Ruchi Giradkar

Bosch Master Thesis

Digital Twin Based Intrusion Detection System for Industry 4.0 Connected Sensors

Cybersecurity Research | OT Security | Threat Detection | Digital Twin Technology

Designed and developed a Digital Twin based Intrusion Detection System to enhance cyber threat detection within Industry 4.0 connected sensor environments. The solution established a trusted digital baseline of normal system behavior and continuously compared operational activity against expected process states to identify anomalies and malicious actions.

Key Contributions

• Designed and implemented a Digital Twin architecture for industrial sensor environments
• Developed containerized detection pipelines using Docker to support scalable deployment
• Simulated adversarial activity and abnormal system behavior to validate detection capabilities
• Implemented process and network level monitoring to identify deviations from expected operational patterns
• Integrated monitoring and visualization capabilities using Prometheus and Grafana
• Improved anomaly detection effectiveness by approximately twenty five percent through behavior based analysis

Technologies

Docker, Python, Linux, Prometheus, Grafana, Network Monitoring, Threat Detection, OT Security

Outcome

Successfully demonstrated how Digital Twin technology can strengthen industrial cybersecurity monitoring by identifying anomalous behavior and potential attack activity before operational impact occurs.

Visit Site →

Zero Day Incident Response and Ransomware Recovery

Security Operations | Vulnerability Management | Incident Response

Performed end to end incident response activities for critical security vulnerabilities and ransomware recovery scenarios through a business risk driven approach. Focused on vulnerability triage, remediation prioritization, stakeholder communication, and recovery planning.

Key Contributions

• Assessed critical zero day vulnerabilities including Log4Shell to determine exploitation risk and remediation urgency
• Conducted infrastructure impact analysis to identify affected assets and responsible system owners
• Developed targeted remediation guidance for technical and non technical stakeholders
• Prioritized response actions based on business impact and operational risk
• Automated recovery activities through Python based scripting within controlled ransomware recovery scenarios
• Documented incident response workflows and recovery procedures aligned with enterprise security practices

Technologies

Python, Log4Shell Analysis, Incident Response, Vulnerability Management, Risk Assessment, Security Operations

Outcome

Demonstrated the ability to translate vulnerability intelligence into actionable remediation plans while supporting business continuity and cyber resilience objectives.

Visit Site →

Vulnerability Assessment Penetration Testing and Digital Forensics

Offensive Security | Digital Forensics | Security Validation

Conducted comprehensive vulnerability assessment, penetration testing, and forensic investigations to identify security weaknesses, validate exploitability, and support incident investigation activities.

Key Contributions

• Identified and assessed fifty eight security vulnerabilities across laboratory environments
• Categorized findings according to risk severity and business impact
• Validated attack scenarios involving SQL Injection, Cross Site Scripting, weak authentication controls, and SMB misconfigurations
• Performed forensic evidence acquisition, validation, and timeline reconstruction activities
• Maintained chain of custody principles throughout forensic investigations
• Produced professional remediation reports with prioritized security recommendations

Technologies

Nessus, OpenVAS, Nmap, Metasploit, Hydra, Autopsy, Digital Forensics, Penetration Testing

Outcome

Provided actionable security insights that enabled effective remediation planning while demonstrating offensive and defensive security assessment capabilities.

Visit Site →

Cybersecurity Governance Risk and Compliance Audit

Governance | Risk Management | Security Controls Assessment

Performed cybersecurity governance and control assessments to evaluate organizational security maturity and compliance against internationally recognized security frameworks.

Key Contributions

• Conducted structured cybersecurity process and control assessments
• Evaluated security controls against ISO IEC 27001 and NIST Cybersecurity Framework requirements
• Identified governance gaps and remediation opportunities across key security domains
• Assessed risk management processes and control effectiveness
• Developed audit ready documentation and executive level findings reports
• Supported continuous improvement initiatives through risk based recommendations

Technologies

ISO IEC 27001, NIST CSF, Risk Assessment, Security Controls, Governance, Compliance

Outcome

Delivered comprehensive control assessments that improved visibility into security gaps and supported compliance readiness efforts.

Visit Site →

Zero Trust Security Architecture Case Study

Enterprise Security Architecture | Identity Security | Strategic Cybersecurity Planning

Designed an enterprise scale Zero Trust security architecture for a hybrid environment spanning cloud platforms, on premises infrastructure, remote users, software as a service applications, and operational technology environments.

Key Contributions

• Developed a strategic Zero Trust architecture focused on identity centric security principles
• Defined access control, segmentation, and continuous verification mechanisms
• Integrated cloud security, endpoint security, and operational technology considerations
• Designed centralized visibility, detection, and response capabilities
• Established a phased implementation roadmap aligned with business priorities
• Incorporated data protection and least privilege principles across enterprise environments

Technologies

Zero Trust, Identity and Access Management, Cloud Security, OT Security, Security Architecture

Outcome

Produced a scalable security architecture framework designed to reduce attack surface, strengthen visibility, and improve enterprise cyber resilience.

Visit Site →

Microsoft Azure Cloud Security Risk Assessment

Cloud Security | Risk Assessment | Security Controls Review

Performed a security assessment of Microsoft Azure infrastructure to identify cloud security risks and evaluate the effectiveness of deployed security controls.

Key Contributions

• Assessed Azure virtual machines, network security groups, and remote access configurations
• Evaluated monitoring, logging, and alerting capabilities within the Azure environment
• Reviewed cloud security posture against NIST Cybersecurity Framework, CIS Controls, and ISO IEC 27001
• Identified security misconfigurations and potential attack vectors
• Recommended risk based remediation measures to strengthen cloud security
• Documented assessment findings and control improvement opportunities

Technologies

Microsoft Azure, Azure Monitor, Azure NSG, Windows Server, Cloud Security

Outcome

Provided practical recommendations to improve cloud security posture, visibility, and regulatory alignment.

Visit Site →

OWASP ZAP Web Application Vulnerability Assessment

Application Security | Vulnerability Assessment | Secure Development

Performed security testing of web applications using industry standard assessment methodologies to identify exploitable vulnerabilities and security weaknesses.

Key Contributions

• Conducted manual and automated web application security assessments
• Identified SQL Injection and Cross Site Scripting vulnerabilities
• Evaluated authentication, session management, and input validation controls
• Performed active scanning and vulnerability verification activities
• Assessed security findings based on likelihood and business impact
• Developed remediation recommendations to reduce application security risks

Technologies

OWASP ZAP, SQL Injection Testing, Cross Site Scripting Analysis, Application Security

Outcome

Enhanced understanding of application security risks and demonstrated the ability to identify and prioritize vulnerabilities affecting web applications.

Visit Site →

Linux Log Analysis Detection Automation and Splunk SIEM Investigation

Threat Detection | Security Monitoring | SIEM Operations

Performed security monitoring and investigation activities through Linux log analysis, threat detection automation, and SIEM based event correlation.

Key Contributions

• Investigated Linux authentication logs to identify brute force attacks and unauthorized access attempts
• Analyzed failed logins, invalid user activity, and suspicious authentication patterns
• Developed Python based automation to improve detection efficiency
• Leveraged Splunk Enterprise for event correlation and security monitoring
• Created dashboards and visualizations to support security investigations
• Mapped observed attack activity to MITRE ATT&CK techniques

Technologies

Splunk Enterprise, Python, Linux Logs, SIEM, Threat Detection, MITRE ATT&CK

Outcome

Improved visibility into authentication related threats and demonstrated practical SOC analysis and detection engineering capabilities.

Visit Site →

Network Scanning and Host Enumeration with Nmap

Network Security Assessment | Reconnaissance | Vulnerability Identification

Conducted network reconnaissance and security assessments to identify exposed services, potential attack paths, and vulnerabilities across networked systems.

Key Contributions

• Performed host discovery, service enumeration, and operating system fingerprinting
• Conducted TCP and UDP based network analysis
• Utilized Nmap Scripting Engine to automate vulnerability identification activities
• Validated potential vulnerability findings through manual verification
• Investigated exposure associated with Slowloris related findings and assessed exploitation risk
• Developed risk based remediation recommendations to reduce attack surface

Technologies

Nmap, NSE Scripts, Service Enumeration, Vulnerability Assessment, Network Security

Outcome

Improved understanding of network attack surfaces and demonstrated practical skills in reconnaissance, enumeration, and vulnerability validation.

Visit Site →