Deep packet inspection using Wireshark across TCP/IP, DNS, HTTP, and ICMP protocols. Identified port scanning signatures, unencrypted credential transmission, and suspicious ARP behaviour — mapping findings to the OWASP Top 10 framework. Underpins active CompTIA Security+ preparation and cloud threat modelling skills.
A hands-on network security analysis project built around Wireshark, focused on identifying real attack signatures and insecure traffic patterns across the OSI stack — directly supporting CompTIA Security+ preparation and cloud threat-modelling work.
This project is the practical counterpart to the dissertation's ML-based detection work — instead of classifying content (emails), it's about classifying behaviour at the network level. Together, they cover both the application-layer and network-layer sides of threat detection.