Windows Azure Identity Platform [Active Directory Federation Service] OAuth 2.0 Authorization Code Grant Flow Profile Aug 2012 – present • Designed and developed complete OAuth 2.0 authorization code grant flow. • Defined and implemented key properties and capabilities of authorization code, access and refresh tokens. • Designed and implemented end-to-end protocol including request parsing, user and device authentication, authorization, code/token creation, and token dissemination. • Modeled and developed app registration, consent model, RESTful lookup service for geo-redundant authorization codes, and single sign on (SSO) across apps. • Performed extensive threat modeling and implemented several security hardening techniques. Adaptive Multi-Factor Authentication System Aug 2011 – July 2012 • Designed and developed adaptive multi-factor authentication system which steps-up authentication scheme according to dynamic triggers. Triggers include resource sensitivity, request location, user/device identity, and claims based access rules provided by admin. • Implemented interface to dynamically load external auth providers like Phone factor, device authentication, and other 2FA providers. • Developed core features of WS-Federation and Saml 2.0, including federated sign on, username/password, client certificate based sign-in, SSO cookies, and federated sign-out. • Architected a new passive pipeline to improve multiple protocol pluggability. Developed several cross-team features including password about to expire notification and password update. • Directly improved Office365 sign-in experience.

Large Scale Multi-Stream Video Dissemination [Tele-Immersion] Jan 2011 – May 2011Advisor: Prof. Klara Nahrstedt, UIUC • Designed and implemented hybrid CDN/P2P overlay network which uses bandwidth optimization and bounded delay algorithm to maximize the number of concurrent viewers with varied resources. • Published paper in ICDCS 2012 (Acceptance ratio of 13%).Distributed Real-time Correlated Multimedia Streamer Aug 2009 – May 2011Advisor: Prof. Klara Nahrstedt, UIUC • Developed “Streaming as Service” kernel which provides real-time, QoS/QoE driven, on-demand streaming of correlated audio/video streams. • Code released as invention by UIUC, published paper in Nossdav 2011 and currently under patent review. • Defined “Bundle of Streams” concept for quantifying QoS of multiple correlated streams generated from correlated sensors. Used this metric to compare TCP, DCCP, and UDP protocols. • Published paper in ISM 2010.

Secure Authentication Protocol for Power Grids Jan 2009 – May 2009Advisor: Dr. Himanshu Khurana, UIUC • Discovered and fixed several security flaws in “DNP3 secure authentication protocol”, one of the major authentication protocols for smart power grids. • Proposed fixes to non-repudiation, unprotected ASDU operations, remotely updating keys, and error counters. • Published paper in HICSS 2010.

Secure Email List Services (SELS) Summer 2008Advisor: Dr. Himanshu Khurana, ITI, UIUC. • Designed unique proxy encryption protocol for secure exchange of e-mails. • Used PKI, PGP and COTS tools and coded automated integration tests using Python. • One of the 19 students selected worldwide for ITI Summer Intern Program-2008.

Background Subtraction Technique for Video Surveillance Summer 2008Advisor: Prof. Venkatesh K Subramanian, IIT Kanpur • Developed an approach for Removed or Abandoned Object Detection and Change detection using Co-Linearity Statistics. Achieved a speed of 11 frames/second. • Analyzed, coded, and compared 8 different background subtraction techniques using C++.

Iris and Fingerprint Recognition System Winter 2008Advisor: Prof. Phanguni Gupta, IIT Kanpur.• Developed “Iris and Fingerprint Image Recognition” system with an accuracy of 99.8%.• Implemented algorithms Canny Edge Detection, Haar transform, NonMaxSuppression for Iris detection, Orientation, Ridge Frequency Estimation, Gabor Filtering for fingerprint. Coded in Java.