Introduce Team JSYCURE

# JSYCURE Team A research team dedicated to building the new standard for security automation, where intrusion detection meets autonomous response. ## About Us JSYCURE is a security-focused community founded on the belief that modern cyber defense requires a tight integration of human expertise and machine intelligence. From log-level analysis to organization-wide response orchestration, we explore and prototype the entire defensive lifecycle. Our work spans academic research, hands-on lab experimentation, and the development of production-ready tooling. ## Our Teams ### DeepSecu — Detection & Threat Intelligence DeepSecu focuses on AI-driven intrusion detection and large-scale log data analysis. The team designs and evaluates machine learning models for identifying anomalous behavior across networks, endpoints, and cloud workloads. Current research interests include: - Behavioral anomaly detection using deep learning - Log normalization and threat signal extraction across heterogeneous sources - Adversarial robustness of security ML models - Integration of LLM-based reasoning into detection pipelines ### SOAR — Security Orchestration, Automation & Response The SOAR team specializes in security operations automation using open-source platforms such as TheHive and Shuffle. We build response playbooks that translate detection alerts into actionable, repeatable workflows. Focus areas include: - Incident response playbook design and validation - Cross-platform integration with SIEM, EDR, and ticketing systems - Automated enrichment and triage workflows - Performance measurement of human-in-the-loop response operations ### ITSAFE — Community & Education ITSAFE is the educational and community arm of JSYCURE. We organize study groups, technical seminars, and collaborative projects that help members grow together in the field of information security. Activities include: - Weekly security study sessions - Capture-the-flag (CTF) preparation and participation - Mentorship between graduate researchers and undergraduates - Knowledge sharing through internal write-ups and documentation ## Active Projects ### JSYCURE Cloud (Web Platform) A self-hosted web platform that consolidates cloud VM provisioning, user management, and team communication into a single interface. Originally migrated from a Naver Cafe-based workflow, the platform now serves as the operational backbone for our internal infrastructure. Key features include: - User registration, authentication, and account recovery - VM request, approval, and lifecycle management - Real-time monitoring of Proxmox-based virtual machines - Integrated notice board and notification system - Email broadcasting for important announcements via Synology Mail Server - Role-based access control with administrator privileges The platform is built on Node.js, Express, EJS, and SQLite, with Nginx serving as the reverse proxy and Let's Encrypt providing HTTPS through DuckDNS. ### Proxmox-Based Lab Infrastructure We operate a Proxmox VE cluster that hosts research VMs for our team members. The environment supports a wide range of workloads, including Kali Linux for offensive security exercises, OPNsense for network segmentation research, and dedicated VMs for SIEM and SOAR experimentation. Tailscale is used for secure remote access across team members. ### Personal & Research Projects Members of JSYCURE pursue individual research projects alongside team initiatives. These include: - Detection rule development for Suricata and Zeek - Custom dashboard development for security event visualization - Threat hunting workflows leveraging the ELK stack - Lightweight honeypot deployments for traffic analysis - Integration experiments between commercial and open-source security tooling ## Our Vision From intrusion detection to autonomous response, JSYCURE aims to bridge research and operations. We believe the next generation of defenders will be those who can not only analyze threats but also automate, scale, and continuously improve their defenses. Through open collaboration, hands-on experimentation, and academic rigor, we are building the people and the platforms that will define that future.