Skip to content

Cybersecurity portfolio
Tamil Nadu, India

Dinesh Karthick B.

Malware analysis / Cloud and identity security

Third-year IT student building tools that screen Windows binaries for malware and map how far a leaked machine credential can reach.

Tools I work with

  • PEStudio
  • Detect It Easy
  • CFF Explorer
  • BinText
  • Process Monitor
  • Process Explorer
  • Regshot
  • FakeNet
  • Python
  • Linux
  • GitHub Actions
  • Terraform
  • AWS IAM
  • LightGBM

(01)About

I am a third-year B.Tech Information Technology student focused on malware analysis and cloud identity security. Right now I am building PE-Anchor and NHI-BLAST, and looking for a cybersecurity internship.

  • Anchor features

    73

    Invariant structural features in the PE-Anchor screening model.

  • Context features

    2,568

    In the full-file model that PE-Anchor pairs it with.

  • Scan deadline

    250 ms

    Per file in the bounded scanner daemon, with a 32 MiB input cap.

  • CGPA

    8.2

    Out of 10 in B.Tech Information Technology, class of 2028.

(02)Skills

From Windows binaries to cloud identities.

Security work on two fronts: what a file really is before it runs, and what a machine identity can reach once its credential leaks.

  • 01

    Malware analysis

    Static analysis of Windows PE files, from headers, sections and imports to hashing and structured triage workflows.

    • PE static analysis
    • Dynamic analysis
    • Digital forensics
    • Triage workflows
  • 02

    Cloud and identity security

    Tracing what machine identities can reach across CI/CD pipelines, Terraform state and AWS IAM policy.

    • AWS IAM
    • GitHub Actions
    • Terraform
    • CI/CD security
  • 03

    Analysis tooling

    Hands-on with the standard Windows analysis kit for inspecting binaries and watching how they behave.

    • PEStudio
    • Detect It Easy
    • CFF Explorer
    • Process Monitor
    • Regshot
    • FakeNet
  • 04

    Python and machine learning

    Python tooling and LightGBM models built around adversarial robustness and calibrated, fail-closed decisions.

    • Python
    • LightGBM
    • Adversarial robustness
    • JSON and SARIF

(03)Projects

Security tools I design and build.

Two security tools in active development and one data project. Hover a photo to see it behind the dots.

More on GitHub(opens in a new tab)
A computer processor unit on a pedestal
In development

01Invariant structural malware detection

PE-Anchor

250 msScan deadline

A CPU-only Windows PE malware-screening system that separates invariant structural screening from mutable full-file context analysis.

  • Two independently trained models, a 73-feature structural Anchor model and a 2,568-feature full-context model, joined by an asymmetric decision policy.
  • Three explicit outcomes, MALICIOUS_SCREEN, CLEAN_SCREEN and REVIEW, with fail-closed handling for uncertainty, malformed inputs, timeouts and resource limits.
  • Order-statistic Neyman-Pearson calibration and transformation-contract testing to control benign false alarms and keep scores stable under permitted edits.
  • A bounded scanner daemon with a 32 MiB input limit, a 250 ms scan deadline and zero waiting queue.
  • Python
  • Windows PE
  • LightGBM
  • Adversarial robustness
Rows of glass-fronted server racks in a data center
Public beta

02Non-human identity blast-radius analysis

NHI-BLAST

0Live cloud calls

An offline tool that assesses non-human identity exposure and how far a leaked credential could reach in CI/CD environments.

  • Analyses GitHub Actions workflows, Terraform plan and state inputs, and IAM policy JSON to reconstruct potential authority paths.
  • Classifies revocation survival as R (ends with the entry point), E (expires automatically) and Z (survives) to derive a rotation order.
  • Generates evidence-backed HTML, JSON and SARIF reports without executing scanned content or making live cloud or network calls.
  • Python
  • CI/CD security
  • GitHub Actions
  • Terraform
  • AWS IAM
View on GitHub(opens in a new tab)
A scientist examining samples in test tubes in a lab
Data project

03eDNA biodiversity analysis platform

EchoGenesis / AGENT

A Python pipeline for processing environmental DNA datasets and supporting biodiversity assessment.

  • Worked on sequence processing, clustering and embeddings for environmental DNA data.
  • Explored interactive analytical visualisations built with Streamlit.
  • Python
  • Streamlit
  • BioPython
  • Data analysis
Certified

(04)Certification

Certificate of Excellence in Malware Analysis

Hands-on training in how Windows malware is built and how to take it apart, from file systems and the Registry down to the layout of a PE file in memory.

  • Malware types
  • Windows file systems
  • Registry
  • PE structure
  • DOS and PE headers
  • Sections
  • Imports and exports
  • File signatures
  • Hashing
  • Memory mapping
  • RVA and VA

K7 ComputingK7 Centre of Excellence, C. Abdul Hakeem College of Engineering and Technology

(05)Education and research

Where I am, and where I am headed.

A third-year B.Tech student pairing coursework with hands-on security engineering, and ready for a first internship.

  1. 01Class of 2028

    B.Tech in IT

    C. Abdul Hakeem College of Engineering and Technology, Tamil Nadu, with a CGPA of 8.2 out of 10.

  2. 02Academic

    Research

    Drone-assisted search and rescue and evidence fusion, alongside hackathon-oriented problem solving.

  3. 03Now

    Security tools

    Developing PE-Anchor and running NHI-BLAST as a public beta, both written in Python.

  4. 04Open now

    Internship

    Looking for a cybersecurity internship to apply security engineering, analysis and Python development skills.

(06)Contact

Let’s talk security.

Hiring for a cybersecurity internship, or want to talk malware analysis or cloud identity? Send a message and I will reply by email.

What is it about? (optional)

Your details are only used to reply to you. No newsletters, ever.

Made with Modulify