Projects

PRAT: Protocol Representation and Analysis Toolkit — Northeastern University

An open-source toolkit that identifies and removes feature-specific code in C/C++/Rust projects via compile-time differential coverage analysis. The research artifact for our ACM TOSEM 2021 paper, with reproducible Docker demos across Mosquitto, FFmpeg, libaom, OpenDDS, azure-uamqp-c, and quiche.

WASP: Measuring Vulnerability Preservation Across the Native→WebAssembly Boundary — Northeastern University

An empirical measurement study of whether C/C++ memory-safety vulnerabilities remain triggerable when compiled to WebAssembly, and how the compilation boundary changes their observable behavior. Implemented as a Rust oracle harness over a curated catalog of real CVEs and synthetic cases.

Synthesizing Microarchitectural Leakage Contracts from Counterexamples — IMDEA Software Institute

Methods for synthesizing formal leakage contracts from counterexamples, with applications to microarchitectural side-channel analysis and secure software verification.