I study the security of computer systems. I try to understand why it seems difficult to build secure systems and how we can get better at it. I also have an interest in innovative approaches to information security education. I like taking systems apart and understanding how they really work to discover and fix vulnerabilities in software. I mainly work on cooperative security: the challenge of getting security systems to work together (particularly in complex network environments) to respond to attacks and interactive security analysis: the challenge of supporting cooperative analysis of large, opaque artifacts.
For fun, I like reading, fiddling with the guitar, baking bread, and climbing walls.
I am always looking for top-quality students for positions in my lab. I am particularly interested in mentoring people who have an interest in or experience doing applied and systems security. Translation: if you are a hacker who, for some crazy reason, has an interest in a graduate degree, I am very interested in talking to you. If you've never written a C program larger than 5K lines or compiled an OS kernel, we probably should not talk. Students should read this page (read also: the grad admissions FAQ and the minimum admission requirements). I do not read or reply to emails containing long descriptions, introductions, resumes, CVs, and other attachements.
My CV (html).
My research group: Trustworthy Systems Group
CPSC APR/Merit Review Committee (2015)
CPSC Department Head Search Committee (2015)
CPSC Graduate Award subcommittee (AY 2014-2015)
CPSC Operations Committee chair (AY 2014-2015, AY 2015-2016)
Faculty of Science Revenue and Fund Development Committee (Fall 2014)
Acting co-director of ISPIA (July-Dec 2014)
Faculty of Science revenue generation subcommittee (2012)
Grad. Award subcommittee / Graduate Affairs Committee (AY 2012-2013)
CPSC operations committee
ISPIA Exec and Steering committee
General Chair, IEEE Security & Privacy 2016
Program Committee, CCNC 2016
Program Committee, CCSW 2015
Program Committee, TRUST 2015
Vice Chair (Registration), IEEE Security & Privacy 2015
co-Organizer, IEEE SPW LangSec Workshop 2015
Program Committee, PSP 2014
Program Committee, TRUST 2014
co-Organizer, IEEE SPW LangSec Workshop 2014
Finance Chair, IEEE Security & Privacy 2014
Local Chair, NSPW 2013
Program co-Chair, ACNS 2013
Program Chair, ACSAC 2012
Program Committee, NSPW 2012
Program Committee, PST 2012
Program Committee, USENIX HotCloud 2012
Program Committee, ACNS 2012