We investigate how to see, verify, and defend networked systems, from the Internet and the web to agentic systems, with approaches ranging from eBPF-powered kernel instrumentation to runtime security enforcement.
Our work spans the full stack of modern networked systems, from kernel-level observability primitives to the security of the autonomous agents running on top.
Intrusion detection, traffic forensics, and automated vulnerability discovery, including fuzzing and zero-day hunting across networks and agents.
eBPF-based full-stack instrumentation to continuously monitor networked systems with minimal overhead, enabling kernel-to-application tracing in production.
Runtime security, resource abuse detection, and dependability analysis for LLM-based autonomous agents, bridging OS-level enforcement and agent reasoning.
A small, focused group working at the intersection of systems, security, and LLMs/Agent.
Our five most recent papers. See the full list (65+).
We are looking for motivated PhD / Master students and visiting researchers who are excited about the intersection of systems, security, and AI. If you want to build things that matter, we'd love to hear from you.
Get in Touch →