Originally, the Internet was a collaborative effort among researchers, but has since evolved into a marketplace comprising millions of commercial entities and billions of users who often have conflicting goals. My work builds off of the belief that we can secure the Internet by understanding and accounting for these competing interests.
I empirically measure security on the Internet to understand how security breaks down, and I apply economics and cryptography to design and build new systems with provable and usable security. I study the web's PKI, censorship avoidance, DNS root servers, and more. I have been fortunate to work with many wonderful collaborators. See my CV for more information.
I am an Assistant Professor at the University of Maryland. I am looking for ambitious, motivated PhD and undergraduate students to work with. If you're interested in systems and network security, then:
I am the founder of Breakerspace, a lab for group undergraduate research in computer and network security. CS enrollment is skyrocketing: Breakerspace's goal is to scale research so more students can try it. We are actively looking for participants.
I was featured in a Packet Pushers podcast in which we discussed how I got into academia, why I actually kind of like applying for grants, and why I did not pursue my original love: tuba!
Our paper on "Hammurabi: A Framework for Pluggable, Logic-based X.509 Certificate Validation Policies" received a Best Paper Honorable Mention from ACM CCS 2022! Congrats to my coauthors, including the five Breakerspace undergraduate researchers!
Rising junior Frederick Sell presented our paper "GET /out: Automated Discovery of Application-Layer Censorship Evasion Strategies" at USENIX Security 2022. See the talk video here.
Have you ever noticed the VPN ads in YouTube? Omer Akgul presented our paper "Investigating Influencer VPN Ads on YouTube" at IEEE Security & Privacy that shows how technically unsound they can be. See the talk video here.
Our paper on "Weaponizing Middleboxes for Reflected TCP Amplification" received an Internet Defense Prize! Thank you to USENIX and Facebook for this award.
Fall 2023, I'm teaching:
I also helped design and run the Build it, break it, fix it secure programming competition that gives students firsthand experience with building secure code.All My Classes
I was the General Chair for ACM Internet Measurement Conference (IMC) 2021", the ACM Symposium on SDN Research (SOSR) 2017, and HotNets 2013. I regularly serve on program committees and NSF panels, and have also visited Congress to discuss increasing nationwide funding for scientific research.All Service