Documentation

DomainTools documentation platform

DomainTools provides internet infrastructure intelligence.

  • Audiences: SOC analysts: alert triage; threat hunters and incident responders: infrastructure investigation; administrators: access and integration setup; developers: API integration.
  • Contribution: Documentation platform development; publishing tools for developer resources and the changelog; final editorial review.

Threat Feeds data retrieval

  • Wrote guidance for integration developers on API choice, session state, and recovery from ingestion gaps.

IrisQL and API specifications

  • Query examples paired with the Iris OpenAPI specification.
  • Expand, maintain, and validate specifications for API references, code generation, and contract tests.

Projects

ARPANET Redux

  • Recovered 1973 ARPANET switching software connects simulated PDP-10 and PDP-11 hosts.
  • Contribution: Modern orchestration, validation, and documentation around preserved systems and existing simulators. A documented link-cut test keeps a TELNET session connected.

aghist

  • Experimental Python engine for historical research with agent teams.
  • Contribution: Research workflows with versioned questions, preserved source passages, independent reviews, and offline tests.

AUTODIN II and TCP/IP

  • Historical research on defense networking requirements and the development of TCP/IP.
  • Archival sources, evidence notes, and a working manuscript.

Research publications

Work-From-Home and COVID-19: Trajectories of Endpoint Security Management in a Security Operations Center

USENIX Security ‘23, August 2023.

The Creation and Administration of Unique Identifiers, 1967–2017

ICANN / Google (Commissioned Policy Research), November 2020.

Edge Cryptography and the Codevelopment of Computer Networks and Cybersecurity

IEEE Annals of the History of Computing, October 2016.

Blog