Hi there! I'm Khadija, a cybersecurity graduate student and policy strategist specializing in ** Cyber Threat Intelligence, AI Governance, and Risk Management**. This space is where I showcase my research, share projects, and contribute to the cybersecurity community.
Whether you're here to explore my research on cloud AI security, dive into threat intelligence frameworks, or learn about the intersection of cybersecurity and policy, I hope you find value and inspiration. Let's connect and grow together in building a safer digital world!
🎓 M.S. in Information Security Policy & Management — Carnegie Mellon University, Heinz College
🎓 B.S. in Cybersecurity — George Washington University
🌍 Senior Fellow & Region Liaison — Cyber Security Forum Initiative (CSFI), Middle East & Africa
🔬 Research Focus: Identity-centric threat mapping for cloud AI infrastructure
💡 Passion: Bridging technical cybersecurity depth with policy and strategic thinking
📍 Based in Pittsburgh, PA
🔍 Research Projects: Cloud security frameworks, threat modeling, and AI governance analysis
🛡️ Threat Intelligence: MITRE ATT&CK and ATLAS-based analysis and mapping
🏗️ Home Labs & Tools: Hands-on cybersecurity environments and utilities
📝 Policy & Analysis: Cybersecurity risk assessments, privacy analysis, and regulatory frameworks
An identity-centric threat mapping framework for cloud AI infrastructure — mapping MITRE ATLAS attack tactics to machine identity over-privilege in AWS environments. Includes cost-of-breach analysis, live attack simulation tables, and compliance mapping to NIST 800-53 and EU AI Act.
A Password Breach Aggregator integrating Have I Been Pwned API and CISA KEV data, featuring breach visualizations and ROI analysis for organizational security investments.
Research on risk-based implications of quantum computing on cybersecurity, covering NIST post-quantum standards (FIPS 203/204/205) and harvest-now-decrypt-later threats.
MITRE ATT&CK · MITRE ATLAS · NIST 800-53 · NIST CSF · NICE Framework · EU AI Act · GDPR · Cigital RMF · Risk Anatomy
"Security is not just a technical problem — it's a policy, governance, and human problem."