Research interests
Research remains central to my work, whether it is publishing academic material or applying fresh thinking to cybersecurity and practical systems.
Publication
🏅 Nominated for the Best Paper Award in Linux research at IAENG
A fork bomb is a denial-of-service attack in which a process endlessly replicates itself until the process table and memory are exhausted, freezing the system. Because creating a process is a legitimate operation that needs no special privileges, even hardened Linux systems are vulnerable — availability, one of the three pillars of information security, breaks down.
Static process limits reject legitimate work once the cap is hit. Rate limits misfire on fork-heavy software such as CAD tools. Name-based blacklists never forgive: a legitimate process that shares a name with a past offender is killed forever. Each approach trades one failure mode for another.
The paper combines name-based detection with process resource quarantine. New processes are monitored for their fork rate; offenders are killed and their name recorded. When a recorded name reappears, it is not killed outright — it runs inside a resource quarantine and is inspected. If it behaves, it is released and removed from the list, eliminating permanent false positives.
Evaluated with a bash fork bomb on Xubuntu 18.04 (kernel 4.15), the system identified an attack in as little as 44 ms at a threshold of 500 forks, while known offenders were handled instantly by name. The system stayed responsive and available throughout the attack.
Focus areas
Secure systems, resilient workflows, and practical risk awareness.
Streamlining digital tasks with intelligent and well-structured processes.
Bridging academic insight with useful technology in everyday contexts.
