B.Sci(CS)(Hons) / B.CompSci / B.Eng(CmpNetEng)
Github Profile: https://github.com/dylanleigh
Google Scholar Profile
LinkedIn Profile : https://au.linkedin.com/in/dylanleigh
An interactive and more detailed version of my resume is available online at http://www.dylanleigh.net/resume/
Backend and Frontend development of multiple websites (including Kogan.com and Dicksmith.com.au), Android App, microservices and managing cloud infrastructure, working within a small Agile team.
Achievements Include: Employee of the Month April 2015.
Technologies Include: Django, React, Responsive Design, Android, Salt, Amazon Web Services, Docker, Vagrant, Celery, PostgreSQL, Python, PyCharm, Github.
Provided training for students participating in Telstra Cyber Security Challenge Australia, including writing and delivering practical classes on web/network penetration testing and network forensics and code auditing.
Technologies Include: Kali Linux, Metasploit, Wireshark, nmap, Volatility.
Assistant Manager of an on-campus subject / Responsible for an entire online subject.
Duties include writing exams. tests & assignments; handling staff absences & emergencies on short notice and rescheduling replacement classes; conducting weekly tutor meetings; managing marking teams; student interaction via email & forums; detecting & reporting plagarism.
Achievements Include: Development of pseudorandom evidence generators for forensics assignments to deter plagarism by creating a unique set of evidence for each student.
Subjects: Computer & Internet Forensics, Computer Organisation, Unix Essentials, Operating Systems.
Technologies: SleuthKit, Autopsy, Scalpel, PyFlag, log2timeline, Plaso, Solaris, Slackware
Presentation of classes and assignment/exam marking for subjects including Web Servers and Web Technology; Computer & Internet Forensics; Unix Essentials; Unix System Administration; Programming Principles; Computer Organisation; Operating Systems.
Providing technical advice for students & staff and maintainance of school servers & laboratories.
Duties include providing programming assistance for research students & staff; technical assistance for students & staff; writing user documentation; building and porting software to Solaris; handling Solaris server issues; laboratory maintenance and inventory tracking.
Achievements Include: Scripts to audit user accounts for security issues and detect misuse of resources; System for automated collection and analysis of laboratory usage statistics.
Paid research project - refer to entry in publications section for details.
Duties included preparing legal documents for probate; applying for probate at the Supreme Court; sale of assets including real estate, vehicle, shares and furniture; disbursement of proceeds to beneficiaties.
Honours thesis, College of Engineering and Science, Victoria University, submitted 16 January 2015. Supervised by Assoc. Prof. Hao Shi.
During forensic analysis of computer systems, it is often necessary to construct a chronological account of events, including when files were created, modified, accessed and deleted. Timeline analysis is the process of collating and analysing this data, using timestamps from the filesystem and other sources such as log files and internal file metadata.
The Zettabyte File System (ZFS) uses a novel and complex structure to store file data and metadata across multiple devices. Due to the unusual structure and operation of ZFS, many existing forensic tools and techniques cannot be used to analyse ZFS filesystems.
In this project, it has been demonstrated that four of the internal structures of ZFS can be used as effective sources of timeline information. Methods to extract these structures and use them for timeline analysis are provided, including algorithms to detect falsified file timestamps and to determine when individual blocks of file data were last modified.
Published in Digital Forensics Magazine, Issue 20, August 2014.
Article discussing the uses of ZFS-specific events with the the Plaso super-timeline forensic tool, including the use of the ZDB parsers developed from my research.
Presented 14 May 2014 at BSDCan 2014, University of Ottawa, Canada. Paper and Slides available from BSDCan.
During forensic analysis of disks, it may be desirable to construct an account of events over time, including when files were created, modified, accessed and deleted. "Timeline analysis" is the process of collating this data, using file timestamps from the file system and other sources such as log files and internal file metadata.
ZFS uses a complex structure to store file data and metadata and the many internal structures of ZFS are another source of timeline information. This internal metadata can also be used to detect timestamps which have been tampered with by the touch command or by changing the system clock.
This presentation will discuss the internal data structures of ZFS, present new research illustrating how ZFS metadata changes over time, and demonstrate how this data can be used to detect falsified file timestamps.
Paid Summer Research Studentship supervised by Dr Ron van Schyndel at RMIT University. Presented 24 February 2012 at the 2012 RMIT Student Summer Project Seminar. Four Citations as of February 2017.
The aim of this project is to develop a framework to allow experiments with data hiding in financial transactions, and for detecting the use of information hiding in financial transactions.
An analysis is made of electronic funds transfer systems in use within Australia, particularly those used for direct credit transactions. A model of financial transaction networks based on Australian systems is developed and a simulator framework which implements the model described is developed for conducting further research. Several example data hiding techniques and scenarios are presented.
Bachelor of Science (Honours) (Computer Science) studies completed at Victoria University, Melbourne in 2014; graduated in January 2015 with First Class Honours.
Two publications produced from research and related projects - one conference and one journal. Please refer to the relevant entry in publications for thesis details.
Double Degree: Bachelor of Computer Science / Bachelor of Engineering (Computer & Network Engineering). Graduated 2011 with equivalent single degree B.CompSci GPA of 3.12 (GPA 3.05 from only CS&IT subjects).
Major Projects Include: Forensic Investigation of Disk Image; Clone of 68000 CPU in VHDL; Real Time Traffic Control System; CCNA Labs. Details and reports available from http://dylanleigh.net/portfolio/
2012: NCH French Cakes and Pastries Short Course
2009: RMIT CS&IT Tutor Training Course
2001: Year 12 VCE at Melbourne High School; ENTER of 92.90
1999: Australian Schools Science Competition: Highest score of all Year 10 students in Victoria.
1996-1999: Australian Schools Science Competition: High Distinction (top 1% of Year in Victoria)
Last Updated 2017-02-17