Managing Risks of AI-generated Code
Modern software is created by combining pre-existing software packages into a software product. This approach is enabled by the growing popularity of the Ope...
Posts by Year
2025
2022
Open-source software supply chain security
Large-scale open-source software ecosystems, such as npm for JavaScript and PyPI for Python, are critical entities in the software supply chain. They provide...
IoT security for home users
Home networks of smart (IoT) devices are rapidly growing in complexity. Most home users lack training in cybersecurity and are thus left coping with securing...
Securing IoT codebases via program analysis and transformation (2018-2022)
IoT firmware security is notoriously problematic. IoT software ships with potentially insecure components, and may be bloated by unnecessary functionality. T...
Understanding and detecting next-generation ransomware
Ransomware is one of the most dangerous malware threats, as it has the potential of disrupting operations of organizations, governments, and critical infrast...
Generation of specifications for malware network protocols (2014-2017)
Detecting malware communication from vantage points within the network is complex for various reasons. The rate at which new malware families are released ma...
Scope-aware scheduling for intrusion detection systems (2011-2014)
Traffic analysis performed by intrusion detection systems (IDSs) present unique challenges: on one hand, analysis has to sustain high throughput to search ev...
Constraint-based architectural scheduling (2011-2014)
PLUG and other similar communication-exposed architectures allow the compiler significant freedom in mapping instructions to cores (and organizing the necess...
Fingerprinting network problems (2010-2011)
During my internship at Microsoft Research India, I contributed to the development of a tool - Deja vu - for identifying and classifying network problems. Th...
Flexible network lookup modules (2008-2013)
As part of my research I participated in the development of PLUG (Pipelined LookUp Grid) - a flexible network lookup module designed to be employed in networ...
Parallel data transfers (2007-2009)
For my master thesis, I participated in the development of a session-layer protocol - called PATTHEL - that aggregates multiple TCP connections in a single l...