Cybersecurity-focused systems programmer working with Rust, C, Linux kernel, eBPF, and low-level security. Former CTF player.
Linux kernel BPF contributor.
- BPF verifier patch landed in
bpf-next(upstream patch) — Refined the verifier's handling of zero stack-variable offsets to reduce excessive conservatism in stack analysis. - Upstreamed a
bpftoolflow dissector query error-handling fix, replacing fragileerrno-based logic with libbpf-returned error codes. - Added and upstreamed a BPF selftest covering arena direct-value behavior.
A selection of my projects is below. More projects and experiments are available on GitHub.
A Rust implementation of the Linux eBPF verifier focused on differential testing and bug discovery.
- rand-guard — Rust + Aya EDR
- ebpf-guard — C-based EDR
Selected writing on Linux kernel and eBPF research. More articles and project write-ups are available on my blog.
- eBPF verifier experiments
- Partial initialization in the eBPF verifier
- Finding bugs in the eBPF verifier
- eBPF selftests and packet access
- DEF CON 33 Finalist