Skip to content
View akekulip's full-sized avatar

Block or report akekulip

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
akekulip/README.md

Hi, I'm Philip Akekudaga πŸ‘‹

PhD Researcher Β· Securing Critical Infrastructure with Programmable Network Defense

Portfolio LinkedIn ORCID Email Profile views


I'm a PhD researcher in Electrical Engineering at the University of Rhode Island (CYPHER Lab), working at the intersection of electrical engineering, computer networking, and cybersecurity. I program security logic directly into the network switches that carry power-grid and ICS/SCADA traffic β€” obfuscating devices against reconnaissance, deploying data-plane decoys, and catching threats at wire speed.

Before research, I spent eight years running IT/OT and SCADA systems at Ghana Water Company, a national water utility β€” so I build systems meant to survive production, not just a paper. My work is jointly funded by the Office of Naval Research (ONR) and the National Science Foundation (NSF).

πŸ”¬ Research Focus

  • Programmable Network Defense β€” P4/SDN security architectures for real-time detection and autonomous mitigation at the data plane (BMv2, Intel Tofino ASICs)
  • ICS/SCADA Obfuscation & Deception β€” anti-reconnaissance and data-plane decoys (e.g. DNP3 outstations) that mislead attackers while gathering intelligence
  • ML-Driven Threat Detection β€” GRU/RNN models for traffic anomaly detection and lightweight classifiers for resource-constrained ICS/OT edge devices
  • Risk Quantification & Governance β€” FAIR quantitative risk modeling, FDNA cascading-failure analysis for power grids, and multi-jurisdictional AI governance

πŸ“Œ Featured Projects

  • Agent-P4-SDN-Based DNS Threat Defense β€” Closed-loop autonomous defense pipeline that detects and mitigates DNS-based attacks using P4 programmable switches and SDN orchestration.
  • dnp3_decoy β€” Programmable data-plane decoy that impersonates DNP3 outstations (RTUs) on a Tofino switch, presenting attackers with realistic virtual devices, MAC addresses, and OS fingerprints.
  • adaptive_routing β€” P4-based adaptive load balancer that distributes traffic across equal-cost paths using real-time link telemetry, improving on static ECMP β€” applicable to resilient grid communications.
  • Quantifying Systemic Risk in Critical Power Infrastructure (FDNA) β€” Functional Dependency Network Analysis modeling single-node failures into grid-wide cascades to prioritize resilience investment.
  • MemProof β€” Admission-control protocol defending against external corpus poisoning in RAG systems by unauthorized sources.

πŸ› οΈ Tech Stack

Programmable Networks & Data Plane

P4 P4Runtime SDN Intel Tofino Mininet

Languages

Python C C++ Bash PowerShell SQL

ML / AI

PyTorch scikit-learn GRU/RNN

Security Operations & GRC

Splunk Microsoft Sentinel CrowdStrike MITRE ATT&CK NIST CSF

Platforms & Tools

Linux Docker Git Wireshark Power BI ServiceNow Jira

πŸ“Š GitHub Activity

GitHub stats Top languages

GitHub streak

πŸ“š Selected Publications

  • P. Akekudaga, M. A. Bonsu. Navigating Multi-Jurisdictional Privacy Compliance in AI: An Empirical Analysis of Regulatory Gaps. IEEE UEMCON 2025.
  • P. Akekudaga, O. Keskin. Quantifying Systemic Risk in Critical Power Infrastructure Using FDNA: From Single-Node Failure to Grid-Wide Cascades. Submitted, SmartNets 2026.
  • P. Akekudaga, O. Keskin. A Framework for Financial Markets Impact Assessment of Data Breaches Using Interpretable ML and Event Study Methods. ASIA '25.
  • M. A. Bonsu, P. Akekudaga. Resilient IoT Security: Early Flood Attack Detection Using a GRU Deep Learning Model. WJARR, 2025.

Full record: ORCID 0009-0003-2263-0142

πŸ… Certifications & Recognition

Security+ FAIR MITRE CTI

  • πŸ† Winner, SIRAcon '25 Research Competition β€” Society of Information Risk Analysts
  • πŸ₯‡ Cyber 9/12 Strategy Competition β€” Semi-finalist & "Most Creative Proposal to the White House"
  • πŸŽ“ Member: IEEE, FAIR Institute, SIRA, NSBE, ISACA

🀝 Let's Connect

Website LinkedIn ORCID Gmail

Pinned Loading

  1. mcp mcp Public

    A control-plane subsystem that decides β€” every epoch β€” which measurement tasks (sketches, sampling, watchlists, polling) should run on which P4 switches, under hard resource budgets, using a constr…

    Python

  2. Agent-P4-SDN-Based-DNS-Threat-Defense Agent-P4-SDN-Based-DNS-Threat-Defense Public

    Lightweight research prototype for an intelligent network defense pipeline that detects and autonomously mitigates DNS-based attacks using P4 programmable switches and SDN orchestration. The system…

    Python 1

  3. adaptive_routing adaptive_routing Public

    A P4-based adaptive load-balancing system that dynamically distributes traffic across multiple equal-cost paths based on real-time link utilization, improving on static ECMP behavior. Tested on a 6…

    Python 1

  4. dnp3_decoy dnp3_decoy Public

    A programmable data-plane decoy that impersonates DNP3 outstations (RTUs) on a Tofino switch. Attackers scanning the network see virtual devices with realistic MAC addresses, OS fingerprints, open …

    Python

  5. Quantifying-Systemic-Risk-in-Critical-Power-Infrastructure-Using-FDNA Quantifying-Systemic-Risk-in-Critical-Power-Infrastructure-Using-FDNA Public

    Quantifying Systemic Risk in Critical Power Infrastructure Using Functional Dependency Network Analysis

    Python

  6. MemProof MemProof Public

    MemProof is an admission-control protocol for one specific subproblem: external corpus poisoning by sources the operator never authorized. It does not try to solve every RAG-poisoning threat. The c…

    Python