A private blockchain-based supply chain for end-to-end traceability of COVID-19 vaccines, covering distribution and transportation. Finalist at the Blockchain Olympiad Bangladesh 2022.
Hyperledger Fabric, Node.js, JavaScript, Apache CouchDB
Projects
Selected projects, with source code on GitHub.
A Chrome extension that manages passkeys and audits their health: tracking passkey security, detecting weak keys through hash collision detection, monitoring share counts, and keeping an export history.
React, TypeScript, Chrome Extension API
An API-based platform that simulates commerce among a customer, a supplier, and a bank, with instant transactions between them.
Node.js, Express.js, MongoDB
An Android app that connects current students with alumni of the CSE department at SUST. Students can search for alumni by name, batch, or workplace.
Android Studio, Java
Abstractive and extractive summarization of Bangla text using unsupervised learning.
Python
Earlier research
Research projects from before the Ph.D., mostly in usable security.
Security analysis of passkeys
I analyzed how passkeys are stored across popular password managers and found metadata leakage and weak encryption practices that can expose login data, visited URLs, and timestamps. I also built a browser extension that flags compromised or at-risk passkeys for each website a user signs in to.
Browser automation for improving security guides
I built a system that validates and updates public security guides, such as those maintained by the Electronic Frontier Foundation, when platforms change their interfaces or settings. It pairs open-source language models running on HPC clusters with Playwright-based browser automation.
Security analysis of software cryptocurrency wallets
My thesis examined security vulnerabilities and privacy practices in software cryptocurrency wallets, combining vulnerability assessment tools with manual and machine-learning analysis of user reviews. Supervised by Dr. Jabed Morshed Chowdhury and Dr. Sadek Ferdous Ripul.