Facing a 500-room hotel's water management system, I inventoried assets, ran CIA priorities, and applied STRIDE to devices, cloud API, dashboard, and controls. I produced a threat model with top three findings and recommended MFA, encryption, and redundancy.

The externship required a sensor log generator. I scripted a Python notebook that simulated timestamped hydrologic sensor readings, injected realistic variation and anomalies, and exported the logs to files. The submission included the runnable Colab and a downloadable log file.

The task mapped a clean MQTT topic hierarchy for three hydrologic devices, documented publication schedules, and explained what an attacker could see when subscribing to hydroficient/grandmarina/#, noting exposed readings, device IDs, alerts, and potential for replay or command abuse.

The Project 4 pipeline had unencrypted sensor traffic. I created a CA and server certificates, enabled Mosquitto on TLS port 8883, ran four experiments (eavesdrop, certificate validation, speed, stress), and produced measured results showing TLS blocked eavesdropping and added 0.197% latency.

Situation: the project required mTLS and device provisioning. Task: document a repeatable onboarding and revocation process. Action: wrote a Device Provisioning Policy with onboarding steps, certificate generation/rotation, verification checks, and compromise procedures. Result: produced a…

The project tested timestamp validation, sequence counters, and HMAC signing against immediate, delayed, and altered replays. I ran 60 attacks across configurations, produced a results table, and recommended deploying all three protections after the combined setup rejected 100% of tested attacks.