MSc COMPUTER SCIENCE // UNI FREIBURG

MACHINE LEARNING SECURITY SYSTEMS_

I'm Amin, a computer scientist and engineer pursuing an MSc in Computer Science at the University of Freiburg. My work spans machine learning, application security, and distributed systems, with experience in applied research and production software.

LOC: FREIBURG, DE
01 // MACHINE LEARNINGObfuscation-resilient XSS detection · imbalanced learning · interpretable fraud detection
02 // SECURITYAppSec engineer at Wallgold · 10+ critical/high findings via responsible disclosure
03 // SYSTEMSRaft-based failover for VPN servers · gRPC · Kafka · Kubernetes
03PUBLISHED PAPERS (DOI)
10+DISCLOSED CRIT/HIGH VULNS
// SELECTED_WORKS

PROJECTS

Research and engineering across machine learning, security and distributed systems. Each card covers the problem, what I did, and what came out of it.

// FEATURED

An obfuscated XSS payload being decoded layer by layer and classified by CharCNN and Transformer views
ML · SECURITY

XSS-Shield

CharCNNTransformerXAI
Problem
ML-based XSS detectors are evaded by payloads hidden under several layers of encoding.
My work
First author. Built and released a public XSS dataset with code and trained models, a preprocessing pipeline that unwraps multi-layer encodings, and an XAI toolkit that highlights the executable patterns behind each decision.
Result
On the released dataset: macro-F1 0.9958 (CharCNN) and 0.9905 (Transformer), with under 2% false positives.
Mixed-feature transactions encoded, clustered and resampled, then a new transaction flagged as fraud and explained with SHAP bars
ML

INSIGHT

ClusteringResamplingSHAP
Problem
Fraud detection on mixed numeric and string features, where fraud is rare and decisions must be explainable.
Approach
A cluster-based framework that reduces the dimensionality of string features without information loss (with proof), a cluster-based resampling strategy for the minority class, SHAP explanations and a noise-analysis module.
Result
Near-linear time complexity in dataset size (theoretical and empirical scalability analysis) and improved minority-class detection.
WalteR reconnaissance assistant
SECURITY

WalteR

PythonGraphQLDiscordCT Logs
Problem
New and forgotten assets are where bugs hide, and manual reconnaissance finds them too late.
My work
Independent project. Automated subdomain discovery by parsing certificate-authority Merkle trees, plus a watch tower that tracks infrastructure changes and pushes alerts through a Discord bot backed by GraphQL.

// MORE_WORK

Kolmogorov-Arnold Network computation graph animation
ML

KAN from Scratch

PythonAutogradB-splines
Goal
Understand Kolmogorov-Arnold Networks by building one without a deep-learning framework.
My work
My own scalar autograd engine, learnable B-spline edge functions (de Boor) with a SiLU base, KAN layers, an SGD optimiser and Graphviz plots of the computation graph.
Scope
Checked on a four-point XOR-style regression; no MLP baseline comparison yet. Neural Networks course, 2024.
Grid of generated handwritten digits improving during GAN training
ML

MNIST GAN

PyTorchGAN
My work
A generator (64-d noise to 784 pixels) and a discriminator, each with two 256-unit layers, trained with BCE loss and Adam for 300 epochs on 70,000 MNIST digits.
Scope
Results are judged visually from sample grids; no quantitative metric such as FID. Neural Networks course.
Raft leader election animation
SYSTEMS

Raft Consensus

PythongRPCMongoDBDocker
My work
Leader election and log replication in Python, with gRPC between nodes, MongoDB log storage and a three-node Docker Compose cluster.
Testing
An integration test checks log replication across the three nodes.
Scope
Educational implementation for the Operating Systems course. Separate from the production Raft work at NexaLoak.
Maze being solved by the search algorithm
AI SEARCH

Geometric A* Maze Solver

PythonA*

Maze solving with a geometric A* heuristic. Artificial Intelligence course.

Cryptor trading bot chart
SYSTEMS

Cryptor

PythonKuCoin

An automated trading bot that acts on traders' signals, integrated with several exchanges. Independent project.

// INDUSTRY

  1. 06/2025 — 10/2026

    Application Security Engineer @ Wallgold

    Researched secure production use of threshold signature schemes (GG18, GG20). Penetration-tested multisig transaction flows, including the Safe Global integration. Integrated Tetragon (eBPF) with Kubernetes for runtime observability and policy enforcement. Threat-modelled end-to-end system flows, using OWASP ASVS and FIPS 140-3 as reference requirements. Security triager.

  2. 03/2024 — 01/2025

    Lead Back-End Developer @ NexaLoak Open-Source Organization

    Led the back end of a VPN service with throughput capacity for 500K users. Used Raft to keep VPN servers available through server failures and network disruptions, with the leader adding or removing resources based on per-node traffic.

  3. 07/2023 — 01/2024

    Blockchain Developer @ XTON Innovations

    Worked on a distributed oracle that reads the latest state from EVM-compatible chains, supporting cross-chain sales with 30% lower transaction fees.

  4. 09/2022 — PRESENT

    Security Researcher @ Freelance

    Reported 10+ critical and high-severity vulnerabilities through responsible disclosure programmes, including an IDOR that exposed 40,000+ personal records and a one-click account takeover.

  5. 08/2022 — 10/2022

    Mid-Level Back-End Developer @ Longevity Intime BioTech

    Piped data from embedded devices into the central system, and built the staff panel that feeds AI analysis and stores its reports.

  6. 01/2022 — 06/2022

    Junior Software Engineer @ Yektanet

    Started the SMS department, on a Django REST Framework codebase organised around SOLID principles.

// RESEARCH & TEACHING

  1. 03/2024 — 10/2025

    Undergraduate Research Assistant @ NORC Lab, Amirkabir

    Machine learning research under Prof. Mehdi Ghatee. Co-authored three papers, including the XSS-Shield book chapter and the data-balancing survey in MAKE, and implemented resampling algorithms in a Python package.

  2. 07/2024 — 06/2025

    Undergraduate Research Assistant @ Amirkabir University

    Bachelor's thesis research under Dr. Mohammad Ali on zero-knowledge proofs, focusing on the performance and scalability of practical proof systems.

  3. 09/2023 — PRESENT

    Teaching Assistant @ Amirkabir University

    Head TA for Artificial Intelligence, leading a team of six. Also Computer Networks (exercises on the OSI model, HTTP and TLS), Operating Systems (leader election and log management) and Data Structures & Algorithms.

// RESEARCH_OUTPUT

PUBLICATIONS

// PEER-REVIEWED

// THESIS

How Zero-Knowledge Proofs Work?

COMPLETED

BSc THESIS // AMIRKABIR UNIVERSITY OF TECHNOLOGY // 2025

Polynomial IOPs and commitments, zkSNARKs vs STARKs vs Bulletproofs, and the engineering trade-offs of KZG commitments.

// TECHNICAL_WRITING

IDOR to 40,000+ Leaked PII Records

WRITE-UP

MEDIUM // FEATURED IN INFOSEC WRITE-UPS WEEKLY TOP

How an insecure direct object reference exposed tens of thousands of personal records.

// TECH_STACK

SKILLS

Grouped by area, and limited to what my projects and roles above actually use.

MACHINE_LEARNING
APP_SECURITY
DISTRIBUTED
CRYPTOGRAPHY

Machine Learning

  • PyTorch
  • scikit-learn · pandas · NumPy
  • Deep learning (CNN, Transformer, GAN)
  • Imbalanced learning
  • Model evaluation
  • Explainability (SHAP, XAI)

Security

  • Application security
  • Threat modelling
  • Penetration testing
  • Vulnerability research
  • Kubernetes runtime security (eBPF)

Software & Systems

  • Python · Go · C/C++
  • PostgreSQL · SQL
  • Kafka · gRPC
  • Docker · Kubernetes
  • Distributed systems (Raft)

Research Interests

  • Machine learning
  • Computer vision
  • Imbalanced learning
  • Robust ML for security
  • Cryptography
  • Zero-knowledge proofs
  • Threshold signatures
// INITIATE_CONTACT

CONTACT

Interested in working together? I welcome machine learning and application security opportunities, as well as research collaborations.