Projects

Publications

Industry Communication

• How We Improved Search Results in 1Password (1Password Blog, 2024)
• CVE-2024-42218 for 1Password 8 for Mac (1Password Support, 2024)
• How 1Password Protects Information on Your Devices (and When it Can't) (1Password Blog, 2024)
• Efficient JOP Gadget Search (Paged Out! Magazine 2023)

Peer-reviewed Papers

• Can't Spell "Curriculum" Without "C" (Rust Education Workshop 2022)
• SoK: Enabling Security Analyses of Embedded Systems via Rehosting (ACM ASIA CCS 2021)
• PyPANDA: Taming the PANDAmonium of Whole System Dynamic Analysis (NDSS BAR 2021)

Graduate Student Posters

• Firmware Security on Commodity Hardware: 2017 MITRE Embedded CTF (RSA 2018)
• STM-based Introspection: A Platform for Analysis of Low-level Security Solutions (CCD 2017)
• Symbolic Execution for Vulnerability Discovery: Evaluating and Extending the Manticore Platform (CCD 2017)

Talks and Interviews

• High Assurance Rust (The Rustacean Station Podcast, July 2022)
• Safe && Portable Data Structure Design (C&S Lightning Talk Night, December 2021)

Open-source

• high-assurance-rust - A free book about developing secure and robust systems software [Software Assurance]
• scapegoat - Safe, fallible, embedded-friendly ordered set and map data structures [Embedded Development]
• xgadget - Fast, parallel, cross-variant ROP/JOP gadget search for x86/x64 targets [Binary Exploitation]