I'm Yasir Hassan, a Computer Engineering student at Bahria University, Islamabad. After a cybersecurity internship at Safe City Islamabad, I focus on vulnerability assessment, web application security and threat intelligence, and I build software with security designed in from the start.
NowFinal year of B.E. Computer Engineering · building VigiLense, my AI surveillance FYP
AI surveillance and incident response. Watches multiple camera feeds, detects people, weapons, fire and smoke, ranks incidents by priority, and logs evidence-backed alerts on a live dashboard. I lead the detection work in a team of three.
Secure blockchain land records. Each approved record is a block signed with RSA-2048 on a SHA-256 hash chain, with owner data encrypted using AES-256-GCM, TOTP two-factor login, role-based access and tamper detection.
Commission-free ordering and management for restaurants: ordering links, QR table menus, kitchen display, POS, rider app, reports, inventory and tax invoices.
Role-based HR system in Java Swing with six dashboards, SHA-256 password hashing, access control and a full audit log on SQL Server.
Three-layer campus network with VLAN segmentation, inter-VLAN routing, NAT, DHCP, ACLs, port security, SSH management and QoS.
Coursework in Network Security, Computer Networks, Data Structures, Embedded Systems, Microcontrollers & IoT, and AI & Machine Learning.
A structured approach to security assessment, guided by the OWASP Testing Guide and NIST practice.
Agree what's in scope, then map the attack surface: hosts, services, endpoints and exposed data.
Test against the OWASP Top 10 with tooling and manual checks, so findings are real, not scanner noise.
Confirm impact, rate severity and rank issues by real business risk rather than by count.
Write clear findings with evidence and fix steps developers can act on, then retest the fixes.
When I build software, I apply the same thinking from the start: least privilege, defence in depth and tamper evidence, as in Milkiyat and Dastarkhwan.
Everything here is backed by real work: each row links to where I used it.
Used in Safe City internship
Used in Safe City internship, Milkiyat
Used in Milkiyat, Dastarkhwan, HRMS
Used in Dastarkhwan, Milkiyat, HRMS, this website
Used in Enterprise Network
Used in VigiLense, Dastarkhwan
Used in Dastarkhwan, VigiLense, HRMS
Used in Dastarkhwan, HRMS, Milkiyat
How Milkiyat uses hash chaining, AES-256-GCM and RSA signatures so that any edit to a land record, even one made directly in the database, is caught.
Notes from building the detection layer of VigiLense, my final year project: training YOLO on D-Fire, reading the metrics honestly, and turning detections into alerts people can act on.
I'm open to cybersecurity internships and entry-level roles in security operations, vulnerability assessment and application security. I usually reply within a day.
