Devin Coughlin Email & Phone Number

Cupertino, California, Us

Second-level manager leading the Security Tools group at Apple, which includes teams focused on security-oriented programming language extensions, compiler & hardware-supported security mitigations, static analysis, and dynamic analysis. We develop new programming language features and compiler technologies to eliminate entire classes of security vulnerabilities, harden existing codebases, find bugs, and also extend the reach of memory-safe languages into security-critical environments. We partner closely with the security and operating systems teams at Apple to deploy these language features and tools to improve the security and stability of Apple's platforms. The team actively contributes to the LLVM and Swift open source projects.

Cupertino, California, Us

Engineering manager leading the Program Analysis Team in Developer Tools at Apple. The team developed static analysis and dynamic analysis for bug-finding tools distributed with Xcode, including Address Sanitizer, Thread Sanitizer, the Clang Static Analyzer, and Main Thread Checker. We also designed and implemented language features for developer productivity and safety to Swift.

Cupertino, California, Us

Compiler engineer contributing to the Clang Static Analyzer, the Swift compiler, and the LLVM Sanitizers (dynamic analysis). My main focus was the Clang Static Analyzer, for which I was open-source code owner. I also designed and implemented Swift's API availability checking language feature and contributed Swift's static checks enforcing exclusive access to memory.

Boulder, Colorado, Us

Research in static analysis, dynamic analysis, and verification under Professor Bor-Yuh Evan Chang. My Ph.D. dissertation, "Type-Intertwined Separation Logic," described how to soundly and efficiently combine type checking with separation-logic-based static analysis for the purpose of checking dependent refinement types in Objective-C.

Cupertino, California, Us

I interned with the Swift frontend team.

Princeton, Nj, Us

With Gogul Balakrishnan, Franjo Ivancic, and Aarti Gupta, I designed and implemented a fault injection framework for Java distributed systems that prioritizes potential injection sites that are more likely to be buggy based on criteria from static and dynamic analysis.

Redmond, Washington, Us

With Todd Mytkowicz and Manuel Fandrich, I designed, implemented, and evaluated a static pointer analysis extending Rapid Type Analysis (RTA) to handle C#-style generics. We used this analysis to develop a tool for the Common Compiler Infrastructure (CCI) that removes unreachable code from CLR/.Net bytecode applications to shrink binary size.

Mountain View, Ca, Us

With Alan Leung, I proposed and implemented a new cross-module code motion optimization for the Closure JavaScript Compiler that aggressively shrinks initial download sizes at the cost of fix-ups in later modules.

Bachelor'S Degree, Computer Science

Doctor Of Philosophy (Ph.D.), Computer Science