Skip to content
Portrait of Sumit Prasad Sah

CYBERSECURITY • WEB SECURITY • RESEARCH

Sumit Prasad Sah

Cybersecurity Researcher | Security Engineer | IEEE Author

MSc Cybersecurity Student @ OsloMet – Oslo Metropolitan University

Building practical security tools and research prototypes for web application security, vulnerability assessment, phishing detection and intrusion detection. Interested in security engineering, threat detection, SOC operations, Active Directory security and cybersecurity research.

Python Burp Suite Nmap OWASP Wireshark Linux Splunk Docker Active Directory

SELECTED WORK

Featured Cybersecurity Projects

Security engineering and applied research projects across web security, threat detection, vulnerability assessment and AI-assisted cyber defense.

View GitHub →
VulnSight web application vulnerability scanner

WEB SECURITY

VulnSight — Advanced Vulnerability Scanner

01

FastAPI · React · TailwindCSS · Docker · Nmap

Automated web application security assessment covering reconnaissance, vulnerability discovery, SSL/TLS analysis, security headers, directory enumeration, XSS and SQL injection detection with risk-based reporting.

OWASPReconXSSSQLi
PhishGuard AI phishing detection platform

AI + SECURITY

PhishGuard AI — Phishing Detection

02

Python · Scikit-learn · Streamlit · TF-IDF · SVM

Machine-learning phishing detection using TF-IDF, SVM and heuristic threat analysis to identify phishing emails, malicious URLs and suspicious messages.

PhishingNLPThreat AnalysisSOC
XGBoost network intrusion detection project

THREAT DETECTION

Network Intrusion Detection — XGBoost

03

Python · XGBoost · UNSW-NB15

Precision-oriented intrusion detection with hyperparameter tuning and threshold calibration designed to reduce false positives while preserving recall.

XGBoostAUC-PRUNSW-NB15
HealthGuard IoT health monitoring system

PATENTED PROJECT

HealthGuard — IoT Vitals Monitoring

04

IoT · Arduino · Sensors · Cloud

Real-time heart rate, temperature and SpOâ‚‚ monitoring with secure data flow and alerting. The work was granted under Indian IP.

IoTEdge → CloudSecurity
Virtual clothes try-on research project

EARLIER RESEARCH

Virtual Clothes Try-On

05

Python · OpenCV · GMM · OpenPose · U2-Net · VITON

2D image-based virtual try-on pipeline using person/garment segmentation, pose estimation and geometric matching for clothing warping.

Computer VisionSegmentationPose

RESEARCH

Publications & Patent

Published research and intellectual property from applied AI, intrusion detection and IoT security projects.

GRANTED PATENT · INDIA · 2024

HealthGuard: IoT-Based Health Monitoring System

Patent No. 40/2024 · Application No. 202441070524 A · Granted Oct 4, 2024

Low-cost vitals monitoring with secure data flow and alerting.

IoTEdge → CloudSecurity

IEEE · 15TH ICCCNT · NOV 2024

Advancement in Virtual Fitting Rooms

DOI: 10.1109/ICCCNT61001.2024.10724276

2D virtual try-on using segmentation, pose estimation and clothing warping, with texture realism analysis.

Computer VisionSegmentationPose

IEEE · ICCCSMD-2024 · DEC 2024

Optimizing XGBoost Hyperparameters for Network Intrusion Detection

DOI: 10.1109/ICCCSMD63546.2024.11015173

Precision-oriented IDS research using XGBoost tuning and threshold calibration to improve operational detection performance.

XGBoostUNSW-NB15AUC-PR

ACADEMICS

Education

Academic background supporting my work in cybersecurity, applied computing and research.

CURRENT 2026 – Expected 2028

Master's Degree — Cybersecurity

Oslo Metropolitan University (OsloMet)

Graduate study with a focus on cybersecurity, security engineering, web application security, threat detection and research.

CybersecuritySecurity ResearchWeb Security
COMPLETED Bachelor's

B.Tech — Computer Science & Engineering

Bachelor's Degree

Foundation in computer science, software development, artificial intelligence, networking and applied engineering projects.

Computer ScienceAINetworking

HANDS-ON LEARNING

Security Labs & Certifications

Practical cybersecurity skills developed through labs, challenges and security learning paths.

TryHackMe Profile →
TryHackMe Cyber Security 101

TRYHACKME · OCT 2024

Cyber Security 101

Hands-on work covering network reconnaissance, web application testing, exploitation and core security concepts.

Network SecurityWeb TestingExploitation
TryHackMe Pre Security

TRYHACKME · SEPT 2025

Pre Security

Cybersecurity fundamentals covering networking, web basics, Linux and introductory attack methodologies.

FundamentalsNetworkingLinux

TECHNICAL WRITING

Latest From the Blog

Practical writing on web security, networking, Active Directory, Linux and offensive security.

Read all on Medium →

LET'S CONNECT

Have a research idea, security project, or opportunity?

I'm open to cybersecurity roles, research collaboration, technical projects and conversations around security.