Michał Walkowski

Michał Walkowski

Research Assistant Professor

Wroclaw University of Technology

Biography

I am an Research Assistant Professor at the Wroclaw University of Technology - Faculty of Information and Communication Technology. Department of Telecommunications and ICT, field Cybersecurity.

I am also experienced IT Security Professional with many years working in private (Nokia, Santander, Vodeno) sector, including being Security Engeener and Penetration Tester. My IT Security knowledge and skills are backed up by the following certifications:

GXPN, GMOB, GCIH, GWAPT, Security clearances „UE: très secret ue/eu top secret”, Security clearances „NATO: cosmic top secret”.

If you’re interested, you can find more about my professional background on my LinkedIn profile.

Interests
  • Computer Security
  • Software Development
  • Development and Operations
  • Cloud Computing
Education

  • PhD in Technical informatics and telecommunications, 2022

    Wroclaw University of Technology

  • MSc in Finance and Accountancy, 2016

    Wroclaw University of Economics and Business

  • BSc in Robotics, and Automation Engineering, 2014

    Wroclaw University of Technology

Recent Posts

Introduction to systemd-nspawn Containers: chroot on Steroids
In today’s era, where virtualization and containerization play a significant role in the architecture of IT systems, tools such as Docker and Kubernetes have gained considerable popularity among developers and system administrators. However, for Linux users, there is also a lesser-known but incredibly powerful alternative - systemd-nspawn. Often referred to as “chroot on steroids,” systemd-nspawn enables the creation of lightweight isolation spaces that can be used to run software in isolated containers with minimal overhead. In this article, we will explore how systemd-nspawn allows the creation and management of containers in Linux, its main advantages, and how it differs from the more traditional chroot approach and other popular container solutions. Additionally, we will go through the process of configuring containers to allow SSH login and running them as a system service.
May 6, 2024 9 min read
Introduction to systemd-nspawn Containers: chroot on Steroids
Resolving Hostnames in Burp: How to avoid editing the /etc/hosts file
In this article, I will present a method to avoid manual editing of the /etc/hosts file during penetration tests and security audits, utilizing the Burp Suite tool (this option is available in both Enterprise and Community versions). This technique not only enhances the efficiency of tests but also offers greater flexibility, which can be useful for bypassing WAFs such as Cloudflare, for example. The inspiration for this article came from a presentation by @Agarri_FR, which showcases tricks for more effective use of Burp Suite.
Apr 18, 2024 4 min read
Resolving Hostnames in Burp: How to avoid editing the /etc/hosts file
See all posts

Publications

Quickly discover relevant content by filtering publications.
(2023). Analysis of CVSS Vulnerability Base Scores in the Context of Exploits’ Availability. 2023 23rd International Conference on Transparent Optical Networks (ICTON).

Cite DOI

(2023). Automated Calculation of CVSS v3.1 Temporal Score Based on Apache Log4j 2021 Vulnerabilities. 2023 International Conference on Software, Telecommunications and Computer Networks (SoftCOM).

Cite DOI

(2023). Comparative Analysis of Open-Source Tools for Conducting Static Code Analysis. Sensors.

Cite DOI URL

(2023). Support for the Vulnerability Management Process Using Conversion CVSS Base Score 2.0 to 3.x. Sensors.

Cite DOI URL

(2022). Base Systems for Docker Containers - Security Analysis. 2022 International Conference on Software, Telecommunications and Computer Networks (SoftCOM).

Cite DOI

See all publications

Supervision

BSc, MSc Thesis

For candidates:

I am looking forward to supervising student MSc and BSc thesis. As a first step please sent me mail with thesis proposal.

  1. Introduce yourself: Tell me in two or three sentences who you are. State your degree level and when you are planning to defend your thesis.
  2. Explain why you are interested in this research topic and what is your experience.
  3. Describe idea of your proposed work, especially research chapters. If possible, please refer to latest scientific articles.
  4. Take some time to think and try to fill in the following file on your own (BSc or MSc).

Current Students Supervision:

- [2023 - ...] Comparative analysis of selected ransomware attacks
- [2023 - ...] Security analysis of the DNS system
- [2023 - ...] OAuth 2.0 security analysis
- [2023 - ...] Comparative analysis of security between microservice and monolithic architectures

Sample Past Student Supervision (BSc and MSc):

- [2023 - 2024] Design of Lua scripts to detect network protocol vulnerabilities
- [2023 - 2024] Comparison of selected methods for data theft from devices connected to a public network
- [2023 - 2024] Project of secure implementation of a web application based on Docker technologies
- [2023 - 2024] Automating the process of vulnerability assessment for web applications using the Nuclei vulnerability scanner
- [2023 - 2024] Project of a network device auditing system
- [2023 - 2024] Comparison of the effectiveness of selected vulnerability scanners in web applications
- [2023 - 2024] Scanner project for detecting popular security vulnerabilities for LAN network
- [2023 - 2024] Implementation of a distributed Honeypot network in a LAN for the purpose of identifying and analyzing cyber attacks
- [2023 - 2024] Threat analysis, privacy protection and the role of artificial intelligence in the age of social media
- [2023 - 2024] Open-Source Intelligence in Investigative Processes: Analysis of Person Search Methods and Conducting Investigations

All topics for diploma theses are available at this link.

Information for diplomats:

  1. Consultations take place remotely using the MS Teams platform. Please book consultations using Calendly; the link is available here.
  2. The current graduation schedule is available at this address.
  3. The current editorial requirements are available at this address.
  4. Just to be sure, I’m placing them here as well :)

Contact