🔐 Cybersecurity Professional | MS Cybersecurity @ Stevens | Ex-L&T Infotech | Threat Mitigation | Cloud Security | DevO

github

Aman Singh  • Peerlist

Designed and implemented a SYN Flood Attack simulation to analyze how Denial-of-Service (DoS) attacks exploit vulnerabilities in TCP’s three-way handshake. The project includes:

Python-based TCP Server to act as a victim.
SYN Flood Attack Script using scapy to generate spoofed SYN requests.
Network Traffic Analysis using tcpdump, netstat, and Wireshark.
Defense Mechanisms (Coming Soon): SYN Cookies, Rate Limiting, and Intrusion Detection.

SYN Flood Attack Simulation & Defense Mechanism

Developed a Python-based Search Engine that efficiently indexes and searches through HTML documents using a trie-based data structure. The search engine is designed to process unstructured text, filter out irrelevant words, and rank results based on term frequency.

Key Features & Functionalities:
HTML Parsing: Extracts text content from web pages while removing unnecessary formatting. Tokenization & Stopword Removal: Cleans and preprocesses text using NLTK to eliminate common stopwords and enhance search accuracy.
Trie-based Indexing: Utilizes a prefix tree (trie) for optimized search operations, enabling fast lookups with minimal memory overhead.
Efficient Searching: Retrieves results in O(k) time complexity, where k is the length of the search term.
Result Ranking: Sorts search results based on word frequency across documents, improving relevance.
Robust Edge Case Handling: Includes handling for empty queries, special characters, and nonexistent terms.

Technologies Used:
Programming Language: Python
Libraries: BeautifulSoup (for HTML parsing), NLTK (for natural language processing), Regular Expressions (for tokenization)
Data Structures: Trie (Prefix Tree)

Search Engine Project

Developed a sophisticated API security system that combines an intelligent gateway with an integrated honeypot for detecting and profiling potential attackers. This system provides comprehensive protection for API infrastructures while gathering valuable threat intelligence.
Key Features & Functionalities:

API Gateway: Routes legitimate traffic to real services while directing suspicious requests to the honeypot.
Advanced Attacker Profiling: Creates detailed profiles of potential attackers by tracking behavior patterns, techniques, and preferred targets.
Session Tracking: Monitors and logs interaction patterns to build comprehensive attack signatures.
Interaction Level Analysis: Classifies attackers based on their sophistication and depth of system exploration.
Deception Techniques: Presents increasingly sensitive fake data to entice attackers to reveal more of their techniques.
Comprehensive Logging: Integrates with Grafana and Loki for real-time monitoring and analysis of attack patterns.

Technologies Used:

Containerization: Docker, Docker Compose
Programming Language: Python (Flask)
Web Server: Nginx (as an API Gateway)
Monitoring: Grafana, Loki, Promtail
Version Control: Git, GitHub

API Gateway with Honeypot Integration

Designed a smart bus ticketing application enabling real-time QR code validation for intra-city public transport.

Implemented Firebase Authentication for secure multi-factor login, ensuring enhanced security.

Developed the mobile application using Android Studio and Firebase, creating a seamless user experience.