Jessy Ayala Email & Phone Number

Irvine, Ca, Us

Irvine, California, Us

Research Areas: Software Engineering, Software and Systems Security, Testing and Program AnalysisAdvisor: Joshua Garcia

Richland, Wa, Us

My focus was exploring metadata, current literature, and future research directions for software bill-of-materials (SBOMs) to identify the challenges of the SBOM generation-to-management pipeline in practice. I laid out infrastructure, e.g., software requirements, and server costs, to implement SBOM generation-to-management for a deployed internal cloud application written in JavaScript using npm tooling, Python, and Bash. Supervised under Doug Dennis.

Brooklyn, New York, Us

Assisting with tooling experimentation that will help threat modeling engagements start with a baseline model of the client’s production system which does not depend on client understanding. Combining large language models (i.e., GPT-4) with static analysis (e.g., semgrep) and reconnaissance techniques to automate system attack surface mapping. Supervised under Kelly Kaoudis.

Livermore, Ca, Us

My focus was creating and deploying attacks on a contained network that are then mapped to the Enterprise MITRE ATT&CK framework. I also wrote queries, using Splunk, that can be used to detect such attacks. Built an in-house security matrix to promote repeatability and transparency (i.e., purple teaming lens). Supervised under Brandon Ta.

Acton, Massachusetts, Us

Security testing protocol development for mobile devices (OWASP, NIST, HIPAA), assisting cybersecurity 510k submissions (FDA), regression security testing and analysis, integrating and leading cybersecurity timeline during the software development lifecycle, creating documentation and reports from penetration testing, vulnerability triaging, threat modeling and risk assessment/analysis for Omnipod® products. Product security team. Supervised under Jacob Combs.

Acton, Massachusetts, Us

Automating mobile security and application security testing, built a prototype for application security testing pipeline (SAST, DAST, IAST, vulnerability management), security test case development incorporating OWASP Mobile Security Testing Guide recommendations and company-specific controls, threat modeling and risk assessment/analysis.

Livermore, Ca, Us

Worked on enhancing PySCES, a Python-based tool used for modeling capabilities to rapidly assess the potential scope of impacts that a cyber-attack can have on energy infrastructure based on publicly documented vulnerabilities and the ICS MITRE ATT&CK® framework. Supervised under Mike Nygaard.

New York, Ny, Us

NYU mLab - https://mlab.engineering.nyu.edu/IEEE Workshop on Reliable and Resilient Digital Manufacturing 2021 - Toward Characterizing Behaviors of Open-source Contributors for Manufacturing Software to Identify Security Risks

New York, Ny, Us

Application Security: Fall 2021Operating Systems: Summer 2021, Fall 2021

San Diego, Ca, Us

Roosevelt International Baccalaureate Middle School (2018-2019)Big Ideas Math Years I-III, Math STEP-UP supportEast Village Middle College High School (2019-2021)Integrated Math II, Integrated Math III, Pre-calculusWebmaster (2019-2021)STEM Advisor (2020-2021)Leader of Innovation Program (2019-20)GSDMC 2020 Conference PresenterTODOS 2020 Conference PresenterSDEM 2021 Fellow

Cambridge, Ma, Us

Developed CLI modules for a Raspberry Pi with an open-source code base via web scraping, regular expressions, and working with Bluetooth services. Performed weekly code reviews alongside other interns. Integrated automated static analysis within the Travis pipeline that is triggered with every build update for the accompanying Android application and met with developers to discuss secure code practices.

San Diego, California, Us

La Jolla, Ca, Us

American Higher Education and the Collegiate Experience: Fall 2018, Winter 2019, Spring 2019.

La Jolla, Ca, Us

Range of math and computer science coursework including calculus I-III, differential equations, linear algebra, numerical analysis, and Java programming.

Built prototype UI/UX for iOS application, helped create and deliver pitch for potential investors.

La Jolla, Ca, Us

Collected drone data in efforts to help robustify object recognition in images.

Doctor Of Philosophy - Phd, Information And Computer Sciences

Master'S Degree, Cybersecurity

Bachelor’S Degree, Mathematics-Computer Science

Master'S Degree, Education

San Diego, Ca