Our papers:

have been accepted for publication at the 24th ACM Symposium on Access Control Models and Technologies (SACMAT), the premier forum in the world for research in access control and authorization.

Our paper ExSol: Collaboratively Assessing Cybersecurity Risks for Protecting Energy Delivery Systems has been accepted for publication at the 7th IEEE Workshop on Modeling and Simulation of Cyber-Physical Energy Systems (MSCPES 2019) .

Our paper Understanding and Detecting Private Interactions in Underground Forums has been accepted for publication at the 9th ACM Conference on Data and Application Security and Privacy (CODASPY 2019).

Research Interests

My research interests lay at the intersection of Computer Security and Software Verification and Validation. Concretely, I have experience on the development of techniques for verifying the correct implementation of access control models at the source-code level using formal specifications. Recently, I have also explored approaches for enhancing the cybersecurity protection of mission-critical Energy Delivery Systems (EDS), by means of security assessment and monitoring techniques.

Current Affiliation

sefcom-gray I am currently affiliated with the Center for Cybersecurity and Digital Forensics, (CDF), as well as with the Laboratory of Secure Engineering for Future Computing (SEFCOM), which are directed by Dr. Gail-Joon Ahn and Dr. Adam Doupé at Arizona State University. Our work focuses on a variety of topics related to computer security: access control, digital forensics, security for mobile frameworks (Android), moving target defense, etc., and has been sponsored by the US National Science Foundation, the US Department of Energy, Bank of America, Microsoft, Google, CISCO, among others. I am also a member of the Cyber Resilient Energy Delivery Consortium (CREDC), a multi-disciplinary and multi-organizational effort for protecting the mission-critical cyber-infrastructure of Energy Delivery Systems (EDS) against security vulnerabilities and threats.

Ph.D. Dissertation

Publications: Authorization and Access Control

Publications: Energy Delivery Systems

Publications: Software Verification and Validation

Publications: Various Cybersecurity Topics

Teaching Experience