Security · Systems
Kai-Wei Lu呂凱崴
Senior, Department of Computer Science and Information Engineering, National Taiwan Normal University
I work on security and systems. One rule runs through every project: an automated verdict must come with its evidence, and anyone should be able to reproduce the result.

Highlights
Capstone research · APKSec Pro
546apps
Independently reverse-engineered ground truth: all 1,121 high-confidence failures from an independent engine are reported by the system, with zero misses.
- published Taiwanese apps tested at the strictest level
- 400apps
- with at least one failed item
- 368apps
- with confirmed, reportable high-severity issues
- 64apps
Research · Drill Library
98.1%
Retrieval hit rate of the knowledge-base Q&A subsystem on the public DRCD dataset; end-to-end answer accuracy 96.5%.
Coursework · Dashboard
644APs
Live status of every campus Wi-Fi access point, integrated into a network-quality platform in production.
Internship · NCU CSRSR
3systems
Production systems built and delivered to the research center’s requirements as lead developer.
Coursework · Normal OJ
126cases
As test lead, wrote the test plan and report; every executed case passed.
Selected work
Detailed project pages are written in Traditional Chinese; each links to documents, screenshots and figures.
ResearchB

Drill Library: a knowledge base with cited answers
Knowledge-base Q&A for the lab’s automated research platform; 98.1% retrieval hit rate and 96.5% answer accuracy on DRCD.
TWNIC Taiwan Post-Quantum Migration Observatory
Responsible for the data and statistics module and the population and cross-national module.
CourseworkC

NTNU Dashboard: campus network quality platform
644 access points in real time; my parts were 3D modeling, history playback, crowd-flow estimation and deployment.
Normal OJ: software engineering project
Four versions of the test plan (51 test cases) and a test report with 126 executed cases, all passing; six rounds of AppScan scanning.

Other coursework and competitions
Distinction in a programming project competition, pygame course for a CSIE camp, 4th place and first in art and audio at Normal Game Jam 2025, a quiz web app and two personal tools.
PersonalD

Taiwanese 16-tile mahjong AI
Rules engine matched an independent reference on 100,000 hands; paired evaluation with variance reduction; field test over 87 games.

CrocBoss: Taiwan stock data and backtesting
6.12 million daily bars; point-in-time data access; six-gate validation with a blind holdout; launched after two security reviews.
Work-study and serviceF
NTNU Information Technology Center, network division
First-line wireless support; vulnerability scanning with OpenVAS and AppScan; weak-password audit for a red-team exercise; observer in an ISO 27001 audit.

Other experience and service
A Proxmox VE cluster for the department, an AI coding-assistant workshop and a quarterly report at CSRSR, HITCON 2026 staff, class representative.
Experience
- 2023-09Entered NTNU Computer Science and Information Engineering; class representative since
- 2023-12Collegiate Programming Examination (CPE): professional level, rank 47 of 2,640
- 2024-02Work-study, NTNU Information Technology Center, network division (first student cohort)
- 2024Distinction, General Education Programming Project Competition; pygame instructor at a CSIE camp; started the mahjong AI and CrocBoss
- 2025-054th place, Normal Game Jam 2025 (NetQuest)
- 2025-09Capstone research: APKSec Pro, advised by Prof. Po-Wen Chi; ongoing
- 2025-09Test team lead, Normal OJ project, Software Engineering (through December)
- 2026-06NTNU Dashboard launched (Database Theory); internship at NCU CSRSR begins
- 2026-08Knowledge-base subsystem for the lab’s Drill platform; part-time research assistant on the TWNIC project
- 2026-09Proxmox VE cluster of four servers for the department, with three classmates
Awards
- 2023-12CPE: professional levelRank 47 of 2,640 (top 1.8%)
- 2024NTNU merit scholarships in academics and athleticsSpring 2024 semester
- 2024Distinction, 12th General Education Programming Project CompetitionTeam of six
- 2025-054th place, Normal Game Jam 2025First in art and audio; team of three
- 2023-25University athletics meet, men’s 60 m and long jumpPlaced three years running; second in both events in 2025
Skills
- Languages
- PythonTypeScript/JavaScriptC/C++JavaSQL
- Security
- Android static and dynamic analysisAndroguardFridathreat modelingTLS and certificatesOpenVASHCL AppScanresponsible disclosure
- Systems
- LinuxDockerProxmox VEnginxsystemdOracleMySQLSQLiteDuckDBGeoServerCesiumJSVue 3React
- Methods
- Specifications and acceptance criteria firstautomated and differential regression testingstatistical evaluation designworking rules for AI coding assistants
Contact
Documents and figures on this site accompany my graduate application dossier and share its numbers. Sensitive details in the projects (names of tested apps, keys, customer data and test accounts) are withheld.

