Learning Transferable Representations from Operating System Entities via Provenance Graph Distillation
NeurIPS'26 · 2026
Office 408, Wolfson Building, Department of Computer Science, University of Oxford
Oxford OX1 3QD
United Kingdom
I am an Associate Professor at the University of Oxford, where I am a member of the Security and Systems research themes.
Previously, I was an Assistant Professor in the Department of Computer Science at the University of British Columbia and remain affiliated with the UBC Security & Privacy Group and the Systopia Lab.
My research asks a fundamental question: How do we make complex systems observable enough to secure, understand, and safely modify them? I explore this question through work on system auditing and accountability, intrusion detection, and mechanisms for safely extending and optimizing complex systems.
Education
Interests
Computer Security
Intrusion Detection
Digital Provenance
Operating Systems
Distributed Systems
Data Protection and Privacy
Selected papers
Sometimes Simpler is Better: A Comprehensive Analysis of State-of-the-Art Provenance-Based Intrusion Detection Systems
USENIX Sec'25 · 2025
ORTHRUS: Achieving High Quality of Attribution in Provenance-based Intrusion Detection Systems
USENIX Sec'25 · 2025
Kairos: Practical Intrusion Detection and Investigation using Whole-system Provenance
IEEE S&P'24 · 2024
Experience
Sep 2026 – Present
Associate Professor
University of Oxford · United Kingdom
Sep 2026 – Present
Tutorial Fellow
Brasenose College · United Kingdom
Tutorial Fellow in Computer Science and member of the Governing Body.
Jul 2021 – Present
Assistant Professor
University of British Columbia · Canada
Member of the Department of Computer Science, member of the Security & Privacy Group, and member of the Systopia Lab.
Aug 2018 – Jun 2021
Assistant Professor
University of Bristol · United Kingdom
Member of the School of Computer Science.
Dec 2017 – Aug 2018
Research Associate
University of Cambridge · United Kingdom
Member of the Digital Technology Group and Junior Research Fellow at St Edmund’s College. Advisor Sir Andy Hopper.
Jul 2016 – Dec 2017
Postdoctoral Fellow
Harvard University · United States of America
Fellow of the Center for Research on Computation and Society and member of the System Research at Harvard Group. Advisor Prof. Margo Seltzer
Jan 2013 – Jul 2016
Research Assistant
University of Cambridge · United Kingdom
Member of the Opera Research Group and the Networks and Operating Systems group. Advisor Prof. Jean Bacon
Sep 2008 – Aug 2011
Apprentice Software Engineer
Gemalto · France
R&D Team member (Gemalto is now Thales Digital Identity and Security).
Sep 2006 – Sep 2008