119 citations · 193 across the 11 of their papers we have counts for
14 papers · 1 filter
When Benign Is Unverified: Label-Signal Mismatch and Abstention-First Triage in Graph-Based Memory Forensics
Viraj Rajeshbhai Chudasama, Eduardo Palmieri, Dipo Dunsin +2
Machine-learning triage for memory forensics is usually validated on corpora whose benign class is asserted by provenance and never verified. We report a validation study of a grap…
Adaptive Dynamic Security for Operational Technology Against AI-Powered Attacks
Mohamed Chahine Ghanem
Operational technology now faces attackers whose tempo is set by AI. We present ADS-OT, an adaptive dynamic security framework modelling defensive posture as a partially observable…
PentestChain: A Cost-Aware, MCP-Orchestrated Framework for Automated Penetration Testing with Free-Tier LLMs
Rushabh Vipulkumar Patel, Dipo Dunsin, Mohammed Almaiah +1
AI-driven penetration testing has been demonstrated with premium frontier models such as GPT-4, but the per-engagement token cost makes continuous, automated testing unaffordable f…
Steganalysis of Adaptive Covert Collusion in Tool-Using Agent Populations: A Black-Box, Cross-Principal Approach
Mohamed Chahine Ghanem
Tool-using agents built on large language models (LLMs) are increasingly deployed not by a single operator but by many, side by side on shared infrastructure. This creates a popula…
Agentic and Generative AI for Open-Source Intelligence and Cyber Investigations: Taxonomy, Evaluation, Challenges, and Future Directions
Eduardo Almeida Palmieri, Mohamed Chahine Ghanem, Dipo Dunsin +3
The rapid growth of publicly available digital information has rendered manual open-source intelligence (OSINT) analysis insufficient for modern intelligence, cybersecurity, and cy…
Builder, Defender, Breaker: Measurable Independence and Bounded Autonomy When Generative Models Build, Defend and Test Software
Mohamed Chahine Ghanem
Generative models now write application code, harden and monitor it, and probe it for exploitable flaws, so that one family of models increasingly plays builder, defender and break…
MalVol-25: A Diverse, Labelled and Detailed Volatile Memory Dataset for Malware Detection and Response Testing and Validation
Dipo Dunsin, Mohamed Chahine Ghanem, Eduardo Almeida Palmieri
This paper addresses the critical need for high-quality malware datasets that support advanced analysis techniques, particularly machine learning and agentic AI frameworks. Existin…
A Novel Reinforcement Learning Model for Post-Incident Malware Investigations
Dipo Dunsin, Mohamed Chahine Ghanem, Karim Ouazzane +1
This Research proposes a Novel Reinforcement Learning (RL) model to optimise malware forensics investigation during cyber incident response. It aims to improve forensic investigati…
Advanced Persistent Threats (APT) Attribution Using Deep Reinforcement Learning
Animesh Singh Basnet, Mohamed Chahine Ghanem, Dipo Dunsin +1
The development of the DRL model for malware attribution involved extensive research, iterative coding, and numerous adjustments based on the insights gathered from predecessor mod…
Reinforcement Learning for an Efficient and Effective Malware Investigation during Cyber Incident Response
Dipo Dunsin, Mohamed Chahine Ghanem, Karim Ouazzane +1
This research focused on enhancing post-incident malware forensic investigation using reinforcement learning RL. We proposed an advanced MDP post incident malware forensics investi…
AI-Enabled System for Efficient and Effective Cyber Incident Detection and Response in Cloud Environments
Mohammed Ashfaaq M. Farzaan, Mohamed Chahine Ghanem, Ayman El-Hajjar +1
The escalating sophistication and volume of cyber threats in cloud environments necessitate a paradigm shift in strategies. Recognising the need for an automated and precise respon…
A Hierarchical Security Events Correlation Model for Real-time Cyber Threat Detection and Response
Herbert Maosa, Karim Ouazzane, Mohamed Chahine Ghanem
Intrusion detection systems perform post-compromise detection of security breaches whenever preventive measures such as firewalls do not avert an attack. However, these systems rai…
D2WFP: A Novel Protocol for Forensically Identifying, Extracting, and Analysing Deep and Dark Web Browsing Activities
Mohamed Chahine Ghanem, Patrick Mulvihill, Karim Ouazzane +2
The use of the un-indexed web, commonly known as the deep web and dark web, to commit or facilitate criminal activity has drastically increased over the past decade. The dark web i…
A Comprehensive Analysis of the Role of Artificial Intelligence and Machine Learning in Modern Digital Forensics and Incident Response
Dipo Dunsin, Mohamed C. Ghanem, Karim Ouazzane +1
In the dynamic landscape of digital forensics, the integration of Artificial Intelligence (AI) and Machine Learning (ML) stands as a transformative technology, poised to amplify th…