Projects

These are my main lines of previous work

Cloud Security

• Providing mutual TLS Identities to AWS Lambdas
• Expanding Secrets Infrastructure to AWS Lambda
• Bridging Security Infrastructure Between the Data Center and AWS Lambda
• Using AWS Lambda Extensions to Accelerate AWS Secrets Manager Access - also on AWS Compute Blog
• Connecting Block Business Units with AWS API Gateway

Browser Extensions

• Ex-Ray
• SimilarWeb Tracking

Web Security

• CSP study exploring global deployment
• ZigZag - enhancing postMessage security
• JavaScript rewriting

Automated Vulnerability Discovery

• HaCRS - Human Augmented Fuzzing
• HotFuzz - Discovery of Algorithmic Complexity Vulnerabilities
• Go or No Go: Differential Fuzzing of Native and C Libraries

Mobile

• Tap to Pay on iPhone