My research interests broadly fall within the areas of systems security and privacy, with a primary focus on analyzing and improving the security and privacy of computing platforms and the software targeted towards those platforms. My research generally involves building real systems and tools to address or perform large-scale empirical measurements of security and privacy risks. More recently, my research directions have been primarily focused on the topics of data governance and compliance.