BA Cybersecurity
Research on web application defense, by a practitioner who runs it.
BA Cybersecurity is the research activity of Nobuo Otoi, a cybersecurity researcher based in Tokyo. We operate web application firewalls in front of production web services and conduct vulnerability assessments. We study what that work needs, and publish what we learn.
Main areas
- Web Application Firewall operation Detection, tuning, false-positive handling, and measurement for OWASP CRS and managed WAFs. Current line of work: predicting the effect of a configuration change before it is applied.
- Vulnerability assessment Assessment of web applications and cloud configurations, with findings turned into prioritized fixes. Research interest: source-referenced, AI-assisted diagnosis.
Research outputs
Tools, datasets, technical reports, preprints, and talks are listed here with DOIs as they are released.
- In preparation An open-source tool for predicting the impact of CRS configuration changes, with a pre-registered prospective validation.
Other topics
Security of LLM use in business, and cyber risk assessment methods. Scope to be announced.