Leveraging federated learning for DoS attack detection in IoT networks based on ensemble feature selection and deep learning models
tasneem-qasem-al-ghadi
Shankar Karuppayah
Associate Professor
Cybersecurity Research Centre (CYRES), Universiti Sains Malaysia (USM)
Professional Summary
Shankar Karuppayah is an Associate Professor and Deputy Director at the Cybersecurity Research Centre (CYRES), Universiti Sains Malaysia (USM), which he joined as Senior Lecturer in 2016. He is also the Founder & CEO of BitRanger Sdn. Bhd., a USM cybersecurity spin-off established in October 2023 that translates research and innovation from USM/CYRES into operational cybersecurity capabilities, including OwlSight, an outsourced Security Operations Centre platform.
He obtained his B.Sc (HONS) Computer Science from Universiti Sains Malaysia in 2009 and his M.Sc. Software Systems Engineering from King Mongkut’s University of Technology North Bangkok (KMUTNB) in 2011. In 2016, Shankar obtained his PhD (Dr. rer. nat.) from TU Darmstadt, where his research on advanced techniques for monitoring peer-to-peer botnets later formed the basis of his Springer book, Advanced Monitoring in P2P Botnets: A Dual Perspective.
His research has since expanded from P2P botnet monitoring and malware analysis into broader areas including intrusion detection, cyber threat intelligence, machine learning for cybersecurity, IoT and cyber-physical security, network security monitoring, and the translation of cybersecurity research into deployable, operational technologies.
Education
PhD in Computer Science (Cyber Security)
Technische Universität Darmstadt, Germany
MSc in Software Systems Engineering
RWTH Aachen, Germany & King Mongkut's University of Technology North Bangkok, Thailand
BSc (HONS) in Computer Science (Networking)
Universiti Sains Malaysia, Malaysia
Interests
Cyber Threat Intelligence & Botnet Monitoring
Intrusion Detection & Network Security Monitoring
AI / Machine Learning for Cybersecurity
IoT & Cyber-Physical System Security
Security Operations Centres (SOC)
Cybersecurity Research Commercialisation
Featured Publications
•
•
1 min read
Binary Sight-Seeing: Accelerating Reverse Engineering via Point-of-Interest-Beacons
richard-august-see
Detection of Real-Time Malicious Intrusions and Attacks in IoT Empowered Cybersecurity Infrastructures
irfan-ali-kandhro
Accomplishments
ITEX 2026 Special Award
Japan Intellectual Property Association, International Invention, Innovation & Technology Competition 2026 ∙
January 2026
Awarded for OwlSight - Outsourced Security Operation Centre for SMEs.
ITEX 2026 Gold Medal
Malaysian Invention and Design Society, International Invention, Innovation & Technology Competition 2026 ∙
January 2026
Awarded for OwlSight - Outsourced Security Operation Centre for SMEs, as part of USM’s innovation showcase.
Pingat Jasa Kebaktian (PJK)
Penang State Government ∙
January 2025
A Malaysian state honour awarded for meritorious service.
International Innovation Award
Malaysia Technology Expo 2024 ∙
January 2024
International Innovation Award at the Malaysia Technology Expo 2024.
MTE 2024 Silver Medal
Malaysia Technology Expo (MTE) 2024 ∙
January 2024
Silver Medal at the Malaysia Technology Expo 2024.
HRD Corp Accredited Trainer
Human Resource Development Corporation (HRD Corp) ∙
March 2023
Professional trainer status accredited by HRD Corp (10/03/2023 – 10/03/2026).
APAN Fellowship
Asia Pacific Advanced Network (APAN) ∙
January 2023
Fellowship awarded by the Asia Pacific Advanced Network, held in Sri Lanka.
Pitch@USM Cycle 1
Universiti Sains Malaysia ∙
January 2022
Recognition at Universiti Sains Malaysia’s Pitch@USM Cycle 1, 2022.
Professional Technologist (Cyber Security)
Malaysian Board of Technologists ∙
April 2020
BJIM-USM Fellow
Universiti Sains Malaysia ∙
May 2019
Appointed as USM-BJIM (Division of Industry & Community Network) Fellow.
Graduate Technologist (Cyber Security)
Malaysian Board of Technologists ∙
January 2019
CEO@Faculty 2.0 Fellow
Malaysian Ministry of Higher Education ∙
September 2018
An industrial attachment fellowship with Huawei (Malaysia) for a period of six months.
TRANSITS I
GÉANT ∙
March 2018
TRANSITS-I course is aimed at new or potential computer security incident response team (CSIRT) personnel who wish to gain a good grounding in the main aspects of working in such a team.
Academic Staff Training Scheme (ASTS) Fellowship
Universiti Sains Malaysia and Malaysian Ministry of Higher Education ∙
October 2012
A full scholarship offer to pursue Ph.D. and thereafter join USM as a faculty member.
DAAD Scholarship
German Academic Exchange Service (DAAD) ∙
July 2009
A full scholarship to pursue M.Sc. in a twinning programme between RWTH Aachen, Germany and Thai-German Graduate School of Engineering (TGGS), KMUTNB, Thailand.
Upcoming Talks & Events
Panel Moderator: "Cybersecurity & Data Protection for Business Growth" - SOBA 2026 Connect Penang
Invited by Star Media Group Berhad to moderate a panel session on cybersecurity and data protection for Malaysian businesses at SOBA 2026 Connect Penang.
Recent News
Talks & Invited Presentations
Selected international invited talks and keynotes. (See Services for a fuller list of professional service and committee roles, or Accomplishments for awards and recognitions.)
- 2026 — “Cybersecurity Awareness” (Ceramah Kesedaran Keselamatan Siber), Penang International Halal Expo (PIHEX) 2026, Politeknik Seberang Perai
- 2025 — “Cybersecurity Concerns for Energy Domain”, ERIA/ERAB Cyber and Physical System Security Workshop, Kuala Lumpur
- 2024 — “Cybersecurity Best Practices in Academic Environment”, Universitas Brawijaya (Launch of UB-CSIRT)
- 2024 — “Building Cyber Resilience through Defending against Social Engineering Attacks”, IEEE Computational Intelligence Society / Universitas Nusa Putra
- 2024 — “Cybersecurity Guest Lecture”, Universitas Brawijaya, Fakultas Vokasi
- 2023 — “The P2P Botnet Threat Mitigation Lifecycle”, IEEE Indonesia / Universitas Nusa Putra
- 2023 — “Understanding the Botnet Threat Mitigation Lifecycle”, TU Darmstadt (PNS: Protection in Networked Systems)
- 2022 — “Introduction to Cyber Hygiene”, Intel Security Conference
- 2020 — “Botnet Mitigation Best Practices and System Evaluation”, Universitas Brawijaya (DCNDS Workshop Series 2)
- 2019 — “Cloud-Based Web Security Best Practices and System Configuration Overview”, Bangladesh University of Engineering and Technology (DCNDS Workshop Series 1)
- 2019 — “The Importance of Data Analytics in the Era of Industry 4.0”, Universitas Brawijaya
- 2018 — “Data Analytics with Pandas”, Nehru Arts & Science College, Coimbatore, India
- 2017 — “Advanced Monitoring of P2P Botnets”, Bina Nusantara University (BINUS), Indonesia
- 2017 — “Awareness of Internet Security in Digital Era”, Universitas Brawijaya
Services
Membership
- Asia Pacific Advanced Network (APAN) - Security Working Group, Chair (2026–2028; Co-Chair 2024–2026)
- Malaysian Research and Education Network (MyREN) - Internet Security Working Group, Deputy Head
- Malaysian Board of Technologists (MBOT), Professional Technologist
- Cyber Security Academia Malaysia, Member
- Institute of Electrical and Electronics Engineers (IEEE), Member (2013–2017)
Journal Reviewer
- ACM Computing Surveys (CSUR)
- IEEE Transactions on Information Forensics & Security (T-IFS)
- IEEE Access
- IEEE Communications Magazine
- Computer Networks - Elsevier
- Information Systems - Elsevier
- Journal of Information Security and Applications (JISA) - Elsevier
- Computers and Electrical Engineering - Elsevier
- International Journal of Network Management
- Wireless Communications and Mobile Computing
- PeerJ Computer Science
Committees & Assessor Roles
- MRANTI Cybersecurity Technical Advisory Panel, AV Living Lab
- MDEC Project Monitoring Assessor / Grant Recommendation Committee
- USM Mobile Access Coordinator (COVID-19)
- USM Industry Liaison Fellow
- USM Cyber Security Awareness Program - Subject Matter Expert
- HRD Corp Accredited Trainer, Human Resource Development Corporation
- External Advisor, Bachelor of Information Technology (Honours) Communications and Networking, Universiti Tunku Abdul Rahman (2025–2027)
- External Examiner, BINUS Software Engineering Course, Bina Nusantara University (2017)
Visiting Appointments
- Adjunct Professor, Faculty of Vocational Studies, Universitas Brawijaya (Oct 2024 – Sep 2025)
- Visiting Lecturer, Faculty of Vocational Studies, Universitas Brawijaya (Oct 2023)
- Guest Lecturer, Vocational Studies Department, Universitas Brawijaya (Oct 2023)
- Guest Lecturer, “Data Analytics with Python”, Program Pendidikan Vokasi, Universitas Brawijaya (Apr–May 2019)
- Visiting Scientist, Fraunhofer Singapore (Mar 2018)
- Visiting Lecturer, Universitas Brawijaya (May 2017)
- Guest Lecturer, Software Engineering Course, Bina Nusantara University (BINUS) (May 2017)
Recent Publications
Talking Like a Phisher: LLM-Based Attacks on Voice Phishing Classifiers
wenhao-li
Semantic interoperability in IoT for Industry 4.0: Review, taxonomy, challenges, and future research
devamekalai-nagasundaram
PhishSSL: Self-supervised Contrastive Learning for Phishing Website Detection
wenhao-li
Leveraging federated learning for DoS attack detection in IoT networks based on ensemble feature selection and deep learning models
tasneem-qasem-al-ghadi
Enabling SECS/GEM in legacy equipment: a proof of concept
muhammad-syahir-kamal-fitri
Insights into peer-to-peer botnet dynamics: reviewing emulation testbeds and proposing a conceptual model
mithiiran-parthipan
A Review of Applicable Technologies, Routing Protocols, Requirements, and Architecture for Disaster Area Networks
mohammad-m.-alsayyed
Teaching and Supervision
Courses taught at Universiti Sains Malaysia, by academic session — Postgraduate Supervision has its own page.
2025/2026
- Science and Engineering Research Methodology (EKC500/3)
- Ethical Hacking (CYY514/4)
2024/2025
- Science and Engineering Research Methodology (EKC500/3)
- Cyber Operations (CYY519/4)
- Cyber Security Audit and Assessment (CYY517/4)
- Cybersecurity Research Methodology (CYY515/4)
- Advanced Internet Security (CYY512/4)
- Internet Governance (CYY511/4)
2023/2024
- Science and Engineering Research Methodology (EKC500/3)
2021/2022 – 2022/2023
- Information Security Management and Assurance (CST339/3)
- Information Security & Assurance (CST233/3)
- Microprocessors & Embedded Systems (CST432/3)
- Principles of Computer Networks and Information Security (CST235/4, CSM335/4)
- Data Communications & Networks (CST231/3, CSM331/3)
2018/2019 – 2019/2020
- Introduction to Real Time Operating Systems and Applications (EES502/4)
- Internet Governance (CYY508/4)
- Internet Security (CYY503/4)
2016/2017 – 2017/2018
- Introduction to Real Time Operating Systems and Applications (EES502/4)
- Special Topics in Next Generation Internet (CYY505/4)
- Internet Communications Protocols (CYY502/4)
Prior to 2016 @ TU Darmstadt
- PNS: Protection in Networked Systems ‒ Trust, Resilience, and Privacy
- Seminar: Protection in Infrastructures and Networks (PIN) — Topic Supervisor
- Simulation and Evaluation of Computer Networks (SECoN)
- Seminar Telekooperation
- Seminar Security, Privacy, and Trust
- Projectpraktikum
- Bachelor Students Traineeship / Bachelorpraktikum
- Internet Praktikum
Contact
Email: kshankar [at] usm [dot] my
Phone: +604 653 4632
Book an appointment: calendly.com/kshankar_usm
Other ways to reach me: