All experience

Hydroficient

IoT Cyber Defense Extern

CybersecurityApril 2026 to June 2026

This was an eight-project curriculum that ran like a real engagement: secure the water monitoring system of a hotel that only exists on paper.

The setup
The sensors report over the network, and left alone that traffic is wide open.
  • →Anyone nearby can read it
  • →Anyone can pretend to be a sensor
  • →Anyone can record a genuine message and send it again later
Five layers of defense
I built a layer against each way in, then wrote the attacks myself and ran them at the system to confirm every layer actually held.
  • →Encrypted all the traffic
  • →Issued every device its own certificate, so the system only listens to sensors it knows
  • →Stamped each message with a timestamp
  • →And a running counter
  • →And a signature, so a copied or altered message gets thrown out
PythonMosquitto MQTTTLSmTLSHMAC-SHA256
Catching a sensor that’s lying
A faulty sensor can still send perfectly valid, signed messages, so the layers above cannot catch it.
  • →Trained a model on live readings to flag ones that look out of character
  • →Picked a model type that can score each message as it arrives, not one that needs the whole batch first
  • →Alerts route to a live dashboard someone can watch without touching a terminal
Isolation ForestWebSocket
Austin Zhai