01 / Network implementation
Securing a Three-Campus Network
Clayton, Caulfield, and Peninsula: separate campus networks, shared services, and encrypted communication across an ISP network.
My contribution
I created the three-campus network topology in GNS3 and configured MikroTik routers for the Clayton, Peninsula, and Caulfield campus networks. I configured BGP routing and IPsec VPNs, integrated DNS, and tested access to shared services.
I configured firewall rules and Snort monitoring, and investigated routing security in a controlled lab. Using connectivity tests and Wireshark, I troubleshot addressing, DNS, and routing issues and assessed how the network behaved.
This experience strengthened my ability to bring routing, services, and security controls together in a working network and verify communication between sites.
02 / Security tooling & protocol analysis
Python Network Scanning & DNS Security
Python tooling and protocol analysis to investigate exposed services and DNS security risks.
My contribution
I developed Python tools for TCP and UDP scanning, using concurrency, configurable timeouts, and retries. I checked scan results against the lab environment and used Wireshark to analyse network traffic.
I used Scapy to investigate DNS response spoofing and explored DNS cache-poisoning risks in controlled lab environments. This developed my understanding of protocol behaviour, service discovery, and the importance of validating network responses.
Python · Sockets · Threading · Scapy · Wireshark · TCP/UDP
03 / Broader practical experience
Practical Network Security Experience
Alongside these projects, I gained practical experience in secure services, network attacks, traffic monitoring, and penetration testing.
- Secure services & cryptography
- Created certificate authorities and certificates with OpenSSL, configured HTTPS and secure email, worked with GnuPG and IPsec, and analysed TLS handshakes.
- Protocols & attack behaviour
- Tested SYN flooding, TCP reset, ARP, and DNS attacks in lab environments; examined SYN cookies, Nmap scan techniques, and wireless security protocols.
- Monitoring & network controls
- Configured Snort rules, traffic mirroring, BGP route filters, and stateful firewalls; analysed packet captures and worked with SSH tunnelling.
- Reconnaissance & penetration testing
- Used OSINT and service discovery, and practised exploitation, privilege escalation, and lateral movement in a simulated lab environment.
What I bring
Configure. Test. Explain.
I configure network services and security controls, troubleshoot connectivity and routing issues, and use packet captures to verify how the network behaves.
My practical experience spans MikroTik routers, Linux services, Python tools, and network protocols, supported by clear documentation of configurations, testing, and findings.