A collection of 1 Post
A MATH 211 portfolio project applying probability, confidence intervals, hypothesis testing, and regression to the UNSW-NB15 network intrusion dataset — and deriving a logical root-cause signature for malicious traffic.
A collection of 5 Posts
Examining the security challenges facing the open source ecosystem — the funding gap, governance failures, and the initiatives working to secure the software supply chain that 90% of modern applications depend on.
What Zero Trust actually means in practice, why traditional perimeter security failed, and how organizations are implementing the NIST and CISA frameworks to verify every access request regardless of network location.
A practical introduction to container-based development with Docker and Docker Compose. Covers containerization fundamentals, multi-stage builds, development vs production configurations, and container security best practices.
Why Rust is gaining rapid adoption across operating systems, cloud infrastructure, security tools, and developer tooling. Examining the technical advantages that make it the first new language in the Linux kernel since C.
A practical survey of AI-powered development tools reshaping how software gets built. From inline completions to autonomous agents, understanding what these tools can and can't do is essential for modern developers.
A collection of 4 Posts
Starting out in programming is thrilling, yet the number of languages available makes it difficult to decide where to begin.
Starting out in programming is thrilling, yet the number of languages available makes it difficult to decide where to begin.
Starting out in programming is thrilling, yet the number of languages available makes it difficult to decide where to begin.
Starting out in programming is thrilling, yet the number of languages available makes it difficult to decide where to begin.
A collection of 10 Posts
How a multi-year social engineering campaign nearly inserted a backdoor into a critical Linux compression library, and what it reveals about the systemic vulnerabilities in open source maintainer culture.
The first documented case of one supply chain attack leading directly to another, where a compromised financial trading application was used to breach a VoIP provider with 600,000 customers.
How the REvil ransomware group exploited Kaseya VSA to simultaneously deploy ransomware to hundreds of businesses through their managed service providers, demonstrating the outsized blast radius of attacking IT management platforms.
How a compromised update to Ukrainian accounting software became the vehicle for the most costly cyberattack ever recorded, causing over $10 billion in global damage and demonstrating the catastrophic potential of supply chain weaponization.
Examining the Log4j vulnerability (CVE-2021-44228) that exposed a critical weakness in the software supply chain — the invisible dependency layers that underpin modern applications and the systemic risk of under-resourced open source projects.
A deep dive into the SolarWinds Orion supply chain compromise, where a nation-state adversary inserted the SUNBURST backdoor into digitally signed software updates distributed to 18,000 organizations including federal agencies.
An overview of incident response frameworks tailored to critical infrastructure environments. Covers the NIST incident response lifecycle, forensic preservation, coordination with government agencies, and lessons learned from real-world infrastructure incidents.
Analyzing major supply chain compromises including SolarWinds and Log4j, their impact on national security, and the frameworks being developed to secure the software supply chain against sophisticated adversaries.
A survey of the threat landscape facing critical infrastructure sectors. Covers SCADA and ICS security challenges, nation-state threat actors, CISA frameworks, and the sixteen critical infrastructure sectors defined by Presidential Policy Directive 21.
An examination of Stuxnet, the first known cyber weapon deployed against critical infrastructure. Explores how this malware changed the landscape of national security, industrial control system vulnerabilities, and the doctrine of cyber warfare.
A collection of 10 Posts
How to view, control, and manage processes from the Linux command line. Covers ps for process listing, kill for signaling, and job control with bg, fg, and nohup for persistent processes.
Essential terminal networking commands for developers and system administrators. Covers curl for HTTP requests, wget for downloads, ping for connectivity, and ss for socket inspection.
A clear guide to Linux file permissions, ownership, and access control. Covers chmod, chown, and umask with practical examples that demystify the permission system every Linux user needs to understand.
How to check disk usage, memory, CPU load, and overall system health using essential Linux commands. Covers df, du, free, top, htop, and uname for effective system monitoring.
A practical introduction to the Unix text processing trinity. Learn to search, transform, and analyze text data from the command line using grep for pattern matching, sed for stream editing, and awk for structured data processing.
A hands-on guide to creating, copying, moving, and deleting files and directories from the terminal. Covers touch, mkdir, cp, mv, and rm with safety practices every developer should know.
A practical guide to navigating the Linux filesystem from the command line. Covers cd, ls, pwd, and find with real-world examples that build muscle memory for efficient directory traversal.
Rooted in the principles of free software, Linux has evolved from a student’s project into a cornerstone of modern technology, powering everything from supercomputers to smartphones.
Rooted in the principles of free software, Linux has evolved from a student’s project into a cornerstone of modern technology, powering everything from supercomputers to smartphones.
Rooted in the principles of free software, Linux has evolved from a student’s project into a cornerstone of modern technology, powering everything from supercomputers to smartphones.
A collection of 4 Posts
A guide to building a professional cybersecurity development and testing environment. Covers virtualization, network segmentation, tool orchestration, and creating reproducible lab configurations for security research and portfolio development.
Exploring active reconnaissance techniques used in authorized security assessments. Covers port scanning concepts, service enumeration, and how security professionals identify potential vulnerabilities through direct interaction with target systems in lab environments.
Understanding passive reconnaissance techniques and how security professionals gather intelligence without directly interacting with a target. Covers OSINT principles, DNS analysis, and publicly available data sources used in authorized security assessments.
An introduction to using Python as a primary tool for cybersecurity work. Covers the fundamentals of why Python is the language of choice for security professionals, essential libraries, and how to set up a proper development environment.
