Privacy in the Post-Quantum Era
Privacy is the half of the post-quantum shift no one is fixing, and fully homomorphic encryption is the answer.
Halit Alptekin
Cyber security researcher breaking and defending critical infrastructure. Malware analysis, penetration testing, threat intelligence, and APT research.
Latest posts
Still Human Here
Twenty years, many abandoned blogs, and why an AI-saturated internet finally gave me a reason to write.
Opaquedb
A post-quantum private database that runs SQL over encrypted data without learning what you asked for.
hblog-ng
A knowledge-graph blog that turns an Obsidian vault of Markdown into a static site, built with Next.js and LaTeX.
Unveiling Cyber Threat Actors
A hybrid deep learning approach combining Transformers and CNNs for attributing cyber threat actors based on command line behaviors.
Intrusion detection over encrypted network data
A protocol for privately evaluating detection models on system data using lattice-based cryptography to protect both data and model privacy.
Towards prioritizing vulnerability testing
A machine learning approach to accelerate vulnerability scanning by prioritizing security tests based on web page features.
Trapdroid
Trapdroid is a bare-metal Android malware analysis framework that runs unknown apps on real phones, captures their kernel-level behavior, and classifies them as malicious or benign with over 98% accuracy.
Bare-metal android malware behavior analysis framework
A scalable dynamic malware analysis framework focused on capturing unified behavior profiles of Android applications by analyzing them on physical devices in real-time.
Kasita
A secure messenger that hides both message content and metadata, built on lattice-based cryptography and a custom PIR algorithm.
Waffle
An anomaly-based Web Application Firewall that learns a site's normal behavior as a graph and blocks requests that do not fit.
Wintlab
Passive WiFi probe request analyzer for mobility tracking and social graph inference.
Leiurus
AI-powered vulnerability scanner that fingerprints pages and prioritizes attack vectors.
Korgavus
Hardware-based intrusion detection system (IDS) for email traffic running on Raspberry Pi.
Pire
A headless, modular drop-box platform for Red Team operations.
Gurz
A desktop application for static analysis of Android malware, built with Python and PySide.
HL
An esoteric programming language based on delta-encoding, running on a custom virtual machine.
hblog-django
My django learning playground, born as a rewrite of hblog.
hblog
A custom PHP blog engine built from scratch during my early learning days.