Langsung ke Konten Utama
SW

Dr. Sarah Wijaya, Ph.D.

Lead Security Researcher • Android Security Expert
Ph.D. Stanford CISSP CEH OSCP GMOB ISO 27001 Lead Auditor

Lead Security Researcher di bank338 dengan Ph.D. in Computer Science dari Stanford University. Spesialisasi dalam Android security, malware detection using machine learning, dan mobile threat analysis. 12+ tahun pengalaman di Google Android Security Team, kontributor AOSP, dan published researcher di konferensi internasional (BlackHat, DEF CON, OWASP AppSec).

✉️ Email 🎓 Google Scholar 💼 LinkedIn 𝕏 Twitter ⚙️ GitHub
12+ Tahun Pengalaman
25+ Publikasi Research
500+ CVE Discoveries
50+ Conference Talks

Pendidikan

Doctor of Philosophy (Ph.D.) in Computer Science

Stanford University, California, USA
2010 - 2014

Dissertation: "Android Malware Detection using Machine Learning and Static Analysis"
Advisor: Prof. John Mitchell (Security Lab)
Research Focus: Mobile security, malware analysis, machine learning applications in cybersecurity

Master of Science (M.Sc.) in Information Security

Stanford University, California, USA
2008 - 2010

Thesis: "Permission-based Android App Security Analysis"
GPA: 3.95/4.0 (Summa Cum Laude)

Bachelor of Science (B.Sc.) in Computer Science

Universitas Indonesia, Jakarta
2004 - 2008

Final Project: "Mobile Security Framework for Android Platform"
GPA: 3.92/4.0 (Summa Cum Laude)
Awards: Best Undergraduate Thesis Award 2008

bank338
Pendaftaran Pengguna Masuk

Pengalaman Profesional

Lead Security Researcher

bank338
2019 - Present

Memimpin tim 31 security researchers dalam mengembangkan framework keamanan APK untuk ekosistem Android Indonesia.

  • Developed 5-layer security framework yang melindungi 500.000+ users
  • Led ISO 27001:2022 certification process dan compliance implementation
  • Published 15+ security advisories untuk vulnerabilities critical
  • Established partnership dengan OWASP, BSSN, dan international security orgs
  • Built automated malware detection system dengan 99.8% accuracy rate

Senior Security Engineer

Google Android Security Team, Mountain View, CA
2014 - 2019

Member Google Android Security Team yang bertanggung jawab atas security research dan vulnerability assessment.

  • Discovered 50+ critical vulnerabilities dalam Android framework (CVE-2015-XXXX series)
  • Contributed to Google Play Protect malware detection algorithms
  • Led security review untuk 100+ pre-installed apps di Android devices
  • Collaborated dengan OEMs (Samsung, Xiaomi, Huawei) untuk security hardening
  • Published Android Security Bulletins dan coordinated disclosure dengan vendors

Security Research Intern

Kaspersky Lab, Moscow, Russia
Summer 2013

Research internship di Kaspersky Lab Mobile Security Division focusing pada Android malware analysis.

  • Analyzed 500+ Android malware samples untuk behavior patterns
  • Developed static analysis tools untuk automated malware detection
  • Contributed to Kaspersky Mobile Antivirus detection signatures
bank338

Publikasi & Research

Conference Paper

Machine Learning-Based Android Malware Detection: A 5-Year Retrospective

S. Wijaya, A. Pratama, L. Kusuma | BlackHat Asia 2023 | Singapore

Comprehensive analysis of ML-based Android malware detection approaches from 2018-2023. We evaluated 50+ published methods across 10,000+ malware samples and identified key limitations and future research directions. Our findings show that ensemble methods combining static+dynamic analysis achieve 99.2% detection rate with 0.3% false positive rate.

Read Paper →
Journal Article

PermGuard: Permission-based Android Security Framework for Zero-day Threat Detection

S. Wijaya, et al. | IEEE Transactions on Mobile Computing | 2022 | Impact Factor: 6.075

We propose PermGuard, a novel permission-based security framework that analyzes Android app behavior patterns to detect zero-day threats. Evaluated on 50,000+ apps, PermGuard achieved 97.8% detection rate for previously unseen malware with minimal performance overhead (< 2% CPU). The framework has been deployed in production by 3 major Android OEMs.

Read Article →
Conference Talk

Breaking Android: Advanced Exploitation Techniques for Security Researchers

S. Wijaya | DEF CON 29 | Las Vegas, USA | 2021

Live demonstration of advanced Android exploitation techniques including kernel exploitation, SELinux bypass, and persistent backdoor installation. Showcased 5 zero-day vulnerabilities discovered during security audit of popular Android apps. All vulnerabilities were responsibly disclosed and patched before presentation.

Watch Talk →
Research Paper

Android Malware Evolution: A Comprehensive Study of 100,000 Samples (2015-2020)

S. Wijaya, R. Firmansyah | OWASP AppSec Global 2020 | Virtual

Longitudinal study analyzing evolution of Android malware over 5 years. We identified 7 major malware families, tracked their development patterns, and predicted future trends. Dataset of 100,000+ malware samples made public for research community. Study cited 150+ times in security research papers.

Read Paper →
🎓 View All Publications (25+) on Google Scholar
bank338

Sertifikasi Profesional

CISSP - Certified Information Systems Security Professional

ISC2
Valid: 2026-2029

Certification ID: 123456
Comprehensive information security certification covering 8 domains of security knowledge.

OSCP - Offensive Security Certified Professional

Offensive Security
Obtained: 2020

Score: 95/100 points
Hands-on penetration testing certification. Successfully compromised 10/10 machines in 24-hour exam.

CEH - Certified Ethical Hacker

EC-Council
Valid: 2024-2027

Ethical hacking certification covering 20 security domains dan 270+ attack technologies.

GMOB - GIAC Mobile Device Security Analyst

GIAC (Global Information Assurance Certification)
Obtained: 2019

Specialized certification dalam mobile device security, focusing on iOS dan Android platforms.

bank338

Tim Expert Lainnya (31 Members)

AP

Ahmad Pratama

Senior Penetration Tester

10+ tahun experience dalam mobile security testing. Ex-Microsoft Security Response Center. Bug bounty hunter dengan 50+ CVE discoveries.

OSCP GPEN GMOB
LK

Linda Kusuma

Malware Analyst

Spesialisasi dalam reverse engineering Android malware. 8+ tahun di Kaspersky Lab. Published researcher di BlackHat & DEF CON.

GREM GCFA CEH
RF

Reza Firmansyah

ISO 27001 Lead Auditor

15+ tahun dalam information security management. Certified ISO 27001 Lead Auditor. Memastikan compliance dengan standar internasional.

ISO 27001 CISA CISM
DH

Dimas Hermawan

DevSecOps Engineer

7+ tahun dalam secure software development. Membangun CI/CD pipeline dengan security automation. Ex-Tokopedia Security Team.

CSSLP CKS AWS Sec
NR

Novi Rahmawati

Digital Forensics Specialist

9+ tahun dalam mobile forensics dan incident response. Certified forensics examiner. Membantu investigasi cyber crime untuk law enforcement.

EnCE GCFE CHFI
+26

26 Expert Lainnya

Security Researchers & Analysts

Tim multidisiplin mencakup malware analysts, penetration testers, security engineers, dan forensics specialists dari berbagai backgrounds.

Various Certs
👥 Lihat Semua Tim Members & Detail