I am interested in designing principled yet practical solutions to system security problems. I work on the problems of vulnerability detection, prevention, and mechanisms for developing secure systems. My solutions have a flavor of static/dynamic program analysis, fuzzing, type systems, language-based techniques, machine learning, or a combination of the above.