• Weblog anomaly detection in SOC
  • SOC threat detection and HTTP log analysis across multiple attack vectors via Web Dispatcher gateways
  • Spark-based alerting systems using hybrid detection approaches for large-scale security monitoring
  • NLP-driven feature engineering and anomaly detection for identifying XSS, SQL injection, and malicious scanner activities
  • Statistical and ML-based anomaly detection on time-series security logs and operational metrics
  • Alert quality enhancement through noise reduction, event correlation, and ETL pipeline optimization
• VM Workload Characterization and Prediction in Cloud Data Centers
  • AI/ML-Ops approaches for provisioning and resource optimization in cloud data centers and hyperscaler environments through adaptive workload regression and continuous model re-training
  • Data sanitization and interval uncertainty modeling for VM workload utilization analysis
  • Dynamic right-sizing recommendations using workload forecasting, Compute Instance Behavioral Analysis (IBA), and workload profiling
• LLM security and secure AI-driven application frameworks for cybersecurity

Publications available in PUMA:

• Right-Sizing Recommendations (RSR): Cloud Workload Conformal Prediction for Virtual Machines in Data Center Operations
  M. Majd, F. Cheng, and A. Pahlevan. Proceedings of the 24th IEEE/WIC International Conference on Web Intelligence and Intelligent Agent Technology, Albert Island. London. E16 2QY, UK, IEEE Press, (November 2025)
• A Comprehensive Review of Anomaly Detection in Web Logs
  M. Majd, P. Najafi, S. Alhosseini, F. Cheng, and C. Meinel. Proceedings of the 9th IEEE/ACM International Conference on Big Data Computing, Applications and Technologies (BDCAT'22), Vancouver, Washington, USA, IEEE Press, (December 2022)

Collaborative publications: 

• Large Language Models in Cybersecurity: State-of-the-Art
  F. Motlagh, M. Hajizadeh, M. Majd, P. Najafi, F. Cheng, und C. Meinel. Proceedings of the 11th International Conference on Information Systems Security and Privacy, ICISSP 2025 - Volume 2, Porto, Portugal, February 20-22, 2025, Seite 98--110. SCITEPRESS, (2025)
• When Prompts Become Payloads: A Framework for Mitigating SQL Injection Attacks in Large Language Model-Driven Applications
  F. Motlagh, M. Hajizadeh, M. Majd, P. Najafi, F. Cheng, und C. Meinel. Proceedings of the 18th International Conference on Agents and Artificial Intelligence, ICAART 2026 - Volume 2, Marbella, Spain, March 5-7, 2026, Seite 1380--1390. SCITEPRESS, (2026)