- Served as Oracle Linux's primary SELinux developer and Mandatory Access Control (MAC) subject-matter expert, advising engineers and technical leadership across multiple organizations on policy design, confinement strategy, and security troubleshooting.
- Developed and maintained SELinux policies for the default targeted policy as well as minimum and highly specialized Multi-Level Security (MLS) variants.
- Identified and resolved SELinux defects across Oracle Linux, including uncovering flaws in internally maintained test suites, improving both product quality and validation coverage.
- Initiated upstream contributions to Fedora's selinux-policy project, with 18 pull requests merged upstream, becoming the project's #19 all-time contributor — notable as the project is primarily maintained by Red Hat and Fedora engineers.
- Contributed fixes and enhancements to firewalld and OpenSSL components within Oracle Linux, addressing security, reliability, and integration issues beyond the SELinux subsystem.
Naoki Tanaka
Ph.D. in Computer Science
Interests
Access Control, Information Security, Risk Analysis, Machine Learning
Experience
- Developed Verified Boot for Kernel Zones and LDoms (Oracle VM Server for SPARC) on Solaris in C to detect accidental or malicious modification of kernel modules before loading by verifying factory-signed signatures.
- Designed and developed audit of Solaris Verified Boot events in C to generate audit trails when inappropriately-signed kernel modules are to be loaded.
- Integrated key components for multi-factor authentication such as OpenCA Research Labs' OCSP Responder and LibPKI into Solaris.
- Developed a prototype TPM 2.0 driver for Solaris in C to eliminate dependencies on obsolete cryptography algorithms such as SHA-1 used in TPM 1.2 standard.
- Designed a rational approach based on actuarial methods to encourage appropriate information sharing inside a virtual organization.
- Developed a discrete event simulator for the proposed approach in C++ with Boost C++ Libraries and its GUI interface for Mac in Objective-C with Core Plot framework.
- Designed and implemented with Node.js and MongoDB an online business simulation game to evaluate my approach.
- Conducted experiments using Amazon Mechanical Turk, and confirmed that my approach could benefit an organization even when human decisions are involved.
- Designed game theoretic and decision theoretic risk token allocation mechanisms for risk-aware authorization.
- Added new features used by machine learning algorithms for feed ranking using PHP, C++, and Hive; one ranked #1 in importance for feed ads ranking.
- Developed a web interface using PHP and JavaScript that makes it possible to holistically analyze ads data taken from multiple data sources.
- Interned under the A*STAR Graduate Academy's A*STAR Research Attachment Programme in Singapore for one year.
- Proposed and analyzed using C++ with Boost C++ Libraries a decision framework that enables a virtual organization to select an optimal portfolio of risky data accesses that will maximize the benefit subject to a given risk budget.
- Interned as one of the inaugural fellows of the NYC Turing Fellows Program, which seeks to match top computer science and engineering students with outstanding summer internships at leading NYC startups.
- Proposed effective statistical and visualization methods using Python, PostgreSQL, and Gnuplot for analyzing TV ad campaign structures from huge amount of set-top box data.
- Developed a distributed non-intrusive load monitoring program in Java using genetic algorithm with JGAP framework and dynamic programming.
- Led discussion sections of an introductory Computer Science & Java class for CS majors.
- Managed various company-wide IT projects.
- Located several active compounds by applying data mining techniques such as random forests written in C++ to huge volume of assay data stored in Oracle DB using HPC cluster and Grid computing environments such as Platform LSF and Oracle Grid Engine.
- Constructed an LDAP+Kerberos centralized single-sign-on authentication system by Redhat Enterprise Linux in the heterogeneous environment of Linux and Windows.
Education
Thesis: Sustainable Approaches to Ad-Hoc Information Sharing for Virtual Organizations [PDF]
Advisor: Professor Marianne Winslett
GPA: 4.0 (Cumulative)
Thesis: A Method for Analyzing Metabolic Networks Based on Gene Essentiality in a Focus of Compounds
GPA: 4.0 (Cumulative)
Thesis: A Systematic Method for the Experimental Data Analysis of the Gene Disruption Strains of E. coli
GPA: 3.87 (Cumulative), 3.94 (Major)
- Kusumoto Award (Top Student)
Refereed Publications
- Naoki Tanaka, Marianne Winslett, Adam J. Lee, David K. Y. Yau, Feng Bao. “Insured Access: An Approach to Ad-hoc Information Sharing for Virtual Organizations.” Proceedings of the third ACM Conference on Data and Application Security and Privacy (CODASPY), pp. 301-308, San Antonio, TX, USA, February 2013. [PDF]
- Yuhao Zheng, David M. Nicol, Dong Jin, Naoki Tanaka. “A Virtual Time System for Virtualization-Based Network Emulations and Simulations.” Journal of Simulation, 6 (3), pp. 205-213, August 2012. [PDF]
- David C. Bergman, Dong Jin, Joshua P. Juen, Naoki Tanaka, Carl A. Gunter, Andrew K. Wright. “Distributed Non-Intrusive Load Monitoring.” Proceedings of the 2011 IEEE/PES Conference on Innovative Smart Grid Technologies (ISGT), Anaheim, CA, USA, January 2011. [PDF]
- David C. Bergman, Dong Jin, Joshua P. Juen, Naoki Tanaka, Carl A. Gunter, Andrew K. Wright. “Nonintrusive Load-Shed Verification.” IEEE Pervasive Computing, 10 (1), pp. 49-57, January 2011. [PDF]
- Naoki Tanaka, Kazuki Ohno, Tatsuya Niimi, Ayako Moritomo, Kenichi Mori, Masaya Orita. “Small-World Phenomena in Chemical Library Networks: Application to Fragment-Based Drug Discovery.” Journal of Chemical Information and Modeling, 49 (12), pp. 2677-2686, December 2009.
Presentations and Demos
- Naoki Tanaka. “A Method for HTS Hit Selection Considering Compounds' Properties and Its Implementation with Spotfire Guides.” Proceedings of the 5th Spotfire Japan User Conference, 2007. (in Japanese)
Posters
- Naoki Tanaka, Takeyosi Miki, Yoshihiro Yamamoto, Reiji Teramoto, Yoichi Takenaka, Hideo Matsuda. “A Method for Exploring Compounds Related to Gene Essentiality Considering Differences of Metabolic Network Structures among Different Species.” Proceedings of the 27th Annual Meeting of the Molecular Biology Society of Japan, 2PB-422, December 2004. (in Japanese)
- Kaoru Kashimoto, Akiko Yamada, Naoki Tanaka, Yoshihiro Yamamoto, Hideo Matsuda, Katsumi Isono, Hirotada Mori, Takashi Horuichi, Takeyosi Miki. “Systematic and Exhaustive Construction of Gene Disruption Strains of E.coli --- Identification of Essential Genes for Cell Growth.” Proceedings of the 27th Annual Meeting of the Molecular Biology Society of Japan, 2PB-320, December 2004. (in Japanese)
- Takeyosi Miki, Yoshihiro Yamamoto, Kouji Hayashi, Naoki Tanaka, Katsutoshi Fujita, Akira Nakagawa, Kaoru Kashimoto, Satomi Obata, Hideo Matsuda, Katsumi Isono, Takashi Horiuchi, Hirotada Mori. “Systematic and Exhaustive Construction of Gene Disruption Strains of E.coli.” Proceedings of the 26th Annual Meeting of the Molecular Biology Society of Japan, 4PA-159, December 2003. (in Japanese)
- Naoki Tanaka, Takeyosi Miki, Yoshihiro Yamamoto, Yoichi Takenaka, Hideo Matsuda. “A Method for Analyzing Network Structure of Metabolic Pathways for Essential Gene Prediction.” Proceedings of the 26th Annual Meeting of the Molecular Biology Society of Japan, 3PA-053, December 2003. (in Japanese)
- Naoki Tanaka, Takeyosi Miki, Yoshihiro Yamamoto, Takashi Horiuchi, Hirotada Mori, Yoichi Takenaka, Hideo Matsuda. “An Integrated Method for Analyzing the Mutagenesis Data of the Gene-Disrupted Mutants of E. coli.” Proceedings of the International Workshop for Escherichia coli Towards New Biology in the 21st Century, October 2003. (in Japanese)
Skills
Awards and Honors
Activities
- Guided an undergraduate summer intern for his daily research activities and paper/poster preparation.
Reviews
- 16th European Symposium on Research in Computer Security (ESORICS 2011)
- 16th ACM Symposium on Access Control Models and Technologies (SACMAT 2011)
- 4th IFIP International Conference on Trust Management (IFIPTM 2010)
- 2nd International Conference Computer Science and its Applications (CSA 2009)
Coursework
Database and Information Systems
- Advanced Database Systems (Professor Kevin Chang)
- Data Mining Principles (Professor Jiawei Han)
- Text Information Systems (Professor ChengXiang Zhai)
Computer Security
- Computer Security I (Dr. Susan Hinrichs)
- Security Laboratory (Dr. Susan Hinrichs)
- Advanced Computer Security (Professor Carl Gunter)
Systems and Networking
- Operating Systems Design (Professor Roy Campbell)
- Advanced Operating Systems (Professor Sam King)
- Distributed Systems (Professor Mehdi Harandi)
Seminar
- Secure Data Management (Professor Marianne Winslett)
- Yahoo!-DAIS Seminar (Professor Marianne Winslett)