About

We study the forensics, auditing, and security of software, systems, and AI agents.

FAS³A (pronounced “FASA”), the Forensics, Auditing, and Security of Software, Systems, and Agents lab, focuses on the forensics, auditing, and security of software, computer systems, and AI agents. We develop practical techniques to investigate attacks when they happen, to keep trustworthy records of what software, systems, and agents do, and to make them more secure and reliable.

Our foundation is in cyber forensics and software security. Our published work spans attack reconstruction, audit logging and provenance tracking for attack investigation, and program analysis for finding vulnerabilities, applied to web, mobile, IoT, and cyber-physical systems.

We are extending this line of research toward AI agents: how to investigate incidents that involve them, how to audit what they do, and how to secure them. This is a research direction of the lab.