My research interests involve security, privacy and its interactions with system, machine learning, and human-computer interactions. My current research focuses on developing novel technologies for protecting security and privacy, particularly in the areas of Internet of Things and mobile paltforms. I use multiple tools such as program analysis, protocol analysis, machine learning, and user studies to understand security risks and develop systems that are secure and privacy preserving. My work has been published in top-tier security conferences (such as Oakland, CCS, Usenix Security, and NDSS), and has also been adopted by platform designers and application developers (such as Chrome, Firefox, and iOS).