Jonathan Burket
Software Engineer, Duolingo
jonathan@jburket.com
I am currently a software engineer at Duolingo.
Previously, I was a research engineer at Apogee Research, where I worked on the DARPA Cyber Fault-tolerant Attack Recovery (CFAR) program.
I attended grad school at Carnegie Mellon in the School of Electrical and Computer Engineering, working on computer security research with Professor David Brumley. My research focused on extending program analysis techniques to work on larger systems.
I did my undergrad at University of Virginia, where I worked on web security research with Professor David Evans.
In the summer of 2012, I helped develop a free online physics course on Udacity taken by thousands of students around the world.
I also served as Technical Lead for picoCTF 2014, a computer security competition for high school age students with nearly 10,000 participants and helped develop the open-source picoCTF Platform for hosting capture-the-flag competitions.
Publications:
- J Burket, P Chapman, T Becker, C Ganas, D Brumley. Automatic Problem Generation for Capture the Flag Competitions. The 2015 USENIX Summit on Gaming, Games, and Gamification in Security Education (3GSE 2015).
- J Burket, L Flynn, W Klieber, J Lim, W Shen, W Snavely. Making DidFail Succeed: Enhancing the CERT Static Taint Analyzer for Android App Sets. Technical Report. March 2015.
- T Bao, J Burket, M Woo, R Turner, and D Brumley. BYTEWEIGHT: Learning to Recognize Functions in Binary Code. The 23rd USENIX Security Symposium (USENIX 2014).
- P Chapman, J Burket, D Brumley. picoCTF: A Game-Based Computer Security Competition for High School Students. The USENIX Summit on Gaming, Games and Gamification in Security Education (3GSE 2014).
- J Burket, P Mutchler, M Weaver, M Zaveri, D Evans. GuardRails: a data-centric web application security framework. In Proceedings of the 2nd USENIX conference on Web application development (WebApps 2011).
- M Co, J Davidson, J Hiser, J Knight, A Nguyen-Tuong, W Weimer, J Burket, G Frazier, T Frazier, B Dutertre, I Mason, N Shankar, S Forrest. Double Helix and RAVEN: A System for Cyber Fault Tolerance and Recovery. The 11th Annual Cyber and Information Security Research Conference. April 2016
Talks:
- J Burket, P Chapman, T Becker, C Ganas, D Brumley. Automatic Problem Generation for Capture-the-Flag Competitions. USENIX 3GSE 2015 [PDF] [PPTX]
- J Burket, P Chapman. PicoCTF: Inspiring Tomorrow's Cyber Security Workforce and Leaders. Information Systems Security Association (ISSA) - Pittsburgh Chapter Meeting [PPTX]
- J Burket, P Mutchler, M Weaver, M Zaveri, D Evans. GuardRails: A Data-Centric Web Application Security Framework. USENIX WebApps '11 [PPTX] [PDF]
- J Burket, P Mutchler, M Weaver, M Zaveri, D Evans. GuardRails: A (Nearly) Painless Solution to Web Application Security. RubyNation 2011 [Video]
- J Burket, P Mutchler, M Weaver, M Zaveri, D Evans. GuardRails: A (Nearly) Painless Solution to Web Application Security. OWASP AppSec DC 2010 Slides: [PDF]
Posters:
- J Burket, J Cha, A DeVinney, C Mihaloew, Y Zhou, D Evans. Unifying Data Policies Across the Client and Server. USENIX Security 2011 [Poster Proposal] [Poster]
- J Burket, P Mutchler, M Weaver, M Zaveri, D Evans. GuardRails: A (Nearly) Painless Solution to Web Application Security. USENIX Security 2010 [Poster]
- J Burket, P Mutchler, M Weaver, M Zaveri, D Evans. GuardRails: A (Nearly) Painless Solution to Web Application Security. IEEE Symposium on Security and Privacy 2010 [Poster]