中文 English

演講

逐條整理超過 65 場公開演講與 40 場精選教育訓練經歷，並依年份展開閱讀。

公開演講與分享

2025 年（8 場）
  1. Mars Cheng — Blue Team Sharing — Advanced Cybersecurity Exploration Conference and CODE Exercise 2025，台北，2025-11-28
  2. Mars Cheng — Critical Infrastructure Threat Analysis and Protection — National Institute of Cyber Security Taiwan，2025-10-31
  3. Mars Cheng — Let AI Auto-Generate Neural-ASR Rules for OT-specific Attacks via NLP Approach — DEF CON 33 Creator Stage，2025-08-10
  4. Mars Cheng — Let AI Auto-Generate Neural-ASR Rules for OT-specific Attacks via NLP Approach — CYBERSEC 2025，2025-04-17
  5. Mars Cheng, Jair Chen — Never Derail: Safeguarding Rail Systems in Critical Infrastructure — CYBERSEC 2025，2025-04-17
  6. Mars Cheng, Dexter Chen — The Last Mile of Blue Team Detection: Integrating Detection Engineering for Threat Detection — CYBERSEC 2025，2025-04-16
  7. Mars Cheng — Exploring Abuse Techniques and OPSEC Strategies in Active Directory and Entra ID — Out Of The Box Jakarta，2025-02-25
  8. Mars Cheng, Sheng-Hao Ma — Identifying Malware In Factory Program Files — S4x25，2025-02-12
2024 年（9 場）
  1. Mars Cheng — Charting the Direction: The Top 10 Cybersecurity Trends in Critical Infrastructure for Future — Black Hat MEA 2024，2024-11-28
  2. Mars Cheng — Defending Active Directory from Abuse Techniques and OPSEC Actions with Enhanced Detection — Black Hat MEA 2024，2024-11-27
  3. Mars Cheng — Defending Active Directory from Abuse Techniques and OPSEC Actions with Enhanced Detection — AVTokyo，2024-11-16
  4. Mars Cheng, Yi-An Lin, Sheng-Hao Ma — Attention Is All You Need for Semantics Detection: A Novel Transformer on Neural-Symbolic Approach — CODE BLUE 2024，2024-11-14
  5. Mars Cheng — Mapping the Landscape: Top 10 Cybersecurity Trends in Critical Infrastructure for 2024 — DEF CON 32 Creator Stage，2024-08-09
  6. Sheng-Hao Ma, Yi-An Lin, Mars Cheng — Attention Is All You Need for Semantics Detection: A Novel Transformer on Neural-Symbolic Approach — Black Hat USA 2024，2024-08-08
  7. Mars Cheng — Public-Private Cooperation for Cybersecurity (II) – Achieving Best Practices — Global Cooperation and Training Framework，2024-05-29
  8. Mars Cheng — Applying Detection Engineering to Attacks Related to Kerberos in Active Directory — CYBERSEC 2024，2024-05-16
  9. Mars Cheng — Anatomy of the Top 10 Cybersecurity Current Terrain for Critical Infrastructure — BSides Tokyo，2024-03-30
2023 年（8 場）
  1. Mars Cheng, Dexter Chen — Abusing Active Directory Configuration and Implementing Effective OPSEC Actions — No Hat 2023，2023-10-21
  2. Mars Cheng, Dexter Chen — Active Directory Abuse Primitive and Operation Security — ROOTCON 17，2023-09-27
  3. Mars Cheng — Anatomy of the Top 10 Cybersecurity Current Terrain for Critical Infrastructure — DEFCON ICS Village，2023-08-13
  4. Mars Cheng — Redefining Endpoint Detection for Next-Generation Cyber-Physical Systems Security — Black Hat USA 2023 Sponsored Sessions，2023-08-10
  5. Mars Cheng, Dexter Chen — Priority for Effective Action - A Practical Model for Quantifying the Risk of Active Directory Attacks — Troopers 2023，2023-06-29
  6. Mars Cheng, Dexter Chen — Prioritize Your Enterprise Critical Risk - Start at Active Directory — FIRSTCON23，2023-06-08
  7. Mars Cheng, Dexter Chen — Do you really know your risk priorities? Risk quantification models applied to domain AD — CYBERSEC 2023，2023-05-11
  8. Mars Cheng, Dexter Chen — Active Directory Abuse Primitive and Operation Security — HITB AMS 2023，2023-04-21
2022 年（13 場）
  1. Mars Cheng, Dexter Chen — Abusing Misconfigurations – Active Directory Attack Path to Domain Dominance — Black Hat MEA 2022，2022-11-17
  2. Mars Cheng, Sheng-Hao Ma, Hank Chen — A New Trend for the Blue Team: Using a Practical Symbolic Engine to Detect Evasive Forms of Malware/Ransomware — CODE BLUE 2022，2022-10-28
  3. Mars Cheng, Dexter Chen — Rethinking Defense - Risk Quantification for Active Directory — CODE BLUE 2022，2022-10-27
  4. Mars Cheng, Selmon Yang — How to Take Over an Industrial Control System – A Case Study of Mitsubishi Electric — CYBERSEC 2022，2022-09-22
  5. Mars Cheng, Hank Chen — Let's stop ransomware from wreaking havoc on critical infrastructure! — CYBERSEC 2022，2022-09-22
  6. Mars Cheng, Canaan Kao — Real-world attack vectors and practical and effective mitigation strategies in smart manufacturing environments — CYBERSEC 2022，2022-09-22
  7. Mars Cheng, Dexter Chen — Troubleshooting Incorrect Configuration Settings - Taking an Active Directory Domain Environment as an Example — CYBERSEC 2022，2022-09-22
  8. Sheng-Hao Ma, Hank Chen, Mars Cheng — A New Trend for the Blue Team: Using a Practical Symbolic Engine to Detect Evasive Forms of Malware/Ransomware — HITCON PEACE 2022，2022-08-20
  9. Mars Cheng, Dexter Chen — Critical Report - Risk Quantification and Defense Strategies for Domain AD — HITCON PEACE 2022，2022-08-19
  10. Sheng-Hao Ma, Mars Cheng, Hank Chen — A New Trend for the Blue Team: Using a Practical Symbolic Engine to Detect Evasive Forms of Malware/Ransomware — Black Hat USA 2022，2022-08-10
  11. Mars Cheng, Selmon Yang — Deconstructive Take-Over of Mitsubishi Electric Ecosystems — RSA Conference 2022，2022-06-09
  12. Mars Cheng — The Solution to Industrial Control System Threats: In-depth Analysis from Zero Trust Architecture — 科技部專案成果展暨工控資安論壇，2022-05-16
  13. Mars Cheng — Stop being superstitious! Critical infrastructure is not safe at all. — 果核資安論壇，2022-03-12
2021 年（16 場）
  1. Mars Cheng — How to Respond to Ransomware and Supply Chain Attacks: Lessons from the JBS Incident — 資安事件分析研討會北部場，2021-12-07
  2. Mars Cheng, Selmon Yang — Taking Apart and Taking Over ICS - SCADA Ecosystems: A Case Study of Mitsubishi Electric — HITCON 2021，2021-11-27
  3. Mars Cheng — Past and Future - The ICS Threat Terrain — CLOUDSEC 2021，2021-11-16
  4. Mars Cheng — Practical Attack Vectors and Their Ideal Defensive Strategies for ICS & SCADA — 落實工控安全資安防護研討會，2021-11-12
  5. Mars Cheng — Breaking Entrypoint — An In-Depth Data Breaches Analysis on the Critical Infrastructure of APAC — SINCON 2021，2021-11-05
  6. Mars Cheng — Data breaches at critical infrastructure revealed - an in-depth analysis using Taiwan as an example — SP-ISAC，2021-09-03
  7. Mars Cheng, Selmon Yang — How to Dissect a Private ICS Ecosystem? — VXCON 2021，2021-08-14
  8. Mars Cheng, Selmon Yang — Taking Apart and Taking Over ICS & SCADA Ecosystems: A Case Study of Mitsubishi Electric — DEFCON 29，2021-08-06
  9. Mars Cheng, YenTing Lee — Breaking Entrypoint: An In-depth Data Breaches Analysis to the Critical Infrastructure of the Asia Pacific — ICS Cyber Security Conference Asia 2021，2021-06-23
  10. Mars Cheng — Harmonizing ICS/SCADA with Cyber Defense: A Perspective on ATT&CK for ICS — ICS Cyber Security Conference Asia 2021，2021-06-22
  11. Mars Cheng, Patrick Kuo — The Hunt for Major League IoT-ICS Threats: A Deep Dive into IoT Threat Terrain — FIRST 2021，2021-06-07
  12. Mars Cheng, YenTing Lee — Practical Attack Vectors and Their Ideal Defensive Strategies for ICS & SCADA — FIRST 2021，2021-06-07
  13. Mars Cheng — Red Team Exercises for IoT Security — HITB AMS 2021，2021-05-27
  14. Mars Cheng, Selmon Yang — The Hunt for Major League IoT-ICS Threats: A Deep Dive into IoT Threat Terrain — CYBERSEC 2021，2021-05-06
  15. Mars Cheng, YenTing Lee — Data breaches at critical infrastructure revealed - an in-depth analysis using Taiwan as an example — CYBERSEC 2021，2021-05-05
  16. Mars Cheng, Selmon Yang — Shared Historical Flaws - Common Defects of Public and Private Industrial Control System Communication Protocols — CYBERSEC 2021，2021-05-04
2020 年（10 場）
  1. Mars Cheng, Selmon Yang — Confirming Red Alerts — Taking Over & Compromising ICS & SCADA — SINCON 2020，2021-01-02
  2. Mars Cheng, Patrick Kuo — The Hunt for Major League IoT-ICS Threats: A Deep Dive into IoT Threat Terrain — Black Hat Europe 2020，2020-12-10
  3. Mars Cheng — ICS Threat Landscape Change and Critical Attack Case Study — CLOUDSEC 2020，2020-11-25
  4. Mars Cheng — Red Team vs. Blue Team Exercises for ICS/SCADA Security — HITB+CyberWeek，2020-11-19
  5. Mars Cheng, YenTing Lee, Max Farrell — Data Breaches Related To Critical Infrastructure – An In-Depth Analysis Of Cyber Risk To the Critical Infrastructure of the United States of America — HITB+CyberWeek，2020-11-18
  6. YenTing Lee, Mars Cheng — Data Breaches Related to Critical Infrastructure - Analysis of Cyber Risk to U.S. Critical Infrastructure — InfoSec Taiwan 2020，2020-11-02
  7. Mars Cheng, Selmon Yang — Common Flaws in Public and Private ICS Network Protocols — SecTor 2020，2020-10-21
  8. Mars Cheng, YenTing Lee, Max Farrell — Data Breaches Related to Critical Infrastructure - Analysis of Cyber Risk to U.S. Critical Infrastructure — ICS Cyber Security Conference USA 2020，2020-10-20
  9. Mars Cheng, Selmon Yang — Public and Private, Common Flaws in ICS Network Protocols — HITB Singapore 2020，2020-07-26
  10. Mars Cheng, Selmon Yang — Public and Private, The Common Flaws in ICS Communication Protocols — ICS Cyber Security Conference Asia 2020，2020-06-16
2019 年（6 場）
  1. Mars Cheng, Terence Liu, Selmon Yang — Dissecting the Industrial Communication Protocols for Cybersecurity Risks — ICS Cyber Security Conference USA 2019，2019-10-21
  2. Mars Cheng, Selmon Yang — The Sum of All Fears, When ICS/SCADA are Compromised — HITB+CyberWeek Abu Dhabi，2019-10-16
  3. Mars Cheng — A Brief Discussion on Cybersecurity Threats of Industrial Control Systems — 工業控制系統資安研討會 TWISC@NCHU，2019-09-05
  4. Mars Cheng, Selmon Yang — About ICS/SCADA, You Must Need to Know — HITCON Community 2019，2019-08-24
  5. Mars Cheng — The Distance Between Us and Industrial Control System Security — Line Becks No. 2，2019-06-03
  6. Mars Cheng — In-house Research Presentations — Internal sharing，2019

教育訓練與授課

2026 年（1 場）
  1. Mars Cheng — Introduction to IoT/ICS Security & Firmware Analysis Skills — Global Cybersecurity Camp 2026，越南胡志明市，2026-03-03
2025 年（6 場）
  1. Mars Cheng — OT Fundamentals and IT in CI — NATO CCDCOE CIIP Course，愛沙尼亞 Tallinn，2025-11-12
  2. Mars Cheng — Government Cybersecurity Defense Practical Elite Training-2 — Administration for Cyber Security, moda，台北，2025-10-30
  3. Mars Cheng — Government Cybersecurity Defense Practical Elite Training-1 — Administration for Cyber Security, moda，台北，2025-10-29
  4. Mars Cheng — Crownless Defense - An Analysis of Blue Team's Core Techniques-Version 2025 — HITCON Training 2025，台北，2025-07-25 至 2025-07-26
  5. Mars Cheng — The Laws of Good and Evil in Domain AD (Basic Edition) — NICS 資安菁英人才培訓課程，台南，2025-06-15
  6. Mars Cheng — Building a defense for your Industrial Control System (ICS) from scratch — NICS 資安菁英人才培訓課程，台南，2025-06-14
2024 年（3 場）
  1. Mars Cheng — Crownless Defense - An Analysis of Blue Team's Core Techniques — NICS 資安菁英人才培訓課程，台北，2024-11-02 至 2024-11-03
  2. Mars Cheng — Building a defense for your Industrial Control System (ICS) from scratch — NICS 資安菁英人才培訓課程，台南，2024-10-05 至 2024-10-06
  3. Mars Cheng — Deep Dive into Active Directory Attack Techniques — Global Cybersecurity Camp 2024，泰國曼谷，2024-02-19
2023 年（6 場）
  1. Mars Cheng — The Return of the King - The Laws of Good and Evil in Domain AD (Basic, Advanced, and Cloud Edition) — NICS 資安菁英人才培訓課程，台北，2023-11-04 至 2023-11-11
  2. Mars Cheng — Crownless Defense - An Analysis of Blue Team's Core Techniques — NICS 資安菁英人才培訓課程，台北，2023-10-28 至 2023-10-29
  3. Mars Cheng — Red Team vs. Blue Team Exercises for IoT Security — 財政部財政資訊中心，台北，2023-10-04 與 2023-10-11
  4. Mars Cheng — Red Team vs. Blue Team Exercises for Active Directory — 財政部財政資訊中心，台北，2023-09-13 與 2023-09-20
  5. Mars Cheng — The Return of the King - The Laws of Good and Evil in Industrial Control Systems — NICS 資安菁英人才培訓課程，台南，2023-09-02 至 2023-09-10
  6. Mars Cheng — The Return of the King - The Laws of Good and Evil in Domain AD (Basic and Advanced Edition) — NICS 資安菁英人才培訓課程，台北，2023-07-15 至 2023-07-16
2022 年（6 場）
  1. Mars Cheng — The Blue Team from Scratch — CCoE 2022，台南，2022-11-05 至 2022-11-06
  2. Mars Cheng — In-depth analysis of Internet of Things attacks and defenses — CCoE 2022，台南，2022-10-15 至 2022-10-22
  3. Mars Cheng — In-depth analysis of attacks and defenses in Industrial Control Systems — CCoE 2022，台北，2022-07-30 至 2022-07-31
  4. Mars Cheng — Zero Trust is Coming - Attack and Defense of Critical Infrastructure — AIS3 2022，台北，2022-07-26 至 2022-07-27
  5. Mars Cheng — Advanced Active Directory Techniques — HITCON Summer Training 2022，台北，2022-07-24
  6. Mars Cheng — In-depth analysis of domain AD attacks and defenses — Center of Excellence for Cybersecurity，台北，2022-07-15 至 2022-07-17
2021 年（5 場）
  1. Mars Cheng — IoT Attack and Defense Practice — Center of Excellence for Cybersecurity，台北，2021-12-03 至 2021-12-05
  2. Mars Cheng — IoT Threat Vectors and Practical Analysis — 國防大學，2021-10-15
  3. Mars Cheng — Offense and defense of industrial control systems — 元智大學，2021-09-30
  4. Mars Cheng — Forensics Exercise and Sharing — 國防大學，2021-08-12
  5. Mars Cheng — Offense and defense of industrial control systems — AIS3 2021，台北，2021-07-27 至 2021-07-28
2020 年（5 場）
  1. Mars Cheng — Red Team Exercises for Active Directory and ICS/SCADA — 國防大學，桃園，2020-10-15
  2. Mars Cheng — Red Team Exercises for Active Directory — HITCON Winter Training 2020，台北，2020-09-09
  3. Mars Cheng — Red Team vs. Blue Team Exercises for ICS/SCADA Security — HITCON Winter Training 2020，台北，2020-09-07 至 2020-09-08
  4. Mars Cheng — Red Team vs. Blue Team Exercises for IoT Security — HITCON Winter Training 2020，台北，2020-09-05 至 2020-09-06
  5. Mars Cheng — ICS Threat Landscape and Research Trend Analysis — 經濟部專案訓練，台北，2020-08-22
2019 年（8 場）
  1. Mars Cheng — IoT Security Practice and Analysis — HITCON Winter Training 2019，台北，2019-12-17 至 2019-12-18
  2. Mars Cheng — When ICS/SCADA meets Hackers — HITCON Winter Training 2019，台北，2019-12-16
  3. Mars Cheng — Penetration Test on Critical Infrastructure — 國防部專案訓練，台北，2019-09-29 至 2019-09-30
  4. Mars Cheng — Penetration Test on Critical Infrastructure — 國防部專案訓練，台北，2019-09-23 至 2019-09-24
  5. Mars Cheng — IoT Security Practice and Analysis — 教育部 ISIP 計畫，台北，2019-09-21 至 2019-09-22
  6. Mars Cheng — When IoT meets Hackers — HITCON Summer Training 2019，台北，2019-08-20
  7. Mars Cheng — When ICS/SCADA meets Hackers — HITCON Summer Training 2019，台北，2019-08-19
  8. Mars Cheng — Private Enterprise In-house Training — 企業內訓精選，2019