Visiting Scholar and Research Scientist for HP Labs, developer of secure systems for DARPA. Developer of CapDesk, which applied ocaps to the man/machine interface to create a desktop effectively invulnerable to traditional computer viruses and zero-day attacks; Polaris, which applied the same principles to the Windows desktop; DonutLab, which demonstrated how to build an ocap version of PlanetLab, a distributed compute server system wherein each server resides in a different administrative domain with limited mutual trust; and Emily, an ocap version of OCaml.