I have started my PhD at the University of Glasgow, exploring cybersecurity and resilience in connected energy systems. These are my early starting points.
Hello 👋
I build, explore and secure
systems on the web and beyond
PhD researcher at the University of Glasgow. Exploring cybersecurity and resilience in connected energy systems.
Read my research notes and blog →
A3-graded MSci project: built a Purdue-segmented ICS testbed with physical Siemens PLCs and used MITRE Caldera to emulate and reconstruct multi-stage APT attack chains.

Reached the final round of a UK government-sponsored SANS CTF, applying practical investigation and problem-solving skills across security challenges.

Developed privacy-preserving intrusion-detection models on UNSW-NB15 and explored how random-forest models can be merged across distributed clients.

Originally self-hosted with Docker and Nginx on Oracle Cloud, this Next.js portfolio now runs on Vercel, with a custom local editing workflow.

Made text-based games using Java and Haskell.

Designed a website as part of our course with seven other teammates.

A Raspberry Pi and Docker environment for practising Linux administration, networking, DNS filtering, VPN-gated access, service hardening and secure self-hosting.
My research interests span cybersecurity, operational technology and the resilience of connected energy systems. I am exploring the wider picture of cyber resilience: identifying risks, protecting systems, detecting threats, responding to incidents and recovering from disruption.
I am Mustafa Onur Cay, but I go by Onur. I am a PhD researcher at the University of Glasgow exploring cybersecurity and resilience in connected energy systems. I completed an MSci in Computing Science with Honours and a specialism in Cybersecurity. My previous research includes APT emulation across industrial control systems, provenance-based attack analysis and federated learning for network intrusion detection. Alongside research, I enjoy building software, working with cloud infrastructure and maintaining my home lab.
I have started my PhD at the University of Glasgow, exploring cybersecurity and resilience in connected energy systems. These are my early starting points.
My A3-graded MSci project built a Purdue-segmented industrial control system testbed with physical Siemens PLCs, then used MITRE Caldera to emulate a multi-stage APT campaign and collect data for provenance-based detection.
I have written my bachelor's dissertation in federated learning. I used UNSW-NB15 database to train my random forest model.