Bikash Saha is a Ph.D. candidate at the Indian Institute of Technology Kanpur, under the supervision of Prof. Sandeep Kumar Shukla. His research focuses on detecting sophisticated threats within IoT and IIoT infrastructures. Additionally, He has a strong interest in the intersection of cybersecurity and machine learning, particularly in areas such as threat intelligence, Advanced Persistent Threat (APT) detection and attribution, and the application of Natural Language Processing in cybersecurity.

Before joining IIT Kanpur, he completed his Master’s in Computer Science & Engineering from Indian Institute of Technology Bhilai, under the supervision of Dr. Rishi Ranjan Singh. Additionally, he gained industry experience as a Software Developer at Sterlite Technologies Limited.

📢 [20 Oct 2024] Recent paper titled "MAD: A Meta-Learning Approach to Detect Advanced Persistent Threats using Provenance Data in Industrial IoT" is accepted at Workshop on AI for Cyber Threat Intelligence (WAITI) 2024 co-located with the Annual Computer Security Applications Conference (ACSAC24).

📢 [26 Sept 2024] Recent paper titled "Chasing the Shadows: TTPs in Action to Attribute Advanced Persistent Threats" is up on Arxiv. [Paper]

📢 [19 Sept 2024] Recent survey titled "A Comprehensive Survey of Advanced Persistent Threat Attribution: Taxonomy, Methods, Challenges and Open Research Problems" is up on Arxiv. [Paper]

📢 [08 Sept 2024] The paper titled "Genesis of Cyber Threats: Towards Malware-based Advanced Persistent Threat (APT) Attribution" is accepted at IEEE TPS 2024. [Paper] [Code & Dataset]

📢 [17 Aug 2024]  The paper titled "TTPXHunter: Actionable Threat Intelligence Extraction as TTPs from Finished Cyber Threat Reports " is accepted at ACM Digital Threats: Research and Practice (DTRAP). [Q1] [Paper] [Code & Dataset]