Tutorial title
Open-Source Intelligence (OSINT) for Modern Cybersecurity: Methodologies, Tools, and AI-Assisted Investigation
Abstract
Open-Source Intelligence (OSINT) has evolved from a largely manual investigative practice into a critical capability in modern cybersecurity. By systematically collecting, verifying, correlating, and analyzing publicly available information, OSINT supports actionable intelligence for attack-surface management, threat attribution, and incident response. However, its dual-use nature also enables adversary reconnaissance, highlighting the need for reliable investigative methodologies and responsible intelligence practices.
This tutorial provides a practical and methodological overview of the OSINT intelligence cycle, covering information collection, verification, analysis, and reporting. Participants will explore widely used tools across multiple investigative domains, including Maltego and SpiderFoot for link analysis and automation; Sherlock and Epieos for online identity investigations; Shodan, Censys, and Amass for internet-facing asset discovery; and Google Earth Pro, ADS-B Exchange, and MarineTraffic for geospatial analysis and movement tracking. Real-world case studies will demonstrate how these tools and techniques can be combined to support systematic investigations.
The tutorial further examines the emerging role of artificial intelligence (AI) in OSINT, focusing on how Large Language Models (LLMs) and Vision-Language Models (VLMs) can assist with entity extraction, visual geolocation, and knowledge-graph construction. It also explores agentic workflows for automating information gathering and cross-source correlation, while emphasizing the need for human validation of AI-generated findings. Key challenges, including data poisoning, hallucination-driven misattribution, and synthetic disinformation, will be discussed alongside legal, privacy, and evidentiary considerations. The tutorial concludes with practical recommendations for developing transparent, reproducible, and human-supervised AI-assisted OSINT workflows.
By bridging established investigative techniques with emerging AI capabilities, this tutorial aims to equip cybersecurity researchers and practitioners with the methodological understanding needed to conduct effective, reliable, and responsible OSINT investigations.
Keywords: Open source intelligence, cybersecurity, threat intelligence, large language models, agentic AI, attack-surface management, geospatial intelligence, digital forensics.
Biography
Dr. Jagdeep Singh is an Assistant Professor in the Department of Computer Science and Engineering at Sant Longowal Institute of Engineering and Technology (SLIET), Longowal, India (a Deemed-to-be University under the Ministry of Education, Government of India). He also serves as the institute’s Chief Information Security Officer (CISO), providing leadership in information security and cybersecurity initiatives. He holds a Ph.D. in Computer Engineering from the University of Delhi and is a Certified Information Security Manager (CISM) and Certified Ethical Hacker (CEH v13 AI). His research spans artificial intelligence, cybersecurity, federated learning, and anomaly detection in cyber-physical systems, with publications in venues associated with IEEE, Springer, and Elsevier and presentations at prominent international conferences, including IEEE ICC, IEEE GLOBECOM, IEEE CITS and IEEE INDICON.
Dr. Singh is Co-Principal Investigator of a CSR-supported project worth ₹40 lakh on AI-enabled cooperative multi-drone surveillance for road safety and landslide detection in Himachal Pradesh. He is a Senior Member of IEEE and of the Indian National Academy of Engineering (INAE), serves as an Editorial Board Member of Scientific Reports (Nature Portfolio), and is an AICTE-certified Master Trainer in High-Performance Computing and an AWS Academy Educator.
Dr. Singh led the winning team in both the Ideation and Prototype stages of the Indian Web Browser Development Challenge, organized by the Ministry of Electronics and Information Technology, Government of India. He was also selected as a Young Science and Technology Leader at ESTIC 2026, held at Bharat Mandapam, New Delhi.
He has chaired technical sessions at several international conferences, including ICAMS-2025 (NIT Hamirpur, in collaboration with IIT Roorkee), IEEE DICCT-2026, 2025 (Graphic Era Deemed University, Dehradun), and ICICST-2026 (Dr. B. R. Ambedkar NIT Jalandhar). His professional service includes reviewing manuscripts for leading journals such as IEEE Transactions on Information Forensics and Security, IEEE Internet of Things Journal, and IEEE Transactions on Dependable and Secure Computing. With more than 25 invited keynote and expert talks delivered at institutions across India, he actively contributes to advancing cybersecurity awareness, emerging technologies, and research-driven innovation.