amit ahlawat
Security Engineer at Amazon Lab126
security engineer amazon lab126 | phd ( computer engineering )
programming language experience : c , c++ , java , python experience : linux , android , op-tee development board experience : 96boards hikey 620 , raspberry pi project work ha focused improving security android system . developed system protect mobile application malicious advertisement isolating untrusted ad ’ privilege display android app . allow user securely enter text input ( e.g . password ) securely approve action ( e.g . confirming bank transfer ) , developed system protects user interaction channel touch input android application using arm trustzone . addition , allow user make secure voip call compromised android device , developed system protect user interaction channel voice i/o voip call using arm trustzone . co-authored multiple paper process , one paper published top-tier system conference . addition exploring security perspective system research , also worked research assistant develop security education lab ( seed lab ) used several university around world .
Amazon Lab126
https://www.linkedin.com/company/lab126
United States
https://media-exp1.licdn.com/dms/image/C4D0BAQF42fGVfa1OTg/company-logo_100_100/0/1519952365817?e=1655942400&v=beta&t=crrGVmnj4inv2ZewArN5cBVUV6rzZaXk8EbMk03E4nM
Security Engineer
Syracuse University
https://www.linkedin.com/company/syracuse-university
http://coursecatalog.syr.edu/preview_course_nopop.php?catoid=3&coid=9438
Syracuse, New York, United States
https://media-exp1.licdn.com/dms/image/C560BAQFAyZ5pXkHL9Q/company-logo_100_100/0/1597671966100?e=1655942400&v=beta&t=jIZwHEq4IOlt-akteEHG9msVudZCRBN5Wxkuz9qVzEs
Teaching Assistant for Design of Operating Systems (Undergrad)
Syracuse University
https://www.linkedin.com/company/syracuse-university
TA for computer security course. 
https://www.handsonsecurity.net/courses/compsec/

TA for internet security course.
https://www.handsonsecurity.net/courses/intsec/

Packet Sniffing and Spoofing, ARP Cache Poisoning Attack, Linux Firewall,
TCP/IP Attacks, Local DNS Attack, Remote DNS Attack, Secret-Key Encryption,
MD5 Collision Attack, Public-Key Infrastructure (PKI), Virtual Private Network (VPN)
https://media-exp1.licdn.com/dms/image/C560BAQFAyZ5pXkHL9Q/company-logo_100_100/0/1597671966100?e=1655942400&v=beta&t=jIZwHEq4IOlt-akteEHG9msVudZCRBN5Wxkuz9qVzEs
Teaching Assistant for Graduate Security Courses
Syracuse University
https://www.linkedin.com/company/syracuse-university
TA for computer security course. 
http://www.cis.syr.edu/~wedu/Teaching/CompSec/labs.html

Topics covered in course: Environment variable and Set-UID, Shellshock attack, Buffer overflow vulnerability, Format String attack, Race Condition vulnerability, Dirty COW attack, Meltdown and Spectre attack, CSRF attack, SQL injection attack, XSS attack, Android repackaging attack, Rooting Android phones
https://media-exp1.licdn.com/dms/image/C560BAQFAyZ5pXkHL9Q/company-logo_100_100/0/1597671966100?e=1655942400&v=beta&t=jIZwHEq4IOlt-akteEHG9msVudZCRBN5Wxkuz9qVzEs
Teaching Assistant
Syracuse University
https://www.linkedin.com/company/syracuse-university
NSF project # 1303306

>> Developed, documented and tested education labs related to software security. Labs include buffer overflow vulnerability, format string vulnerability, shellshock vulnerability, environment variables & set uid, hash length extension attack, Linux namespaces.
>> Developed Capture-the-Flag (CTF) version of labs for buffer overflow and format string vulnerability. 
>> Tested and maintained the virtual machine lab environment. 
>> Taught buffer overflow attack, return-to-libc attack and environment variable & set-uid labs as an instructor at a security education workshop organized at Syracuse University to train cybersecurity faculty. 
>> Organized logistics of the workshop involving 80 faculty. 
Labs are being used worldwide in 800 universities.
Syracuse, New York Area
Research Assistant
Syracuse University
https://www.linkedin.com/company/syracuse-university
TA for Software Modeling & Analysis.
https://ecs.syr.edu/faculty/fawcett/handouts/webpages/CSE681.htm
Course covers modeling software, including architecture, design, and implementation.

TA for Internet Programming.
https://ecs.syr.edu/faculty/fawcett/handouts/webpages/CSE686.htm
Course covers web development using ASP .NET (C#).
Syracuse, New York Area
https://media-exp1.licdn.com/dms/image/C560BAQFAyZ5pXkHL9Q/company-logo_100_100/0/1597671966100?e=1655942400&v=beta&t=jIZwHEq4IOlt-akteEHG9msVudZCRBN5Wxkuz9qVzEs
Teaching Assistant
Doctor of Philosophy - PhD
Thesis Title: Securing User Interaction Channels on Mobile Platform Using ARM TrustZone
Computer Engineering
https://media-exp1.licdn.com/dms/image/C560BAQFAyZ5pXkHL9Q/company-logo_100_100/0/1597671966100?e=1655942400&v=beta&t=jIZwHEq4IOlt-akteEHG9msVudZCRBN5Wxkuz9qVzEs
Syracuse University
https://www.linkedin.com/school/syracuse-university/
Master of Science
Computer Engineering (Software Systems)
https://media-exp1.licdn.com/dms/image/C560BAQFAyZ5pXkHL9Q/company-logo_100_100/0/1597671966100?e=1655942400&v=beta&t=jIZwHEq4IOlt-akteEHG9msVudZCRBN5Wxkuz9qVzEs
Syracuse University
https://www.linkedin.com/school/syracuse-university/
(1st author) Designed and developed a system to allow a user to make a secure end-to-end protected VoIP call from a compromised mobile phone.  Implemented design using Android OS and TrustZone TEE running OP-TEE OS. Tested the design on the TrustZone-enabled Hikey development board using the open source VoIP app Linphone. (Java, C, C++)

Hardware Setup Video (Early Prototype): https://drive.google.com/file/d/1_kuxg2lp_NnOGm1D8U7HsZP_-wyRyvwa/view?usp=sharing
TruzCall: Secure VoIP Calling on Android using ARM TrustZone
Sixth International Conference on Mobile And Secure Services (MobiSecServ 2020)
https://ieeexplore.ieee.org/document/9042945
(2nd author) Developed a system to allow users to securely enter sensitive information (e.g. password) and approve sensitive action (e.g. money transfer) using apps on a compromised Android mobile device. Modified Android’s IME, view and dialog framework to integrate TEE services. Published in top tier system conference MobiSys with 19 citations. (Java, C, C++)
TruZ-Droid: Integrating TrustZone with Mobile Operating System
Proceedings of The 16th ACM International Conference on Mobile Systems, Applications, and Services (MobiSys 2018)
http://www.cis.syr.edu/~wedu/Research/paper/mobisys2018_truzdroid.pdf
(3rd author) Investigated how secondary users on an Android multi-user device could bypass UI restrictions. Discovered differences in Android Settings app wherein restricted UI was accessible to secondary users using Android’s Intent IPC mechanism. Published in MoST Security Workshop. Published work has 20 citations.
A systematic security evaluation of android's multi-user framework
Proceedings of the Mobile Security Technologies (MoST) workshop
http://www.cis.syr.edu/~wedu/Research/paper/multi_user_most2014.pdf
(2nd author) Developed a system to allow Android apps to include untrusted advertisement libraries by isolating the ad's privilege and display from the app . Modified Android’s View and SurfaceFlinger framework components. Published in ACSAC and has 77 citations. (Java, C, C++)
Aframe: Isolating advertisements from mobile applications in android
Proceedings of the 29th Annual Computer Security Applications Conference
http://www.cis.syr.edu/~wedu/Research/paper/aframe_acsac2013.pdf
Android project - "Understanding and Improving Smartphone Security"
L.C. Smith College of Engineering and Computer Science, Syracuse University
Certificate of Achievement - EECS Department Winner
Computer Security
-
Design Patterns
-
Design and Analysis of Algorithms
-
Internet Programming
-
Internet Security
-
Mobile App Development
-
Mobile Operating Systems
-
Object Oriented Design
-
Smartphone Security
-
Software Modeling and Analysis
-
Developed a system using 96boards Hikey and Raspberry Pi boards that allows trusted applications in TEE to interface with different hardware without vendor driver support. Supported hardware includes sensors like GPS and Camera. System uses TEE RPC calls and normal world network driver. (Java, C, C++, Python)

Hardware Setup: https://drive.google.com/file/d/1jaEmklk6vQE7X15SiRC2XDL564JSl-il/view?usp=sharing

Video demo: The Hikey board has no camera hardware attached to it. The camera is attached to the Raspberry Pi. The screen shows the app running on Android (on the Hikey board). The demo shows a proof-of-concept where the app requests TEE for camera data, which obtains it from the Raspberry Pi board. In the video, the recording camera is put down at time 0:30 for 4 seconds, in order to press the button in the app to request camera capture.

https://drive.google.com/file/d/174uYHpo7heROq-Ox_bE18oWbugAtbGez/view?usp=sharing
Hardware Platform to Assist ARM TrustZone Research
Search and Sample Return: Implemented  perception, decision making and actuation steps  that allows an autonomous rover to find and collect rock samples. Project based on Udacity's Search and Sample Return Project (https://github.com/udacity/RoboND-Rover-Project).

Video demo: https://drive.google.com/file/d/1sHYNTvZk4Iq15eDQyUaAJ1VX0renOI5e/view?usp=sharing
Search and Sample Return
Documented a detailed study of Android's access control model for various Android framework components including Content Provider, Intent and Binder IPC.
Android Genome Project
Developed a feature to unlock android OS running on a Beaglebone device using an external hardware interfaced using GPIO. Modified Android Keyguard framework component to connect with GPIO device (Java, C, C++)
Android Hardware Unlock
Developed a system level key management solution for Android to encrypt WebView cookies in WebKit to make cookies non-retrievable from a stolen device (Java, C, C++)
Protect Browser Cookies
Developed a simple TLS/SSL VPN. Project involved using TUN/TAP, IP tunneling, routing, public-key cryptography, PKI, TLS/SSL programming, and authentication. (C, OpenSSL)
Virtual Private Network
Developed a simple packet filtering firewall. Project involved using netfilter and loadable kernel module. (C)
Packet Filter Firewall
Developed an Android application to allow business owners promote daily product deals and allow consumers to find deals based on location (Java, Google Maps API, PHP, MySQL)
Product Promotion Mobile Application
Designed & implemented a web application allowing users to schedule & conduct online meetings, consisting of presentations, sharing of documents, public & private chats (C#, ASP .NET MVC 2, SQL, XML, CSS, JavaScript)
Online Meeting Web Application
https://in.linkedin.com/in/author-amit
Gurugram
Author Amit
Veteran Writer, Analytics, MBA, Lyricist, YouTuber, Solopreneur
https://www.linkedin.com/in/in-frin-a18919170
San Francisco Bay Area
in frin
developer at Self-Employed
https://www.linkedin.com/in/john-coid-479ba499
Schenectady, NY
John Coid
Hs at Shell
https://www.linkedin.com/in/eli-sheth-92663526
Torrance, CA
Eli Sheth
VP CNO at A Light of SonShine Inc.
https://www.linkedin.com/in/coid-lioc-95a55a190
San Francisco Bay Area
Coid Lioc
Security Guard at BSIS
https://www.linkedin.com/in/richard-skelton-28784329
Portland, OR
Richard Skelton
Distributer for ProArgi9+ frin Synergy Worldwide.
https://www.linkedin.com/in/mitch-nielsen-a32b20132
Denver Metropolitan Area
Mitch Nielsen
Sales and Property Management
https://www.linkedin.com/in/marshall-coid-57a8103b
New York, NY
Marshall Coid
Onstage Violin Soloist at Chicago the Musical (Broadway)
https://www.linkedin.com/in/nas-khan-graphics
San Jose, CA
Nas Khan
Artistic talent to deliver high-impact marketing, print-design, and ecommerce projects
https://www.linkedin.com/in/nicolas-frin-536b27a2
Huntington Beach, CA
Nicolas Frin
Sales Operations Coordinator at Boardriders
https://www.linkedin.com/in/calvin-grammer-mba-93a01847
Nashville Metropolitan Area
Calvin Grammer, MBA
.
https://www.linkedin.com/in/anthonywitte88
San Francisco, CA
Anthony Witte
Diversity, Equity, and Inclusion Consultant
https://www.linkedin.com/in/bricealef
Salt Lake City, UT
Brice Alef
Designer
https://www.linkedin.com/in/jackson-naponic-254b0756
Houston, TX
Jackson Naponic
Associate Director at GREA
https://www.linkedin.com/in/danstober
Herriman, UT
Daniel Stober
From Raw Data To Actionable Insights
https://www.linkedin.com/in/nadir-a-carreon-886a6895
Austin, TX
Nadir A. Carreon
Software Development Engineer - Security, Digital Security/Abuse Detection
https://www.linkedin.com/in/mack-leath-a648b8b1
Atlanta, GA
Mack Leath
Director at GREA
https://www.linkedin.com/in/danielcordtz
Detroit Metropolitan Area
Daniel Cordtz
Associate at GREA
https://www.linkedin.com/in/alexpeichurch
San Francisco Bay Area
Alex Peilun Church
DHHS Vaccine Data Analyst at State of Nebraska
https://www.linkedin.com/in/caseyblake519
Columbus, OH
Casey Blake
IT Support Specialist - Senior at Huntington National Bank
Liked by Amit Ahlawat
https://www.linkedin.com/signup/cold-join
Something I needed to hear. Maybe you do too:At age 23, Tina Fey was working at a YMCA.At age 23, Oprah was fired from her first reporting job.At…
Liked by Amit Ahlawat
https://www.linkedin.com/signup/cold-join
NVIDIA to Acquire Arm for $40 Billion, Creating World’s Premier Computing Company for the Age of AI. https://nvda.ws/32shfBK
https://in.linkedin.com/in/amit-ahlawat-794338132
Gurgaon
Amit Ahlawat
Sales and Marketing
https://in.linkedin.com/in/amit-ahlawat-4b289832
Noida
Amit Ahlawat
Senior Manager at Shri Vinayaka Group
https://in.linkedin.com/in/amit-ahlawat-056b1147
Gurgaon
Amit Ahlawat
Founder at DS Group -d'sign & gaze Pvt Ltd
https://in.linkedin.com/in/amit-ahlawat-b9814b1b2
Pune
Amit Ahlawat
Supervisor at CITCO
https://in.linkedin.com/in/amit-ahlawat-352b5920
Sonipat
Amit Ahlawat
Director Operations at Excavate Research & Analytics
SoftwareEngineering
https://media-exp1.licdn.com/dms/image/C4E07AQHHGipIQt_O4w/group-logo_image-shrink_200x200/0/1631378405098?e=1647691200&v=beta&t=4R_JHVMPgsy9pGrxa-5rCVr7QAfsNgNS7aiy6GR-vu0
https://www.linkedin.com/groups/35521
Mobile Software Development Group
https://media-exp1.licdn.com/dms/image/C4D07AQH-XuiryVk2uQ/group-logo_image-shrink_92x92/0/1525133143540?e=1647691200&v=beta&t=m7Ozurn2-aEFfPKISbAAHgyLD8Al-a0OwS-bC9VBnqE
https://www.linkedin.com/groups/69893
Google Universe : Jobs, Tools, Trends and Galaxies of Ideas
https://media-exp1.licdn.com/dms/image/C4D07AQEh7dwSo8M_TQ/group-logo_image-shrink_200x200/0/1631376255670?e=1647691200&v=beta&t=Cjcx99MX4cp8BE6R92XiApf6nkcM3Ph7EQhUumm0bdc
https://www.linkedin.com/groups/2930475
Syracuse University - Engineering
https://media-exp1.licdn.com/dms/image/C4D07AQFYeLPyGqBAnA/group-logo_image-shrink_92x92/0/1631005552786?e=1647691200&v=beta&t=D3A5_LEOVBBDI14umORU2OEMOz32s-qRVPSTWtW6Fjo
https://www.linkedin.com/groups/1985625
The Web Application Security Consortium
https://media-exp1.licdn.com/dms/image/C5607AQGeCI2mxTl6VQ/group-logo_image-shrink_200x200/0/1631436254902?e=1647691200&v=beta&t=o2ux1wJ6O-aqYnLdYCvGXcXzC_iBURkFwF4eHya2X1E
https://www.linkedin.com/groups/83336
Cloud Computing
https://media-exp1.licdn.com/dms/image/C5607AQEmFrxjTCD4rg/group-logo_image-shrink_200x200/0/1631004060435?e=1647691200&v=beta&t=kkm-Y7UVeflcdvelZzxGkYXRZExXPEjRQUzu2FZBHC0
https://www.linkedin.com/groups/61513
Security & Counter-Terrorism - High Powered Think Tank
https://media-exp1.licdn.com/dms/image/C4E07AQEbKRfXjqOJew/group-logo_image-shrink_200x200/0/1631371461083?e=1647691200&v=beta&t=3UL6_zNfrVeC9tofLovVVLix3U9UDSyCgdoIbs1behY
https://www.linkedin.com/groups/2311273
ASP.NET,C#/VB.NET  Developer/Programmer
https://media-exp1.licdn.com/dms/image/C4D07AQE3LY2B5_DMjA/group-logo_image-shrink_92x92/0/1525123787758?e=1647691200&v=beta&t=7JGNpqXHbxpRcBOZysJ8FFHAIgOzAn09MznWgectZRo
https://www.linkedin.com/groups/2139884
Information Security Community
https://media-exp1.licdn.com/dms/image/C4D07AQEfUMeYwlZcBg/group-logo_image-shrink_92x92/0/1525124419305?e=1647691200&v=beta&t=jvcuBdbQa3JVp-ryQZeS66WVRLGrz7lVitSsLTQ0Qwo
https://www.linkedin.com/groups/38412
Intel Security Careers, Americas
https://media-exp1.licdn.com/dms/image/C5607AQF57UTbW5bVDw/group-logo_image-shrink_200x200/0/1631426101689?e=1647691200&v=beta&t=CKIWPEuwvN6MWw5J-eSqYqmHPSMaS3J89jYn3tKuHII
https://www.linkedin.com/groups/2738041
Information Security Network
https://media-exp1.licdn.com/dms/image/C4D07AQHt-mDWzdoz_A/group-logo_image-shrink_92x92/0/1631001784488?e=1647691200&v=beta&t=h0r3D6MN_L40csTU74QAcxDf-FWa3kMby_12KPPnBTE
https://www.linkedin.com/groups/80784
CISCO
https://media-exp1.licdn.com/dms/image/C4E07AQFKiZ46AvPJJg/group-logo_image-shrink_200x200/0/1631007925589?e=1647691200&v=beta&t=zLS0lQlqRcgiIjeiC0m0niSDeyytZrwngNEOKe2zsGY
https://www.linkedin.com/groups/35730
Algorithms (O)
https://static-exp1.licdn.com/sc/h/4h1ldzvvebtszyx75ve7dst1v
https://www.linkedin.com/groups/1920463
Google Android
https://media-exp1.licdn.com/dms/image/C4D07AQFIsrBgG5meag/group-logo_image-shrink_200x200/0/1631009434022?e=1647691200&v=beta&t=DpUBCFX0_OAaW63ziYqh6ezd5GTo7Nawv4UYlp1PXBU
https://www.linkedin.com/groups/76373