People
Our lab's participants range from professors with dozens of years of experience to high school students. This diversity in background and experience enables us to address real-world problems using fresh perspectives.
Faculty
-
Justin CapposProfessor and Lab Director - websiteResearch Interests Solving real world security problems in practiceProjects The Update Framework (TUF) , Uptane , in-toto , gittuf , SBOMit , Just One Turtle , The Archive Framework (TAF) , Atoms of Confusion , CacheCash , Lind , Darnit , ShardGuard , CrashSimulator , PolyPasswordHasher (PPH) , Seattle , Sensibility Testbed , API Blindspots , NetCheck , upPIR , and Virtual Secure Network (VSN)Publications NDSS 2026, NDSS 2025, ACSAC 2023, USENIX Security 2019, AsiaCCS 2018, MSR 2018, FSE 2017, USENIX Security 2017, USENIX ATC 2017a, USENIX ATC 2017b, USENIX Security 2016, NSDI 2016, and [more]Software/System Deployments TUF used in Microsoft, IBM, Google, VMware, Redhat, DigitalOcean, Datadog and Docker; tag security in git; Uptane used in over a third of new cars on US roads starting in a few years. in-toto used by thousands of companies including Twitter, PBS, Washington Post, NBC, etc. Seattle deployed on thousands of devices and used in one hundred classes; Stork's security model used in major Linux package managers; etc.
Postdocs
-
Marco De VincenziPostdoctoral Associate - websiteResearch Interests Automotive cybersecurity, cyber-physical systems, V2X authentication
PhD. Students
-
Patrick ZielinskiPh.D. CandidateResearch Interests Distributed systems, version control systems, and cryptography
Other Students
-
Yongjae ChungMaster's studentResearch Interests Systems security, machine learningProjects gittuf -
Ziyi XuMaster's studentResearch Interests Software supply chain security, dependency risk analysis, and intelligent systems -
Aaditya RengarajanMaster's student - websiteResearch Interests Cybersecurity, Network Security, Cyber Threat Intelligence, Dark Web Monitoring, Privacy-Preserving Machine Learning, AI in Cybersecurity, Offensive Security, Malware Classification, Cloud Storage Security, Incident Response, Dynamic Policy Adjustment -
Naman BadlaniMaster's studentResearch Interests Cybersecurity, Vulnerability Assessment, Penetration Testing, Kernel Security, Privilege Escalation, LLM Security, Deepfake Audio Classification, Machine Learning, Computer NetworksPublications ICCES 2024 -
Sihoon (Sean) KimUndergraduate StudentResearch Interests Systems security, embedded systems
Alumni
-
Yuchen (Dennis) ZhangPost-doctoral researcherResearch Interests Fuzz testing, static analysis, system and software security, Rust language analysis and security -
Renata VadernaPost-doctoral researcherResearch Interests Sofrware engineering, software securityPublications NDSS 2026, Scientific Programming 2018, Knowledge-Based Systems 2016, and Knowledge-Based Systems 2015 -
Aditya Sirish A YelgundhalliPh.D. 2025 - websiteResearch Interests Internet privacy, systems security -
Lukas PühringerDeveloperResearch Interests Security in operating systems and full stack networking. Distributed software and version control systemsSoftware/System Deployments Sensorium Framework (used on smartphones to capture data for Open3GMap), Sensibility Testbed, DMARC viewer to analyze DMARC aggregate reports -
Marina MoorePh.D. 2024Research Interests Systems security, privacy -
Lois Anne DeLongResearch Associate/Technical WriterResearch Interests Experimental design involving human subjects; links between natural and programming languages; preparation and dissemination of technical standardsPublications Behaviour and Information Security, ESCAR USA 2020 Special Issue, SOUPS 2018, IEEE VT 2018, FSE 2017, and ;login 2017 -
Preston Kent MoorePh.D. 2022 (co-advised with Phyllis Frankl), now a Senior Software Engineer at AnacondaResearch Interests Secure software engineering, automated testing, systems securityProjects CrashSimulator -
Yiwen LiPh.D. 2021 (co-advised by Brendan Dolan-Gavitt), now a Software Platform Architect at IntelResearch Interests Operating system security, virtualization, network securityProjects Lind -
Santiago Torres-AriasPh.D. 2020, now an assistant professor of Electrical and Computer Engineering at Purdue University - websiteResearch Interests Password protection and securing the software supply chainPublications Journal of Computer Security, USENIX Security 2019, IFIP SEC, AsiaCCS, NSDI 2016, USENIX Security 2016, CyberTalks 2016, and ;login 2014Software/System Deployments Security fixes related to tag attacks used in git. PPH libraries in 8 languages, support for different OSes, Yubikey support, and PAM. PPH deployments in the Seattle Clearinghouse and BioBank. -
Dan GopsteinPh.D. 2020Research Interests Programming languages and software systemsProjects Atoms of ConfusionSoftware/System Deployments DeepEnumerable Ruby package for the declarative manipulation of deeply nested data structures; clust.bin.pair R package containing statistical tests for clustered binary matched pair data. -
Trishank KuppusamyPh.D. 2017, now Engineering Manager at DataDog - websiteResearch Interests Securing software updates for community repositories and automobilesPublications USENIX Security 2019, IEEE VT 2018, USENIX ATC 2017, ;login 2017, escar 2016, NSDI 2016, GLOBECOM 2015, and ISBA 2015 -
Sebastien AwwadDeveloper, now Security Engineer at AnacondaResearch Interests Incentivizing secure code, secure frameworks, computational neuroscienceSoftware/System Deployments Uptane reference implementation, TUF modifications, Python dependency resolver -
Yanyan ZhuangResearch Professor, now a tenure track professor at the University of Colorado, Colorado Springs - websiteResearch Interests Mobile systems, wireless networks, privacy and securityPublications Behaviour and Information Security, TPDS 2018, SAS 2018, HotMobile 2018, FIE 2017, FSE 2017, TrustCom 2015, ACSAC 2014, NSDI 2014, and SIGCSE 2014Software/System Deployments Led development and hack-a-thons for the Sensibility Testbed -
Albert RafetsederResearch Professor, now affiliated with Research Group Cooperative Systems at the University of ViennaResearch Interests Building experimental platforms for research, education, and the general publicPublications TPDS 2018, SAS 2018, HotMobile 2018, FWC 2017, login 2015, GREE 2013, and USENIX ATC 2015 (Fence)Software/System Deployments Seattle running on a server, desktop, laptop, smartphone, WiFi router near you! -
Vladimir DiazDeveloperResearch Interests Software update securityProjects The Update Framework (TUF) -
Luqin WangPh.D. 2016 (co-advised by Yong Liu), now a Research Scientist at FacebookResearch Interests Social networks, Internet measurement, network security and distributed systemsProjects upPIR -
Sai Teja PeddintiPh.D. 2015 (co-advised by Keith Ross), now a Senior Research Scientist at Google - websiteResearch Interests Privacy, security, social networks, machine learningProjects Virtual Secure Network (VSN)
