Hang tight

There is no time for caution

Irash Perera

CSE Undergraduate Specializing in Data Science

Final YearUndergraduate at University of Moratuwa

Former Intern at WSO2

Get to Know More

About Me

Irash Perera About Picture

Current Academic Standing

Final-year undergraduate

B.Sc. Hons in Computer Science and Engineering

specializing in Data Science and Engineering

University of Moratuwa Card Background

Education

Computer Science and Engineering Department

University of Moratuwa

Sri Lanka

I pursued my secondary education at Anuradhapura Central College and completed my Advanced Level examinations in the Physical Science Stream in 2020, achieving outstanding results with 3As. Subsequently, I earned admission to the prestigious engineering faculty of the University of Moratuwa, Sri Lanka.

With a deep-rooted passion for AI, Data Science, Machine Learning, and Web Development, I am actively engaged in refining my skills through personal projects and dedicated efforts to enhance my problem solving abilities.

imagine. believe.

achieve.

Explore My

Tech Skills

0
Projects
0
GitHub Contributions
in Last Year

Explore My

Professional Experience

WSO2 Lanka (Pvt) Ltd

Software Engineering Intern

Colombo 04, Sri Lanka December 2024 - May 2025

Ballerina HubSpot Connector Project See on Ballerina Central

  • Developed the Ballerina connector for the HubSpot Feedback Submissions API as 3-week internship onboarding project.
  • Successfully built comprehensive test cases and examples for all API endpoints, ensuring robust functionality, and prepared thorough documentation.

AI-Driven GraphQL Security Project View Paper

  • Designed and implemented an AI-driven system to detect and mitigate approximately 12 types of GraphQL vulnerabilities, including SQL injections, OS command injections, SSRF attacks, XSS exploits, and GraphQL-specific DoS attacks.
  • Developed and fine-tuned CNN and BERT models for precise threat detection, significantly improving security posture.
  • Optimized system performance and scalability through a hybrid execution model and advanced performance techniques, achieving high-performance inference and parallel testing.
  • Integrated the developed system into WSO2 APIM 4.50 as a runtime configuration, featuring a newly designed UI that allows users to select security checks and adjust model confidence levels.
  • Conducted in-depth competitor analysis and identified common GraphQL attack patterns; did performance testing and evaluation, and created comprehensive documentation.
  • Authored a research paper on this work, which was accepted for oral presentation at the IEEE International Conference on Cybersecurity and AI-Based Systems (Cyber-AI 2025), held in September 2025 in Varna, Bulgaria.
WSO2 Conference Photo
Christmas Carols Photo
APIM Trip Photo

Browse My Recent

Research Publications

Swipe
Paper Preview

Enhancing GraphQL Security by Detecting Malicious Queries Using Large Language Models, Sentence Transformers, and Convolutional Neural Networks

Accepted by IEEE International Conference on Cybersecurity and AI-Based Systems (Cyber-AI 2025)

August 2025

Abstract

GraphQL's flexibility, while beneficial for efficient data fetching, introduces unique security vulnerabilities that traditional API security mechanisms often fail to address. Malicious GraphQL queries can exploit the language's dynamic nature, leading to denial-of-service attacks, data exfiltration through injection, and other exploits. Existing solutions, such as static analysis, rate limiting, and general-purpose Web Application Firewalls, offer limited protection against sophisticated, context-aware attacks. This paper presents a novel, AI-driven approach for real-time detection of malicious GraphQL queries. Our method combines static analysis with machine learning techniques, including Large Language Models (LLMs) for dynamic schema-based configuration, Sentence Transformers (SBERT and Doc2Vec) for contextual embedding of query payloads, and Convolutional Neural Networks (CNNs), Random Forests, and Multilayer Perceptrons for classification. We detail the system architecture, implementation strategies optimized for production environments (including ONNX Runtime optimization and parallel processing), and evaluate the performance of our detection models and the overall system under load. Results demonstrate high accuracy in detecting various threats, including SQL injection, OS command injection, and XSS exploits, alongside effective mitigation of DoS and SSRF attempts. This research contributes a robust and adaptable solution for enhancing GraphQL API security.

Co-Authors

Author 2
Sanjeewa Malalgoda
WSO2
Author 1
Hiranya Abeyrathne
WSO2
Author 3
Arshardh Ifthikar
WSO2
Paper Preview

A Novel Multi-branch ConvNeXt Architecture for Identifying Subtle Pathological Features in CT Scans

Pre-print

October 2025

Abstract

Intelligent analysis of medical imaging plays a crucial role in assisting clinical diagnosis, especially for identifying subtle pathological features. This paper introduces a novel multi-branch ConvNeXt architecture designed specifically for the nuanced challenges of medical image analysis. While applied here to the specific problem of COVID-19 diagnosis, the methodology offers a generalizable framework for classifying a wide range of pathologies from CT scans. The proposed model incorporates a rigorous end-to-end pipeline, from meticulous data preprocessing and augmentation to a disciplined two-phase training strategy that leverages transfer learning effectively. The architecture uniquely integrates features extracted from three parallel branches: Global Average Pooling, Global Max Pooling, and a new Attention-weighted Pooling mechanism. The model was trained and validated on a combined dataset of 2,609 CT slices derived from two distinct datasets. Experimental results demonstrate a superior performance on the validation set, achieving a final ROC-AUC of 0.9937, a validation accuracy of 0.9757, and an F1-score of 0.9825 for COVID-19 cases, outperforming all previously reported models on this dataset. These findings indicate that a modern, multi-branch architecture, coupled with careful data handling, can achieve performance comparable to or exceeding contemporary state-of-the-art models, thereby proving the efficacy of advanced deep learning techniques for robust medical diagnostics.

Co-Authors

Author 1
Dr. Uthayasanker Thayasivam
University of Moratuwa

Explore My Recent

Project Highlights

Swipe
AI/ML
MedNeXt-Branch

Project Description

Implementation and experimental results of a novel multi-branch ConvNeXt architecture designed to identify subtle pathological features in CT scans. The proposed method integrates three complementary pooling strategies—Global Average Pooling, Global Max Pooling, and Attention-Weighted Pooling—to capture both holistic contextual patterns and fine-grained diagnostic markers that conventional convolutional neural networks frequently overlook.

MedNeXt-Branch

AI/ML
Resq

Project Description

Addressing the complexities of disaster response, ResQ is an AI-powered platform, developed with a multi-agent architecture. It excels at transforming chaotic, unstructured disaster reports into actionable intelligence. Beyond intelligent task and resource assignment, ResQ features a unified chat facility and seperate dashboards for seamless communication across affected individuals, volunteers, first responders, and government. Its critical offline synchronization capability ensures continuous operation and data integrity, empowering a truly interconnected and resilient response ecosystem.

ResQ

AI/ML
GraphWatch

Project Description

Designed and implemented an intelligent security layer for GraphQL APIs that leverages transformer embeddings (SBERT), handcrafted features, and 1D CNNs to detect malicious queries in real time. The system identifies injection attacks (SQLi, XSS, OS commands, SSRF) and complex query abuse patterns (alias overloading, deep recursion, introspection) through both static and ML-driven analysis.

GraphWatch

Backend
Ballerina connector

Project Description

This Ballerina connector provides capabilities to integrate with HubSpot CRM Feedback Submissions API.

Ballerina Connector for
HubSpot Feedback API

Full Stack
eWallet

Project Description

GraphQL and WSO2 API Manager Based eWallet Application. With this application, users can sign in with their Google account and create an eWallet, which can be used to manage their expenses and incomes as well as to analyze their transaction history.

eWallet

Full Stack
Chatify

Project Description

A real-time chat application that allows users to create chat rooms and communicate with each other. The application is built using ReactJS for the frontend and Firebase for the backend.

Chatify

AI/ML
EduGenius

Project Description

A multimodal educational AI assistant, including Retrieval-Augmented Generation (RAG), to dynamically generate contextually relevant guidance and explanations for the students in math problems offering a comprehensive and interactive tutoring experience by delivering real-time feedback, and performance tracking.

EduGenius

Computer Vision
PlateVisionAI

Project Description

A project that aims to automate the process of license plate recognition and vehicle tracking utilizing the YOLOv8 object detection model and a custom pre-trained model specifically for license plates, built with Python, OpenCV, and Streamlit

PlateVisionAI

AI/ML
Research Companion

Project Description

AI-powered tool that helps researchers to quickly find exact and precise information from research papers and articles by scraping and storing data in an embedded format, allowing retrieval through semantic search using LangChain, Chroma, and Gemini-Pro.

Research Companion

Full Stack
HR Management System

Project Description

A fully comprehensive full stack HR management system to manage employee profiles, leave requests, approvals, and report generation, while offering customizable features and non-functional requirements.

HR Management System

Computer Vision
VirtualFingerMouse

Project Description

A system built with OpenCV and MediaPipe, to control the computer only with hand gestures without using a mouse. The hand gestures are detected by a camera and the mouse operations are controlled by the hand movements.

VirtualFingerMouse

Computer Vision
Object-Tracking

Project Description

A system to track people in urban areas utilizing the YOLOv8 model to detect people in the video frames and the Deep Sort algorithm to track detected people.

Object Tracking System

Computer Vision
HandGestureDetection

Project Description

A simple application to detect most common hand gestures with a model trained with custom dataset.

Multiple Hand Gesture Detecting System

Full Stack
natours

Project Description

A backend RESTful API -a powerful system designed to manage and streamline tour operations for commercial tour organizing companies, for providing robust functionality for tour management along with integrated comprehensive frontend development.

natours

System Programming
RPAL-Project

Project Description

A python-based interpreter for the Right Reference Pedagogic Algorithmic Language.

RPAL Project

System Programming
pintos projects

Project Description

Two projects focused on two core modules in Pintos – an interactive shell initialization and user program functionalities.

Pintos OS Projects

Hardware
Nanoprocessor

Project Description

– Digital design of 4-bit nano processor with integrated multiple components and capabilities of executing simple instructions.

Nanoprocessor Design Project

Explore My Recent

Achievements Unveiled

Swipe
cypher 2.0
uni Isara Yasiru Niroshan
medal-icon

1st Runners-up

Intellihack 5.0 ML & AI Hackathon

June 2025

In the final round, we built an agentic system to enhance disaster response by connecting victims, volunteers, responders, and authorities, earning us the 1st Runners-Up title. Prior to this, we secured a spot among the top 10 finalists after two days of intense machine learning challenges, standing out from over 100 teams and 350+ participants.

cypher 2.0
uni Isara Yasiru
medal-icon

2nd Runners-up

CodeFest-2024 Datathon Competition

January 2025

I had the privilege of competing in the Datathon at CodeFest 2024, a prestigious hackathon organized by SLIIT, where I was part of the team that won the 2nd Runner-Up position. This 6-hour competition tested our skills in machine learning, data analysis, and creative problem-solving.

cypher 2.0
uni Nisith Nithika Niroshan
medal-icon

1st Place

Bashaway Scripting Competition

October 2024

Achieved 1st place in Bashaway, Sri Lanka's premier scripting and automation competition organized by the SLIIT FOSS Community. This intense 6-hour coding challenge brought teams together to develop efficient solutions under pressure, highlighting our expertise and teamwork at a national level.

cypher 2.0
uni Isara Yasiru Hashini
medal-icon

1st Place

Cypher 2.0 Hackathon Competition

March 2024

Achieved 1st place at the Cypher 2.0 Inter-University Hackathon Competiton, organized by Kotelawala Defence University and AION Campus Pvt. Ltd. Competed as "Team SemiColon" with four members, excelling in a 5-hour coding competition that showcased our technical skills, teamwork, and innovative problem-solving abilities.

Enigma
uni Isara Yasiru
medal-icon

Finalist

Enigma '24 Hackathon Competition

March 2024

Qualified as a finalist in the "Crack the Code - Enigma '24," hackathon organized by the Mathematical Society of the University of Moratuwa. Competing as "Decahedron," we tackled challenging problems based on complex mathematical applications in a 5-hour coding sprint, showcasing advanced problem-solving skills in an atypical hackathon setting.

Enigma
uni
medal-icon

Dean's List

Every Semester to Date

2021 - Present

Consistently recognized on the Dean's List for maintaining academic excellence across all semesters up to the present in the B.Sc. (Hons) in Computer Science and Engineering program.

A/L Results
schl
medal-icon

All-Island 379

2020 Advanced Level- Physical Science

October 2020

With an island rank of 379 and a district rank of 7 in A/Levels from Anuradhapura Central College, I received A passes in Mathematics, Chemistry, and Physics. These accomplishments paved my way to the University of Moratuwa's Engineering Faculty, where I am currently enrolled.

ANCQ
schl
medal-icon

2nd Runner-Up

Australian National Chemistry Quiz

November 2019

Achieved the 3rd best all-island performance in the Senior Division of the 2019 Australian National Chemistry Quiz, organized by the Royal Australian Chemical Institute and conducted in Sri Lanka by the Institute of Chemistry Ceylon.

O/L results
schl
medal-icon

8As and 1B

2017 Ordinary Level Exam

December 2017

Achieved 8As and 1B in O/Ls, with a B in English Literature. Excelled in IT and Tamil as bucket subjects, earning a District Rank of 6.

Defining Moments of My Path

Milestones

Where It All Began: Stepping Into Anuradhapura D.S. Senanayake Primary College.

I studied at Anuradhapura DS Senanayake College until I took my Grade 5 scholarship exam there. I was also the Head Prefect during my time at the school. It holds many fond memories for me.

Starting a New Chapter: Entering Anuradhapura Central College.

After successfully passing the Grade 5 Scholarship Exam, I embarked on an exciting new journey by entering Anuradhapura Central College as a Grade 6 student. From 2012 to 2020, this was my academic home where I completed both my Ordinary and Advanced Levels.Throughout my time at the college, I consistently demonstrated academic excellence, earning a place in the annual prize giving ceremony for six consecutive years.

Completing O/Levels at Anuradhapura Central College.

In December 2017, I completed my O/Levels, having taken IT, Tamil, and English Literature as additional subjects alongside my core studies. This period at Anuradhapura Central College was truly memorable, marking what I consider the best years of my school life. Our Grade 11 class was filled with joy and camaraderie, making it a time of both academic growth and cherished friendships.

Completing A/Levels at Anuradhapura Central College.

Sitting for my A/Ls in October 2020 in the Physical Science stream at Anuradhapura Central College marked a defining chapter in my life. This period was not just about academics but a beautiful time of growth, challenges, and unforgettable memories.

Unlocking New Horizons: Admission to the University of Moratuwa.

Achieving three A's in my Advanced Level examinations opened the door to an incredible opportunity—securing a place at the most prestigious engineering institution in Sri Lanka, the University of Moratuwa. This accomplishment was the result of years of dedication and hard work, and it marked the beginning of an exciting journey toward a future in engineering.

Rising to Excellence: Entering the Computer Science and Engineering Pathway.

After achieving an outstanding 3.85 GPA in my first semester, I earned the opportunity to join the prestigious Computer Science and Engineering Department. Building on this foundation, I am now specializing in Data Science and Engineering, alongside my mainstream studies, expanding my expertise in cutting-edge technologies and advanced analytics.

Unlocking New Chapter: Got selected for an internship at WSO2.

I completed a six-month internship with the WSO2 Engineering team from December 1, 2024, to May 22, 2025, where I was assigned to the API Manager team. During this time, I gained valuable hands-on experience in enterprise software development, deepened my understanding of the tech industry, and had the opportunity to contribute to real-world engineering projects. Beyond the technical growth, the internship was filled with unforgettable memories and amazing people, I made friends for life and built connections that will stay with me throughout my career.

Get in Touch

Contact Me