Projects
Multi-Device Timeline Fusion
Final year research project reconstructing a unified timeline from multiple independent devices while explicitly measuring how reliable that reconstruction is — defensible alignment, not just alignment. Built as a deterministic six-stage pipeline: logs are parsed, timestamps normalised to UTC, overlapping events detected, median-based clock-skew offsets calculated and applied, events fused and clustered, and cluster-level confidence scores assigned. Confidence is modelled as an exponential decay over weighted uncertainty components (temporal variance, cluster completeness, skew spread, and cluster size), so uncertainty is explicitly propagated rather than assumed. Each event preserves full provenance — original and corrected timestamps, cluster and device IDs, and SHA-256 hashes — with results exported to JSON and SQLite. Evaluated under controlled synthetic noise: mean absolute error degrades predictably and bounded (~27s to ~38s) while ordering accuracy stays at 1.0 across all noise levels, preserving the relative event sequence that matters most in forensic analysis. Identical input always produces identical output, supporting forensic defensibility and reproducibility.
Learn more →Network Forensics & Packet Interception
Network forensics investigation capturing and analysing live traffic from a promiscuous-mode virtual machine. Used Wireshark display filters to isolate and follow suspicious flows, applied to an NSPX30 / Blackwood APT case study to reconstruct attacker behaviour from packet captures. Built and ran the capture environment under VMware, documenting the interception methodology and findings.
Learn more →Secure Banking Application
Secure banking web application built with a defence-in-depth approach. Implemented login authentication with TOTP-based two-factor authentication, bcrypt password hashing, and an SQLAlchemy ORM to guard against SQL injection. Added rate limiting to mitigate brute-force attacks and session timeouts to reduce session hijacking risk. Built user-facing functionality for viewing balances, performing transactions, and maintaining a transaction history. Followed OWASP guidelines throughout and applied static code analysis using Bandit to identify security vulnerabilities.
Learn more →Secure TLS Client–Server Communication
Team project demonstrating secure client–server communication over TLS 1.3. Configured certificates via Let’s Encrypt and Certbot using the DNS-01 challenge, verified the chain with OpenSSL, and demonstrated forward secrecy in the negotiated cipher suites. Built and tested across virtual machines under VMware. Presented as a recorded demonstration walking through the handshake, certificate issuance, and verification steps.
Learn more →Networking & LAN Design
Enterprise-style LAN designed and simulated in Cisco Packet Tracer for a 200-user organisation. Applied VLSM for efficient address allocation, segmented the network with VLANs, and configured a Layer 3 core switch for inter-VLAN routing. Applied access control lists to enforce traffic policies and simulate real-world enterprise security requirements. Configured routers and switches to model a complete, working enterprise network.
Learn more →ZeroDays 2024 CTF
Competed in ZeroDays 2024, a national ethical hacking and digital forensics Capture the Flag competition. Worked through investigation-style challenges by acquiring and examining disk evidence, recovering hidden and deleted artefacts, and capturing flags from the reconstructed data. Applied a full forensic workflow developed through extensive lab practice: write-blocking and secure acquisition, image verification with MD5/SHA-1 hashing, examination of FAT32, NTFS, and HFS+ images, and file carving via hex-level analysis. Primary tooling was FTK Imager and Autopsy, supported by ProDiscover, OSForensics, and 010 Editor / Hex Workshop for imaging, registry examination, and manual carving.
Learn more →Kali Linux & Metasploitable Security Testing
Hands-on penetration testing and vulnerability assessment against a deliberately vulnerable Metasploitable target using Kali Linux. Practised the core offensive workflow — enumeration, identifying common exploitable services, and running exploits with Metasploit — then reasoned through the corresponding mitigation strategies for each finding. Built practical familiarity with the Kali toolset and the attacker’s perspective on common misconfigurations.
Learn more →Infrastructure Automation & Scripting
A multi-part IT automation project spanning configuration management, scripting, and scheduling across Linux and Windows hosts. Used Ansible (passwordless SSH, inventory files, YAML playbooks) to automate system updates and Apache web-server deployment with UFW firewall rules across multiple target machines. Wrote Python automation for data extraction and visualisation (pandas + GNUPLOT) and web scraping (requests + BeautifulSoup) with structured Excel export. Built Bash scripts for server resource checks (disk/RAM vs VM requirements), remote system-info retrieval over SSH/SCP, and remote process management with kill verification. Automated recurring shutdowns via cron and Windows Task Scheduler, and scripted VM lifecycle operations including cloning, snapshots, and parallel start/stop.
Learn more →