Sitemap

SpyChain examines how compromised components can threaten small satellite systems, including attacks that span multiple parts of the supply chain and evade testing.

Private links delivered over SMS can act as bearer credentials. We show how a single exposed URL can reveal sensitive records and, in some services, expand into a much larger leak.

When a VPN server hosts multiple protocols, a probe-sensitive protocol can expose an otherwise probe-resistant service. Our study examines this weak-link problem across commercial VPN deployments.

MVPNalyzer audits the security and privacy of Android VPN apps. Our investigation of 281 apps found traffic leaks, unencrypted communication, tracking, and weaknesses in security practices.

I was awarded the NDSS Fellowship for my research on the security analysis of Virtual Private Network (VPN) applications.

I placed 3rd in the 2026 Lobo Hackathon, a competitive event that challenges participants to develop innovative solutions to real-world problems using technology.

LoboSec placed 3rd in the 2025 AlamoCTF, a competitive CTF event.

This project provides a local API and a GUI to explore and analyze the entire CVE database from NIST.

A curated set of commands for automating common security tasks, vulnerability checks, and penetration testing workflows.

Obtained first place in the CTF held by Sandia National Laboratories!

In this colloquium talk I presented my research on the security analysis of Virtual Private Network (VPN) applications. The talk focused on the development of MVPNalyzer, an investigative framework designed to audit the security and privacy of mobile VPNs. I discussed the methodology used to identify common vulnerabilities, potential attack vectors, and effective mitigation strategies to enhance the security posture of VPN applications.

Delivered supplementary lectures, graded coursework, and supported students in object oriented programming.

Taught web development and led Git workshops for the Le Wagon bootcamp.

Supported CS357 through grading, supplementary lectures, and guidance on declarative programming.

Developed hands-on labs in reverse engineering, injection attacks, and network scanning for CS544.

Spring 2025 — Guest lecturer for Intro to Cybersecurity (CS544) at the University of New Mexico.

Fall 2026 — Teaching assistant for Advanced Cybersecurity (CS592) at the University of New Mexico.