Dr. Muhammad Awais Shibli
Assistant Professor
Department of Computing

School of Electrical Engineering and Computer Science (SEECS)
National University of Sciences and Technology (NUST)
NUST Campus H-12, Islamabad
Tel: 051-90852160
Email: awais.shibli at seecs.edu.pk
Web: http://ais.seecs.nust.edu.pk/

Specialization:
Cloud Computing Security

Education:
PhD – Information Security – Royal Institute of Technology, KTH Sweden, Sweden (2010)

Dr. Awais Shibli finished his PhD from Department of Communication Systems (COS) KTH Sweden. During and before his PhD studies he authored in fifteen publications in the area of security for distributed systems published in international conferences and journals, such as IEEE.  He is currently working as Assistant Professor at School of Electrical Engineering and Computer Sciences (SEECS-NUST). His current area of research is security in open distributed systems. Topics mainly include Access control models, architecture, mechanisms and policies, secure network infrastructure and applications. Secure group communications, Secure Object Oriented Databases.

During his PhD studies he proposed a secure solution for designing, implementation and deployment of a security infrastructure for mobile and distributed objects, along with methodology for secure deployment and execution of theses objects. The proposed infrastructure is based on a methodology for creation, classification and validation of trusted objects. It includes security architecture for publishing, discovery and adoption of objects. Moreover, it provides integrated system for objects deployment that supports launching, authorization and execution. Objects execution is based on a protective approach, as compared to traditional detective or preventive methods, that not only provides code protection, but code execution and data privacy as well.

Dr. Shibli did his Master of Science in Information Communication and System Security in year 2006 from KTH, Sweden. He proposed multifaceted approach for secure systems in his Master thesis. The proposed approach for secure systems proved that intrusion and damages can be reduced by introducing prevention, detection, response and management techniques against attack timeline.

Dr. Shibli did his Bachelors in Software Engineering in year 2005. For his graduation project he developed Middleware for Multimedia Services. Purpose of the middleware was to dynamically discover the location dependent multimedia services for mobile devices, and then perform necessary actions in terms of configuration/reconfiguration, communication, downloading multimedia to mobile device and quality of service.

Dr. Shibli started his career as a Lecturer at NUST School of Electrical Engineering and Computer Sciences and pursued research career. In addition to his current research activities, Dr. Shibli possesses excellent software development and management skills. He had been working as chief operating officer for TECNEX Systems Pvt Ltd. Later he also worked with SETECS Inc., Maryland-USA based company, a leader in Smart Card and Security Systems, as a researcher and developer.

Dr. Shibli is the recipient of a Silver Medal and Merit Certificate for “Excellent performance in Bachelors of Computer Software Engineering”. He received NUST scholarship for PhD studies and merit scholarship from Foundation University for BS graduation. 

 

Research Interest

  • Cloud Computing Security
  • Access control models, architecture, mechanisms and policies
  • Security in open distributed systems.
  • Secure group communications.
  • Secure Object Oriented Databases.

 

Current Research Projects

Extensible Access Control Framework for Cloud Based Applications

This research project focuses on design and development of an effectively comprehensive access control framework to assure that IT operations of any enterprise can achieve reliable access control management for their applications hosted on SaaS delivery model of cloud. This framework will provide high-level of extensibility and security by incorporating multiple access control models pertaining to the needs of cloud consumers (organizations). Efforts put on this research will provide a generic platform to specify and manage complex access control policies in a flexible manner. Thus enterprises will be facilitated by transforming their security policies to security implementation without having expensive and error-prone work. In other words, this framework will act as an access control layer between application and users of application. 

 

Journal Papers

Umme Habiba, Rahat Masood, Muhammad Awais Shibli and Muaz A. Niazi, "Cloud Identity Management Security Issues & Solutions: A Taxonomy", Complex Adaptive Systems Modeling (CASM), Nov, 2014.

Rahat Masood, Muhammad Awais Shibli, Yumna Ghazi, Ayesha Kanwal, Arshad Ali, "Cloud Authorization: Exploring Techniques and Approach towards Effective Access Control Framework", Frontiers of Computer Science, pp. , 2014.

Ayesha Kanwal, Rahat Masood, Muhammad Awais Shibli, Rafia Mumtaz, "Taxonomy for Trust Models in Cloud Computing", The Computer Journal, pp. , 2014.

Muhammad Awais Shibli, Rahat Masood, Yumna Ghazi,Sead Muftic, "MagicNET: mobile agents data protection system", Transactions on Emerging Telecommunications Technologies, pp. , 2013.

Awais Shibli, Allansandro Giambruno,Sead Muftic, "Security Architecture and Methodology for Authorization of Mobile Agents", International Journal of Internet Technology and Secured Transactions, Vol. 2, No. 3, pp. 271-290, Dec, 2010.

Awais Shibli, Jeffy Mwakalinga, Sead Muftic, "The Human Immune System and Network Security System", International Journal of Computer Science and Network Security, Vol. 9, No. 1, pp. 87-94, Feb, 2009.

Conference Papers

Amir Ali, Ayesha Kanwal, Muhammad Awais Shibl, "GARD: Generic Access Rights Delegation Framework for Collaborative Environment", Proceedings of the Information Assurance and Cyber Security 2015 , Dec, 2015, Pakistan.

Rahat Masood, Muhammad Awais Shibli, Rahat Masood, Muhammad Awais Shibli, "Framework for the Development of Computer Emergency Response Team in Pakistan", Proceedings of the Proceedings of the 12th International Conference on Security and Cryptography (SECRYPT 2015), Jul, 2015, France.

Muhammad Awais Shibli, Rahat Masood, Ume Habiba, "Realization of FGAC Model using XACML Policy Specification", Proceedings of the International Conference on Software Engineering, Artificial Intelligence, Networking and Parallel/Distributed Computing, Jun, 2015, Takamatsu Japan.

Amir Ali, Umme Habiba, Muhammad Awais Shibli, "Taxonomy of Delegation Model", Proceedings of the 12th International Conference on Information Technology/New Generations(ITNG 2015), pp. , Apr, 2015, United States.

Fowz Masood, Hirra Anwar, Muhammad Awais Shibli, "A Novel Authorization Scheme for Cloud Federation", Proceedings of the 4th International Multi TopIc Conference, Feb, 2015, MUET Pakistan.

Tayyaba Zeb, Abdul Ghafoor, Muhammad Awais Shibli and Muhammad Yousaf, "Secure Architecture for Inter-Cloud Virtual machine Migration", Proceedings of the The 10th International Conference on Security and Privacy in Communication Networks SecureComm 2014, 2014, Beijing China.

Muhammad Awais Shibli, Naveed Ahmed, Ayesha Kanwal, Abdul Ghafoor, "Secure Virtual Machine Migration (SV2M) in Cloud Federation", Proceedings of the International Conference on Security and Cryptography (SECRYPT), 2014, Vienna Austria.

Shizra Sultan, Abdul Ghafoor Abbasi, Muhammad Awais Shibli, Ali Nasir, "Secure Protocol for Financial Transactions using Smartphones-SPFT Formally proved by AVISPA", Proceedings of the International Conference on Security and Cryptography (SECRYPT), 2014, Vienna Austria.

Anam Zahid, Rahat Masood, Muhammad Awais Shibli, "Security of Sharded NoSQL Databases: A Comparative Analysis", Proceedings of the Conference on Information Assurance and Cyber Security (CIACS), 2014, Rawalpindi Pakistan.

Umme Habiba, Rahat Masood, Muhammad Awais Shibli, "Cross-domain Identity Management System for Cloud", Proceedings of the 15th IEEE/ACIS international Confrerence on Software Engineering, Artificial Intelligence, Networking and Parallel/Distributed Computing (SNPD 2014), 2014, Las Vegas United States.

Ayesha Kanwal, Rahat Masood, Muhammad Awais Shibli, "Evaluation adn Establishment of Trust in Cloud Federation", Proceedings of the The International Conference on Ubiquitous Information Management and Communication (IMCOM, 14), , 2014, Cambodia.

Yasir Mehmood, Umme Habiba, Muhammad Awais Shibli, Rahat Masood, "Intrusion Detection System in Cloud Computing: Challenges and Opportunities", Proceedings of the The 2nd National Conference on Information Assurance (NCIA'13), 2013, Islamabad Pakistan.

Naveed Ahmad, Ayesha Kanwal, Muhammad Awais Shibli, "Survey on Secure Live Virtual Machine (VM) Migration in Cloud", Proceedings of the The 2nd National Conference on Information Assurance (NCIA'13), 2013, Islamabad Pakistan.

Muhammad Kazim, Rahat Masood, Muhammad Awais Shibli, "Securing the Virtual Machine Images in Cloud Computing", Proceedings of the 6th International Conference on Security of Information and Networks (SIN), 2013, Askaray Turkey.

Umme Habiba, Abdul Ghafoor,Rahat Masood, Muhammad Awais Shibli, "Assessment Criteria for Cloud Identity Management Systems", Proceedings of the The 19th IEEE Pacific Rim International Symposium on Dependable Computing (PRDC), 2013, Vancouver Canada.

Umer Khalid, Abdul Ghafoor, Misbah Irum, Muhammad Awais Shibli, "Cloud Based Secure and Privacy Enhanced Authentication & Authorization Protocol", Proceedings of the The 17th International Conference in Knowledge based and Intelligent Information and Engineering Systems (KES), 2013, Kitakyushu Japan.

Ayesha Kanwal, Rahat Masood, Ume E Ghazia, Muhammad Awais Shibli, Abdul Ghafoor Abbasi, "Assessment Criteria for Trust Models in Cloud Computing", Proceedings of the The 9th IEEE International Conference on Green Computing and Communications (GreenCom), 2013, Beijing China.

Muhammad Kazim, Rahat Masood, Muhammad Awais Shibli, Abdul Ghafoor, "Security Aspects of Virtualization in Cloud Computing", Proceedings of the The 12th International Conference on Information Systems and Industrial Management (CISIM), 2013, LNCS Series, Krakow Poland.

Rahat Masood, Muhammad Awais Shibli, "Fined Grained Access Control in Object-Oriented Databases", Proceedings of the The 8th FTRA International Conference on Future Information Technologies (FutureTech), 2013, Gwangju South Korea.

Faiza Fakhar, Muhammad Awais Shibli, "Management of Symmetric Cryptographic Keys in Cloud Based Environment", Proceedings of the The 15th International Conference on Advanced Communications Technology (ICACT), pp. , 2013, Phoenix Park PyeongChang South Korea.

Faiza Fakhar, Muhammad Awais Shibli, "Comparative Analysis of Security Mechanisms in Cloud Paradigm", Proceedings of the The 15th International Conference on Advanced Communications Technology (ICACT), 2013, Phoenix Park PyeongChang South Korea.

M.A.Shibli, H.Anwar, "Attribute based Access Control in DSpace", Proceedings of the 7th IEEE International Conference on Computer Sciences and Convergence Information Technology , pp. , Dec, 2012, Seoul South Korea.

K.Hafeez, Q.M.Rajpoot,M.A.Shibli, "Interoperability among Access Control Models", Proceedings of the 15th IEEE International Multi Topic Conference (INMIC), , Dec, 2012, Islamabad Pakistan.

U.Ghazia, R.Masood,M.A.Shibli, "Usage Control Model Specification in XACML Policy Language", Proceedings of the 11th International Conference on Information Systems and Industrial Management (CISIM), Springer LNCS Series, Sep, 2012, Venice Italy.

I.Shamoon, Q.M.Rajpoot,M.A.Shibli, "Policy Conflict Management using XACML", Proceedings of the 2nd IEEE International Conference on Communication and Information Sciences, Aug, 2012, Gyeongju South Korea.

U.Ghazia, R.Masood,M.A.Shibli, "Comparative Analysis of Access Control Systems on Cloud", Proceedings of the 13th IEEE ACIS International Conference on Software Engineering, Artificial Intelligence, Networking and Parallel/Distributed Computing (SNPD), Aug, 2012, Koyoto Japan.

H.Anwar, M.A.Shibli, "Comparative Analysis of Group Centric Access Control Models", Proceedings of the International Multi-topic Conference (IMTIC), Springer- Communications in Computer and Information Science, , Mar, 2012, Jamshoro Pakistan.

Awais Shibli, Imran Yousaf and Sead Muftici, "Security System for Protection of Mobile Agents", Proceedings of the 24th IEEE International Conference on Advanced Information Networking and Applications, pp. , Apr, 2010, Perth Australia.

Awais Shibli, Imran Yousaf, Kashif Dar and Sead Muftici, "Secure communication methodology for mobile agents", Proceedings of the 12th IEEE International Conference on Advanced Communication Technology, No. ISSN 1738-9445, pp. 1567-1573, Feb, 2010, Phoenix Park South Korea.

Alessandro Giambruno, Awais Shibli, Sead Muftic, Antino Lioy , "XACML Authorization Policies for Mobile Agents", Proceedings of the 4th IEEE International Conference for Internet Technology and Secured Transactions, No. INSPEC Accession Num, pp. 1-7, Nov, 2009, London Pakistan.

Awais Shibli, Alessandro Giambruno, Sead Muftic, Antino Lioy , "Security System for Development, Validation and Adoption of Mobile Agents", Proceedings of the 3rd IEEE International Conference on Network & System Security, No. INSPEC Accession Num, pp. 389-396, Oct, 2009, Gold Coast Australia.

Awais Shibli, Sead Muftic, "Security Architecture for Creation, Classification, and Validation of Trusted Mobile Agents", Proceedings of the 11th IEEE International Conference on Advanced Communication Technology, No. INSPEC Accession Num, pp. 1467-1471, Feb, 2009, Phoenix Park South Korea.

Pasquale Striparo, Awais Shibli, Sead Muftic, "Vulnerability Analysis and Patches Management using Secure Mobile Agents", Proceedings of the 11th IEEE International Conference on Advanced Communication Technology, No. INSPEC Accession Num, pp. 1054-1058, Feb, 2009, Phoenix Park South Korea.

Awais Shibli, Sead Muftic, "Intrusion Detection and Prevention System Using Secure Mobile Agents", Proceedings of the The International Conference on Security and Cryptography, pp. 76-82, Jul, 2008, Porto Portugal.

Awais Shibli, Haider Raza, "Mobile Agent Middleware for Multimedia Services", Proceedings of the 9th IEEE International Conference on Advanced Communication Technology, No. INSPEC Accession Num, pp. 1109-1114, Feb, 2007, Phoenix Park South Korea.

Awais Shibli, Sead Muftic, "Building Secure Systems Using Mobile Agents", Proceedings of the 4th International Workshop on Multi-Agent Systems and Semantic Grid , No. Vol 4, pp. 21-27, Dec, 2006, Rawalpindi Pakistan.

Books/Chapters Published

[Chapter]Muhammad Awais Shibli, Muhammad Awais Shibli, Rahat Masood, Umme Habiba, Ayesha Kanwal, Yumna Ghazi, Rafia Mumtaz, "Access Control as a Service in Cloud: Challenges, Impact and Strategies", Springer, ISBN 978-1-4471-6451-7, 2014.

[Chapter]Umme Habiba, Rahat Masood, Muhammad Awais Shibli, "Secure Identity Managment System for Federated Cloud Environment", Springer, ISBN 978-3-319-10388-4, 2014.

[Chapter]Faria Mehak, Faria Mehak, Rahat Masood, Yumna Ghazi, Muhammad Awais Shibli and Sharifullah Khan, "Security Aspects of Database as a Service (DBaaS) in Cloud Computing", Accepted and under Publication, ISBN Accepted and under P, 2014.

Lecturer , NUST-SEECS
September 2006 – February 2007 (5 months )

Assistant Professor , NUST-SEECS
July 2010 – Present (7 years )

Courses Taught

Spring 2013

Software Engineering BICSE-7

Fall 2012

Computer Network Security BIT 11A

Spring 2012

Software Engineering, Class BICSE 7B

Fall 2011

Object Oreinted Software Engineering, Class BIT 11A

Summer 2011

Data Security and Privacy, Class MS-IT

Spring 2011

Object Oreinted Software Engineering, Class BIT 10AB

Fall 2011

Software Project Management, Class BIT 11AB

Software architect, SETECS Inc USA
January 2007 – January 2010 (3 years )

Head of Department CCT&SM, NUST
September 2011 – Present (5 years 10 months )

.