Developed Vault-based keystore and CA. Programmed TPM2 chips for attestation and key storage.

Built pub/sub distributed IDS systems for protecting missile range networks.Wrote software that automates the analysis of reconnaissance detection.Developed advanced SDN-based least-privilege security system and implemented it in python. Evaluated SDP (Software Defined Perimeter) systems for government agencies, and developed a machine learning system that processes DNS packet traces to identify botnets.

Fixed memory bugs in OpenJDK native code.

Designed and implemented (as a KVM Linux kernel module) a scalable secure Ethernet bridge replacement for data centers that eliminates the need for ARP and spanning tree. This green computing technology reduces energy consumption by allowing data center resources to be used much more efficiently. It also includes congestion control, traffic shaping, and security features. It provides the means to create very large flat IP networks.

Mobility Management protocol design and implementation for wireless ad hoc networks. Designed and implemented a radio emulator that enables accurate reproducible protocol correctness and performance analysis of large scale ad hoc networks. It is a plug-and-play replacement for the actual radio device, thus ensuring that mobility-management software tests that are based on the emulator are completely realistic. Embedded Linux development: NAMA channel access, root file system construction, over-the-air software upgrade system. Created enhancements to mobile IP.

DARPA R&D. Built a User Mode Linux based test bed for network coding system tests. Implemented MAC protocol. Designed a topology discovery algorithm for network-coded networks. Investigated Topology control algorithms for Free Space Optical networks. Integrated mobile IP and OSPF (in C++/GNU), so that OSPF could distribute certain mobile IP control traffic in opaque link state updates.

Scalability analysis for IEEE802.11 wireless LANs. Embedded software integration and debugging. I created a emulation environment that provided highly-accurate instances of large-scale WiFi networks: up to 18,000 stations; up to 300 Access Points. The emulations were created by using the actual product software to ensure maximum fidelity and accuracy. (The emulated Access Points were created by porting their software to ECOS.) The stations were created from a Linux wireless device driver. The software was run under valgrind so that memory bugs could be found under a variety of conditions. I was responsible for porting the nexthop controller software to a Monta Vista PPC platform. In this role I was responsible for testing the nightly build and fixing all system bugs. I also maintained the PHP-based GUI software.

I evaluated multilevel security enhancements for HLA.

I designed, implemented, tested, and installed a scalable PKI-based network security architecture that protected customer accounts and infrastructure management interfaces. I developed the system on a Power PC single board computer with Monta Vista Embedded Linux. I played a key role in integrating the first product and installed it. I supervised large network rollouts. I monitored network health: security events(intrusions, attacks, open ports, etc.) and performance.

Designed and developed the NTDR routing and clustering algorithms. Invented a hybrid routing concept called Radio OSPF. Developed a technique for sharing code between OPNET, emulation testbeds, and field trials, that eliminated porting. Designed and developed a network visualization tool that provided detailed recording and replay of network events. Obtained six patents.

·        Designed data link, mobility management, and transport protocols for cellular data networks (CDPD and CDMA) ·        Designed congestion- and flow-control algorithms for mesh-topology ATM networks and scheduling algorithms for ATM switches. ·        Investigated telephone number portability technical issues. Served on internal committee with charter of promoting number portability. Advisor to operating companies on ISDN, AIN, and SS7 technical issues. ·        Investigated methods for wide-scale deployment of ISDN-based broadband Internet access. ·        Procured and configured a wireless-data test bed for the analysis of CDPD hardware/software integration issues and interoperability testing. ·        Developed an application gateway to reduce the cost of running electronic mail applications over CDPD. Performed system integration to support CDPD field trials. ·        Developed GPS applications for CDPD. ·        Represented GTE to TIA TR45.5.1.5 standards body (Cellular CDMA data). ·        Developed business relationships for the development of CDPD applications. ·        Developed a WWW system for reporting project results, providing tutorials, and recording test bed asset records.

Developed congestion control algorithms for networks.

DARPA Spread Spectrum packet radio R&D. I designed: channel access, flow control, congestion control, routing, and security protocols. The existing architecture distributed all information by broadcast transmissions. I demonstrated that receiver-directed transmissions can increase network throughput by a factor of ten. I also demonstrated that link state routing protocols perform much better than distance vector protocols.

Mathematical Analysis of networks.