About the Project:

Designing and deploying a fully segmented, secure LAN environment Network Defense Project (Dog Park) involved building a secure enterprise‑style network from the ground up. You’ll see end‑to‑end implementation of routers, firewalls, email services, and directory services—complete with segmentation, access control, and monitoring to ensure confidentiality, integrity, and availability.

Features:

• Secure topology design with VLAN segmentation
• Cisco IOS router configuration for inter‑VLAN routing
• pfSense firewall rules for east‑west traffic filtering
• Local email server deployment for internal communications
• Active Directory domain controller setup with group policies

Skills Used:

About the Project:

Securing the Unitree G02 EDU robotic dog’s network communications AI Robotic Defense is a Blue‑Team exercise focused on uncovering and neutralizing threats against the Unitree G02 EDU robotic dog. By continuously monitoring the dog’s network traffic, the project detects anomalous behavior, blocks unauthorized connections, and automates defensive responses to keep the system secure.

Features:

• Real‑time packet capture and traffic analysis
• Anomaly detection with alert notifications
• Dynamic firewall rule generation to block suspicious flows
• Automated mitigation scripts (e.g. quarantine, rate‑limit)
• Executive‑level capstone reporting

Skills Used:

MSIST Master's Practicum · Spring 2026

About the Project:

"Where hospitality meets cybersecurity." SOS Cafe is a luxury‑cafe‑themed blue‑team lab — a full enterprise network built from the ground up and defended in real time. Three isolated zones (Perimeter, DMZ, Corporate) enforce zero lateral movement, while an AI‑augmented IDS/IPS pipeline turns raw NetFlow into automated firewall responses in under 60 seconds. The environment also runs a real e‑commerce storefront, a ticketing/orders system, and a weekly AI business‑intelligence workflow — all secured and monitored end to end.

By the Numbers (Pentest Week):

Architecture & Defenses:

• Three‑zone segmentation (OPNsense · VyOS · Kali sensor) with RDP/WinRM/SMB blocked between DMZ and Corporate
• AI detection pipeline: NetFlow → goflow2 → Llama 3.3 analyzer → Claude Opus triage → auto‑block (pfBlockerNG) + Discord alerts
• Web/app defense: IIS WAF, IDS on web→DB (tcp/5432), bait routes & invisible honeytext, rate‑limited bcrypt logins
• Mail & identity hardening: closed open relay, hardened SMTP, double‑rotated krbtgt, Kerberos failure auditing
• Active Directory domain with Windows 11 + RHEL workstations, PostgreSQL database, and automated DB backups

Live SIEM / IDS‑IPS dashboard — auto‑blocking threats at the perimeter.

My Role (Kabir Suri):

• Led CSET / NIST CISA RRA compliance assessment and remediation (achieved 92% "Yes" coverage)
• Built the PostgreSQL data layer and BI queries powering the analytics and reporting
• Integrated the AI chatbot and agentic API workflow (n8n) into the storefront and admin portal
• Configured and tested database backups and end‑user access/authentication across workstations

The Team:

Kabir Suri · Syed Sajeel · Jessica Ortega

Skills Used: