I graduated in May 2026 with a B.Sc. in Cyber Security from the Canadian University of Dubai (CGPA 3.46 / 4.0). Over the last two years I studied how machine-learning systems hold up against attackers and published what I found: three IEEE conference papers as lead author, with a journal manuscript in preparation.
Hands-on, I work across the full attack-and-defend loop. Offence: web, network and cloud-identity penetration testing with Kali Linux, Burp Suite, Metasploit and Wireshark, including OAuth device-code abuse in Entra ID. Defence: detection engineering, SIEM and log analysis, and digital forensics. In between sits the part I care most about: testing ML models the way an adversary would, and making their decisions explainable to the analyst who has to trust them.
The intrusion-detection and voice-deepfake studies ship as reproducible, CI-tested open-source software with model cards and citation metadata. I also compete: 1st place at the Exploit3rs national CTF (2025) and 1st place at the Dubai AI System Competition (2024), honoured at GITEX. Open to SOC and blue-team, red-team, and AI-security roles, and to research assistant positions, in Dubai or remote.
Designed and set up the internal security infrastructure: logging pipelines, monitoring components and scripted checks, then tuned the rules against real operational data to cut false positives.
Ran vulnerability assessments and security reviews of internal applications, supported incident-response procedures and integrated security checks into the development lifecycle.
Built and hardened the public web, mail and DNS stack on Alibaba Cloud and AWS EC2: SPF, DKIM and DMARC, TLS, key-only SSH, firewall rules, patching and access reviews.
2024 – 2026 · CANADIAN UNIVERSITY OF DUBAI
Undergraduate Researcher
Four studies with CUD faculty; the two largest are released as open-source code
Explainable intrusion detection across three public datasets and 16M+ flows, with a new confidence score for flagging predictions an analyst should double-check.
Lightweight voice-deepfake detection for edge devices, extended into the VoiceGuard platform.
Monte-Carlo testbed for over-the-air update-channel compromise in vehicle fleets.
Reinforcement-learning agent for automated SQL-injection testing, published at ICAMAC 2025.
SmartInject: Automated SQL Injection Testing Using Deep Q-Learning and LSTM-Based Payload Generation Published
M. Thabet, G. B. Satrya, A. Kermani
Proc. 2025 2nd Int. Conf. on Artificial Intelligence, Metaverse, and Cybersecurity (ICAMAC), Dubai, Oct. 2025, pp. 1–6 · IEEE Xplore
A hybrid DQN + LSTM agent, trained in an OpenAI Gym environment over DVWA, reached an 80% vulnerability-discovery rate at DVWA "High", where static fuzzing and a DQN-only baseline found nothing.
Lightweight Voice Deepfake Detection for Smart Mobility Using Multi-Feature Ensemble Learning Published
M. Thabet Hassan, F. Sadek, A. Sami, A. Kermani Kolankeh
Proc. 2026 IEEE Int. Conf. on Smart Mobility (SM), Al Alamein, Egypt, May 2026, pp. 1–2 · IEEE Xplore
An edge-deployable XGBoost ensemble: F1 0.95, 95.17% accuracy, under 2 MB, 36.8 ms feature extraction, with no GPU or cloud dependency. Extended into the VoiceGuard platform.
OTA Update-Channel Compromise Risk in Smart Mobility: A Testbed Comparing Governance and Cryptographic Controls Published
M. Thabet Hassan, O. Alraas, L. A. AbuSerrieh
Proc. 2026 IEEE Int. Conf. on Smart Mobility (SM), Al Alamein, Egypt, May 2026, pp. 1–2 · IEEE Xplore
A Monte-Carlo fleet testbed (500 runs, 50,000 ECUs). Layered governance cut the median attack blast radius from 27,784 to 46 ECUs and modelled cost from $28.7M to $55K, relative to cryptographic controls alone.
XAI-IDS: A Multi-Dataset Explainable AI Framework for Network Intrusion Detection with a Novel XAI Confidence Score In preparation
M. Thabet Hassan, F. Sadek, A. Sami, M. Khurana
Manuscript in preparation for the Journal of Network and Computer Applications (Elsevier)
An ensemble IDS across CIC-IDS-2017, UNSW-NB15 and CSE-CIC-IDS-2018 (16M+ records, 26 attack classes) with SHAP and LIME explanations. The proposed XAI Confidence Score separates correct from incorrect predictions (Cohen's d 1.0 to 1.2), validated with McNemar's test and paired t-tests.
National capture-the-flag by Zayed Sector & CyberE71. First across the web, network and binary-exploitation tracks.
2025
🥇
Dubai AI System Competition — 1st Place
Alibaba Cloud & RTA hackathon. Won with SmartTranspo, a machine-learning smart map for Dubai taxi drivers; named "Best Implementation Champion" and honoured at GITEX Global 2024.
2024
🏅
First Coding Competition — 1st Place
Canadian University of Dubai. First place in the university's inaugural coding competition.
2023
🎯
Sharjah Police CTF — 9th Place
Secured 9th place at the national competition; recognised by Juma Alshamsi, CEO of Exploit3rs.
2025
🥈
CUD Engineering Competition — 2nd Place, Software
Canadian University of Dubai, software category.
2024
🚩
Capture The Flag — Exploit3rs
Timed CTF challenges across web exploitation, reverse engineering and incident response.
2024
🔧
Exploit3rs Workshops
Attended the Router Hacking and Network Pentesting 101 workshops led by Juma Alshamsi, CEO of Exploit3rs.
2024
06.
Certifications
07.
Contact
Open to Work
Looking for SOC and blue-team, red-team, and AI-security roles, and for research assistant positions in applied machine-learning security. Dubai or remote. Email is the fastest way to reach me.