I study the security of computer systems. I try to understand why it seems difficult to build secure systems and how we can get better at it. I also have an interest in innovative approaches to information security education. I like taking systems apart and understanding how they really work to discover and fix vulnerabilities in software. I mainly work on cooperative security: the challenge of getting security systems to work together (particularly in complex network environments) to respond to attacks and interactive security analysis: the challenge of supporting cooperative analysis of large, opaque artifacts.
For fun, I like reading, fiddling with the guitar, baking bread, and climbing walls.
I am always looking for top-quality students for positions in my lab. I am particularly interested in mentoring people who have an interest in or experience doing applied and systems security. Translation: if you are a hacker who, for some crazy reason, has an interest in a graduate degree, I am very interested in talking to you. If you've never written a C program larger than 5K lines or compiled an OS kernel, we probably should not talk. Students should read this page (read also: the grad admissions FAQ and the minimum admission requirements). I do not read or reply to emails containing long descriptions, introductions, resumes, CVs, and other attachements.
My CV (html).
My research group: Trustworthy Systems Group
Program Committee, CCSW 2015
Program Committee, TRUST 2015
CPSC Head search committee (2015)
Vice Chair (Registration), IEEE Security & Privacy 2015
co-Organizer, IEEE SPW LangSec Workshop 2015
CPSC Graduate Award subcommittee (AY 2014-2015)
CPSC operations committee chair (AY 2014-2015)
Faculty of Science Revenue and Fund Development Committee (Fall 2014)
Acting co-director of ISPIA (July-Dec 2014)
Program Committee, PSP 2014
Program Committee, TRUST 2014
co-Organizer, IEEE SPW LangSec Workshop 2014
Finance Chair, IEEE Security & Privacy 2014
Local Chair, NSPW 2013
Program co-Chair, ACNS 2013
Program Chair, ACSAC 2012
Program Committee, NSPW 2012
Program Committee, PST 2012
Program Committee, USENIX HotCloud 2012
Program Committee, ACNS 2012
Faculty of Science revenue generation subcommittee (2012)
Grad. Award subcommittee / Graduate Affairs Committee (AY 2012-2013)
CPSC operations committee
ISPIA Exec and Steering committee