Skip to content
View otsobide's full-sized avatar
🐺
Herding wolves
🐺
Herding wolves

Block or report otsobide

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
otsobide/README.md

Hi! I'm Javi 👋🏻

Software Engineer and Cybersecurity Researcher from Spain 🇪🇸 specializing in Cyber Threat Intelligence and Adversary Emulation, using offensive methodologies to simulate real-world attacks and improve defensive capabilities against evolving threats.

Projects I'm working on

  • 🌟 Collapse - A small, fast file compressor
  • 🔑 Tanukeys - Service for storing cryptographic public keys
  • 🦊 Fennec - Another Cyber Threat Intelligence platform
  • 🦀 Rust DDD Skeleton - Rust template structured with DDD and CQRS principles
  • 🐍 Python DDD Skeleton - FastAPI template structured with DDD and CQRS principles
  • 🥟 Bun DDD Skeleton - Bun template structured with DDD and CQRS principles

Projects I still maintain

  • 🍃 MongoExport - Incrementally export MongoDB collections
  • 🔍 Deepfinder - Search attributes in nested dict/list structures using dot-path syntax
  • 🪞 Kagami - GitHub Action to mirror a repository to another git system

Legacy Projects

  • 🐋 Maruja - Docker container packet sniffer
  • 🐠 Datarium - Common data structures for TypeScript
  • 💊 Python Value Objects - Lightweight value objects for domain modeling in Python
  • 🆚 DeepComparer - Deep comparison of nested Python data structures
  • ⚙️ Storable Functions - Store and execute JavaScript functions as reusable values
  • 🔍 DeepfinderJS - Search attributes in nested dict/list structures using dot-path syntax
  • 🦝 TanukiKeyGuardian - KMS web service for secure key exchange and cryptographic isolation
  • 🇯🇵 Kanjinary - Kanji learning web app
  • 🍥 Mikana - Android app to learn Japanese syllabaries
  • 🀄 Kanami - Practice Japanese syllabaries, Hiragana and Katakana

Publications

  • Adaptive Adversary Emulation Framework for Cyberwarfare Operations (COMMAG2026) - A modular framework, OPFOR (Operational Platform for Offensive Replication), for executing Adversary Emulation based on behaviors attributable to real threat actors, integrated within the Cyber Threat Hunting paradigm to protect Critical Infrastructures. It formalizes the concept of Adaptive Adversary Emulation (AAE), combining CTI with an internal understanding of network topology weaknesses to generate contextualized, infrastructure-aware attack paths. A Stuxnet-inspired operation, executed by a Reinforcement Learning agent on a simulated nuclear plant network, validates the approach and informs defensive prioritization and early detection strategies.

  • Adaptive Adversary Emulation Applied to Critical Infrastructures and IIoT Networks (JNIC2026) - A solution based on Adversary Emulation (AE) that dynamically adapts attack tactics to the targeted infrastructure, balancing faithful imitation of the emulated adversary with adaptability to the target environment. Guided by Machine Learning and industrial simulation, it enables an AI agent to train efficiently by learning from the environment and its weaknesses, supporting threat hunting and proactive defense evaluation in critical infrastructures and IIoT settings.

  • Digital Twin for Adaptive Adversary Emulation in IIoT Control Networks (ESORICS2025) - A framework that uses Digital Twins to emulate adaptive cyber adversaries in IIoT Control Networks. It creates a virtual replica of the industrial system where automated attackers, driven by Reinforcement Learning, interact with the environment and adapt their strategies to exploit critical nodes, generating realistic and dynamic attack scenarios without impacting real infrastructure. It enables the evaluation of defensive mechanisms and supports proactive cybersecurity testing in critical industrial networks.

Pinned Loading

  1. collapse collapse Public

    🌟 A small, fast file compressor

    Rust 1

  2. python-ddd-skeleton python-ddd-skeleton Public template

    🐍 Template of a Python & FastAPI application using Domain-Driven Design and Command Query Response Segregation principles

    Python 22 1

  3. deepfinder.py deepfinder.py Public

    🔎 Search attributes easily using dot paths. Within structures of type dictionary, list and embedded substructures with simple format 'dict.users.0.name'.

    Python 5 1

  4. rust-ddd-skeleton rust-ddd-skeleton Public template

    🦀 Template of a Rust application using Domain-Driven Design and Command Query Response Segregation principles.

    Rust