research BoardRunner Automatic firmware rehosting using high-fidelity compositional device models. Agent-Orchestrated Rehosting An automated workflow for rehosting complex, production-scale embedded firmware. µLEAK Cache-timing leakage across MPU isolation boundaries on ARM Cortex-M7. Security Competitions DARPA FIRE, MITRE eCTF, and CyberAuto Challenge. Security Research Interests Firmware analysis, hardware security, and hardware/software interface security. tools RISCOF RISC-V compatibility testing framework. RISC-V ISAC Coverage generator for RISC-V architectural compatibility testing. RISC-V CTG Coverage-driven test generator for RISC-V architectural compatibility testing. RISC-V CONFIG YAML-based configuration validator for RISC-V implementations.