Research

My work examines how connected systems establish trustworthy identity, identify abuse, share security knowledge, and preserve privacy.

I combine system design, data-driven security analysis, protocol evaluation, graph modelling, proof-of-concept implementation, and controlled experimentation.

Security of VoIP and Next-Generation Networks

Telecommunication systems often rely on weak or fragmented identity signals. Attackers exploit these weaknesses for caller ID spoofing, robocalls, vishing, fraud, and unsolicited communication.

IoT, Mobile, and Cyber-Physical Security

This work addresses security and privacy risks in heterogeneous environments with different capabilities, trust relationships, and operational constraints.

Trust, Reputation, and Decentralised Identity

I design mechanisms that let distributed participants assess behaviour and collaborate without exposing unnecessary information.

Trustworthy and Verifiable AI

This research studies how organisations can verify AI behaviour, detect distributed attacks, and maintain evidence across complex model and agent lifecycles.

Research Methods

• Threat and assurance modellingDefine adversaries, protected assets, attack paths, assumptions, security properties, and residual risks.
• System and protocol designBuild detection models, trust services, privacy controls, verification mechanisms, and secure gateways.
• Empirical evaluationCompare security, privacy, verifiability, operational cost, and utility against relevant baselines.
• Reproducible evidenceProduce structured traces, scripts, configurations, and analysis that support independent review.

Selected Funded Activity