Hardware-enforced isolation for WebAssembly
Extending Lind with Intel Memory Protection Keys to create policy-configurable privilege separation in user space, without kernel modifications.
I’m Fredrik, a Ph.D. candidate with Prof. Cappos at NYU Tandon focused on performance and security aspects of operating systems.
Extending Lind with Intel Memory Protection Keys to create policy-configurable privilege separation in user space, without kernel modifications.
A prototype for loading the Linux kernel as a dynamic shared object, enabling runtime-adjustable privilege boundaries across the system.
Measuring the reach of page-cache side channels across gVisor, Firecracker, and KVM/QEMU with sub-microsecond experiments.
Porting musl libc and its dynamic loader to Quest, a research real-time OS, to bring PIE and shared-library support to a new kernel environment.
Developed a live patching framework for an STM32H753-based CubeSat, using semantic firmware analysis, HDiffPatch/LZMA compression, and the Debug Monitor for patch execution. The instrumentation-free system achieves a 5.9% compression ratio with 127–252 CPU cycles of overhead.
Selected work spanning embedded hardware, operating systems, drivers, and FPGA acceleration.
Re-engineered a 1980s OEM car-phone system with custom PCBs, Linux drivers, Bluetooth audio, motion detection, and RF spectral analysis.
Designed a European options pricer for FPGA, applying pipelining, loop unrolling, and resource sharing within LUT and DSP constraints.
Restructured device-side resource ownership for persistent CUDA kernel management, reducing per-launch overhead.
CUDA · unpublishedSystems research, production software, and embedded hardware.
Ph.D. candidate in Computer Science. Advisor: Prof. Justin Cappos.
M.S. in Computer & Electrical Engineering, GPA 4.0/4.0. Thesis on dynamic privilege with dynamic linking.
Software Developer to Senior Software Developer. Led a five-person team across network architecture, cloud migration, and high-availability billing systems.
B.S. in Computer Science, top 5%. Thesis on persistent live firmware patches for Cortex-M7 microcontrollers.