Abner Zhang

FAQ About Abner Zhang

• What is Abner Zhang's address?

  Abner Zhang is located at
  Auckland, Auckland, New Zealand

• What is Abner Zhang's job title?

  Abner Zhang is a
  Technical solutions.teaching Web security, Penetest, Forensics and crypto. ◦ Perform vulnerability assessment and network penetration testing using manual as well as automated tools (such as AppScan,WVS,Nessus, Nmap, Metasploit,Sqlmap, Wireshark,etc) ◦ Perform system security harden on Linux such as Centos and Windows Serial Products and Routers. ◦ Consulting on Firewall rules assessment tools R&D including Cisco, Juniper and Huawei Firewalls to optimize firewall rule set. ◦ Optimize Snort IDS rule for the vulnerabilities identified in penetration testing by using test cases and collecting relevant data from various sources ◦ Consulting on developing Automating tools for CERT such as GRR(Google Rapid Response) product customized and deployed, which is incident response framework for hunting and Splunk’s log data analysis as alert source.◦ The telecom business system security assessment projects, developing assessment solution based on ITU x.805 framework to evaluate GPRS, SMS and WAP security, by using telecommunications protocols such as PDP, WTLS, SMMP and CMPP risk. ◦ Consulting on security baseline toolkit R&D, including the various versions of windows, the various versions of Linux, such as Oracle, Sybase, database middleware such as Tomcat, Web logic. ◦ Consulting on security strategy and management platform project, developing reference management platform by ISMS information security model and providing security management requirements matched to formulate security best practices and processes. ◦ Working with our clients to understand their information security requirements ◦ Consulting on China Mobile Group security planning project, assisting information security management team to establish China Mobile security management plan, setting China Mobile technical specification such as Oracle database security configuration baseline operational guidelines and a series of security specification. ◦ Consulting on the SOX control project, assisting China Mobile through the KPMG SOX audit, including the establishment of information technology control system based on COBIT, the establishment of financial statements and related business systems. ◦ Optimize SOC outcome by proposing several techniques such as abnormal IP logon rate, virus infection ratio key.Move to Auckland.◦ Red team in China Mobile, penetrating seasonally and vulnerability assessment monthly. Improve the outcome of the assessment result and penetrating result by setting the false positive and false negative of different vulnerabilities in a large and complex WAN/LAN environment including network level devices(Router Switch), network security devices(Firewall WAF IDS/IPS IAM SOC) and different OS(windows Linux Solaris) ◦ The Research of security value added service, setting China Mobile's cloud based service specification, general technical requirements, MSS service by providing flow cleaning, virtual firewall, Web protection, Web scan and other value-added services. ◦ Integrate the design of SOC and IAM system. ichunqiu.com

• What industry does Abner Zhang currently work in?

  Abner Zhang currently works in the
  ichunqiu.com

• What is Abner Zhang's area of expertise?

  Abner Zhang specializes in
  Technical solutions.teaching Web security, Penetest, Forensics and crypto. ◦ Perform vulnerability assessment and network penetration testing using manual as well as automated tools (such as AppScan,WVS,Nessus, Nmap, Metasploit,Sqlmap, Wireshark,etc) ◦ Perform system security harden on Linux such as Centos and Windows Serial Products and Routers. ◦ Consulting on Firewall rules assessment tools R&D including Cisco, Juniper and Huawei Firewalls to optimize firewall rule set. ◦ Optimize Snort IDS rule for the vulnerabilities identified in penetration testing by using test cases and collecting relevant data from various sources ◦ Consulting on developing Automating tools for CERT such as GRR(Google Rapid Response) product customized and deployed, which is incident response framework for hunting and Splunk’s log data analysis as alert source.◦ The telecom business system security assessment projects, developing assessment solution based on ITU x.805 framework to evaluate GPRS, SMS and WAP security, by using telecommunications protocols such as PDP, WTLS, SMMP and CMPP risk. ◦ Consulting on security baseline toolkit R&D, including the various versions of windows, the various versions of Linux, such as Oracle, Sybase, database middleware such as Tomcat, Web logic. ◦ Consulting on security strategy and management platform project, developing reference management platform by ISMS information security model and providing security management requirements matched to formulate security best practices and processes. ◦ Working with our clients to understand their information security requirements ◦ Consulting on China Mobile Group security planning project, assisting information security management team to establish China Mobile security management plan, setting China Mobile technical specification such as Oracle database security configuration baseline operational guidelines and a series of security specification. ◦ Consulting on the SOX control project, assisting China Mobile through the KPMG SOX audit, including the establishment of information technology control system based on COBIT, the establishment of financial statements and related business systems. ◦ Optimize SOC outcome by proposing several techniques such as abnormal IP logon rate, virus infection ratio key.Move to Auckland.◦ Red team in China Mobile, penetrating seasonally and vulnerability assessment monthly. Improve the outcome of the assessment result and penetrating result by setting the false positive and false negative of different vulnerabilities in a large and complex WAN/LAN environment including network level devices(Router Switch), network security devices(Firewall WAF IDS/IPS IAM SOC) and different OS(windows Linux Solaris) ◦ The Research of security value added service, setting China Mobile's cloud based service specification, general technical requirements, MSS service by providing flow cleaning, virtual firewall, Web protection, Web scan and other value-added services. ◦ Integrate the design of SOC and IAM system.

• Which languages does Abner Zhang speak? 

  Abner Zhang speaks the following languages:
  No languages available.

• Which industries has Abner Zhang previously worked in?   

  Abner Zhang has prior experience in the following industries:
  ichunqiu.com , anz.ichunqiu.com , ichunqiu.com , ichunqiu.com , ChinaMobileTech , NSN - Nokia Solutions and Networks , IS-ONE

• What is Abner Zhang’s work experience?  

  Abner Zhang has the following professional experience:
  ichunqiu.com , anz.ichunqiu.com , ichunqiu.com , ichunqiu.com , ChinaMobileTech , NSN - Nokia Solutions and Networks , IS-ONE .

• How can I find Abner Zhang on LinkedIn?  

  You can view Abner Zhang’s
  LinkedIn profile at LinkedIn URL.

• What are Abner Zhang’s work email addresses?  

  Abner Zhang’s work email addresses are
  [email protected] .

• What company does Abner Zhang work for?  

  Abner Zhang works at
  ichunqiu.com