My research vision is to develop systems that automatically check the world's software for exploitable bugs. The two most important words to me are shown in red. My approach is based on using program analysis with security-specific properties, which I call software security.
I am fortunate to have advised several great PhD students:
- Tiffany Bao
- Matthew Maurer
- Thanassis Avgerinos (co-founder of ForAllSecure)
- Alex Rebert (on leave, co-founder of ForAllSecure)
- Edward J. Schwartz (PhD ECE 2014, now at SEI)
- Jiyong Jang (PhD ECE 2014, now at IBM Watson)
- Jonathan Burket (now at Apogee Research)
- Sang Kil Cha (PhD ECE 2015, now at KAIST)
- Peter Chapman (now at Duolingo)
- Maverick Woo (now CyLab Systems Scientist)
- JongHyup Lee (Assistant Professor KNUP)
- Manuel Egele (now an Assistant Professor at Boston University)
I teach Introduction to Computer Security (18-487), Software Security (18-732), and Malware, Defense, and Vulnerability Analysis (18-739c).
I also run PicoCTF, an annual computer security contest for high school students.