Kemi's Projects - Robust Cybersecurity Strategies

---

An organisation recently experienced a Distributed Denial of Service (DDoS) attack, during which I actively participated as a member of the cyber security team. My responsibilities encompassed the crucial phases of containing the incident and orchestrating the recovery efforts to restore our systems to their normal operational state.

In response to this security breach, my role involved implementing strategic measures aimed at halting the ongoing DDoS attack, safeguarding our network infrastructure, and mitigating potential damage. 

This multifaceted involvement required close collaboration with fellow security professionals and IT experts to promptly address the threat and create robust cybersecurity strategies to minimise any adverse impact on our organisation’s operations.

Moreover, my responsibilities extended to the recovery phase, where meticulous efforts were undertaken to restore affected systems and services to their pre-incident state. This involved not only technical aspects but also coordination with relevant stakeholders to ensure a comprehensive and resilient recovery process.

For more detailed information about the specific actions taken, methodologies employed, and outcomes achieved during this project, please refer to the link provided below. Your interest and further exploration of the details are encouraged and welcomed.

Web application portals, which are accessible to the public, act as a bridge connecting organisations with their potential customers. In my role as a cyber security analyst, I delved into the potential risks associated with these portals and explored strategies to mitigate these risks, keeping in mind the need to safeguard the confidentiality, integrity, and availability of the information provided by these portals.

These risks pose a vulnerability that malicious actors could exploit, leading to cyber-attacks and downtime for the organisation. Fortunately, there are established guidelines to help identify and address risks related to publicly accessible web applications. The OWASP (Open Web Application Security Project), a non-profit organization, has outlined comprehensive guidelines for enhancing software security. These guidelines cover various risks, including but not limited to cross-site scripting, injection attacks, security misconfiguration, and broken access control.

Through my research, I identified several types of risks that organisation's should be mindful of when operating a publicly available portal, along with effective mitigation strategies. I particularly emphasised the threat of injection attacks, which are commonly employed by malicious actors to gain unauthorised access to an organisation's database, undermining the fundamental principles of cybersecurity (Confidentiality, Integrity, and Availability) in a web application.

For more details on this project, please click the button below.

I played a vital role in a collaborative project with my team, where we proactively detected various incidents within the organisations network, including phishing emails, suspicious logins, and files with malware. We diligently developed and executed multiple mitigation strategies to contain and recover from these security breaches.

For further insights into this project, please click the action button below.

I possess a strong grasp of cyber threat intelligence and excel at recognizing the various cyber threats that organizations may encounter. My expertise encompasses analysing the threat landscape, conducting threat modeling, and effectively communicating my findings to stakeholders.

In a recent project, I conducted extensive research to outline the primary threats and risks confronting an organisation, specifically a smart vehicle manufacturer, in its day-to-day operations. I delved into the potential consequences these threats could have on the company's assets, intellectual property, and customer trust. This thorough understanding of the threat landscape is vital for the organisation to craft robust cybersecurity strategies and proactively mitigate risks. My analysis also included a threat profile, identifying potential threat actors, their motivations, capabilities, and likely attack vectors. Furthermore, I employed threat modeling techniques to assess vulnerabilities and prioritise security concerns, thereby helping the organisation bolster its overall security posture.

Additionally, we reviewed the MITRE ATT&CK framework to empower the organization's security team with insights into the various tactics and techniques used by adversaries. This knowledge equips the team to remain well-prepared for potential security threats in the future.

The accompanying diagram illustrates the key stages in the cyber threat intelligence process, encompassing information gathering, threat modeling, and the dissemination of findings to stakeholders.

For a comprehensive overview of this project, please click the action button below to access further details.

Logical representation of wireless sensor networks spread in a remote area, including an analysis of the routing protocol and MAC protocol,  with energy efficiency in mind. How the cluster head nodes transfer data to the base station and connect with the cluster members. The implementation of the network on Packet tracer utilises the Ipv6 addressing scheme.

For a proper overview of this project, kindly click on the action button below to learn more.