Carl Lochstampfor, Jr.

Carl Lochstampfor, Jr.

Executive Summary

Cybersecurity undergraduate at Old Dominion University (3.9 GPA) with CompTIA Security+, Network+, and A+ certifications. AI security researcher with two arXiv preprints on synthetic fraud detection (COVA framework, under review at IEEE DASC and IEEE BigData 2026) and a live dataset platform (ScamLingua.org). Background includes over a decade in high-risk, regulated financial environments (FNMA, FHLMC, FHA, VA), applying the same rigor to incident response, system hardening, and AI governance. Proven record of managing 3× standard workloads while sustaining 95%+ accuracy.

0
Synthetic Conversations
0
Model Accuracy
0
Fraud Categories
0
Papers Under Review

🔬 Featured Research

Mentored by Dr. Ayan Roy (Christopher Newport University) • CCI Undergraduate Research Program

📄

COVA Framework

Under Review

Multi-agent LLM framework for generating labeled synthetic scam conversations targeting elder populations. Established baseline classification using XGBoost + TF-IDF achieving 72.5% accuracy across 8 elder-fraud categories.

Multi-Agent LLM Qwen 2.5 14B Ollama scikit-learn XGBoost TF-IDF 3,201 Samples
Venue: IEEE DASC 2026 (Under Review) • arXiv: 2604.11752
Technical Details

🛠️ Tools & Frameworks

Python scikit-learn XGBoost Hugging Face PyTorch DistilBERT Longformer Ollama Qwen 2.5 14B

🔬 Methodology Highlights

  • Two independent LLM agents (attacker + victim) exchange turns iteratively, producing natural resistance and escalation dynamics across 8 elder-fraud categories and 16 prompt templates.
  • Parameterized victim personas (age 65–85) with trust, scam-awareness, and tech-savviness traits; attacker knowledge tiers (cold-call 50% / partial 30% / full 20%).
  • Initially prototyped with commercial LLM APIs (including Anthropic Claude); transitioned to local Qwen 2.5 14B inference via Ollama on NVIDIA RTX 4080 Super (16 GB VRAM) after safety guardrails blocked scam role-play scenarios — enabling unrestricted generation, zero API cost, and full data privacy.
  • Built a negation-aware v2 label-audit pipeline after discovering a 49.8% initial mismatch, relabeling 1,594 conversations for outcome-label integrity.

📊 Notable Results

  • Benchmarked 8 models (6 classical ML + 2 transformers); XGBoost + TF-IDF led at 72.5% accuracy / 0.691 macro-F1.
  • TF-IDF lexical features beat 28 hand-engineered features by 16 points — quantifying how much discriminative signal lives in the raw text.
  • Isolated input truncation and limited data scale as the transformer bottleneck — a hypothesis directly tested (and confirmed) in COVA-X.

🏗️ Pipeline Architecture

COVA Pipeline Architecture diagram showing prompt templates flowing through Qwen 2.5 14B to multi-agent generation loop with attacker and victim agents, then through quality pipeline (contamination scan, stage-direction strip, automated relabeling) to produce 10,985 labeled conversations

End-to-end pipeline: prompts → local LLM → multi-agent dialogue → quality checks → labeled dataset

🖼️ Pipeline in Action

Live pipeline screenshots: generation → sample dialogue

👤 My Contributions

Lead author. I designed and implemented the multi-agent generation pipeline that produces realistic attacker-victim dialogue exchanges. I engineered the 28-feature extraction system and TF-IDF representation, built the v2 label-audit tooling that corrected 1,594 mislabeled conversations, and trained and evaluated all eight baseline classifiers.

📄

COVA-X Benchmark

Under Review

Expanded benchmark with 10,985 synthetic conversations. Fine-tuned Longformer achieving 79.71% accuracy and 0.779 macro-F1, advancing the state of elder-fraud detection research.

Longformer Hugging Face PyTorch Ollama Qwen 2.5 14B 10,985 Samples
Venue: IEEE BigData 2026 (Under Review) • arXiv: 2606.06879
Technical Details

🛠️ Tools & Frameworks

Longformer DistilBERT Hugging Face PyTorch XGBoost Ollama Qwen 2.5 14B Dual-GPU (RTX 4080S + 5060 Ti)

🔬 Methodology Highlights

  • Scaled the corpus 3.4× to 10,985 conversations (88,852 turns) with five distinct victim/attacker profiles per scam type for behavioral diversity.
  • Engineered a three-role generation architecture for virtual-kidnapping scenarios, cutting artifact flag rates from 67.1% to 46.5%.
  • Built a multi-stage quality lifecycle — contamination scanning, stage-direction stripping, and automated relabeling — driving a 12.7× label-consistency gain (49.8% → 3.9% correction rate).
  • Characterized Qwen 2.5 14B capability limits under sustained emotional pressure, including a salience-bias effect where enumerating forbidden patterns increased their production.

📊 Notable Results

  • Longformer overtook XGBoost on every metric (79.71% accuracy / 0.779 macro-F1 vs. 78.43% / 0.756), directly confirming the first paper's data-scale hypothesis.
  • Transformers gained the most from scale (Longformer +11.2 macro-F1 points vs. XGBoost +6.5), with the biggest edge on the minority "complied" class.
  • Key challenge identified: distinguishing partial compliance from rejection — victims who engage extensively before refusing present similar lexical patterns to those who partially comply, making this the dominant error boundary across all architectures.
  • A pre/post-cleanup sensitivity analysis showed all three architectures improved — evidence the pipeline recovered genuine label-relevant signal, not architecture-specific noise.

🖼️ Scaling to 10K+

Scaling & QA screenshots: quality scan → final dataset

👤 My Contributions

Lead author. I scaled the generation pipeline across dual-GPU workstations (RTX 4080 Super + RTX 5060 Ti), designed the three-role virtual-kidnapping architecture that reduced artifact rates by 20 percentage points, and built the complete multi-stage quality-lifecycle tooling — including contamination scanning, stage-direction stripping, and automated relabeling. I then retrained and evaluated all classifiers to validate our data-scale hypothesis.

🌐

ScamLingua Platform

Live

Self-built distribution platform for COVA research datasets and benchmarks. Designed with trust-focused web engineering principles to support reproducible AI safety research.

Dataset Distribution Trust Engineering Open Research GitHub Pages Static Site CSP Hardened

🗓️ Research Timeline

  1. COVA Framework & Dataset

    First public multi-turn smishing dataset — 3,201 conversations, 8-model baseline (XGBoost + TF-IDF, 72.5%). arXiv:2604.11752

  2. COVA-X Expanded Benchmark

    Scaled to 10,985 conversations; Longformer surpasses XGBoost at 79.71% accuracy, confirming the data-scale hypothesis. arXiv:2606.06879

  3. ScamLingua Platform

    Self-built distribution platform bringing the COVA research datasets and benchmarks to the broader AI-safety community.

  1. COVA-B Benign Dataset

    In Progress

    Companion dataset of legitimate conversations for precision benchmarking.

  2. Multi-Model Comparison Study

    Planning

    Cross-model evaluation of LLM capability ceilings in synthetic dialogue generation.

📊 Technical Skills

  • Certifications:

    CompTIA Security+, Network+, A+
  • AI/ML Research:

    Multi-Agent LLMs, Synthetic Data Generation, Transformer Fine-Tuning, Prompt Engineering, Dataset Engineering, Ollama/Qwen Local Inference
  • ML Frameworks:

    Hugging Face Transformers, PyTorch, scikit-learn, XGBoost, Longformer/DistilBERT, TF-IDF
  • Cybersecurity:

    Incident Response, System Hardening, Network Defense, AI Governance, Vulnerability Assessment
  • Tools:

    Nmap, Wireshark, pfSense, tcpdump, Snort, iptables, SSH
  • Development:

    Python, Trust-Focused Web Engineering, HTML/CSS/JS, SQL, GitHub

📊 Skill Distribution

🧠 Education

Old Dominion University

B.S. Cybersecurity | GPA: 3.9

CCI Undergraduate Research Program

Jax Code Academy

Web Development | 2023 Graduate

Roanoke College

B.A., Criminal Justice & Philosophy

💻 Featured Project

Secure File Sharing System

Python TCP Sockets • Milestone Project

Python TCP/IP Encryption

Problem Addressed

Organizations routinely transfer sensitive data over insecure channels, creating exposure to interception and tampering. This project explores secure design principles for client–server exchange.

System Design

  • Custom TCP client–server architecture in Python
  • User authentication & directory isolation (DAC)

Security Controls

  • Encrypted communication channel
  • Data‑integrity validation during transfer

🔧 Personal Projects

LockBadges

Windows Desktop Utility • Shipped & Documented

AutoHotkey v2 Windows Privacy-Focused
LockBadges settings window showing per-badge font, color, position, and behavior options, with three translucent badges placed on the Windows taskbar

Movable, translucent on-screen indicators for Caps Lock, Num Lock, Scroll Lock, and Mute — built for keyboards that ship without status LEDs. Each badge is independently positioned, styled, and configured through a full settings GUI, renders click-through, and hides automatically during fullscreen apps.

Privacy by construction: lock state is read from Windows toggle bits rather than a keyboard hook, so keystrokes are never intercepted — with no network access, no telemetry, and no logging.

🛡️ Labs & Applied Coursework

Incident Response & Forensics (NIST SP 800‑61)

Executed full IR lifecycle after simulated brute‑force: recon detection with Nmap, log analysis, volatile data collection, and GPO remediation.

Operating System Hardening & Policy Enforcement

Strengthened Windows/Linux security baselines via Group Policy Objects, authentication auditing, and attack surface reduction using iptables.

Network Defense & Firewall Security (pfSense)

Applied defense‑in‑depth via firewall rule design, disabling insecure protocols, and configuring SSH for encrypted administrative access.

Intrusion Detection & Packet Analysis (Snort / Wireshark)

Deployed Snort IDS and analyzed PCAP traffic using tcpdump and Wireshark to identify anomalous behavior.

🧩 Professional Experience

Cardinal Housing, LLC | Estate Fiduciary

Jacksonville, FL | 2012 – 2024

  • Fiduciary Trust: Managed real estate portfolio for 12+ years; served as fiduciary for two private estates overseeing 100% of legal, financial, and physical asset distribution.
  • Compliance & Data Integrity: Ensured full adherence to housing regulations and probate laws through meticulous record-keeping.

BlueHub Capital (SUN) | Foreclosure Relief Underwriter

Boston, MA | 2021 – 2022

  • Supported internal bank examinations & compliance audits, safeguarding corporate financial interests.
  • Redesigned loan origination workflows, improving data integrity and operational efficiency.
  • Led deployment of a secure SMS communication platform maintaining privacy compliance.

EverBank & TIAA Bank | Loss Mitigation Underwriter

Jacksonville, FL | 2017 – 2021

  • Reviewed complex loan files for federal compliance, mitigating financial risk exposures.
  • Maintained 97% average on Quality Reports, ensuring OCC Consent Order compliance.
  • Managed loan portfolio 3x the average workload with 95% accuracy.

Everbank & Ditech Financial | SPOC Relationship Manager

Jacksonville, FL | 2011 – 2014

  • Managed foreclosure prevention as Single Point of Contact (SPOC) in regulated financial environments.
  • Exceeded investor benchmarks by 30% through workflow optimization.
  • Maintained 99% quality score on monitoring reports.

Americorps Habitat For Humanity | Construction Team Leader

Jacksonville, FL | 2009 – 2011

  • Led and coordinated up to 150+ individuals daily in regulated, safety-critical environments, enforcing policies, accountability, and task integrity across diverse teams.
  • Worked with stakeholders across executive, professional, and court-mandated populations, requiring clear communication, role separation, and controlled access to shared resources.
  • Provided financial wellness and recovery coaching—reinforcing a fiduciary mindset around data integrity, risk reduction, and responsible resource management.