shift-js.info

TL;DR

Takashi Yoneuchi is the Chief Technology Officer at Flatt Security Inc., where he leverages his extensive cybersecurity expertise to spearhead innovative software solutions such as KENRO and Shisho Cloud. His pioneering research on quantum programming languages has been recognized through selection for the prestigious MITO Target Program by the Ministry of Economy, Trade and Industry (METI). A recognized leader in his field, Takashi served as team captain for the Asia representative team at the International Cybersecurity Challenge 2023, showcasing his leadership on a global stage. He actively contributes to educational initiatives, shaping the next generation of cybersecurity professionals in Japan. Takashi is also an accomplished author, with several well-regarded books on web security that serve as key resources in the industry.
2019 年にFlatt Securityに入社し、2021年6月よりCTOに就任。技術統括・組織運営の他、同社の技術者向け製品『KENRO』や『Shisho Cloud』に関するプロダクトマネジメント・事業開発リード等、アーリーフェーズの技術経営全般に従事。また個人としても、経済産業省管轄の未踏ターゲットプログラムに採択されたコンパイラ開発や International Cybersecurity Challenge 2023 アジア代表チームキャプテン等、自身のリーダーシップと技術力を国内外のシーンで発揮。その他一般社団法人セキュリティ・キャンプ協議会で高度な情報セキュリティ技術の教育活動に参画。著書に『Webブラウザセキュリティ ― Webアプリケーションの安全性を支える仕組みを整理する』（2021年、ラムダノート社）等。

Work Experience

Flatt Security Inc.

Chief Technology Officer (CTO)

June, 2021 - PRESENT

Security Engineer

May, 2019 - May, 2021

Started my career in Flatt Security on May 2019, became CTO on June 2021, and joined the board on June 2022. On Februrary 2024, Flatt Security joined GMO Internet Group for larger challenges, which gives me more exciting opportunities to work with lots of talented executives and partners.
Developing Shisho Cloud, an enabler of Policy as Code concept. In my capacity as a proactive 'doer' during the launch phase, I steered the company through over four significant product pivots within a span of two years. This role encompassed comprehensive responsibilities in Product Management, Business Development, and Product Engineering. My efforts were particularly focused on conducting in-depth user interviews — over 50 in just three months — to accurately identify and address the key challenges in the product security sector. This endeavor required a seamless integration of business insight with technical expertise. Following the initial success and traction of our product, I have transitioned into a role focused on expanding and cultivating our team, rich in international diversity, and leading the company's business strategy through adept product management.
Developed KENRO, an e-learning system on secure web application development. In my role as the lead of product engineering for the KENRO project, I was responsible for designing and developing the majority of the initial codebase. A distinctive challenge we tackled was creating a sandbox environment capable of running user-supplied code. This feature, designed to verify users' ability to fix vulnerabilities in the code, is currently undergoing patent review in Japan. During the intensive launch phase of KENRO, my focus was widespread, spanning from hands-on development to strategic business development and sales. Subsequently, I delegated these business and sales responsibilities to our team, a move that has proven successful in establishing KENRO as a sustainable business, now highly regarded by numerous Japanese technology companies.

Lecturer at Web System Design Program (WEBSYS)

November, 2018 - March, 2024

Lectured Web application security.

Student Researcher at IBM Research - Tokyo

March, 2018 - Feburary, 2019

Worked on DNS Security and contributed to invent a method to detect homograph attacks.

Part-Time Security Engineer at IERAE Security Inc.

September, 2017 - April, 2019

Did vulnerability testing of Web applications.

Education & Certifications

Faculty of Science, the University of Tokyo

April, 2017 - March, 2021

Received B.Sc. in Information Science, as a student of Hagiya Laboratory.
The reference GPA is about 3.82/4.0; the value is based on Japan-U.S. Educational Commission since the University of Tokyo does not provide the official GPA.
93 credits in Senior Division (Department of Information Science): 42 A+ (優上; 100-90), 30 A (優; 89-80), 7 B (良; 79-65), 8 C (可; 64-50), 6 Pass (for pass-or-fail basis credits)
69 credits in Junior Division (College of Arts and Sciences): 37 A+ (優上; 100-90), 23 A (優; 89-80), 3 B (良; 79-65), 0 C (可; 64-50), 6 Pass (for pass-or-fail basis credits)

TOEFL iBT

February, 2021

Score: 91/120 (Reading: 27/30, Listening: 23/30, Speaking: 17/30, Writing: 24/30)
I've experienced 1-2 years of of working with English-speaking colleagues after this test ― I believe my English skills have improved since then :-)

Publications

ハンズオンWebAssembly

2022, オライリージャパン

ISBN: 978-4-8144-0010-2
Author: Gerard Gallant
Translator: 北原憲, 洲崎俊, 西谷完太, 磯野亘平, 米内貴志 (me)
See this page for further information of this book.

詳解セキュリティコンテスト

2021, 株式会社マイナビ出版

ISBN: 978-4-839973-49-0
Author: 梅内翼, 清水祐太郎, 藤原裕大, 前田優人, 米内貴志 (me), 渡部裕
See this page for further information of this book.

Webブラウザセキュリティ

2021, ラムダノート株式会社

ISBN: 978-4-908686-10-8
Author: 米内貴志 (me)
See this page for further information of this book.

Verification of Microservices Using Sidecar Proxy and Distributed Traces

2021, Bachelor Thesis

Here is an abstract of the paper.
Please email me to get the full version.

特許第7463021号

2020, JP Patent

Inventor: Takashi Yoneuchi (me)
Patent ID: JP2022067533A
Invented with my colleagues at Flatt Security.

Comprehensive homographic string detection

2018, US Patent

Inventor: Takashi Yoneuchi (me), Yuji Watanabe, Fumiko Akiyama
Patent ID: US20200134102A1
Invented with my colleagues at IBM Research - Tokyo.

R&D Projects

Research and Development of Next-Gen Quantum-Classical Programming Language

June, 2021 - February, 2022

Developping Qitten, a next-gen quantum-classical programming language.
This project was supported by MITOU Target Program, a research grant for quantum projects.
Reference: a project summary page
Reference: slides

Development of a Tiny Web browser with V8 JS engine

May, 2021 - August, 2021

Developed puppy, a tiny Web browser written in Rust for educational purposes.
It's about 4k lines of code including tests.
it can parse HTML/CSS, render it in your terminal, and even execute JavaScript with the v8 engine!
Reference: the GitHub repository for this project.

Development of Linux-compatible RISC-V CPU on FPGA from scratch

December, 2019 - March, 2020

Developed a RISC-V CPU on which Linux kernel runs successfully as a team.
Reference: related blog article (in Japanese).
Reference: GitHub repositories for this project.

Research on Blind Regular Expression Attack

September, 2019 - February, 2020

Proposed a brand-new theoritical attack that abuses Regular Expression (regexp) engines.
Got featured by some famous news sites including The Daily Swig.
Reference: detailed information ("A Rough Idea of Blind Regular Expression Injection Attack").