Current Projects

Past Projects

  • Cryptographic Control Flow Integrity: Control Flow Integrity is a principled approach for defending against control hijacking attacks. Previous approaches have been limited by the complexity of static analysis, and are overly permissive. CCFI is the first use of the cryptographic hardware present in modern processors to implement a CFI system. A CCFI enabled compiler inserts code to generate MACs and verify a hash of critical pointers. Discussions with Qualcomm led to the creation of the ARM Pointer Encryption feature.
  • Ori File System: Ori is a distributed file system built for offline operation and empowers the user with control over synchronization operations and conflict resolution. We provide history through light weight snapshots and allow users to verify the history has not been tampered
    with. Through the use of replication instances can be resilient and recover damaged data from other nodes.