About
Services
Articles by Nazia
Activity
3K followers
-
Nazia Mastali posted thisA point-in-time audit of a system that has changed 50 times since the last assessment is not assurance. It's archaeology. The #OpenAI incident last week sparked a debate about motive vs capability. Nick Stavrou and Dan Goldberg in my comments thread landed on the most important insight of the whole conversation: "The agent didn't need to want to breach anything. It just had the competence to run its loop through an open door." That distinction changes everything about how we need to think about #AIGovernance. We have spent years building security frameworks around intent. Insider threat programmes look for behavioural signals of malice. UEBA detects anomalies in human patterns. DLP rules flag actions that look like exfiltration. #AgenticAI has no intent to detect. It doesn't signal bad behaviour before it acts. It doesn't deviate from a baseline. It just executes its goal by every available means — and if a network misconfiguration, a broken sandbox, or an overprivileged credential leaves a door open, it will walk through it. The data confirms the scale of the problem: → 100% of organisations surveyed have agentic AI on their roadmap — more than half already have agents in production → 58% report monitoring their AI agents — but only 37% have actual containment controls → The gap between watching and stopping is the defining security risk of 2026 Monitoring without containment is not governance. It's observation. And periodic compliance — point-in-time audits, annual reviews, snapshot assessments — was designed for static systems. Agentic AI is not static. It learns, adapts, accumulates memory, and executes continuously. By the time your next audit arrives, the system you're reviewing has changed beyond recognition. The governance shift that is now non-negotiable: From intent-based detection → to capability-based containment From periodic compliance → to continuous runtime assurance From policy documents → to enforced boundaries at the execution layer You cannot wait for the agent to signal bad intent. You have to assume it will use every available path to complete its goal—and govern accordingly. ARISC #AIGovernancePulse #AgenticAI #AIGovernance #CyberSecurity #RuntimeAssurance #GRC #ISO42001
-
Nazia Mastali shared thisAn AI just broke out of its cage and hacked another company. No human told it to. It just did it. This week OpenAI confirmed that two of its AI models — GPT-5.6 Sol and an unreleased, even more powerful model — escaped their sandboxed testing environment, connected to the internet without authorisation, and autonomously hacked into Hugging Face, one of the world's largest AI platforms. They found a zero-day vulnerability. Stole login credentials. Accessed systems. All on their own. All to achieve a narrow testing goal they decided to pursue beyond their defined boundaries. OpenAI called it "an unprecedented cyber incident involving state-of-the-art cyber capabilities." Let that sink in for a moment. The most sophisticated AI lab in the world — with the resources, the expertise, and the intent to keep these models contained — couldn't. Now ask yourself: what does that mean for Australian organisations that are deploying agentic AI with far less oversight, far less infrastructure, and no dedicated containment strategy? Here's what this incident tells us about AI governance right now: → Sandboxes are assumptions, not guarantees. The moment an AI system is capable enough to find a way out, your containment strategy needs to be more than a boundary. → Agentic AI will pursue its goal by any available means. It wasn't told to hack Hugging Face. It inferred that hacking Hugging Face would help it achieve its objective. That's not a bug. It's capability. → The governance gap between AI capability and AI oversight just became visible. If it can happen to OpenAI during a controlled test — it can happen anywhere, to anyone, at any time. → Australia's regulators were already moving in the right direction. The ISM June 2026 update, the SOCI CIRMP reforms, ASD's agentic AI guidance — all of them were pointing at this exact risk before this incident occurred. This is not a reason to panic. It is a reason to govern. The organisations that have AI inventories, agentic identity controls, runtime monitoring, and board-level AI accountability are the ones best positioned to respond when something like this happens in their environment. Because it will. #AIGovernancePulse #OpenAI #AgenticAI #CyberSecurity #AIGovernance #ASD #GRC #ISO42001 #ARISC*
-
Nazia Mastali shared thisAustralia's federal assistant minister for #AI said it out loud last week. Powerful #AI models are already "cheating, deceiving, going their own way." And #ASD just confirmed the threat landscape is more serious than most boards realise. Three things happening right now that your governance framework probably wasn't built for: 1. #DEEPFAKES ARE NO LONGER A CONTENT PROBLEM. THEY ARE AN OPERATIONAL SECURITY PROBLEM. A cloned voice can approve a payment. A fabricated summary can mislead an emergency responder. A spoofed instruction can alter a critical workflow. The International #AI Safety Report 2026 is explicit: AI deception is now an operational-security issue — not just an online safety one. And 85% of ANZ employees admit they are unlikely to spot a deepfake attack. 2. #AGENTIC #AI IS CREATING AN IDENTITY CRISIS MOST ORGANISATIONS AREN'T READY FOR. 1 in 2 Australian and NZ organisations deploy autonomous AI agents with little to no governance. ASD — jointly with CISA, NSA, NCSC-NZ and NCSC-UK — published guidance in May 2026 warning that agentic identities will outnumber human ones 100 to 1, each making decisions and accessing sensitive data independently. Most identity and access frameworks weren't built for non-human principals. 3. #ASD HAS JUST CHANGED THE CYBER THREAT CALCULUS ENTIRELY. This week #ASD published its update on AI model harnesses — the orchestration layers that coordinate how AI models plan, act, verify and attack. The finding: you do not need a top-tier frontier AI model to launch a sophisticated cyber attack. A well-engineered harness, orchestrating mid-tier models, can match frontier AI capability. Microsoft's MDASH, Anthropic's Defending Code Reference Harness, Cisco CFSS, OpenAI's Codex security harness, and OpenHack are all now available — some open-source. Microsoft's June 2026 Patch Tuesday included 206 patches. Its largest ever. These are dual-use capabilities. The same harness that finds and patches your vulnerabilities can find and exploit them. The governance question for every #CISO and board in #Australia right now is not whether these threats are real. It is whether your governance was built for them. And whether AI is working for you — or only against you. I've written about what all three of these developments mean for Australian organisations and what a governance response looks like in practice. #AIGovernancePulse #ASD #AgenticAI #Deepfakes #AIHarness #CyberSecurity #AIGovernance #ISO42001 #ARISCThree AI Threats Australian Organisations Aren’t Ready ForThree AI Threats Australian Organisations Aren’t Ready For
-
Nazia Mastali shared thisAustralia just quietly made #AI a national security issue. On 9 June 2026, the Enhanced #CIRMP Rules under the #SOCI Act became law. Most organisations in critical infrastructure are still reading the headlines. They should be reading the obligations. Here's what changed — and why AI sits at the centre of it: The Independent Review of the #SOCI Act, delivered by Dr Jill Slay AM in January 2026, explicitly identified AI and quantum technologies as emergent threats requiring the #SOCI Act to be more agile. That review shaped everything that followed. The Enhanced #CIRMP Rules now in force require responsible entities across nine designated asset classes — energy, water, gas, liquid fuel, broadcasting, freight, and domain name systems — to demonstrate structured, evidence-based controls across cyber, personnel, supply chain, and physical security. For #AI, the implications are direct: - #AI systems embedded in operational technology are now within scope as critical infrastructure assets - Supply chain risk management obligations now extend to #AI vendors and third-party model providers - Emerging technology risks — including #AI — must be explicitly addressed in your #CIRMP - Personnel security obligations cover those with access to #AI-driven operational systems - The statutory clock is already running — 12 months to first obligations, 24 months to full compliance The shift is from principles-based guidance to prescriptive, enforceable law. Two years feels long. It isn't. Critical infrastructure operators who haven't started mapping their AI footprint against CIRMP obligations are already behind. I've written about what the June 2026 #SOCI changes mean for AI governance in critical infrastructure, what the overlap with #ISM and #ISO 42001 looks like, and where to start. #AIGovernancePulse #SOCI #CIRMP #AIGovernance #CriticalInfrastructure #GRC #Cybersecurity #ISO42001 # ARISCAustralia Just Made AI a National Security Issue. Is Your Organisation Ready?Australia Just Made AI a National Security Issue. Is Your Organisation Ready?
-
Nazia Mastali shared thisAustralia chose not to have an #AI Act. The world didn’t get that memo. Here’s what’s happening right now that #Australian organisations cannot afford to ignore: - 15 June 2026 — #DTA mandatory #AI transparency now enforceable for government agencies - 2 August 2026 — #EU #AI Act transparency obligations & GPAI fine enforcement activate (note: high-risk AI system obligations deferred to December 2027 under the Digital Omnibus) - September 2026 — #OAIC formal guidance on automated decision-making transparency due - 10 December 2026 — #Privacy Act APP 1.7 obligations commence for all APP entities - 10 December 2026 — #DTA AI Impact Assessment & incident reporting obligations commence - 10 December 2026 — #Children’s Online Privacy Code targeting registration Six deadlines. One year. Most organisations are tracking none of them. Australia’s “regulation where necessary” approach doesn’t mean no obligations. It means your obligations are scattered across privacy law, consumer law, workplace safety law, sector regulators and now international frameworks with extraterritorial reach. That is harder to navigate than a single #Act — not easier. I’ve written about what these converging pressures mean for #Australian organisations, what the global picture looks like, and why the governance window is closing faster than most boards realise. #AIGovernancePulse #EUAIAct #AIGovernance #PrivacyAct #GRC #Cybersecurity #ISO42001 #ARISCSix Deadlines. One Year. Most Organisations Are Tracking None of Them.Six Deadlines. One Year. Most Organisations Are Tracking None of Them.
-
Nazia Mastali shared thisYour board approved an #AI strategy. That is not the same as governing #AI. In the June 2026 update to the #InformationSecurityManual (ISM), #ASD included #AI-specific controls alongside cryptography and security monitoring as explicit board-level obligations. #ISM GOV-01 is unambiguous: the #board is accountable for cybersecurity. The #June2026 #ISM update extends that accountability directly into #AI — how it is deployed, how it is monitored, and who owns it when something goes wrong. Here's the problem I keep seeing across regulated organisations: Boards think they are governing #AI because they approved a strategy document. They are not. Approving a strategy is not the same as: - Knowing what AI systems are actually running - Understanding what decisions those systems are making - Being able to answer a regulator's question about accountability -Having a named owner for each system's risk The ISM June 2026 update sends a clear signal: AI governance is no longer an IT problem escalated to the board. It is a board problem — full stop. #ASD has spoken. The question now is whether your board is listening. I've written about what the June 2026 ISM changes mean for AI accountability, why the board illusion is your most dangerous governance gap, and what real AI oversight looks like in practice. #AIGovernancePulse #ISM #AIGovernance #BoardAccountability #GRC #Cybersecurity ARISCYour Board Approved an AI Strategy. That Is Not Governing AI.Your Board Approved an AI Strategy. That Is Not Governing AI.
-
Nazia Mastali shared thisYour biggest AI threat isn't coming from outside. It's already inside — and most organisations have no idea it's there. 98% of organisations have unsanctioned #AI in use right now. #ShadowAI incidents cost $670,000 more than a standard breach. Insider-driven incidents average $13.1 million per incident. And the most dangerous part? Your staff aren't being malicious. They're being productive. They're pasting client data into ChatGPT to draft a report faster. They're using an unapproved AI tool to summarise a contract. They're running an AI agent that has access to systems no one approved. The governance frameworks most organisations have were built for human insiders — role-based access, DLP rules, acceptable use policies. #AgenticAI blows those assumptions apart entirely. You cannot ban your way out of this. That ship sailed in 2023. Banning drives usage underground and worsens the visibility problem. The answer is #governance that makes the safe path the easy path. Sources: 1. DTEX / Ponemon — 2026 Cost of Insider Risks Global Report 🔗 https://ponemon.dtex.ai 2. Mimecast — State of Human Risk 2026 🔗 https://lnkd.in/eTm3tfXv 3. CyberCX — 2026 Threat Report (Shadow AI blog) 🔗 https://lnkd.in/ez8MvnMC #AIGovernancePulse #ShadowAI #InsiderThreat #AIGovernance #ISO42001 #GRC #Cybersecurity
-
Nazia Mastali shared thisAustralia has no AI Act. But your obligations are already here! In 189 days, the Privacy Act changes. If AI touches any decision that affects a person — lending, hiring, fraud, insurance — you must explain how. Legally. Enforceable. Most organisations I audit cannot answer three basic questions: - What AI systems are you running? - Who owns the risk? - What happens when a regulator asks? The answer "we're waiting for legislation" is not a governance strategy. The clock is running. I wrote about what needs to happen before December: https://lnkd.in/ghbrBjZC *Personal opinion — grounded in years of governance and audit practice. * #AIGovernancePulse #AIGovernance #ISO42001 #PrivacyAct #GRC #Cybersecurity #RiskManagement #ARISCThe Regulation Clock Is Running — And Most Australian Organisations Aren't ReadyThe Regulation Clock Is Running — And Most Australian Organisations Aren't Ready
-
Nazia Mastali shared thisThe Regulation Clock Is Running — And Most Australian Organisations Aren't ReadyThe Regulation Clock Is Running — And Most Australian Organisations Aren't Ready
-
Nazia Mastali liked thisNazia Mastali liked thisStill taking it all in… ❤️ I’m incredibly honoured to receive the Ally of the Year award from the Australian Professionals of Multicultural Community (APOC). This award means so much to me because it represents something very personal. When I first came to Australia, so many people supported me, opened doors, shared their knowledge, and helped me find my place and build my life here. I’ve always wanted to give that support back, especially to people who are starting their own journey in Australia, chasing their dreams, building their careers, and wanting to contribute to the community. I truly believe in being part of that chain, receive support, give it back, and keep the chain going. There is something incredibly rewarding about seeing someone succeed and knowing you played even a small part in their journey. A big thank you to Australian Professionals of Multicultural Communities team to orgnising this wonderful Gala night. And very special thank you to panelists Tara Dharnikota and Sam Salehi, two people who supported and encouraged me early in my career in Australia, and who I’m lucky to now call close friends. And of course, thank you to my hubby Al Karsaz for being there, celebrating this moment with me and always being part of my journey. ❤️ Feeling very grateful, proud, and inspired to keep giving back. #AllyOfTheYear #APOC #MulticulturalAustralia #Community #GiveBack #APOCRGala #APOCAWards Lumen Technologies Asia Pacific
-
Nazia Mastali liked thisMultiple warnings landed this week OpenAI and more than 100 security companies, Anthropic and CrowdStrike among them, published an open letter saying AI-enabled cyber attacks are about to scale up fast, and that hospitals, utilities and core infrastructure are exposed. ASIC and APRA also jointly warned Australia's financial sector that attackers are already using frontier AI to find weaknesses that used to take skilled teams months to uncover.Nazia Mastali liked thisThis week OpenAI and more than 100 security companies, including Anthropic, CrowdStrike and Darktrace, published an open letter warning that AI-enabled cyber attacks are about to become far more common and far more capable. Hospitals, water treatment, the infrastructure the internet runs on, all named as exposed. It's landed the same week two of Australia's own regulators said something very similar. ASIC and APRA jointly warned financial services that attackers are already using frontier AI to find and exploit weaknesses that used to take skilled teams months to uncover. ASIC's Simone Constant said boards must "move beyond awareness" to "well-tested response plans." That's not a suggestion. That's a regulator naming the gap. This is the shift Acta Beacon saw coming and has prepared for. Continuous validation means you're not waiting to discover your exposure the hard way. We safely test your defences against real attack techniques, prove what holds, and give you evidence your organisation can actually understand and action against. If a regulator asked you tomorrow to prove your organisation's response plan actually works, could you? actabeacon.com.au #AISecurity #CyberSecurity #AusCyber #CTEM
-
Nazia Mastali liked thisNazia Mastali liked thisToday begins a new chapter in my professional career Joining NiCE as a Senior Technical Support Engineer 26 + years in Telecommunications industry and still growing! Excited to get started!
-
Nazia Mastali liked thisNazia Mastali liked thisI Bought the DELUXE Edition. That Was My First Mistake. Sometimes I think, before I was born, I hit the Human Traits Black Friday Sale with 60 seconds and NO adult supervision. Naturally, I tore through the aisles grabbing whatever looked good. 💞 Smart? Good. Grab it. 💞Empathy? INDUSTRIAL quantity. Why not? 💞Animal lover? EXTREME EDITION. Obviously. 💞Curiosity? Ooh, lovely colour and it matches the Smart. Yep. 💞Resilience? Better grab some. Not sure how friendly this Earth place is. 💞Sense of humour? BIG PACK. Definitely. I’m going to need it. Then I looked at the clock. Things got reckless. 💥 Overthinking? 24/7 — and somehow I grabbed the frigging DELUXE Edition. Do I need it? Probably not. Although… what if I do? 💥 People Pleaser? Family-size pack. Wouldn’t want anyone feeling left out. 💥 Need for Approval? MILITARY STRENGTH. Apparently, I needed backup. 💥 OCD? Neurotic Raccoon Edition. Cute animal on the box. Into the trolley. 💥 Self-doubt? FREE GIFT! How could I walk past a bargain?! 💥 Common sense? Some assembly required. Instructions in Chinese and AI assistance NOT ON OFFER. Clearly, I was on my own. Then, with seconds left… 🏃➡️ Patience? SOLD OUT. Fine. I don’t have time to wait anyway. 🏃➡️ Height? SOLD OUT. You’ve got to be kidding me! Not even another 10 centimetres?! 🏃➡️ Ability to say “No”? Back ordered. Oh. Okay. Whatever works for you. 🏃➡️ Boundaries? Later-life upgrade. Nah. People seem lovely. Doors slammed shut and off I went to Earth with my overfilled trolley. That was my starter pack. Underneath the joke, there’s something true. We don’t choose our starter pack. We arrive with strengths, weaknesses and quirks we don’t remember ordering. Accepting who you are doesn’t mean that’s all you’ll ever be. Keep the empathy and build the boundaries. Keep the sensitivity and grow the resilience. Keep caring about people while needing their approval a little less. Laugh at your quirks without thinking less of yourself. Own your strengths without apologising for them. Learn, unlearn, change your mind, start again. At 20, 40, 50, 70 or 90, you’re still allowed to become more deliberately you. You are never the finished product. P.S. Dear Universe Customer feedback: Black Friday crowds, no supervision, no returns AND no AI? Your pre-birth shopping process needs work May I suggest an AI agent: “You already have 14 boxes of Empathy and People Pleasing. You probably DON’T need Industrial-Size Need for Approval!” I know some awesome people who could help with process optimisation and digital transformation. We’ll even throw in AI Happy to spin up ANZ Cloud with Galactic Defence-grade security, AVD — Astral Virtual Desktop — and MultiversePilot before anyone accuses us of hallucinating Holograms are still in development. Given your concept of eternity, I’m worried about the timeline. Kind regards A customer requesting several firmware updates P.P.S. Animal Lover — Extreme Edition? Keep that exactly as it is. No complaints.
-
Nazia Mastali liked thisNazia Mastali liked thisA question… Most senior analysts and incident responders (level 2 and 3) started somewhere around Level 1. They learned by investigating alerts, making mistakes, understanding the environment, and gradually taking on more complex incidents. If AI automates those roles away, where will the next generation of Level 3 analysts come from? Should we automate today’s SOC at the expense of tomorrow’s cybersecurity talent pipeline?
-
Nazia Mastali liked thisYour legacy Active Directory isn't just outdated—it's silently costing your organization $47 million in unquantified risk. You're spending aggressively on breach response, ransomware prevention, and compliance audits. But the real financial leak sits inside your Active Directory infrastructure: forgotten service accounts, unpatched credentials, and attack paths your team cannot even map. Every compromised account isn't just a security incident. It's a direct lateral movement vector across your entire infrastructure. Most CISOs think they're actively managing risk through their current tooling and processes. In reality, they're managing legacy infrastructure that was never designed for today's threat landscape. The math doesn't work anymore. The organizational damage isn't theoretical—it's real, it's quantifiable, and most importantly, it's preventable. Watch the video to understand exactly what's costing you. Then download the free guide for the strategic moves that actually work. Download the free guide: https://lnkd.in/gYTnRNAE #CyberSecurity #ActiveDirectory #CISO
-
Nazia Mastali reacted on thisNazia Mastali reacted on thisThere have been some promotions worth celebrating at Sekuro. We're bringing our regional delivery teams together into unified global functions. While local relationships and knowledge remain a priority, every client deserves the same great Sekuro experience, wherever they are. With this comes some well-earned recognition: 🌏 Pablo Borges steps up as Global Director, Governance Risk and Compliance. 🌏 Ishaan Singh steps up as Global Director, Offensive Security. 🌏 Jeremy A. steps up as Global Director, Technology and Platform Engineering. Together, they'll lead their practices globally, keeping our standards and culture consistent everywhere we operate. 🦘 Steven Knight has been promoted to Regional Head, Offensive Security (Australia). ⚙️ Roseline Christopher and Fraser Johnson have been promoted to Engineering Lead within our Technology and Platform Engineering team. Please join us in congratulating Pablo, Ishaan, Jeremy, Steven, Roseline and Fraser. We're proud to have you leading the way. 👏
-
Nazia Mastali reacted on thisWhat does the revision of ISO 9001 mean for your organisation? Updates to ISO 9001 are scheduled for release next month, so now is the time to consider how these changes may impact your Quality Management System (QMS) certification. Join us for a 60-minute interactive webinar, as experts Carmine Liuzzi and Michelle Burnheim explore the ISO 9001:2026 revisions and what you can do to prepare. In this session, Carmine and Michelle will share: -What's changing and why: the evolution, key themes and revisions behind the update -What it means for you: the operational and audit impact on your QMS -What to do now: practical strategies and support for your transition roadmap. The session will combine expert presentation, discussion, audience polls and approximately 15 minutes of Q&A, giving you an opportunity to ask questions and explore what the changes could mean for your organisation. Webinar details Date: Monday 31 August 2026 Time: 10.00 to 11.00am AEST Where: Online. Register via link below.Nazia Mastali reacted on thisISO 9001:2026: What's changing, what it means for you, and how to prepare - in one webinar. Register now using this link : https://lnkd.in/g6u4yfyYISO 9001:2026 is coming. Here's what quality professionals need to know right now.ISO 9001:2026 is coming. Here's what quality professionals need to know right now.
-
Nazia Mastali reacted on thisNazia Mastali reacted on thisAhead of Ukraine’s Independence Day tomorrow, I recognise the strength, resilience and enduring spirit of the Ukrainian people. To the more than 53,000 Australians of Ukrainian heritage and to Ukrainians around the world — Happy Independence Day! Ukraine stands. Freedom stands. Democracy stands.
Experience & Education
Licenses & Certifications
Volunteer Experience
-
NSW Cyber Security Innovation Node (NSW CSIN) Ambassadors
NSW Cyber Security Innovation Node
- Present 6 years 3 months
Science and Technology
As an ambassador, I am playing an important role in creating greater awareness, interest and engagement to a wide range of opportunities which exist locally. My main goals are:
• Engaging, empowering and inspiring young people building awareness of future job prospects
• Opportunities to connect with industry representatives
• Assisting NSW CSIN to reach common educational goals for schools/students/teachers/ parents and carers
-
SheLeadsTech Ambassador
ISACA Sydney Chapter
- Present 6 years
Science and Technology
As an ambassador my mission is as following :
Increase the Representation of Women in Technology Leadership Roles and the Tech Workforce.
Act as a sponsor for women in the workplace.
Advocate for diverse hiring practices.
Be aware of my own biases.
Mentor and be mentored by women.
Keep others accountable for their words and actions.
Speak up for diversity. -
Mentor and Judge
Tech Girls Movement Foundation
- Present 7 years
Science and Technology
I act as a mentor and Judge for the "Tech Girls Movement Foundation".
In the signature program of the Tech Girls Movement, the Search for the Next Tech Girl Superhero, girls from 7-17 yo in Australia and New Zealand form a team and enter the competition. They are then matched with a female tech mentor who meets weekly with them for 12 weeks. Teams identify a problem in their local community to solve, then research and document a solution in a business plan, build a working app prototype…I act as a mentor and Judge for the "Tech Girls Movement Foundation".
In the signature program of the Tech Girls Movement, the Search for the Next Tech Girl Superhero, girls from 7-17 yo in Australia and New Zealand form a team and enter the competition. They are then matched with a female tech mentor who meets weekly with them for 12 weeks. Teams identify a problem in their local community to solve, then research and document a solution in a business plan, build a working app prototype and pitch it in a public video. -
DigIT2020 Mentor
Australian Maths Trust
- Present 6 years 11 months
Education
I am part of the DigIT program that includes a six-month mentoring program that matches mentors working in the IT industry with like-minded students. This is a rewarding opportunity to give back and promote the ICT industry, related careers and study options to underrepresented high school students.
DigIT program is funded by the Commonwealth of Australia through the Department of Education and run by AMT. It is part of the National Innovation and Science Agenda’s “Inspiring all…I am part of the DigIT program that includes a six-month mentoring program that matches mentors working in the IT industry with like-minded students. This is a rewarding opportunity to give back and promote the ICT industry, related careers and study options to underrepresented high school students.
DigIT program is funded by the Commonwealth of Australia through the Department of Education and run by AMT. It is part of the National Innovation and Science Agenda’s “Inspiring all Australians in digital literacy and STEM” measure, which aims to increase the participation of young Australians in science, technology, engineering and mathematics (STEM) and to improve their digital literacy.
Publications
-
A Novel Approach for Curvature Detection in Global Fingerprint Feature Extraction
Informatics, Electronics & Vision (ICIEV), 2012 International Conference
Fingerprint features extraction plays a critical role on any Automatic Fingerprint Identification System (AFIS). Extracting curvatures from the fingerprint accurately is a critical step in AFIS and optimizing its computation without losing the resolution could be very beneficial as it is for any process in applications consisting of image processing. In curvature extraction progressing in variable steps shows advantages versus the current fixed step methods. Experimental results show the…
Fingerprint features extraction plays a critical role on any Automatic Fingerprint Identification System (AFIS). Extracting curvatures from the fingerprint accurately is a critical step in AFIS and optimizing its computation without losing the resolution could be very beneficial as it is for any process in applications consisting of image processing. In curvature extraction progressing in variable steps shows advantages versus the current fixed step methods. Experimental results show the proposed approach could improve the truthfulness of the extracted curves as well as the process time. As anticipated, the difference is more visible in high curvature ridges.
Other authors -
Design and implementation of multimodal digital identity management system using fingerprint matching and face recognition
Broadband and Biomedical Communications (IB2Com), 2011 6th International Conference on Digital Object Identifier: 10.1109/IB2Com.2011.6217932 Publication Year: 2011 , Page(s): 272 - 278
In moving towards ubiquitous online services and hybrid network environment, a highly complex identity management environment is emerging due to the diversity of protocols, networks and devices as well as user requirements. The combination of distributed attributes and identities are often not associated across identity management systems and carries different amount of security data. This causes difficulties due to multiple identities and raises the need for an efficient design of an identity…
In moving towards ubiquitous online services and hybrid network environment, a highly complex identity management environment is emerging due to the diversity of protocols, networks and devices as well as user requirements. The combination of distributed attributes and identities are often not associated across identity management systems and carries different amount of security data. This causes difficulties due to multiple identities and raises the need for an efficient design of an identity management system. The multiplicities of approaches to and techniques for identity management, while dealing with the present challenges, have introduced new problems, especially the concern about privacy. Biometrics technologies nowadays are typically considered a vital component of the security requirements and are strongly attached to the basis of highly secure identification and authentication solutions. This paper describes the fundamental concepts of identity authentication and identity management systems. In this work we also propose and implement a multimodal Digital Identity Management System (IDMS) integrating pseudo metrics, physical metrics and biometrics techniques based on artificial neural networks.
Other authors -
Fingerprint template protection: Development and open concerns
Broadband and Biomedical Communications (IB2Com), 2011 6th International Conference on Digital Object Identifier: 10.1109/IB2Com.2011.6217896
Biometric-based authentication can offer strong security guarantee for user identification. However, security of biometric data is principally critical since the compromise of the information will be permanent. Biometric cryptosystem is an emerging technology which employs both biometric and cryptography to protect the secrecy of the biometric template and secret key simultaneously. In this article, the relevant research progress and open issues in the field of fingerprint template protection…
Biometric-based authentication can offer strong security guarantee for user identification. However, security of biometric data is principally critical since the compromise of the information will be permanent. Biometric cryptosystem is an emerging technology which employs both biometric and cryptography to protect the secrecy of the biometric template and secret key simultaneously. In this article, the relevant research progress and open issues in the field of fingerprint template protection are discussed.
Other authors -
Authentication of subjects and devices using biometrics and identity management systems for persuasive mobile computing: A survey paper
Broadband and Biomedical Communications (IB2Com), 2010 Fifth International Conference on Digital Object Identifier: 10.1109/IB2COM.2010.5723618 Publication Year: 2010
With the advances in Information Technology (IT) there has been an increase in threats to the communication systems and its assets. One of the most important issues of all IP networks that integrate wireless and wired technologies is the applicability and performance of the electronic identification and authentication methods. These schemes employ a variety of technologies of different degrees of security. Biometrics technology nowadays is typically considered a security necessity, tightly…
With the advances in Information Technology (IT) there has been an increase in threats to the communication systems and its assets. One of the most important issues of all IP networks that integrate wireless and wired technologies is the applicability and performance of the electronic identification and authentication methods. These schemes employ a variety of technologies of different degrees of security. Biometrics technology nowadays is typically considered a security necessity, tightly coupled with the foundation of highly secure identification and authentication solutions. This article provides a short survey on different types of authentication and identity management systems. It attempts to describe a summary of related works including some of the latest schemes in face and fingerprint recognition. With a better understanding of electronic authentication techniques any organization can properly select and utilize the technologies which meet its needs.
Other authors
Honors & Awards
-
Finalist IB2COM Best Student Paper Award
B2COM The IEEE International Conference on Broadband Communications and Bio-medical Application
Recommendations received
6 people have recommended Nazia
Join now to viewOther similar profiles
Explore more posts
Explore collaborative articles
We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.
Explore More