Rezwana Afzal Roza

Ambitious networking student with a strong interest in enterprise network infrastructure, routing and switching, and network security technologies. Demonstrates strong troubleshooting and diagnostic skills to identify, analyse, and resolve network-related issues. Experienced in managing and optimising network environments with a focus on secure connectivity, performance, and reliability. Skilled in applying structured troubleshooting methodologies and implementing effective solutions to support stable and resilient network operations.

• Drawing
• crafting
• Makeup

• Gained hands-on experience configuring Cisco routers and switches using Cisco IOS.
• Built and tested small-scale routed and switched networks.
• Implemented static routing, IPv4 subnetting, VLSM, and IPv6 addressing.
• Analysed network traffic and Ethernet frames using Wireshark.
• Designed enterprise-scale networks using OSPF, BGP, VRF-Lite, and DMVPN.
• Implemented redundancy and high availability with HSRP, GLBP, EtherChannel, and MST.
• Built secure WAN solutions using GRE over IPsec and encrypted DMVPN tunnels.

Coursework: Cybersecurity Governance & Standards (SME Case Study)

• Researched and analysed implementation of ISO 27001, PCI DSS, IEC 62443, and ITU-T X.1055
• Examined regulatory alignment with UAE data protection laws
• Evaluated risk mitigation strategies for digital payment and booking systems
• Demonstrated understanding of security frameworks and compliance management

Coursework: Smart Home Consulting Project 

• Designed and delivered a scalable IoT-based smart home architecture for a multi-type UK housing estate (family homes, starter homes, sheltered accommodation).
• Engineered tailored solutions for automation, security, energy optimisation, and assisted living using integrated smart devices and cloud platforms.
• Applied structured project management methodologies (WBS, Gantt, stakeholder matrix) to plan, analyse, and control project delivery.
• Integrated multiple communication protocols (Wi-Fi, Zigbee, Z-Wave, BLE) to ensure secure, reliable device interoperability.
• Conducted cost modelling and budget analysis to balance innovation, affordability, and scalability.
• Developed comprehensive cybersecurity, risk management, and incident response frameworks aligned with GDPR and data protection standards.
• Proposed renewable energy integration and smart energy monitoring to enhance sustainability and long-term operational efficiency.

Coursework : Smart Farm Automation System (SFAS)

• Designed and developed an IoT-based Smart Farm Automation System using Arduino MKR WiFi 1010 for real-time environmental monitoring and control.
• Integrated multiple sensors (DHT11, soil moisture, rain, water level, ultrasonic) to automate irrigation, alert systems, and door control.
• Implemented embedded logic in Arduino C/C++ with threshold-based decision algorithms and non-blocking timing (millis()).
• Connected system to Blynk IoT Cloud via Wi-Fi for remote monitoring and device management.
• Applied I2C, Analog/Digital I/O, PWM, and Serial debugging for reliable sensor-actuator communication.
• Designed a solar-powered, scalable architecture supporting precision agriculture and sustainable farming practices.

Coursework : Wireless Network Penetration Testing

• Conducted a full wireless penetration test on a WPA2 network within a controlled lab environment using Kali Linux.
• Enabled monitor mode and packet injection to capture raw 802.11 frames using a compatible USB Wi-Fi adapter.
• Performed reconnaissance with airmon-ng, airodump-ng, Kismet, Netdiscover, and Nmap to identify SSIDs, BSSIDs, encryption types, channels, and connected clients.
• Executed targeted deauthentication attacks using aireplay-ng to trigger WPA2 4-way handshake capture.
• Captured and analysed EAPOL handshake packets in Wireshark to validate successful interception.
• Conducted offline dictionary attacks using aircrack-ng and Hashcat to evaluate password strength and recover weak PSKs.
• Demonstrated exploitation of weak WPA2 configurations and legacy security practices.
• Implemented defensive countermeasures including WPA3 (SAE), Protected Management Frames (802.11w), WPS disabling, strong passphrase enforcement, and network segmentation.
• Validated mitigation effectiveness by re-testing and confirming attack failure post-hardening.
• Evaluated wireless vulnerabilities including weak PSKs, WPS brute-force risks, deauthentication exploits, client auto-connect leaks, and firmware weaknesses.