Carleton University

• Lead a research team focused on network protocol design for constrained and mission-specific environments, development of cyber range platforms for cybersecurity training, and application of Agentic AI in defensive network systems (e.g., IDS/IPS).
• Lead technical execution across multiple projects, contributing to system design and implementation while coordinating collaboration between industry and academic partners. Support the development of Statements of Work (SoWs), project plans, and milestone tracking to ensure timely delivery. Actively contribute to hiring processes, including candidate evaluation and team expansion efforts.
• Conduct large-scale Internet measurement studies using datasets such as Censys alongside active probing techniques to analyze global Internet behavior, detect security events, and evaluate the deployment and adoption of emerging secure protocols.

Carleton University

• Developed the first comprehensive network-based threat model and attack taxonomy for the DNS resolution process, defining 14 security, privacy, and availability properties and using them to comparatively evaluate 14 secure DNS schemes (including DNSSEC and DNS-over-TLS/HTTPS), revealing that no single scheme provides end-to-end protection across both stages of DNS resolution (published in IEEE Communications Surveys & Tutorials (COMST), vol. 28, 2026).
• Designed and implemented ss2DNS, a privacy-preserving DNS protocol with a custom PKI providing unilateral authentication, confidentiality, and forward secrecy to mitigate DNS surveillance and manipulation by active and passive adversaries; benchmarked a large-scale proof-of-concept demonstrating performance comparable to less-secure alternatives while significantly outperforming DNS-over-TLS in cryptographic and latency overheads.
• Formally verified authentication, message confidentiality, forward secrecy, and key compromise resilience using a symbolic model in the Tamarin protocol verifier under a Dolev–Yao adversary model; conducted systematic key and entity compromise analysis (published at ESORICS 2025).
• Conducted large-scale Internet measurement and comparative analysis of DNS-over-TLS and HTTPS PKI ecosystems using 10K DoT and 9.3M HTTPS X.509 certificates from Rapid7 Project Sonar data, developing custom OpenSSL/PyOpenSSL-based pipelines to evaluate certificate security properties, cryptographic configurations, and Certificate Transparency compliance, and uncovering Internet-wide PKI trends including CA concentration, self-signed certificate prevalence, and cipher suite adoption (published at NDSS MADWeb 2021).

Carleton University

Led lab sessions in networking and security courses, mentoring students in coding and debugging, packet capture and network analysis, and protocol implementation. Developed and maintained Linux-based network infrastructure (DNS, firewall, routing), including VM provisioning, interface configuration, and real-time monitoring to ensure high availability.

• Computer Systems Security
• Principles of Computer Networks
• Operating Systems
• Parallel Programming for Clusters and Multi-Core Processors

• Building, training, and optimizing neural network models
• Applying deep learning to real-world problems