Jan 2016 – Jul 2016 · 6 mos · Mountain View, CA

• Growth in Google’s code size and feature churn rate has seen increased reliance on continuous integration (CI) and testing to maintain quality. Even with enormous resources dedicated to testing, we are unable to regression test each code change individually, resulting in increased lag time between code check-ins and test result feedback to developers. I developed a project to reduce this time by: (1) controlling test workload without compromising quality, and (2) distilling test results data to inform developers, while they write code, of the impact of their latest changes on quality.

Jan 2014 – Jan 2014 · 0 mo · Greater New York City Area

• Advised teams on issues of design patterns for security, continuous building and testing in codebase.

Oct 2013 – Oct 2015 · 2 yrs

• Vetting Android Applications for Security Using Graphical User Interface Logic
• Currently, it is not possible to confirm the absence of hidden malice in Android apps. As a result, organizations that require high security standards, such as government agencies and banks, often take the pessimistic approach of assuming most of the apps are unsafe unless proven otherwise. Employees of these organizations are restricted to only a handful of apps vetted by security analysts. This restriction has adverse effects on employee productivity and happiness. An employee may want to use a newly released app that offers many attractive timesaving features to boost productivity. Another employee may want to use an email app she is familiar and happy with rather than using the one officially sanctioned. Both employees must seek approval from security analysts but both are likely to be disappointed. An organization may not have enough security analysts to vet every single app employees want to use. Third-party app developers may not always cooperate by providing source code for security analysts to examine. “Your approval request is denied due to security concerns” is often the most convenient and safest response, at the unfortunate loss in productivity and happiness.
• In this project, I am leading the development of a suite of specialized analysis techniques for vetting Android apps to confirm the absence of malice. These techniques aim to enable security analysts to quickly vet any given Android app even if the source code is unavailable. These techniques will make it possible to vet a large number of Android apps in a timely and cost-effective manner. Organizations will no longer need to tradeoff productivity and happiness for security.

Jan 2012 – Jan 2013 · 1 yr · Hartford, CT

• Examined test artifacts (HP’s QTP, NCover) and opined on their quality and fulfillment of contract.

Jan 2012 – Jan 2013 · 1 yr · Germantown, MD

• Developed and led 14 work sessions on how to develop secure code using security features in CentOS.

Jan 2008 – Jan 2008 · 0 mo · Pune Area, India

• Led an independent examination of software practices at TCS and proposed areas for improvement.

Jan 2008 – Jan 2008 · 0 mo · Beijing City, China

• Led a collaborative effort to improve ML model-based testing in Chinese Research and Industry.

Aug 2001 – Jan 2018 · 16 yrs 5 mos · College Park, MD

• Developed and taught classes on “Programming Handheld Systems,“ “Designing and Testing Secure Software,” “Secure Operating Systems,” “Software Testing,” and “Software Engineering.”

Jan 2001 – Jan 2004 · 3 yrs · College Park, MD

• Led multiple technology-transfer projects, including effort estimation for NASA projects.