II bbuuiilldd,, iinnvveessttiiggaattee,, aanndd sseeccuurree ddiiggiittaall ssyysstteemmss..

PROBLEM THESIS:

Modern public-key cryptographic infrastructure (RSA, ECDH, ECDSA) relies on mathematical problems like integer factorization and discrete logarithms that will be solved in polynomial time by Shor's algorithm on cryptanalytically relevant quantum computers (CRQCs). Hostile entities are actively executing 'Harvest-Now, Decrypt-Later' (HNDL) campaigns, intercepting and storing encrypted network sessions today to decrypt once quantum computing hardware matures. Existing application architectures lack standardized post-quantum key encapsulation mechanisms (KEM) and authenticated post-quantum digital signatures.

TECHNICAL APPROACH:

Implemented a comprehensive post-quantum cryptographic protocol following NIST FIPS 203 (ML-KEM-768) and FIPS 204 (ML-DSA-65) lattice standards. Built an authenticated key exchange protocol combining quantum-resilient key encapsulation with classical defense-in-depth via HKDF-SHA256 hybrid key derivation. The derived symmetrical session keys feed AES-256-GCM AEAD encryption engines for tamper-resistant data transit. Accompanying the protocol is a real-time cryptographic telemetry dashboard for tracking encapsulation cycle latency, public key footprint overheads, and handshake verification metrics.

PROBLEM THESIS:

Internet-facing Linux hosts endure relentless SSH credential stuffing and dictionary attacks by distributed botnets. Relying solely on manual syslog review or delayed log processors leads to multi-hour detection windows during which compromise can occur. Traditional static firewall configurations cannot dynamically distinguish between legitimate authentication spikes and multi-threaded credential exhaustion campaigns.

TECHNICAL APPROACH:

Engineered an autonomous host-based intrusion prevention system (HIDS/IPS) in Python. The daemon asynchronously tails /var/log/auth.log via kernel inotify events, parsing authentication failures in real time. It implements an in-memory sliding-window rate tracking algorithm that aggregates failure events by source IP. Upon threshold breach, the system executes kernel-level Netfilter/iptables DROP commands with automated expiration and ban lifecycles. A Flask-powered SOC monitoring dashboard visualizes blocked subnets, attempt velocity, and ban table telemetry.

PROBLEM THESIS:

Contemporary mobile messaging applications present opaque cryptographic implementations or store sensitive metadata in proprietary cloud infrastructure. Furthermore, standard end-to-end encrypted messaging systems rely exclusively on classical elliptic curve cryptography (Curve25519 / NIST P-256), rendering all stored encrypted communications permanently decipherable once quantum computers achieve cryptanalytic scale.

TECHNICAL APPROACH:

Engineered an Android end-to-end encrypted messaging platform using Kotlin and Jetpack Compose. Built a client-side cryptographic architecture where key generation, key agreement, and payload encryption occur strictly on the user's mobile device. Implemented X25519 Elliptic Curve Diffie-Hellman (ECDH) key exchange augmented with post-quantum key agreement primitives. Encrypted message bodies are sealed using AES-256-GCM authenticated cipher with unique initialization vectors per message. Cloud relays (Firebase Firestore) operate purely as blind ciphertext stores with zero visibility into plaintext content.

PROBLEM THESIS:

Single-modality emotion and sentiment recognition systems suffer from high variance and deception susceptibility. Facial expression classifiers fail under variable illumination, head pose changes, and voluntary expression suppression. Conversely, text-only sentiment models miss sarcasm, stress cues, and emotional intensity. Combining heterogeneous modalities (visual facial embeddings and natural language text tokens) requires robust feature normalization and low-latency inference fusion.

TECHNICAL APPROACH:

Developed a multimodal engagement analytics platform fusing real-time computer vision with transformer-based NLP. The visual pipeline employs an OpenCV face detection stage feeding a convolutional neural network (CNN) trained on the FER2013 dataset. The text pipeline processes linguistic input using a fine-tuned Hugging Face DistilRoBERTa model. Extracted feature embeddings from both models are normalized into a unified 14-dimensional feature vector and fused using a late-fusion K-Nearest Neighbors (KNN) classifier. The complete inference pipeline is exposed via high-throughput FastAPI endpoints.

PROBLEM THESIS:

Traditional messaging networks demand invasive personal identifiers (phone numbers, emails, social logins), persist invasive device telemetry, and store user metadata in centralized databases susceptible to leaks and surveillance. Furthermore, monetizing or supporting creators on anonymous platforms has historically required fiat payment rails (credit cards, PayPal) that completely destroy pseudonymity via mandatory KYC. Self-hosted message boards also expose the host's residential IP address, require complex router port-forwarding, suffer from database write-lock contention under concurrent room traffic, and leak geographic coordinates through unstripped image EXIF metadata.

TECHNICAL APPROACH:

Engineered an asynchronous real-time message exchange using FastAPI and Starlette WebSockets backed by SQLite in Write-Ahead Logging (WAL) mode, combined with a comprehensive Ethereum Sepolia / Base Sepolia Web3 micropayment architecture. Authored and deployed custom Solidity smart contracts: the AfterClass ERC-20 utility token ($AFTER) featuring an automated cooldown faucet and on-chain post tipping events, alongside PremiumStore.sol supporting EIP-2612 gasless permit signatures (ECDSA r, s, v) so users can purchase cosmetic VIP badges and spotlight glows without paying gas fees. Built an asynchronous Web3.py backend service with multi-provider RPC failover (Infura, Tenderly, dRPC, Ankr) for non-blocking transaction confirmation, coupled with automated Cloudflare Tunnel daemon routing, in-memory Pillow EXIF stripping, and 256-bit cookie token host administration.