In his research, he empirically measures security on the Internet to understand how security breaks down, and applies economics and cryptography to build new, provably secure systems. Dave and his colleagues' work on studying the web’s PKI recently received a USENIX Security Distinguished Paper Award and an IEEE Cybersecurity Award for Innovation.