Dr Mohamed Chahine Ghanem

Dr Mohamed Chahine Ghanem (Chahine) is an Associate Professor and Acting Director of the Cyber Security Research Centre.

Photo coming soon

Dr Mohamed Chahine Ghanem

Dr Mohamed Chahine Ghanem (Chahine) is an Associate Professor and Acting Director of the Cyber Security Research Centre. He serves as the chair of the Subject Standards Board and course leader for the Digital Forensics and Cyber Security BSc (Hons) which achieved outstanding NSS and graduate outcomes since he took charge. 
Chahine holds an Engineering degree in Computing and Security, an MSc in Digital Foresnsics & IT Security and a PhD in Cyber Security Engineering from the City, University of London. His research focuses on applying AI to solve real cybersecurity problems and enhance automation and he published numerous research papers in top-quality journals. 
He is also a Senior Fellow of HEA (SFHEA) and holds a PGCert in Academic and a PGDip in Security Studies. Chahine has over 15 years of experience in digital forensics and incident response at law enforcement and a corporate level and earned many certificates such as CEH, CISSP, ACE, GCFE and CPCI.
Chahine is currently leading and teaching DFIR and AI, actively researching and supervising research students on topics related to digital forensics, offensive cyber security and applied AI. He is the director of studies for 2 VC Scholarship awardee PhD students and seeking to recruit more researchers. 

Chahine's research interests are on Cyber Security and Digital Crime Investigation as well as applying AI techniques to solve real-world cybersecurity problems, and enhancing automation support human experts. He is the Acting Director of the Cyber Security Research Centre and the Founding Head of the Digital Forensics Laboratory (RKE platform).


  • MC Ghanem, TM Chen. (2019). Reinforcement learning for efficient network penetration testing. Information 11 (1), 6. Special Issue: Machine Learning for Cyber-Security. IF 3.2
  • MC Ghanem, TM Chen, EG Nepomuceno. (2022). Hierarchical reinforcement learning for efficient and effective automated penetration testing of large networks. Journal of Intelligent Information Systems, pages 1-23. Special Issue: AI Meets Cybersecurity IF 3.4
  • D Dunsin, MC Ghanem, K Ouazzane. (2021). The Use of Artificial Intelligence in Digital Forensics and Incident Response in a Constrained Environment. International Journal of Information and Communication Engineering, 16(8), Pages 280-285.
  • MC Ghanem, TM Chen, ME Kettouche, EG Nepomuceno. (2023). A Framework for Expertise Extraction, Generalization and Reply for an Optimized Automation of Network Security Compliance. IEEE Access. IF 3.9
  • MC. Ghanem, K. Ouazzane, D. Dunsin, and R. Djemai. (2023). D2WFP: A Novel Protocol for Forensically Identifying, Extracting and Analysing Deep and Dark Web Criminal Activities. Journal of Cyber Security and Privacy.
  • MC. Ghanem, MD. Uribarri, R. Djemai, D. Dunsin and II. Araujo.(2023). StegoHound: A Novel Multi-Approaches Method for Efficient and Effective Identification and Extraction of Digital Evidence Masked by Steganographic Techniques in WAV and MP3 Files. Journal of Information Security and Cybercrimes Research.
  • D. Dunsin, MC. Ghanem, K. Ouazzane, and V. Vassilev. (2023). A comprehensive analysis of the role of artificial intelligence and machine learning in modern digital forensics and incident response. Forensic Science International: Digital Investigation. IF 2.0
  • H Maosa, K Ouazzane, MC Ghanem. (2023). A hierarchical security events correlation model for real-time threat detection and response. Journal of Networks. (In-Press)
  • MC. Ghanem, DN Ratnayake and W. Sowinski (2024) Weaponized IoT: A Comparative Forensics Analysis of Raspberry_Pi and Kali_Linux Hacker Machines. (writing-up phase) IEEE Access IF 3.9
  • C. Ghanem, ME. Kettouche, R. Stoykova and MA Ferrag. (2024). Leveraging Reinforcement Learning for Enhanced Automation of Windows Registry Analysis in Cyber Incident Investigation. IEEE Transactions on Information Forensics and Security (writing-up phase) IF 7.9
  • D. Dunsin, MC. Ghanem, K. Ouazzane, and V. Vassilev. (2024). A Novel Reinforcement Learning Framework for an efficient and effective automation of malware detection in digital forensics and incident response. Sensors special issue Cyber Security and AI. (Elaboration phase) IF 3.9
  • MC. Ghanem, M. Bagalut, L. Higgins, (2024). A hybrid investigative approach for addressing cloud-based evidence correlation. International Journal of Cyber Forensics and Advanced Threat Investigations (Elaboration phase)


  • MD. Uribarri, and MC Ghanem. (2022). A Script-Based Toolkit for Extracting Evidence Hidden by Cryptographic and Steganographic Techniques. ICDFSCC2021 15th International Conference on Digital Forensics and Security of Cloud Computing. .16 (05), Sydney, Australia
  • MC Ghanem, TM Chen. (2018). Reinforcement learning for intelligent penetration testing. IEEE Second World Conference on Smart Trends in Systems, Security and Sustainability (WorldS4), London UK. Pages 185-192. cited 29
  • MC Ghanem, DN Ratnayake. (2016). Enhancing WPA2-PSK four-way handshaking after re-authentication to deal with de-authentication followed by brute-force attack a novel re-authentication protocol. IEEE International Conference on Cyber Situational Awareness, Data Analytics and Assessment. Pages 1-7.
  • MC Ghanem, R Iyasa, and E Persaud. (2024). A Script-Based Toolkit for Identifying and Extracting Hard Drives and Operating Systems Evidence Hidden by Steganographic Techniques. (Elaboration)


Mohamed Chahine Ghanem (he/him)
Associate Professor - Cyber Security and Applied AI

SSB Chair, Computer Science and Applied Computing
Acting Director of the Cyber Security Research Centre
Course leader in Digital Forensics and Cyber Security BSc

School of Computing and Digtial Media

Office: T7-20h (Cyber Security Centre)

Email Chahine

  • CyberASAP 2020 – Blockchain technology for secure, flexible and scalable healthcare records management- Principal Investigator (£35,000)

  • CyberASAP 2019 – RAVENS Sciences City spin-out company - iREPORTit - Tech Lead (£75,000)

  • Transformation and Rescaling project 2021– Digital Forensics Laboratory - Principal Investigator (£20,000)

  • Current Application (awaiting outcome) to UKRI Grant with an international consortium of 6 universities worldwide- Principal Investigator (£400,000)

  • Invited Key Note Speaker in many Top cybersecurity venues
  • Associate Academic and Consultant at the University of Liverpool
  • Cyber Security Advisor


  • Invited Key Note Speaker in Top cyber security venues
  • Associate Academic and Consultant at the University of Liverpool
  • Cyber Investigation Advisor and Decorated Veteran
  • Member IEEE
  • Member of the British Computer Society
  • SFHEA: Senior Fellow of Advance-HE
  • CISSP: Certified Information Systems Security Professional
  • GCFE: GIAC Certified Forensic Examiner
  • Sworn LEA and Expert Witness
  • Multi-Decorated Veteran - Retired Captain