AI security
Threats to machine learning and generative AI systems, and practical defenses.
Research & Publications
Applied research at the intersection of AI and security
Research focused on making emerging technology safe and valuable for enterprises.
Secure AI adoption
Governance, risk and control frameworks for enterprise use of AI.
Intelligent security operations
Applying AI to detection, triage and investigation in the SOC.
Security economics
Measuring cybersecurity value and the cost-effectiveness of controls.
Publications
A Weighted Hybrid Scoring Framework for Static Detection of Hash-novel Polymorphic Worm Variants
International Journal of Intelligent Engineering & Systems (INASS) · 2026
A Weighted Hybrid Scoring Framework (WHSH) is proposed for the static detection of hash-novel polymorphic worm variants. Four complementary modalities are integrated — exact cryptographic matching, fuzzy similarity hashing, random-forest PE-structure analysis and CNN-LSTM analysis of API-call sequences — with a normalized dynamic weight redistribution mechanism that prevents fixed scoring when evidence is missing. Evaluated on 11,146 samples, a 99.98% detection rate was achieved with a 0.00% false-positive rate.
The Ethical Issues Surrounding Artificial Intelligence
Learning Gate · 2024
The opportunities and threats of AI are examined — its history, technological development, and consequences for society. Social, legal and ethical dimensions are analyzed, and directions for further research and prevention efforts are proposed.
Detecting Zero-day Polymorphic Worm
National Computer Conference (NCC), Saudi Computer Society · 2018
Approaches are presented for detecting zero-day polymorphic worms that evade traditional signature-based defenses.
Case Studies
Representative engagement patterns
Anonymized to protect client confidentiality. Detailed outcomes are discussed directly with references.
Establishing a cybersecurity function
Governance, structure, policies and a phased roadmap were designed for an organization building security capability from the ground up.
Security spend rationalization
Tools, licenses and contracts were mapped against risk, so overlap was removed and budget was redirected to priority controls.
Architecture modernization
A platform modernization was guided with security-by-design principles and clear executive business cases.
Professional references and supporting engagement credentials are available upon request before contracting, subject to confidentiality and client approval.
Request Professional References