I research software security and programming languages.   (CV)

Advertisements

25th ACM Symposium on Applied Computing: Software Verification and Testing Track

7th ACIS International Conference on Software Engineering Research, Management and Applications

Publications, arranged by:

Publication date

Venue type

Research projects:

RunTime	Theory and practice of monitoring software at run time
PoliSeer	Specifying and visualizing complex security policies
IVCon	Inline visualization of concerns
Polymer	Software monitoring in theory and practice
Project Zap	Trustworthy computing in the presence of transient faults
AspectML	Foundations of aspect-oriented programming languages
Gleipnir	Enforcing control-flow policies on software

Current graduate students:

Nalin Saigal (PhD student 2006-present)

Daniel Lomsak (PhD student 2008-present)

Srikar Reddy (Master's student 2007-present)

Teaching:

Fall 2008: COP 4020 (Programming Languages)

Spring 2008: CIS 6930 (Foundations of Software Security)

Fall 2007: CIS 4930/6930 (Compiler Design)

Spring 2007: CIS 6930 (Foundations of Software Security)

Fall 2006: COP 4600 (Operating Systems)

Talks:

• An Introduction to Cryptography for Homeland Security, Institute for Safety Security Rescue Technology (iSSRt) Distinguished Lecture (USF, 2008)

• Coping with Runtime-Policy Complexity, Workshop on Run Time Enforcement for Mobile and Distributed Systems [link] (Dresden, 2007)

• Runtime Software Monitoring, Carnegie Mellon University (Pittsburgh, 2007)

• Monitoring Software to Enforce Run-time Policies, Microsoft Research-INRIA Joint Centre (Paris, 2007)

• Polymer: A Language and System for Specifying Complex, Modular Run-time Policies, Katholieke Universiteit Leuven (Belgium, 2007)

• Intro to Language-based Security, IEEE-CS and ACM student chapter meetings (USF, 2007)

• New Research in Software Security, ACM student chapter meeting (USF, 2006)

• Enforcing Security Policies with Run-time Program Monitors, Various colloquia (Kansas State University, University of South Florida, Florida International University, University of Texas-Arlington, and Reservoir Labs-NYC, 2006)

• Enforcing Non-safety Security Policies with Program Monitors, ESORICS (Milan, 2005)

• Policy Enforcement via Program Monitoring, Princeton University (Princeton, 2005)

• Composing Security Policies with Polymer, PLDI (Chicago, 2005)

• Software Control Flow Integrity, Microsoft Research Silicon Valley (Mountain View, 2004)