Projects

National programmes, delivered.

Strategy, incident response, audit, offensive security, forensics and research, from national CIRT build-outs to central-bank testing. Filter by domain.

12 projects

2015 – 2020

Bangladesh's first government CIRT

BGD e-GOV CIRT · Norway Registers Development / NRD Bangladesh

Built the country's national government CIRT after the 2016 Bangladesh Bank SWIFT heist.

  • ~95% drop in nationwide cyberattacks
  • Repeat attacks on banks and government blocked
  • Incident response
  • Strategy & policy

Jun 2018 – Jun 2019

National cybersecurity strategy & risk framework

Government of Bangladesh · with University of Oxford GCSCC

Led Bangladesh's national cybersecurity strategy with Oxford's Global Cyber Security Capacity Centre.

  • National strategy and risk framework
  • Covered in national press
  • Strategy & policy

Feb 2020 – Jul 2020

Critical infrastructure & Tier-IV data centre audit

Bangladesh National CERT · Digital Security Agency

Led audit and risk assessment of 23 critical information infrastructures, including the national Tier-IV data centre.

  • 23 critical infrastructures hardened
  • ~65% better compliance posture
  • Audit & risk

2017 – 2020

National digital forensics lab

BGD e-GOV CIRT

Established the national digital forensics laboratory for the government CIRT.

  • National forensic capability in place
  • Forensics

Apr 2019 – Sep 2019

Central bank payment-system VAPT

Bangladesh Bank (central bank) · BACH-II

Managed vulnerability assessment and penetration testing of the central bank's BACH-II clearing system.

  • Central bank clearing system tested
  • Offensive security

2019 – 2020

National VAPT, IT audit & risk programme

BGD e-GOV CIRT

Ran national VAPT, IT audit and risk programmes that uncovered nation-state campaigns against banks.

  • 500+ critical vulnerabilities found
  • Nation-state campaigns against banks identified
  • Offensive security
  • Audit & risk

Jun 2020 – Dec 2020

National Cyber Helpline

Bangladesh N-CERT

Set up the national helpline for citizens and organisations to report cyber incidents.

  • National reporting channel launched
  • Incident response

May 2019 – Jun 2019

Bangladesh Cyber Threat Landscape 2019

BGD e-GOV CIRT

Prepared and published the national cyber threat landscape report for 2019.

  • National threat report published
  • Research
  • Strategy & policy

Sep 2020 – Sep 2023

Machine learning for phishing detection

University of Ottawa · IBM Center for Advanced Studies

Built ML models for phishing detection and automated tracking of cybercriminal infrastructure.

  • IBM CAS Fellowship
  • APWG research contribution
  • Research

2016 – 2023

National cybersecurity training programmes

Government of Bangladesh · University of Ottawa

Trained 100+ officials, law-enforcement and industry professionals; designed a university cyber lab.

  • 100+ professionals trained
  • University lab in use
  • Capacity building

Open-source security tools

A new defensive tool every week: ISO 27001, NIST CSF, PCI DSS and FINTRAC-aligned utilities with tests and documentation.

View on GitHub