Zane Baker Email & Phone Number

I was tasked with building and generating attack graphs using a custom attack graph generator inside of a Linux virtual machine. The data used to generate the graphs was based off of two configuration files that I made, an exploit pattern file and a network model file. There were two key data points that needed to be visually present on the graphs, which were observables and exploits. The exploits were events where vulnerabilities were utilized to carry out malicious acts, and the observables were the damage that resulted from the exploits. The unique feature that I needed the graphs to have was for them to display exploits as annotations on the edges of the graphs. The edges were represented as lines, and they would branch both off and onto nodes that were represented as circles, which were the observables. The graphs gave a clear visualization as to how exploits are commonly utilized to compromise the functionality of items or processes within a network. For the graphs to generate, I had to modify the file permissions associated with the two configuration files that were made. Once the permissions were properly modified, the files became executable, enabling me to simply type the necessary commands to generate the graphs. Clear images of the graphs with the observables properly annotated on the edges were then displayed. This internship was funded by the Idaho National Laboratory and was supervised by Dr. Peter Hawrylak, a University of Tulsa faculty member.

I was tasked with building detailed threat models that visualized network vulnerabilities existing within The University of Tulsa's network infrastructure. To collect the necessary data to build such models, I performed various analyses of the network infrastructure, which exposed existing vulnerabilities within it. I used the data from the discovered vulnerabilities to build the threat models, which gave clear visualizations as to where the vulnerabilities were within the network infrastructure. This made it a simple process to develop adequate mitigation strategies for the detected vulnerabilities and improve the overall security of the network infrastructure. This internship was funded by the Army Corps of Engineers and was supervised by Dr. John Hale, a University of Tulsa faculty member.