systems-security

Advanced EDR Evasion via AI Telemetry Spoofing & WASM Sandboxing. Project Onyx is a PoC Red Team pipeline designed to demonstrate advanced evasion techniques against modern EDR systems. It shifts away from traditional signature-based obfuscation towards behavioral camouflage and strict environmental keying.

Using PPG Obtained via Smartphone Cameras for Authentication

Whispers in the Machine: Confidentiality in Agentic Systems

Linux file access Sandbox.

Research notes and code for memory-only Windows PE execution, loader-state reconstruction, and SMB-over-QUIC SEC_IMAGE loading.

Systems security research portal bridging compile-time intent to runtime enforcement. Features: Sentinel-CC, Sentinel Runtime, Hyperion XDP, and Telos.

Zero-trust Linux infrastructure hardening and adversarial simulation range deploying a headless, text-based Debian target server and a Kali Linux attack node over an isolated software-defined switch fabric.

A research-based defensive framework for the Linux kernel. KOOBE-Guard utilizes Kprobes for active temporal mitigation to neutralize heap-based double-free vulnerabilities (CVE-2024-1086) with zero RAM overhead.

Zekang Liu ??robotics, vehicle software, systems security, and assured autonomy.

Hardware-assisted virtual machine introspection and runtime mediation for the Sentinel Stack.

Public-safe framework for limiting blast radius, protecting recovery, and preserving mission continuity under AI-accelerated cyber risk.