Projects

My four main research projects are on the homepage. This page covers my other research, my industry work, and the systems I have built.

Research

Mitigating DDoS Attacks Using a Resource Sharing Network

Co-author · with Dr. Jannatun Noor · NSysS 2022, oral presentation · Paper · PDF

Application-level DDoS attacks look like normal traffic, so older filtering methods miss them. We proposed a resource-sharing network: attacker IP addresses found by an existing filtering method are sent to a proxy server, which drops their requests through memory management. We emulated the network with 50 Nginx virtual machines, and it mitigated 66.7% of attacks. I presented the paper at NSysS in December 2022.

Tools: Nginx, proxy servers, virtual machines

Industry Experience

Junior Software Engineer, Tirzok Private Ltd., Dhaka · Feb 2023 – Dec 2023

ML Document Validation for CliQloan

CliQloan is a mortgage loan origination system for brokers and loan officers, made by AmitaSoft, a client of Tirzok. Checking borrower documents by hand was slow and costly, so I led a system that does it automatically:

• ML classifiers identify each document’s type, and a page-trimming model removes irrelevant pages.
• AWS Textract then extracts the key fields, and an automatic validation service checks them.
• The system runs 45× faster than manual validation and lowers API costs.
• Spring Boot and PostgreSQL REST APIs, Amazon MQ (RabbitMQ) messaging, deployed on AWS Lambda with ECR images.

Tools: scikit-learn, AWS Textract, AWS Lambda, Amazon ECR, Amazon MQ (RabbitMQ), Spring Boot, PostgreSQL

Janatar Sarkar, a Government–Citizen Portal

Janatar Sarkar connects citizens of Bangladesh with their government and serves 80,000+ citizens. I built RESTful APIs and a JWT-based role management system, and optimized MongoDB aggregation queries, which cut query latency by 40%.

Tools: Node.js, MongoDB, JWT

Payconz

A Flask currency-conversion API for 5 currencies with PostgreSQL, supporting real-time multi-currency payroll and monthly currency-history reports.

Tools: Flask, PostgreSQL

At Tirzok I also deployed services on Linux cloud servers and coordinated releases with clients.

Engineering Projects

FwdStar, a Freight Marketplace for Bangladesh

Technical lead and sole architect · 2026–present · MVP

FwdStar connects shippers, brokers, and carriers. I wrote a 2,695-line technical specification from the client’s verbal needs, then built the platform in nine phases: phone-first sign-up, onboarding with admin review, fleet management, load posting with maps, a load board, awards, the shipment lifecycle with GPS tracking, and notifications with an SMS queue. After the MVP, I changed the reverse auction to quote collection, to match how freight is booked offline in Bangladesh.

• Next.js and TypeScript frontend in English and Bengali.
• FastAPI backend with 50+ documented REST endpoints (OpenAPI).
• Supabase PostgreSQL with PostGIS: 20+ tables and 13 migrations.
• State machines with optimistic locking, and SELECT FOR UPDATE so a load is never awarded twice.
• Security: JWT verification (HS256, ES256, RS256 via JWKS), HTTP-only cookie sessions, CSRF protection, OTP with rate limiting and lockout, bcrypt, and audit logging.

Tools: Next.js 16, TypeScript, next-intl, FastAPI, Supabase PostgreSQL, PostGIS, Docker, APScheduler

LangChain + MCP Chatbot

A chatbot whose LangChain ReAct agent chooses which MCP tool server to call, such as a weather API or math tools, with Groq for fast inference. It has a Bootstrap frontend and a Flask backend.

Tools: LangChain, MCP, Groq, Flask, Bootstrap

License-Plate Reading to Help Report Harassment on Public Transport

A system that detects and reads vehicle license plates from photos, so passengers can report harassment on public transport. It uses TensorFlow for plate detection and EasyOCR for reading, using a Kaggle dataset of 433 images. Demo · Proposal

Tools: TensorFlow, EasyOCR, Python

Video Codecs for Live Streaming

A comparison of H.264, H.265, and VP9 in FFmpeg, measuring quality with SSIM, PSNR, and VMAF. Code

Tools: FFmpeg, SSIM, PSNR, VMAF

BRACU-ResearcherHub

A platform that helps BRAC University researchers find collaborators for their next project. Code · Demo

Tools: Django, Django REST Framework, PostgreSQL

Personal Blog

My personal blog, built with Django. Code · Demo

Tools: Django