projects / 03
Attack, detect, harden. The thesis project sits first, and the interactive Security Posture Explorer below is built from it.
BSc Thesis - Original Research
AWS Bedrock (Llama 3.1 8B) · EC2 · OpenSearch · Flask · LangChain · IAM · CloudTrail
Deployed a RAG chatbot on AWS Bedrock and built a 35-test-case security framework spanning LLM, RAG, and cloud layers. Shipped 14 hardening controls, raising the Security Posture Score with 100% vulnerability remediation.
Azure VM as a honeypot, forwarded live attack logs to Sentinel, built a real-time attack map. Created automated incident response workflows using Logic Apps; alerts fired within minutes. Wrote KQL rules targeting failed RDP logins (Event ID 4625), enriched attacker IPs with GeoIP watchlist data, automated metadata logging to a custom Sentinel table via Logic App.
Python/Flask tool pulling IOCs from OTX, FeodoTracker, AbuseIPDB, and VirusTotal; deduplicates across feeds, geolocates threats on an interactive map. Integrated Slack and email alerting: live IOC notifications with zero manual intervention. Reduced IOC review time by consolidating 4 separate threat feeds into a single normalized dashboard.
Production-grade bash script for the HNG DevOps Stage 1 challenge - automates dependency installation, user provisioning, vulnerability scanning, service enabling, and a security verification suite. Uses GitHub Actions to validate the script across fresh Ubuntu, Debian, and Kali images, then deploys a hardened Ubuntu VM.
Scripted a mini cloud network on Linux - build a virtual private cloud, bind virtual NICs, configure VLAN trunking, assign static IPs, craft IAM-style isolation, and simulate firewall rules and encrypted tunnels. The full networking stack runs on loopback interfaces, no cloud provider or paid tools required.