DRISHTELab

Research

We work on identifying, analysing, detecting, attributing, and mitigating cybersecurity and hybrid threats. The work spans systems security, applied machine learning, and cyber intelligence, and is grounded in problems that matter to Indian cyberspace and its critical infrastructure.

Malware Analysis & DetectionFinding malicious code that does not want to be found.Static, dynamic, and hybrid analysis of malicious binaries, with a focus on Android and IoT malware. Read more → Threat Intelligence & APTsTracking the actors behind targeted attacks.Organisation-specific threat intelligence, deception, and attribution of state-sponsored campaigns. Read more → AI for SecurityUsing models to defend, and testing the models themselves.Machine learning and language models applied to security problems, and the security of those models in turn. Read more → Cyber ForensicsReconstructing what happened, and proving it.Evidence acquisition and reconstruction across mobile and cloud systems, in a form that stands up to scrutiny. Read more → Vulnerability Assessment & Penetration TestingFinding the way in, before someone else does.Offensive security against web, cloud and enterprise systems, and building the engineering practice that closes what it finds. Read more → Mobile & Platform SecurityTrusting the device before trusting the software on it.Security of the platform itself — firmware, secure boot, mobile and embedded systems, and the wireless protocols they depend on. Read more →

Selected publications

All publications →

Interested in working on any of this? Join the lab →