About Me

I am a cybersecurity researcher and the creator of NarrowLink. Currently, I am a Ph.D. candidate in Information and Systems Engineering at Concordia University.

  • Email: sajjad{a†}pourali.com
  • Location: 1515 Ste-Catherine West, Montreal, Quebec, Canada
  • Research Interests: Mobile and Web Security, Embedded Device Security, Malware Analysis, Network Application Layer Security, and Privacy.

Education

Master of Science in Secure Computation

ImamReza University - July, 2020

Thesis: Designing a Framework for Security Assessment in the Iot Application Layer.

Bachelor in Software Engineering

Khavaran Institute of Higher Education - November, 2016

Thesis: Designed an Open-source Penetration Testing Framework With A Pipeline And Multi Thread Approach.

Expereince

CERT of Ferdowsi University of Mashhad

Senior Application Security Specialist | November'13 - April'21 Web Application Penetration Tester | April'09 - November'13

Publication

Racing for TLS Certificate Validation: A Hijacker’s Guide to the Android TLS Galaxy

USENIX Security Symposium (USENIX 2024) | Aug 14–16,24
Sajjad Pourali, Xiufen Yu, Lianying Zhao, Mohammad Mannan, Amr Youssef

Leaky Kits: The Increased Risk of Data Exposure from Phishing Kits
Symposium on Electronic Crime Research (APWG eCrime 2022) | Nov 30-Dec 2,22
Bhaskar Tejaswi, Nayanamana Samarasinghe, Sajjad Pourali, Mohammad Mannan, Amr Youssef

Hidden in Plain Sight: Exploring Encrypted Channels in Android apps
ACM Conference on Computer and Communications Security (CCS 2022) | Nov 7-11,22
Sajjad Pourali, Nayanamana Samarasinghe, Mohammad Mannan