Royce Lu

Experience

1. Distinguished Engineer

   Palo Alto Networks

   Nov 2017 — Present · San Francisco, CA, US

   Leading several projects on the cloud-delivered security product. 1.[Virtual Machine Forking Technology] I researched and developed the \"Virtual Machine Forking\" technology for PAN proprietary hypervisor, Let WildFire be able to create a virtual machine environment for malware analysis instantly. 2.[Malware detection with ML] Next gen ML solution for malware detection. Speed <10 ms response time for inline detection on malicious executable. Production quality detection rate and low false positive rate. 3.[NextGen WildFire] Coordinate multiple teams working together refactored the WildFire architecture. Introduced Plug-In system to extend WildFire capability. 4.[HTTP C2 Detection With Machine Learning] Built the ML model for C2 detection based on the http session. High accuracy and very low false positive (<0.01%) 5.[Malware ML Detection Based on Pcap] Built the ML model for malware detection based on pcap. High accuracy and very low false positive (<0.01%) 6.[Recursive Analysis] Design, coordinate teams and hands on implemented the core module of recursive analysis for multi-stage threats detection. It is flexible and extensible to support multiple analysis plugins(methods) for different entities (file,pcap, URL.etc) discovered during the analysis.

Education

• National Cheng Kung University

  Master, Computer Sciense and Information Engineering

  2004 — 2006

• National Cheng Kung University

  BS, CSIE

  2000 — 2004