Arman of Tribhuvan University, Nepal

This session distills field‑tested practices that reliably reduce risk for every sector. I will start with fundamentals through the lens of real incidents - XSS, IDOR, and SQL Injection - showing how attacks unfold and how simple design choices prevent them. We will connect these stories to the OWASP Top 10, API security basics (authentication/authorization pitfalls), and the human layer (social engineering patterns and reporting). I’ll share a lightweight, defensible controls set - MFA and least privilege, secure defaults in development, secrets handling, logging that matters, and a roadmap type improvement plan any small team can adopt. I'll also share a trending startups for cybersecurity students i.e. Defence by Offence. Throughout, I will anonymize all case details and focus on practical checklists, so attendees leave with actions they can apply immediately.

Biography:

Arman Ansari is an IT Security Advisor at Tribhuvan University, Nepal, and a youth advocate who collaborates with the International Telecommunication Union on digital inclusion and online safety. He has contributed to cybersecurity efforts with public institutions in Nepal and has collaborated with the Government of Nepal and Microsoft’s security teams (MSRC). Recognized for applied security research and community programs, Arman focuses on pragmatic defenses for resource‑constrained environments and helping early‑career practitioners build sound security habits.