Multi-Agent EU Cyber Resilience Act (CRA) Audit Pipeline

Architected and engineered a live, multi-agent compliance evaluation engine designed to audit codebases against strict EU Cyber Resilience Act (CRA) Article 10 regulatory demands. Built a high-throughput, state-driven orchestration pipeline utilizing LangGraph and Pydantic to cleanly model software assets. The system ingests software manifest structures, cross-references targets live with the National Vulnerability Database (NVD) via a rate-limited REST API layer, maps vulnerability bounds dynamically using PEP 440 version rules, and automatically generates compliance verdicts that block non-conforming software from entering European market segments.

Metrics at a Glance:

Key Architectural Achievements:

• Multi-Agent State Graph: Developed an automated compliance routing graph leveraging LangGraph, separating system logic into dedicated SBOM extraction, live vulnerability scanning, and structural regulatory decision-engine nodes.
• Polyglot Dependency Parsing: Engineered specialized extraction pipelines utilizing ElementTree XML trees for Java pom.xml files, precise regex boundaries for Python requirements.txt arrays, and string scanners for CMake build environments.
• Throttled Live NVD Syncing: Implemented an HTTP pooling session layer backed by a custom backoff retry strategy and pacing windows to query the live NVD API without triggering rate-limiting blockades or data losses.
• PEP 440 Version Normalization: Crafted version comparison logic that sanitizes non-standard legacy distributions into normalized formats to calculate overlaps against complex versionStart/versionEnd vulnerability boundaries.
• Isolated Multi-User Sandbox: Built a dynamic UI workspace allocation routine utilizing Streamlit session state properties and UUID tokens to process multiple file uploads concurrently without crossing data vectors.

COSPAS-SARSAT Distress Beacon Security POC & Hardening Engine (Streamlit)

Architected and engineered an interactive, completely RF-free in-memory prototype to demonstrate and mitigate severe authentication vulnerabilities in 406 MHz satellite distress beacons (arXiv:2302.08361). Built an integrated software simulation that models how legacy maritime/aviation receivers accept unauthenticated or replayed message frames due to missing freshness tokens. To resolve this, designed a defense framework implementing HMAC-driven cryptographic signing paired with sequential timestamp validation, successfully blocking simulated replay and spoofing vectors on a streamlined Streamlit dashboard.

Metrics at a Glance:

Key Architectural Achievements:

• Dual-State Receiver Architecture: Programmed parallel data pipelines comparing a legacy processing loop against a hardened verification engine to visually prove the mitigation of spoofed or duplicated signal packets.
• Structurally Analogous Protocol Codec: Developed a custom binary parser simulation featuring fixed field layouts and a unique downscaled parity polynomial to abstract the core security vulnerabilities without replicating operational military or rescue specs.
• In-Memory Attack Orchestration Engine: Implemented an abstraction layer that passes signal transmission objects directly through volatile RAM without sockets, SDR hardware, or true radio frequencies, establishing a safe, standalone execution model.
• Multi-Scenario Narrative Controller: Designed an interactive visual console supporting single-click toggles across normal runtime, stale replay injections, and baseline text fabrication attacks to optimize technical portfolio review workflows.
• Responsible Disclosure Safety Blueprint: Enforced complete isolation rules by design (omitting Selenium/network dependencies) to demonstrate proactive engineering judgment regarding critical national search-and-rescue infrastructure.