Ray Lin

iFUS System Consultants Ltd. / CISO

Ray has nearly 20 years of experience in the software industry, specializing in building teams and developing new products from 0 to 1. His main expertise includes information security and auditing, DevSecOps, AI, AWS cloud architecture design, BA and SA roles, software project management, and agile SaaS product development.

Ray has been recognized with prestigious accolades such as the Taiwan Inventor Creativity Award and EC-Council Cybersecurity Career Mentor. He has worked in various types of companies, including American, Japanese, and Taiwanese enterprises, startups, publicly listed companies, and multinational corporations, holding senior cross-disciplinary management positions. In addition to holding more than 40 international professional certifications in security, cloud, AI, project management, and agile methodologies, he is also one of the world’s first AWS Security Heroes, the first in the GCR region, the CEO of the Project Management Grand Award (PTGA), known by the media as the "Oscars of Project Management" and the President of DevSecOps Taiwan. To date, he has also translated, proofread, and published seven agile-related books.

Ray is currently:

  • The world's first AWS Security Hero, the first in the GCR region
  • DevSecOps Taiwan - President
  • iFUS System Consultants Ltd. - CISO
  • DataBrushing.aj (QSP) - CDO
  • PM-ABC - PMI Authorized Training Instructor (PMP/PMI-ACP)
  • AI Network - ISC2 Authorized Instructor / AWS Authorized Instructor
  • PMI Taiwan Award Office (PTGA) - CEO
  • ISC2 Taipei Chapter - Director / Media PR Committee Chairman
Ray Lin
SPEECH
4/16 (Wed.) 16:15 - 17:00 1F 1B Zero Trust Forum
Secure by Default: Implementing Zero-Trust Port Knocking with Serverless

In an environment where information security threats are becoming increasingly severe, "Secure by Default" has emerged as a critical security design principle. The Zero Trust Architecture (ZTA) emphasizes verifying every access request and implementing dynamic privilege management. However, many organizations face challenges in implementing Zero Trust, such as protecting servers from unauthorized access without increasing operational complexity.

The core objective of this session is to leverage Serverless technologies to introduce a Zero-Trust Port Knocking mechanism. This approach enables secure and efficient access control while keeping all ports closed, reducing the attack surface and enhancing overall system security.

The session will cover the following key topics: 

1. An introduction to Secure by Default, Serverless, Zero Trust, and Port Knocking. 

2. Demonstrating the implementation of a Zero-Trust Port Knocking mechanism using Serverless technologies.  

More