Research Overview

My research centers on a single question: how do people behave and misbehave in software ecosystems? I study open-source ecosystems such as GitHub, where millions of developers create, reuse, and share code. These ecosystems reflect how people collaborate, innovate, and sometimes exploit shared software. My work integrates machine learning, software engineering, and cybersecurity to understand these patterns and to design tools that make open-source development safer, more transparent, and easier to explore.


Research Projects

Tracing Technogeek Identities (GeekMAN)

Many developers, particularly in hacking and gaming communities, use creative technogeek usernames such as z3r0c001 or B14CKH4K3R. These stylized identities make it difficult to link the same person across different platforms.

We developed GeekMAN, a systematic approach that connects technogeek usernames across forums, GitHub, and social platforms. The system translates leetspeak into readable text, splits complex handles into meaningful parts, and compares them using semantic similarity measures. GeekMAN achieved up to 86% precision on technogeek datasets, improving cross-platform linkage by 10–20 percentage points over previous methods, and is available as a publicly accessible research tool.

Searching and Understanding Code Ecosystems (MetaSim & RepoScope)

Developers frequently search GitHub to learn or reuse code, but existing search tools remain largely keyword-based and opaque. The question we address is: given one GitHub repository, how can we find others that are similar in purpose and functionality?

To answer this, we built MetaSim and RepoScope, two systems for exploring code ecosystems. MetaSim studies how metadata such as repository descriptions, topics, and README files define functional similarity, showing that combining these signals yields a more accurate and interpretable view of project relationships. RepoScope extends this to support "search by example repository": it enables multi-level exploration from titles and metadata to source-code embeddings, and visualizes clusters of related projects for clearer interpretation.

The Malware Ecosystem on GitHub (MAGNET)

Thousands of GitHub repositories host malicious or dual-use code. In MAGNET, we take a software-engineering view of this malware ecosystem on the GitHub network, uncovering the technical and social mechanisms that shape how such repositories are created, forked, maintained, and how they evolve over time. This work was accepted to ASONAM 2026.