My research focuses on embedded security: the art and science of creating embedded systems resistant to attack. Medical devices, autonomous vehicles, and the Internet of Things depend crucially on embedded security.
As part of my 164-year research plan to improve the trustworthiness of medical device software, I direct the Archimedes Center for Medical Device Security and the Security and Privacy Research (SPQR) group. I write a blog on medical device security and safety.
Announcements: Teaching graduate computer security with a focus on embedded security; Chair of CCC Cybersecurity Task Force; Senate testimony; House testimony; Program chair for USENIX Security; Appointment to ACM Committee on Computers and Public Policy; first graduate course in the nation dedicated to medical device security.
Fun stuff: Cybersecurity standup comedy. I wrote the lyrics of a Taylor Swift-inspired a capella music video about programming. I used to maintain a collection of links on why Ann Arbor is cool.
Undergrads considering graduate school: When my students are not kiteboarding on the beautiful shores of Lake Michigan, they are probably publishing security research with an emphasis on analog sensor security or medical device security within the field of embedded security. Prospective graduate students can read advice on how to write more effective graduate school applications. This event was part of a larger national set of workshops to broaden participation in computing research. Also see my links to reports on women in computing research.
Undergraduate researcher blogs:
Honors: IEEE Fellow for contributions to embedded and medical device security, IEEE mellow fellow, Top Influencers in Health InfoSec, Top Security Change Agents, World Economic Forum Young Scientist, Fed100 Award, TR35 Innovator of the Year, Sloan Fellowship, NSF CAREER, Paper Awards [ACM SIGCOMM, IEEE S&P, USENIX Security]
News: NY Times and Wired and Ars Technica on Light Commands, NY Times on an acoustic virus, Slashdot interview, NBC Chicago, NY Times, Scientific American, MIT Technology Review, Slashdot, Economist, PBS Newshour, Forbes, BBC, LA Times, NIST. [Archived news]
Selected publications (less incomplete list):
Selected talks (complete list):
Affiliations: THaW, Security @Michigan, SPQR Lab, Archimedes, SHARPS, TerraSwarm, RFID CUSP
Recent research support: National Science Foundation, DHS, ADI, Archimedes