About
Know Me More
I am Sabbir Muhammad Saleh, a software engineering and cybersecurity researcher.
I successfully defended my PhD thesis in Computer Science at Western University on 4 August 2026. Supervised by Professor Nazim H. Madhavji, my doctoral research examined how AI- and blockchain-oriented techniques can support the analysis of security issues in CI/CD logs.
My thesis, AI and Blockchain-oriented Technology for Analysing Security Issues in CI/CD Logs, developed DevSecLogs as a stage-aware evidence-engineering framework. It normalises heterogeneous security records, links observations across source, build, test, package, deploy, and runtime stages, provides deterministic reason codes, and supports integrity verification through cryptographic evidence bundles.
I have taught computing courses in Canada and Bangladesh, including programming, software design, software engineering, data analytics, network technologies, and project-based courses. I have also contributed to graduate and undergraduate supervision, curriculum development, research collaboration, peer review, and academic service.
- Name: Sabbir Muhammad Saleh
- Email: ssaleh47@uwo.ca
- Location: London, Ontario, Canada
- From: Dhaka, Bangladesh
- PhD: Computer Science, Western University, defended August 2026
- Affiliation: Department of Computer Science, Western University
- ORCID: 0000-0001-9944-2615
Research
What I Do
Secure CI/CD and DevSecOps
Embedding security controls, vulnerability checks, and assurance evidence across source, build, test, package, deploy, and runtime stages.
Software Supply-Chain Security
Studying risks from dependencies, build systems, artefact registries, cloud deployment workflows, and third-party CI/CD integrations.
Tamper-Evident Evidence
Designing blockchain-inspired and cryptographic evidence mechanisms that record compact commitments while keeping raw logs off-chain.
AI and NLP for Security Logs
Using topic modelling, anomaly detection, and log intelligence to extract security-relevant signals from fragmented pipeline and cloud telemetry.
Cloud-Native Security
Analysing cloud platforms, containers, Kubernetes-based workflows, deployment automation, and operational evidence generation.
Requirements-to-Evidence Traceability
Linking security requirements to pipeline activities and runtime evidence so assurance claims remain auditable and explainable.
A stage-aware tool and framework for modelling, investigating, and verifying CI/CD security evidence.
Topic modelling, CNN-LSTM anomaly detection, and deterministic explanations for security triage.
Research and prototype evaluation undertaken with IBM CAS collaborators, including scenarios on IBM Cloud.
Outputs
Selected Publications
Research Works and Selected Publications
The following publications and accepted papers represent selected outputs from my doctoral research. Google Scholar provides the latest bibliographic metadata and citation counts.
- Saleh, Sabbir M., John Steinbacher, and Nazim H. Madhavji. (2026). A Stage-Aware Tool for Modelling and Verifying CI/CD Security Evidence. ACM/IEEE 29th International Conference on Model Driven Engineering Languages and Systems (MODELS 2026), Tool Demonstrations, Málaga, Spain, 4-9 October 2026. Accepted.
- Saleh, Sabbir M., Nazim H. Madhavji, and John Steinbacher. (2026). A Stage-Aware Requirements-to-Evidence Framework for Secure CI/CD Pipelines. Thirteenth International Workshop on Evolving Security and Privacy Requirements Engineering (ESPRE '26), 2026 IEEE 33rd International Requirements Engineering Conference Workshops (REW), Montréal, Canada. Accepted.
- Saleh, Sabbir M., Nazim H. Madhavji, and John Steinbacher. (2026). Systematic Review of Identity-Centric Security in Cloud-Native CI/CD Pipelines. In Proceedings of the 2025 10th International Conference on Cloud Computing and Internet of Things (CCIOT '25), pp. 23-32. Association for Computing Machinery. [DOI]
- Saleh, Sabbir M., Md. Nafiz Al Ifat, Nazim H. Madhavji, and John Steinbacher. (2026). A Defence-Oriented Study of API Security in CI/CD Pipelines. In Proceedings of the 2025 10th International Conference on Cloud Computing and Internet of Things (CCIOT '25), pp. 33-42. Association for Computing Machinery. [DOI]
- Saleh, Sabbir M., Md. Nafiz Al Ifat, Nazim Madhavji, and John Steinbacher. (2025). A Threat-Oriented Study of API Security Challenges in CI/CD Pipelines. 2025 IEEE International Conference on Cloud Computing Technology and Science (CloudCom), Shenzhen, China, pp. 1-8. [DOI]
- Saleh, Sabbir M., Nazim Madhavji, and John Steinbacher. (2025). Toward Stage-Aware Container Security in CI/CD: A Practical Review. International Conference on Systems Engineering 2025 (ICSEng 2025), Warsaw, Poland, 27-28 October 2025. In press.
- Saleh, Sabbir M.. (2025). DevSecLogs: AI-Powered, Tamper-Evident Log Intelligence for Secure CI/CD Pipelines. 2025 IEEE International Conference on Software Maintenance and Evolution (ICSME), Auckland, New Zealand, pp. 890-894. [DOI]
- Saleh, Sabbir M., Nazim Madhavji, and John Steinbacher. (2025). Towards a Blockchain-Based CI/CD Framework to Enhance Security in Cloud Environments. 20th International Conference on Evaluation of Novel Approaches to Software Engineering (ENASE), pp. 557-564. [DOI]
- Saleh, Sabbir M., Nazim Madhavji, and John Steinbacher. (2024). Enhancing Cloud Security Through Topic Modelling. 28th ACIS International Winter Conference on Software Engineering, Artificial Intelligence, Networking and Parallel/Distributed Computing (SNPD-Winter), pp. 65-71. [DOI]
- Saleh, Sabbir M., Ibrahim Mohammed Sayem, Nazim Madhavji, and John Steinbacher. (2024). Advancing Software Security and Reliability in Cloud Platforms through AI-based Anomaly Detection. In Proceedings of the 2024 Cloud Computing Security Workshop (CCSW '24), pp. 1-10. Association for Computing Machinery. [DOI]
- Saleh, Sabbir M., Nazim Madhavji, and John Steinbacher. (2024). Blockchain for Securing CI/CD Pipeline: A Review on Tools, Frameworks, and Challenges. 7th Conference on Cloud and Internet of Things (CIoT), Montréal, Canada, pp. 1-5. [DOI]
- Saleh, Sabbir M., Nazim Madhavji, and John Steinbacher. (2024). A Systematic Literature Review on Continuous Integration and Deployment (CI/CD) for Secure Cloud Computing. In Proceedings of the 20th International Conference on Web Information Systems and Technologies (WEBIST), pp. 331-341. [DOI]
Teaching
Experience
Lecturer, Limited Duties
Taught Game Development Project and Programming for Engineers, with additional teaching in introductory computing and software development.
Professor, Part-Time
Taught Python programming, software design patterns, and network enterprise technologies and fundamentals.
Graduate Teaching Assistant
Supported courses in software requirements engineering, software tools, information systems, object-oriented design, data analytics, and software architecture.
Assistant Professor and Department Coordinator
Taught undergraduate CSE courses, supervised projects, coordinated academic activities, and contributed to outcome-based curriculum work.
Lecturer and Department Coordinator
Prepared course materials, delivered lectures and labs, advised students, and contributed to syllabus and programme coordination.
Computer Instructor
Taught computer fundamentals to more than 150 high-school students.
Service
Academic Service
- PC Member, IEEE ICSME 2026 Tool Demonstration and Data Showcase Track.
- Reviewer for IEEE TCSS, Information and Software Technology, IEEE Access, IEEE Internet of Things Journal, IJITWE, and IJSI.
- Reviewer for REFSQ, ACDSA, ICRAIE, IEEE RE, IEEE IHTC, ICCA, ENASE, SEAA, and related venues.
- Editorial Board Member, Bangladesh Journal of Public Health and International Journal of Information Technology and Web Engineering.
- Senate Member, Graduate Student Constituency, Western University Secretariat, 2024 to 2025.
- SOGS Councillor, Department of Computer Science, Western University, 2021 to 2022.
- Member of SOGS committees including Subsidies, Academic, IGSIC, and GSIC.
- President and Assistant General Secretary, AIUB Oratory Club.
Contact
Get in Touch
Address
Department of Computer Science, Western University, London, Ontario, Canada
Academic profiles
For the latest publication metadata and citation count, please use the Google Scholar profile.