I study how system-level provenance graphs can reveal advanced persistent threats that signature-based tools miss, combining graph neural networks, sequence models, and forensic evidence design. Current threads include botnet detection, IoT forensics, and building tools that make anomaly detection legible to the people who have to trust it.
Graduated with an Integrated BS-MS in Computational Sciences from IACS Kolkata (2021 to 2026). Remote Research Intern at the Systopia Lab, University of British Columbia. Research Project Intern at Jadavpur University.
Secondary education.
Higher secondary education.
Integrated BS-MS in Computational Sciences.
Research Intern.
Reproduced OCR-APT (Aly et al., ACM CCS 2025) and ProvFusion (Yang et al., IEEE S&P 2026) within the PIDSMaker framework (Bilot et al., USENIX Security 2025), and evaluated flow and diffusion models for detecting Living-off-the-Land APT attacks. Built a GPU-accelerated 3D provenance embedding visualiser, later rebuilt as a browser-based tool with causal tracing and anomaly analysis, for diagnosing model behavior across provenance graphs with 30M+ nodes. Systopia Lab, University of British Columbia.
Integrated BS-MS thesis spanning a survey of IoT forensic frameworks, a cloud-based Forensics-as-a-Service architecture, supervised GNN detection on DARPA CADETS, and SeqFlow, a self-supervised GRU sequence model achieving an Attack Detection Precision of 1.0 with zero false positives on CADETS and THEIA. Supervised by Dr. Mridul Sankar Barik (Jadavpur University) and Dr. Partha Basuchowdhuri (IACS).
A digital forensic imaging workstation built on a custom Linux platform, featuring modular disk imaging, cryptographic hashing, and chain-of-custody logging for evidence acquisition. Jadavpur University.
An open-source, DIY-buildable LoRa mesh networking testbed built on ESP32-C3/SX1262 hardware, with AODV routing, AES-256-GCM encryption, and tamper-evident evidence logging. Research Intern, Jadavpur University.
A forensic email acquisition and analysis platform, developed for ASTHA SOFTTECH SOLUTIONS.
- Designing an evidence-grounded, multi-agent framework (CrewAI) that reconstructs executed attack paths from forensic logs, distinguishing what is evidenced from what is merely possible.
A WireGuard VPN tunnel wrapped in WSTunnel, built on an Azure VPS to bypass restrictive proxy filtering and restore reliable outbound connectivity.
A ZFS-based NAS running Nextcloud, Jellyfin, Pi-hole, and an automated arr-suite media stack, Minecraft server and other self hosted services.
A screen-sync ambient lighting rig built around WLED on a NodeMCU/ESP8266, driving a WS2812B LED strip to sync to the monitor.
Off the clock: cinephile, photographer, tech nerd.