Capstone Projects

Hybrid Undergraduate/Graduate Course, Rochester Institute of Technology, Department of Computing Security, 2022

Capstones supervised between Spring 2017 and Spring 2022

Graduate Capstone Projects Supervised

  • Fall 2021, Godlove Penn - APT ‘Turla’ Adversary Emulation
  • Summer 2021, Neha Channakeshava - Creation of Automated Vulnerability Scanner Tool for the Evaluation of Cross-Origin Resource Sharing (CORS) Misconfigurations
  • Spring 2021, Sean Newman - Abusing the Express Data Path for Covert Communications
  • Spring 2021, Sunggwan Choi - Analyzing the Architecture, Components, and Characteristics of Open-Source Command and Control Frameworks
  • Spring 2021, Ashutosh Bhave - Active Detection of Advanced Persistent Threats
  • Fall 2020, Ayushi Rathore - Mapping Local File Inclusion Vulnerabilities to the MITRE ATT&CK Matrix
  • Fall 2020, Deepakkumar Kamatchisundaram - Automating Analysis, Exploitation and Control of PHP Applications using File Inclusion Attacks.
  • Fall 2020, Pranusha Soma Reddy - Implementing the Techniques, Tactics and Procedures (TTPs) Explained in MITRE ATT&CK Framework
  • Spring 2020, Angad Singh - Examining Vulnerabilities in Integrating Linux with Active Directory
  • Spring 2019, Joseph Graham - Operationalizing the MITRE ATT&CK Framework to Improve Penetration testing Methodology
  • Fall 2019, Anush Reddy - Securing Continuously Developed Web Applications
  • Fall 2018, Sukhpreet Singh - Configuration Files for Vulnerable Active Directory Deployment
  • Spring 2018, Issa Halfiri - Automating Vulnerable Infrastructures for Security Testing and Research
  • Spring 2017, Abdullah Alqarni - A Proposed Solution for Automated Implementation of Tested Best Practices for Docker Infrastructure

Undergraduate Student Capstones Supervised

  • Spring 2021 - Open Source Android Kernel Implant
  • Fall 2021 - Multifactor (Okta) Phishing Application
  • Spring 2021 - Multifactor (Duo) Phishing Application
  • Spring 2021 - Open Sourced Red Team Framework
  • Fall 2020 - Itentionally Vulnerable Infrastructure Development
  • Fall 2020 - ICS Cybersecurity Demonstration Development
  • Fall 2019 - Bug Bounties for Higher Education
  • Fall 2019 - ATT&CK-based Practice Guide Evaluation
  • Spring 2019 - Scaling and Accuracy in ATT&CK-based APT Detection System
  • Fall 2018 - Defensive Cyber Operations Analytics