Our Research

Active Research Directions

Our research looks at privacy holistically and from various complementary vantage points. Currently, We have active research projects in each of these directions.
Can you figure out all the movie references below?

Systems Databases Static Analysis

Privacy Enforcement and Compliance Web Systems

(judge, jury, and executer)

Details

Systems Agentic AI

Security and Isolation of AI Agents

(or how I learned to start worrying and fear the agent)

Details

PL Static Analysis Systems

Language-based Guarantees Beyond Safety in Rust-Based Systems

(that unsafe block really tied the room together)

Details

Applied Cryptography Systems

Cryptography for Those Assumed Guilty Until Proven Innocent

(the ciphers are not what they seem)

Details

Systems Applied Cryptography PL

Putting the P_{(privacy, practicality)} in MPC_{(secure multiparty computation)}

(Just when I thought I was out, they secret share me back in)

Details

Systems Agentic AI Software Engineering

Privacy-Conscious AI Assistants and Tools

(These are the droids you're looking for)

Details

Open-Ended Research Questions

We are broadly interested in practical systems and tools for improving data security or privacy including but not limited to:

• Logging and montoring systems for sensitive processing or privacy-related incidents.
• Practical techniques for code auditing and supply chain security.
• Languages, compilers, and developer tools for avoiding privacy and security bugs.
• Practical systems or developer tools to assist in designing correct cryptographic protocols or differential privacy mechanisms.
• Formal verification techniques for security and privacy properties, and verification of Rust code.
• New approaches for evaluating or testing security, privacy, or compliance in real applications.