About me

As of Fall 2024, I am on the faculty job market.

I am a final year PhD student at University of California San Diego advised by Deian Stefan and Stefan Savage. My research focuses on solving hard security problems in real-world systems using lightweight, practical verification[1,2,3]. I also spend time working on hardware security[4,5,6], compiler security[7,8,9], and occasionally find bugs in airplanes[10].

I completed my undergraduate degree in Computer Engineering at University of Illinois Urbana-Champaign.

Publications

Evan Johnson, Evan Laufer, Zijie Zhao, Dan Gohman, Shravan Narayan, Stefan Savage, Deian Stefan, and Fraser Brown. WaVe: a verifiably secure WebAssembly sandboxing runtime IEEE S&P 23
🏅 Distinguished Paper
[ paper | code | bibtex ]

Shravan Narayan, Tal Garfinkel, Mohammadkazem Taram, Joey Rudek, Daniel Moghimi, Evan Johnson, Chris Fallin, Anjo Vahldiek-Oberwagner, Michael LeMay, Ravi Sahita, Dean Tullsen, and Deian Stefan. Going beyond the Limits of SFI: Flexible and Secure Hardware-Assisted In-Process Isolation with HFI ASPLOS 23
🏅 Distinguished Paper
🏅 Intel Hardware Security Academic Award Honorable Mention
🏅 IEEE Micro Top Picks (2024)
[ paper | code | bibtex | video ]

Mathias Brossard, Guilhem Bryant, Basma El Gaabouri, Xinxin Fan, Alexandre Ferreira, Edmund Grimley-Evans, Christopher Haster, Evan Johnson, Derek Miller, Fan Mo, Dominic P Mulligan, Nick Spinale, Eric Van Hensbergen, Hugo JM Vincent, Shale Xiong Private delegated computations using strong isolation IEEE Transactions on Emerging Topics in Computing , 2023.
[ paper | paper (no paywall) | code | bibtex ]

Shravan Narayan, Tal Garfinkel, Evan Johnson, David Thien, Joey Rudek, Michael LeMay, Anjo Vahldiek-Oberwagner, Dean Tullsen, and Deian Stefan. Segue & ColorGuard: Optimizing SFI Performance and Scalability on Modern x86 PLAS 2023
[ paper | bibtex ]

David Thien, Michael Smith, Evan Johnson, Sorin Lerner, Hovav Shacham, Deian Stefan, and Fraser Brown. FaJITa: Verifying Optimizations on Just-In-Time Programs PriSC 2023
[ paper | bibtex ]

Alexandra E. Michael, Anitha Gollamudi, Jay Bosamiya, Evan Johnson, Aidan Denlinger, Craig Disselkoen, Conrad Watt, Bryan Parno, Marco Patrignani, Marco Vassena, and Deian Stefan. MSWasm: Soundly Enforcing Memory-Safe Execution of Unsafe Code POPL 2023
[ paper | code | bibtex ]

Matthew Kolosick, Shravan Narayan, Evan Johnson, Conrad Watt, Michael LeMay, Deepak Garg, Ranjit Jhala, and Deian Stefan. Isolation without Taxation: Near Zero Cost Transitions for WebAssembly and SFI POPL 2022
[ paper | code | bibtex ]

Evan Johnson, David Thien, Yousef Alhessi, Shravan Narayan, Fraser Brown, Sorin Lerner, Tyler McMullen, Stefan Savage, and Deian Stefan. Доверяй, но проверяй: SFI safety for native-compiled Wasm Network and Distributed System Security Symposium (NDSS) 2021.
🏅 Applied Research Competition Finalist, CSAW 2021
[ paper | code | bibtex | video ]

Shravan Narayan, Craig Disselkoen, Daniel Moghimi, Sunjay Cauligi, Evan Johnson, Zhao Gang, Anjo Vahldiek-Oberwagner, Ravi Sahita, Hovav Shacham, Dean Tullsen, Deian Stefan Swivel: Hardening WebAssembly against Spectre USENIX Security Symposium 2021.
[ paper | code | bibtex ]

Evan Johnson, Maxwell Bland, YiFei Zhou, Joshua Mason, Stephen Checkoway, Stefan Savage and Kirill Levchenko. Jetset: Targeted Firmware Rehosting for Embedded Systems. USENIX Security Symposium 2021.
[ paper | code | bibtex | slides | video ]

Zhengkai Wu, Evan Johnson, Wei Yang, Osbert Bastani, Dawn Song, Jian Peng, and Tao Xie. Reinam: Reinforcement learning for input-grammar inference. ESEC/FSE 2019.
[ paper | bibtex ]