Conducting web security research projects that result in flagship conference publications:

• Designing an application-agnostic link management system that prevents access to external dependencies of websites if such links violate integrity policies
• Demonstrated that strict integrity verification of scripts cannot protect the web and provided insight for future methods through a large-scale, data-driven analysis (Things Change)
• Profiled the behavior of bots that monitor Certificate Transparency logs, analyzing how bots of various intentions and origins react to new certificates within seconds (Uninvited Guests)
• Illustrated the capability of adversaries to potentially affect millions of IP addresses in tens of thousands of autonomous systems by re-registering a few hundred domains (Domains Change)
• Proposed transparent web authentication mechanisms that leverage deception (Click This, Not That)