Research interests (Summary)
    I study programming languages and computer security. Most recently, my work has focused on two research directions: (1) language-based enforcement of information-flow policies and understanding dynamic security policies, and (2) access control and authorization logic. I am also interested in secure concurrent and distributed computing, functional programming languages, type theory, linear and modal logics, theorem proving and mechanized metatheory. More information about my research can be found in this research statement.

Research Activities, News, and Conferences
    :: Oregon Programming Languages Summer School 2008
    :: IEEE Security & Privacy 2008 (Oakland)
    :: Security Oriented Languages (SOL)
    :: Coq Tutorial at POPL 2008
    :: Penn's PL Club
    :: POPLmark
    :: New Jersey Programming Languages Seminar (NJPLS)
    :: Penn Security Seminar
    :: TIME-DC

Recent Publications (Complete List)
    - AURA: A Programming Languages for Authorization and Audit [To appear: ICFP 2008]
    - Abstracting Syntax [Submitted Feb. 2008]
    - Evidence-based Audit (Draft) [CSF 2008]
    - HardBound: Architectural Support for Spatial Safety of the C Programming Language [ASPLOS 2008]
    - Abash: Finding Bugs in Bash Scripts [PLAS 2007]
    - The Cryptographic Decentralized Label Model [Oakland 2007]
    - Combining Events and Threads for Scalable Network Services [PLDI 2007]
    - «more»

Current Ph.D. Students and Post Docs
    > Limin Jia, Ph.D. (logic and mechanized metatheory)
    > Karl Mazurak (scripting languages and protocols)
    > Jeff Vaughan (cryptography and audit)
    > Jianzhou Zhao (mechanized metatheory)

Current Undergraduate Research Participants
    . Luke Zarko

Former Ph.D. Students
    . Peng Li (Ph.D. 2008, now at Google)
    . Stephen Tse (Ph.D. 2007, now at Google)

Former Undergraduate Students
    . Matt Gruskin (2008)
    . Dan Margolis (2006)
    . Kate Moore (2004)
    . Roman Shor (2008)
    . Joey Schorr (2008)

Teaching (Summary)
    * CIS 341: Compilers [2008]
    * CIS 700: Software and Compiler Verification [2005]
    * CIS/TCOM 551: Computer and Network Security [2008] [2007] [2006] [2005]
    * CSE 331: Introduction to Networks and Security [2006] [2004] [2003] [2002]
    * CIS 700: π -Calculus and Foundations of Concurrent Systems [2004]
    * CIS 670: Advanced Topics in PL (Safety and Security) [2003]

Awards and Honors
    - NSF CAREER award, 2004
    - Best Paper award at SOSP, 2001
    - Intel Foundation Graduate Fellowship, 2001
    - Best Paper award at ICFP, 1999
    - NSF Graduate Student Fellowship, 1996

Funding
My research has been supported in part by the following grants. Any opinions, findings, and conclusions or recommendations expressed in this material are those of the author(s) and do not necessarily reflect the views of the National Science Foundation.
    - NSF 0311204: Dynamic Security Policies
    - NSF 0346939: CAREER: Language-based Distributed System Security
    - NSF 0524059: Resource-guided Implementation of Secure Embedded Software
    - NSF 0524035: Flexible, Decentralized Infomation-flow Control for Dynamic Environments
    - NSF 0551589: CRI: Machine Assistance for Programming Language Research
    - NSF 0541040: CCF: Unifying Events and Threads: Language Support for Network Services
    - NSF 0716469: CT-T: Collaborative Research: Manifest Security
    - ONR: TIME-DC

[Curriculum Vita]     [Talks]     [Writing Tips]