Maryam Rostamipoor

Maryam Rostamipoor

Research Assistant at Hexlab

Department of Computer Science, Stony Brook University

About

I am a Ph.D. candidate in the Computer Science Department at Stony Brook University, working in the Hexlab under the supervision of Dr. Michalis Polychronakis. My research focuses on advancing cloud, Kubernetes, and software security. I design techniques to mitigate vulnerabilities such as data leakage and excessive permissions, while enhancing secret management and securing serverless platforms. I’ve developed tools like KubeKeeper, which protects Kubernetes Secrets through transparent encryption and fine-grained access control, and LeakLess, which uses selective in-memory encryption for developer-annotated sensitive data to mitigate memory disclosure vulnerabilities—including speculative execution attacks—in serverless environments.

In the area of software security and system hardening, I developed Confine, a binary analysis tool that automatically generates fine-grained Seccomp profiles by extracting system call argument values to help reduce container attack surfaces.

Prior to my Ph.D., I was the Head of Software Security at Sadad Electronic Payment Company, where I led a team of security engineers in penetration testing, secure coding, and enhancing the security of web and mobile applications.

I’m passionate about protecting user data and building secure systems, and I’m driven by the challenge of solving real-world cybersecurity problems. Outside of research, I love cooking, yoga, working out, and spending time with friends—it keeps me grounded and inspired.

Interests

  • Cloud Computing & Kubernetes Security
  • Binary Analysis & System Call Filtering
  • Web & Mobile Application Penetration Testing

Education

  • Ph.D. in Computer Science, 2026

    Stony Brook University

  • M.S. in Computer Science, 2023

    Stony Brook University

  • M.E. in Information Security Engineering, 2013

    Amirkabir University of Technology

  • B.E. in Computer Engineering, 2011

    Shiraz University of Technology

News

2025

  • April: Awarded the Catacosinos Fellowship for academic excellence and research potential
  • February: KubeKeeper accepted to IEEE EuroS&P 2025
  • February: Selected for the 2025 CRA-WP Grad Cohort for Women & IDEALS
  • January: Awarded the 2025 Internet Society NDSS Fellowship

2024

  • August: LeakLess accepted to NDSS 2025

2023

  • August: Awarded Graduate Assistance in Areas of National Need (GAANN) Fellowship
  • August: Awarded Graduate Students in STEM Leadership & Life Design Fellowship

2022

  • September: Confine accepted to the Computers & Security Journal

2020

  • October: Accepted a full funded Ph.D. offer from Stony brook University