Research Scientist - Cybersecurity, Computer Security
CurrentMy current job at Intel consists of four roles:1. I am an innovator. I develop novel solutions to address challenging problems in the area of computer security. My first project that matured into a product is called AEX-Notify, an architectural extension to Intel SGX that can be used to prevent malicious privileged software (OS/VMM) from exerting fine-grained control over an SGX enclave.2. I am an inventor. I have filed 20+ patents that touch on computer architecture, computer microarchitecture, and programming language design. Most of my patents enhance the security of computing systems. Some are also intended to enhance the performance of computing systems. Lately I have been exploring new applications for generative AI.3. I am an analyst and advisor. I work with the Intel PSIRT to triage and understand new vulnerabilities and their potential implications for Intel and its customers/partners. I have developed and published mitigation tools (see "An Optimized Mitigation Approach for Load Value Injection" below) and developed and published vulnerability analysis tools (see "Intel Research on Disclosure Gadgets" below). I have authored or co-authored guidance for many high-profile vulnerabilities, including Load Value Injection, Branch History Injection, Floating-Point Value Injection, and Retbleed.4. I am a mentor. I work with graduate student researchers at several top-10 computer science schools. I help them to identify new research areas to explore, solve challenging technical problems, and contribute to peer-reviewed conference papers.
