Research

Mahdieh Zabihimayvan, Assistant professor of Computer Science, Central Connecticut State University


Research

 I work on machine learning for Web systems security, with a concentration in Web systems characterization, measurements, and analytics. My research utilizes prescriptive analysis on massive data sets generated by Web server traffic, collected by crawling on Web pages, or feature extraction of websites structure. My current research is in: (i) evaluation of dark Web content ecosystem; (ii) analyzing the navigational pattern of Web crawlers with focus on designing efficient Web robots for privacy enhancing systems such as Tor; and (iii) utilizing machine learning and evolutionary computing techniques to detect phishing attacks on the Internet. Along this theme, I pursue research projects that utilize proactive cyber threat intelligence analysis to enhance cyber resilience. 

I'm looking for research collaborators in machine learning, cybersecurity, and network science. Please email me if you are interested!

Evaluation of dark Web ecosystem

The dark Web defines content on the World Wide Web that cannot or has not yet been indexed by search engines. Tor is the most popular dark network in the world that protects the identity of both content providers and their clients against any tracking on the Internet. This protection makes Tor a good platform for censorship circumvention, free speech, and information dissemination.  

Let's work together on evaluating the dark Web ecosystem. The goal is to improve understanding of the services provided on the dark Web and how they interact with each other. Our work will use data science and machine learning techniques for both the information and network analysis.

Web Robot detection

Web robots are employed by modern Web-based technologies and services to collect and scrutinize dynamic content repositories contain. However, aggressive robots with specialized functions may find innovative ways to harvest e-mail addresses, perform click fraud, and access the information only authorized human users should be allowed to access.  

Let's see how we can detect such malicious Web robots using machine learning methods and help Web servers have a better performance and service!

phishing attack detection

Phishing as one of the most well-known cybercrime activities is a deception of online users to steal their personal or confidential information by impersonating a legitimate website. Several machine learning-based strategies have been proposed to detect phishing websites. These techniques work on features that are extracted from Web pages

Let's work together on such features to see how we can differentiate phishing websites. We will also learn how to enhance phishing attack detection using different machine learning techniques.

Recent publications:

If you are interested in applied machine learning and data science techniques, network science, and their applications in cybersecurity, please feel free to contact me for more collaboration opportunities!