His primary research interest is in the field of computer security and privacy. His research has won six best paper awards including one at the Symposium on Operating Systems Principles (SOSP) 2017 and two at the IEEE Symposiums on Security and Privacy (S&P) 2014 and 2016. His work has led to reporting and fixing of around 250 high-impact security vulnerabilities across a wide range of software. His research software has also been incorporated as part of Google's malware detection infrastructure, Mozilla Firefox, and Apache Cordova.