I worked as a Research Intern at the Computer Science Laboratory at SRI International this 2022 Summer.

The main research objective we started of with was:

How do we protect the integrity of open-source software projects from malicious actors and influence operations within the community?

The motivation for this research comes from the fact that open-source software has become a critical part of our infrastructure. And we have seen multiple attacks on open-source projects that have resulted in supply chain attacks and other security incidents downstream. With this larger goal in mind, we first tried to tackle a smaller problem:

Continue Reading →

I interned at the Intelligent Systems Laboratory at PARC during the Summer of 2021. The problem, at the high level was:

How would you go about removing backdoors from a control binary?

I primarily contributed to the binary de-compilation and program analysis work. Dabbed in a bit of program re-synthesis.

More details in the paper CONSTRUCT: A Program Synthesis Approach for Reconstructing Control Algorithms from Embedded System Binaries in Cyber-Physical Systems.

I was part of the Shadow PC for IEEE S&P 2020. THe Shadow PCs replicate the entire peer review process of a conference in parallel to the actual conference. This includes reading and reviewing papers, debating our reviews and scores with other members, and finally arriving at a consensus on the paper's accepted. The results of the shadow PC are then compared with main PC to see if any papers had strong disagreements.

The reading and review is in itself not very different from what we do as graduate stedents. But comparing our reviews with those of others and debating the merits of each paper was a great learning experience. This extended to the comparison of our reviews with those of the main PC. It was interesting to see how the main PC arrived at their decisions and how they differed from ours.

Continue Reading →