About Me
I am a Ph.D. student in the Department of Computer Science at North Carolina State University, advised by Laurie Williams in the RealSearch Lab. Before that, I received my B.Sc and M.Sc in Software Engineering from the Institute of Information Technology (IIT), University of Dhaka, supervised by Dr. Mohammad Shoyaib. My research focuses on the intersection of Software Security and Machine Learning (ML), specifically software supply chain security, AI security, and privacy.
Most recently, I was a Research Intern at the Laboratory for Analytic Sciences (LAS) (May–Aug. 2026), where I built a pipeline to prioritize security controls against software supply chain attacks. Before my Ph.D., I worked as a Software Engineer at Samsung R&D Institute Bangladesh and as a Software Engineer Intern at Datasoft Systems Bangladesh Limited.
News
- [May 2026]: Started a summer research internship at the Laboratory for Analytic Sciences (LAS), NC State.
- [Dec. 2025]: Our another paper titled How Do Semantically Equivalent Code Transformations Impact Membership Inference on LLMs for Code? has been accepted to the Research Track of the International Conference on Software Engineering (ICSE 2026).
- [Oct. 2025]: Our paper titled Closing the Chain: How to reduce your risk of being SolarWinds, Log4j, or XZ Utils has been accepted to the Research Track of the International Conference on Software Engineering (ICSE 2026).
- [Sep. 2025]: Our paper titled How Does Quantization Impact Privacy Risk on LLMs for Code? has been accepted to the Main Track of the International Conference on AI-powered Software (AIware 2025), co-located with ASE.
- [Aug. 2024]: Started Ph.D. @NCSU, Raleigh, NC, USA.
Publications 
🎓 Conference Papers
📚 Journal Papers
📄 Preprints
Experience
Research
- Research Intern, Laboratory for Analytic Sciences — Raleigh, USA (May 2026–Aug. 2026)
Built an automated pipeline that identifies the top 10 security controls against software supply chain attacks from cyber threat intelligence reports. Mapped adversarial actions to MITRE ATT&CK techniques and security controls, then ranked controls by campaign frequency, technique coverage, and severity.
Tools: Python; LLMs; MITRE ATT&CK; P-SSCRM; NIST SP 800-53.
Industry
- Software Engineer, Samsung R&D Institute Bangladesh — Dhaka, Bangladesh (Apr. 2018– Jan. 2019)
Angular + Spring internal platform; delivered with formal SRS. - Software Engineer Intern, Datasoft Systems Bangladesh Ltd — Dhaka, Bangladesh (Jan. 2017–Jun. 2017)
Built two in-house automation tools with C# and ASP.NET MVC.
Academic & Teaching
- Graduate Assistant, North Carolina State University — Raleigh, USA (Aug. 2025–Present)
Courses: Software Security; Discrete Mathematics. - Assistant Professor (study leave), Islamic University of Technology — Dhaka, Bangladesh (Apr. 2023–Aug. 2024)
Courses: Software Verification & Validation; Linear Algebra; Web Programming; Embedded Software Development; Web & Mobile App Development. - Lecturer, Islamic University of Technology — Dhaka, Bangladesh (Jul. 2021–Mar. 2023)
- Short Course Instructor, IIT, University of Dhaka — Dhaka, Bangladesh (Jan. 2019–Aug. 2020)
Courses: Matlab; OriginPro; LaTeX; Web Design.
🎓 Education
- Ph.D., Computer Science — North Carolina State University, Raleigh, NC (Aug. 2024–Present).
- M.S. & B.S., Software Engineering — University of Dhaka, Dhaka, Bangladesh (Jan. 2014–Dec. 2020).
🎖 Awards & Achievements
- ICT Ministry Fellowship, ICT Division, Bangladesh (Jan. 2019– Dec. 2020) — Funded M.Sc. research as an ICT fellow.
- Honors Scholarship, University of Dhaka (Jan. 2017– Dec. 2017) — Awarded for academic excellence during the B.Sc. period.