welcome to my FAU research paper library. this site hosts whitepapers and deepdives into systems architecture, cybersecurity concepts, and the future of technology
featured papers
an exploration of the shift from physical boundaries to identity-based security frameworks in the age of AI-driven persistence
- strategic scope: investigates the transition from stateless packet filtering to Layer 7 Deep Packet Inspection (DPI) and the necessity of Next-Generation Firewalls (NGFW)
- the zero trust pivot: evaluates the integration of Secure Access Service Edge (SASE) and ZT-VPNs to neutralize generative AI-enhanced phishing and multi-stage botnet attacks
- real-world application: contextualizes defense-in-depth strategies through the lens of municipal public safety, focusing on the mission-critical availability of fire-rescue IT infrastructure
- future threats: addresses the “Harvest Now, Decrypt Later” mindset of modern threat actors and the emerging requirement for Post-Quantum Cryptography (PQC) standards
a deep-dive into the security misalignment caused by rapid cloud adoption and the transition from CapEx-heavy hardware to OpEx-driven virtual environments
- architectural critique: analyzes the Shared Responsibility Model and the common pitfalls of migrating from on-premise infrastructure to Infrastructure as a Service (IaaS) and Software as a Service (SaaS)
- identity as the new perimeter: examines Identity and Access Management (IAM) failures, specifically the critical role of the Principle of Least Privilege (PoLP) and Multi-Factor Authentication (MFA) in neutralizing credential theft and privilege escalation
- API & microservice security: breaks down the fundamental “glue” of the cloud - Application Programming Interfaces (APIs) - with a focus on Broken Object Level Authorization (BOLA) and the cascading effects of supply chain risks
- human-centric vulnerabilities: addresses the gap between automated cloud tools and the human element, arguing that “misconfigurations” are often a symptom of organizational oversight rather than technical failure
a comprehensive infrastructure design for a specialized legal practice, prioritizing high-availability, the CIA Triad, and fiscal optimization
- architectural framework: implementation of a centralized Star Topology and Main Distribution Frame (MDF) to ensure fault isolation and seamless organizational scalability
- network segmentation: utilization of IEEE 802.1Q VLANs to logically isolate guest wireless traffic from sensitive corporate tax records
- redundancy & fault tolerance: integration of RAID 1 (Mirroring), Dual-WAN failover (Fiber/5G), and UPS battery bridges to achieve a “zero-downtime” mission-critical environment
- fiscal responsibility: successfully engineered a full-stack enterprise solution, including security gateways and Active Directory servers, within a $10,000 capital expenditure budget
tech stack
- infrastructure & hosting: deployed via GitHub Pages on my custom domain (
suriyah.dev)
- markup & styling: written in Markdown, processed by Jekyll, and styled with custom responsive CSS
- version control: continuous deployment and revision tracking managed via Git and GitHub Actions