Compiler and query language engineering for a distributed simulation platform

CodeQL analysis for C/C++.Writing QL queries to automatically find bugs in C and C++ code.

C/C++ static analysis.Writing QL queries to automatically find bugs in C and C++ code. Supporting security teams at customers in developing custom static analysis rules.

Binary equivalence checking of variants produced by a diversifying compiler. Automated testing of an x86 semantics model against hardware. Randomized instruction generation for model testing.

Evaluation of frameworks for C++ source-to-source transformation. Development of source-to-source obfuscators using the Clang AST. Developed LLVM transformations

Worked with an MIT-lead team on a DARPA program focusing on static analysis of Android applications to support malware analysis. Expanded and improved an ANTLR4-based source transformation of Android Java libraries to simplify analysis of apps. Acted as a subject matter expert for a machine learning effort to identify security-sensitive library methods.

Bugfixes and a small API extension in a large backend java system. Rewrote internal tools webpage in Java using the Spring MVC framework.