My research focuses on computer security. I am interested in a broad range of security problems, including mobile and wireless security, Web security, software security, and network security. I am a member of the Computer Security Laboratory.

Projects

My current research focuses on mobile computing and security, as exemplified by our recent papers:

• Quantifying the Effects of Removing Permissions from Android Applications.
• Retrofitting Android Apps.
• Characterizing Android Application Plagiarism and its Impact on Developers.
• Asking for (and About) Permissions Used by Android Apps.

My past projects include:

• Wireless security: TRUST 2012, TRUST 2012, MoST 2012, MoST 2012, MobiSys 2012, ASIACCS 2012, HotSec 2011, NDSS 2011, INFOCOM 2010, HotMobile 2008, NDSS 2008, SecureComm 2006
• Web security: WebApps 2010, NDSS 2009, CCS 2008, UPSEC 2008, WWW 2007, NDSS 2007
• Malware analysis, detection, and defense: ACSAC 2007, ACSAC 2006
• Firewall security: IEEE S&P 2006
• Software security: MOPS

Funding

• NSF: Trusted Computing, CAREER Award, CyberTrust,
• DoD MURI: HELIX.
• Industrial: Sprint, Intel, Microsoft.

Services

Program committees: WiSec 2011; Oakland 2009; NDSS 2011, 2010, 2009, 2008, 2006; SecureComm 2008, 2007; ICDCS 2008; USENIX Security 2007, ASIACCS 2006.

Students

I am lucky to have the chance to work with a group of outstanding graduate students: Jonathan Crussell, Bogdan Copos, Benjamin Davis, Clint Gibler, Gabriel Maganis, Ryan Stevens.

I am looking for motivated, talented students who are interested in working with me on exciting research projects in security. Please feel welcome to drop by.

Teaching

Winter 2013

• ECS 60: Data Structures and Programming.

Past teaching