Security at the System Boundary.
Embedded systems cybersecurity asks how a device can keep doing its intended job when its software, interfaces, or data are exposed to an adversary. For a connected sensor, controller, or computing platform, that means considering hardware, firmware, operating systems, communication, and physical behavior together.
I approach those questions through embedded engineering and applied research: defining what a system must trust, deciding where to enforce isolation, and testing what happens when an assumption fails.
Isolation with seL4 and RISC-V.
My master's research brought seL4 and RISC-V virtualization together on a Rocket softcore in the FPGA fabric of a Zynq UltraScale+ platform. It examined the hardware and software work needed to support a high-assurance embedded platform using modular, open-source architectures.
The work is documented in my 2023 master's thesis at Grand Valley State University and the related IEEE paper, Embedded Virtualization on RISC-V with seL4, coauthored with Nabeeh Kandalaft.
That research connects with my engineering work on virtual machine monitors, board support packages, device drivers, secure boot, attestation, and hardware roots of trust. Explore the embedded virtualization project →
Trustworthy Measurements and Cyber-Physical Systems.
A trustworthy computing platform also needs trustworthy inputs. My research on radiation detection examines data integrity across measurement files, firmware, and data transport. The paper Cybersecurity of Radiation Detection Devices: A Proof-of-Concept Attack, coauthored with Sharmistha Mukhopadhyay and Fan Zhang, documents that work in Nuclear Technology.
The interactive sensor integrity experiment on this site lets you explore a related question: what changes when a system compares a reported measurement with an independent reference? It uses synthetic data as an educational illustration; it does not reproduce the paper's experiments.
Operational Technology in Context.
My doctoral research at Georgia Tech extends these questions to operational technology and critical infrastructure. I study vulnerability management, network digital twins, and ways to evaluate cyber defense decisions in their operating environment.
In Development of a Vulnerability Management Tool for Advanced Reactors, coauthored with Marc Zebrowitz and Fan Zhang, I led work connecting network discovery and vulnerability assessment with an emulated network and a reactor simulator. Read the project context →
Follow the Evidence.
This site brings together my engineering projects, published research, and experiments. Each research page links to the original source so you can inspect the methods and limitations. Preprints are identified separately from journal articles and conference papers.
Browse my publications, explore the projects, or follow the technical notes.
Working on a Related Problem?
I'd be glad to discuss embedded platform security, seL4 and RISC-V systems, sensor integrity, or cyber-physical research. Get in touch →