An increasing proportion of the global economy is dependent on the security of network communications and infrastructures. Unfortunately, these security properties are violated with alarming frequency due to implementation errors or developer confusion, or because systems are made use of in unanticipated ways. This research seeks to better understanding this breakdown between theory and practice, and identify ways to restore correct functionality in vulnerable networked systems. To this end, our work has considered the security challenges surrounding Software Defined Networks (SDN), the ubiquitous TLS/HTTPS protocols, and legacy telecommunications infrastructure.

Recent Papers:

• Provenance for Intent-Based Networking
• Valve: Securing Function Workfows on Serverless Computing Platforms
• Automated Discovery of Cross-Plane Event-Based Vulnerabilities in Software-Defined Networking
• Cross-App Poisoning in Software-Defined Networking
• Boxed Out: Blocking Cellular Interconnect Bypass Fraud at the Network Edge
• Accountable Wiretapping -or- I Know They Can Hear You Now
• Securing SSL Certificate Validation through Dynamic Linking