Kandy Phan, Participant

Kandy Phan is a principal cybersecurity researcher and red team lead at Sandia National Laboratories. He has worked there for over 20 years with a research focus on improving assessment capabilities for IT, ICS, electric vehicles, cloud, and specialized systems. He has led roadmap efforts to identify key investment areas for the future information security landscape and is the red team lead of the DOE CyberForce Competition, an event for college cyber defenders to learn about cyber-physical threats against infrastructure. Kandy received his M.S. degree in Computer Science with a focus in Information Assurance from The Naval Postgraduate School. He is a speaker at security conferences such as the Red Team Summit and KernelCon and has published papers on using a threat-informed methodology to assess nuclear power plants to the American Nuclear Society NPIC/HMIT conference. His research interests include assessment automation, ICS and EV security, cyber threat emulation, and malware analysis. His interests include exploring methods to improve red team performance, malware analysis, and automation for virtualization security.