My research confronts issues of security and transparency in computer systems and networks. Within this broad area, my interests span various domains of computing, including operating systems, the cloud, and network communications, as well as both mobile and embedded devices. My recent work has evaluated the security of mobile applications, introduced mechanisms that defend against USB-based attacks, and designed security-enhanced provenance-aware systems that are capable of reliably tracking and explaining system intrusions.

I earned my Ph.D. from the University of Florida, where I was advised by Professor Kevin Butler and a founding graduate student of the Florida Institute for Cybersecurity. My dissertation work was in the area of data provenance, particularly the construction of secure provenance-aware systems. I obtained my M.Sc in Computer Science at the University of Oregon, and bachelors degrees in Computer Science and English Literature from the University of Maryland.

Note: I am building a world-class security research group at the University of Illinois. If you are a motivated student with an interest in systems security, I would be interested in speaking with you. Students must have a strong technical background and be comfortable with systems and/or security work. If you are not a student at the University of Illinois and you are interested in my research, please apply to the program.

Recent News

13 May, 2018
Our paper, "A Provenance Model for the European Union General Data Protection Regulation," will appear during "Provenance Week 2018" at the 7th International Provenance and Annotation Workshop (IPAW'18).

2 May, 2018
Two of our papers have been accepted for publication at the 2018 USENIX Security Symposium:
  1. Analysis of Privacy Protections in Fitness Tracking Social Networks -or- You can run, but can you hide?
  2. Skill Squatting Attacks on Amazon Alexa

1 April, 2018
Very excited to announce that I have been awarded an NSF CAREER Award to investigate the design of scalable provenance-based monitoring and enforcement mechanisms! (link)

More news