Vietnamese female student honoured for discovering nine security holes of US technology corporation
This year alone, Le My Quynh, found five vulnerabilities – all rated as serious or extremely serious. The research results have been included in her graduate thesis on deserialisation vulnerabilities in Java language, for which she got the A plus score.
Le My Quynh. |
With the GPA of 3.5 out of 4.0 within five years of studying, Quynh, 23, has been honoured as the valedictorian of the Academy of Cryptography Techniques in mid-November.
Quynh said she decided to pursue technology because she was inspired by her father, who was an alumnus of the Academy of Cryptography Techniques.
Quynh said her dream was to get a full scholarship to study technology in Russia. Upon entering the school, she focused on studying. But when the initial goal was achieved, Quỳnh had second thoughts.
She added: “If I choose to go to Russia, it will take me one or two years to learn the language and complete the entrance exams. Therefore, I decided to stay to get involved in the information security work."
A year later, Quynh started to search for information about competitions related to information security.
Quynh challenged herself at Capture the Flag, a popular cybersecurity competition designed to challenge participants to solve computer security problems, and managed to find vulnerabilities, capture and defend the computer systems.
She also participated in the VNPT Security Marathon and won an internship at VNPT after finishing her second year at university. She was assigned to work at a penetration testing unit, which she found a good opportunity to sharpen her practical experience.
She said: “I found out that finding security holes is the fastest way to access knowledge in the field of information security and safety. This also makes it easier for me to study specialised subjects at school."
In 2019, Quynh and other members were assigned to find vulnerabilities of technology products of the US enterprise, Oracle. She found the first hole after months of research and sent the report for evaluation.
In the next year, Quynh managed to find more four vulnerabilities, all appearing on the WebLogic server of Oracle.
By this year, the total number of vulnerabilities has increased to nine, of which six are rated as extremely dangerous. Quynh has been honoured many times by Oracle.
Quynh has attended security seminars to share her research skills on information security.
She said it took months to research the product as well as discover vulnerabilities. She was quite familiar with working on a computer for more than ten hours a day.
Quynh said the issue of gender did not matter in the field of information security and safety. Her goal was to become an influential security researcher in the global security field and find more breakthrough vulnerabilities.
Source: VNS
Reader's comments (0)