Selected projects

All projects →
01

Embedded Linux security

Firewall validation and network observability on webOS OSE.

LG lab · Team project
Jul – Aug 2026
02

AI-assisted Wazuh triage

Alert processing, event correlation, and a deterministic fallback.

Backend & DevOps
Aug – Dec 2025

Latest research & write-ups

All writing →

Loading the latest notes…

From the research notebook

A useful result should survive a second look.

Short studies in web security, SOC data quality, and AI trust boundaries. Each note includes a question, a reproducible experiment, and the limits of its findings.

Browse research notes →
SQL query experiment: parameterized queries passed all six fixtures; string concatenation passed three.
Research note 01 · SQL injection & parameter binding