Projects

000 Computing Genealogy Project Engineering · Bachelor's capstone

This bachelor's capstone project develops the Computing Genealogy Project into a usable public-facing system for exploring academic relationships in computing. The work includes collecting and cleaning advisor-student and collaboration data, improving the UI/UX for search, browsing, and visualization, designing stable APIs for programmatic access, and supporting embeddable views that can be integrated into personal pages, lab websites, or course materials.

100 Hypervisor Security SoK Engineering · Master's capstone · Hiring for 2026-2027

This master's capstone project studies hypervisors from three connected angles: hypervisors used as security mechanisms, the security of hypervisors themselves, and the risks introduced by insecure hypervisor designs or deployments. The project aims to build a systematic knowledge base that clarifies threat models, isolation assumptions, vulnerability classes, measurement methods, and open research problems across commodity, cloud, embedded, and security-oriented virtualization systems.

101 Firmware Rehosting Service and Reports Engineering · Master's capstone

This master's engineering project builds a firmware rehosting service that turns firmware images into reproducible emulation and analysis tasks. The system should support firmware intake, unpacking, architecture and platform identification, environment reconstruction, service launch, instrumentation, and execution monitoring. It also produces structured reports that summarize rehosting status, reachable services, runtime behavior, configuration assumptions, observed failures, and follow-up security testing opportunities.

102 Hypervisor Fuzzing Service and Reports Engineering · Master's capstone

This master's engineering project builds a hypervisor fuzzing service for repeatable testing of hypervisor interfaces and virtualization components. The system should manage target setup, guest workload generation, interface modeling, input mutation, crash detection, coverage collection, triage, and regression replay. It also produces structured reports that describe tested interfaces, fuzzing campaigns, discovered crashes, reproducibility, root-cause hypotheses, security impact, and recommended next steps.

103 Building a Recursive Self-Improvement Workflow for POC Generation Engineering · Master's capstone · Hiring for 2026-2027

This master's engineering project builds a recursive self-improvement workflow for proof-of-concept generation. Based on Magma, ground-truth bug benchmarks, and a workflow DSL, the project designs and evaluates an agentic pipeline that can generate POCs, execute them against known vulnerable targets, diagnose failures, revise its workflow, and accumulate reusable strategies over time. The goal is to turn benchmark-backed POC generation into a measurable engineering loop for studying how LLM-based security agents improve through execution feedback.

200 Regression-Aware LLMs for System Programming Research · PhD project

This PhD research project investigates how large language models are changing system programming and how they introduce regressions into evolving codebases. The project tracks emerging LLM-based system-programming workflows, develops methods to detect functional, performance, security, and reliability regressions, and studies how regression risk accumulates during long-running software development and maintenance. It further explores regression-aware reflection and self-evolution mechanisms that allow LLM-based agents to learn from failures, preserve previously validated behavior, and avoid reintroducing regressions over time.

201 Fault Injection and Prevention Research · PhD project

This PhD research project studies fault injection as a practical attack path when software systems become increasingly difficult to exploit directly. The project examines how attackers use voltage, clock, electromagnetic, laser, and other physical fault models to bypass security checks, corrupt control flow, extract secrets, or undermine trusted execution. It further develops prevention and detection techniques across hardware, firmware, compilers, runtimes, and system software, with the goal of building systems that remain secure even under realistic fault attacks.

202 Cyberspace Range Research · PhD project

This PhD research project builds a cyberspace range that mimics realistic cybersecurity environments at scale. The range combines complex infrastructure, strategic multi-step missions, realistic attacker and defender workflows, and large numbers of predefined agents to create reproducible yet dynamic cyber scenarios. The goal is to exercise and evaluate cyber models in settings closer to real operations, where success depends not only on isolated vulnerability solving, but also on planning, adaptation, coordination, situational awareness, and long-horizon decision making.

203 Defense in Depth for Sandboxes Research · PhD project · Hiring for 2026-2027

This PhD research project studies defense-in-depth architectures for process-based and VM-based sandboxes. The project investigates how sandbox escapes and policy bypasses emerge across system-call interfaces, shared resources, runtime services, and hardware boundaries, then develops layered defenses that combine behavioral monitoring at security-relevant interfaces, exploit prevention, and compartmentalization. It further explores techniques such as pattern matching, hardware-assisted enforcement, and hardware-software co-design to make sandboxed execution more resilient against both known attack patterns and previously unseen exploitation strategies.