I am a lecturer in Secure Systems at the University of Surrey. My research revolves around proving cryptographic and side-channel security properties of concrete realizations and implementations of cryptographic primitives and protocols, in the presence of partial compromise. This involves tackling problems in modelling adversaries and systems, designing and applying proof methodologies and verification tools, and generally finding less tedious ways of verifying complex properties of important (but not vast) quantities of code.
Prior to that, I received a Ph.D. from the Open University on the 23rd of April 2013, for my dissertation on “Proving Cryptographic C Programs Secure with General-Purpose Verification Tools”. It was written under the supervision of Andy Gordon, Jan Jürjens and [Bashar Nuseibeh], and was supported by a Microsoft Research PhD Scholarship. I spent most of my Ph.D. time at the MSR lab in Cambridge, with internships in MSR’s labs in Aachen and Redmond, and some brief stays at the Open University in Milton Keynes.
My current research interests are mainly in the formal verification of imperative programs, with a focus on computational cryptographic security properties and proofs of security in the presence of side-channels and partial compromise.
In the past, I have worked on abstract interpretation and some aspects of programming and natural languages.
The Department has several openings at post-doctoral level on various projects. Most of them are interesting to me (so could lead to collaboration) and are externally funded (so come with somewhat attractive salaries).
I have an open PhD position on formalising, verifying and leveraging the real-world guarantees provided by hardware roots of trust in the presence of strong adversaries. The position is funded by EPSRC and Microsoft Research as part of the Microsoft Research PhD Scholarship Programme, and comes with an attractive stipend and travel budget. The funding, however, is subject to student eligibility, including some residence requirements (see the job advert for more detail).
If you are interested in research positions on implementation-aware security proofs, please contact me. This includes, but is not limited to, BSc and MSc projects, short research internships over the summer, or research visits.
To get in touch, please try email first. For urgent situations, please use Skype or phone.
Faculty of Engineering and Physical Sciences
Department of Computer Science, 17 BB 02
Guildford, Surrey, GU2 7XH