Defensive security
Zero trust, threat hunting, detection and governance frameworks that hold up under pressure, mapped to MITRE ATLAS and NIST CSF 2.0.
Papers
Post-Quantum Security Framework for Model Context Protocol Using ContextGuard
Sunil Gentyala, P. Krishna Sunil, Vamshi Lande, Akhila Kasturi, Suresh Kumar Darisi, Ruhisulthana Shaik
A Zero-Trust Supply Chain Security Framework for Model Context Protocol-Based AI Systems
Sunil Gentyala, Ch. Srinivas, Raghu Dhumpati
A Unified Mathematical Framework for Secure Multi-Agent Large Language Model Pipelines (TRACE-MAS)
Sunil Gentyala, Y. Geetha Reddy, Manasa Pendyala, Vishnu Gatla, Sundarigari Manoj, Ruhisulthana Shaik
CyberFuse-CI: Adversarially Resilient Vulnerability Detection Through Heterogeneous Multi-Source Data Fusion and LLM-Augmented Reasoning
Sunil Gentyala, Sunil Kumar Mudusu, Satish Kumar Allani, Manasa Pendyala, Rakesh Prakash, Praveen Kumar Mannam
A Multi-Stage NLP Framework for Enterprise Data Protection in Public LLM Interactions
Sunil Gentyala, Nimmagari Tejasri, Sunil Kumar Mudusu
The Metamorphosis of Access: Strategic Imperatives for Identity 3.0 and Zero Trust Integration in Critical Infrastructure
Sunil Gentyala, Floriano Caprio, Sunil Kumar Mudusu, Suresh Kumar Darisi, Satish Kumar Allani
SybilShield-Core: A Composite Trust Scoring Framework for Sybil Attack Mitigation in Permissionless Blockchain Networks
Sunil Gentyala, K Sanjeevaiah, Suresh Kumar Darisi
Governing Heterogeneous API Gateway Estates Through Policy-as-Code: An Engineering Management Perspective
Sunil Gentyala, Floriano Caprio, Praveen Kumar Mannam, Angajala Tejaswi, Rakesh Prakash, Akhila Kasturi
Zero-Trust Data Pipelines for AI Systems: A Framework for Secure, Verifiable, and Auditable Data Engineering
Sunil Kumar Mudusu, Sunil Gentyala
On Auditing MCP Deployments
Sunil Gentyala, Praveen Kumar Mannam
Articles and whitepapers
Your Enterprise Doesn't Need Six BOM Programs. It Needs One Evidence Graph
4 Million Fake Applications and One Blind Spot: A SOC Playbook for OAuth Client ID Spoofing
Shadow Agents: How IT Leaders Must Govern Headless AI Before It Breaks the Enterprise
Securing the Swarm: Governance, Attack Surfaces, and Zero-Trust Architectures in Multi-Agent AI Environments
From Blueprints to Breaches: A Modern Playbook for Navigating Cyberthreats
1,800+ MCP Servers Exposed Without Authentication: How Zero Trust Can Secure the AI Agent Revolution
The Phantasmagoric Perimeter: Why Your Zero Trust Architecture Is a Mere Mirage
MCP is the Backdoor Your Zero-Trust Architecture Forgot to Close
The Sentinel Intelligence: A CISO's Guide to Sovereign Security in the Age of AGI
For Application Security: SCA, SAST, DAST and MAST. What Next?
Reimagining the Browser as a Critical Policy Enforcement Point: A Zero-Trust Security Architecture for Modern Enterprises
Hardening Browser Security with Zero-Trust Controls
Beyond Silos: How DDI-AI Integration Is Redefining Cyber Resilience
Securing Application-to-Application Traffic with AI/AGI/ML-Powered Virtual Firewalls
Projects
AegisSwarm-Core
Zero-trust governance for autonomous multi-agent AI networks. Published by the Cloud Security Alliance and cited externally as a reference implementation.
GSH Framework
Governed Security Hunting: agentic AI threat hunting mapped to MITRE ATLAS and NIST CSF 2.0, with a full playbook set and CI.
AEGIS Academic Integrity Checker
Local-first MCP server and CLI that checks papers for hallucinated citations, AI-text and plagiarism signals, and venue guideline compliance. Listed on mcprush; on PyPI as aegis-integrity.
ContextGuard
Zero-trust middleware for Model Context Protocol security.
TRACE-MAS
Cryptographic framework securing multi-agent LLM pipelines against drift, spoofing and prompt injection.
CausalNetTwin
Causal digital-twin framework for network security reasoning.
MarkSentry
Zero-trust, local-first document-to-Markdown converter with PII auditing.
SybilShield-Core
Composite trust scoring for Sybil attack mitigation in permissionless blockchain networks.
DockerDNA
Layer-by-layer container security analysis: secrets detection, CIS Docker Benchmark mapping, CycloneDX SBOM and SARIF output.