Andrew Fasano
(he/him/his)
PhD Student

Education
- BS in Computer Science & Communication, Rensselaer Polytechnic Institute
Biography
Andrew Fasano is a doctoral candidate in the Diverge Lab at Northeastern University, advised by Professor William Robertson, and an MIT Lincoln Laboratory Scholar. His research focuses on enabling dynamic program analysis of embedded systems through the process of rehosting firmware into virtual execution environments. Andrew maintains PANDA, an open-source dynamic analysis platform which has been recognized for its significance with an R&D 100 Award. In 2022, he created the course CS4910: System Security with Dynamic Program Analysis in the Khoury College of Computer Sciences.
In addition to his graduate studies, Andrew is a member of the Technical Staff at MIT Lincoln Laboratory where he has served as a principal investigator for multiple research programs. In 2018, Andrew led the laboratory's CTF team Lab RATs to a top-10 DEFCON finish. Andrew holds a Bachelors of Science with high honors in Computer Science and Communication from Rensselaer Polytechnic Institute.
Recent Publications
-
SoK: Enabling Security Analyses of Embedded Systems via Rehosting
Citation: Fasano, Andrew, et al. "SoK: Enabling Security Analyses of Embedded Systems via Rehosting." Proceedings of the 2021 ACM Asia Conference on Computer and Communications Security. 2021. -
PyPANDA: Taming the PANDAmonium of Whole System Dynamic Analysis
Citation: Luke Craig, Andrew Fasano, Tiemoko Ballo, Tim Leek, Brendan Dolan-Gavitt, and William Robertson. "PyPANDA: Taming the PANDAmonium of Whole System Dynamic Analysis." In Workshop on Binary Analysis Research (BAR), vol. 2021, p. 21. 2021. DOI: 10.14722/bar.2021.23001 -
Evaluating Synthetic Bugs
Citation: Joshua Bundt, Andrew Fasano, Brendan Dolan-Gavitt, William Robertson, and Tim Leek. (2021). "Evaluating Synthetic Bugs". In Proceedings of the 2021 ACM Asia Conference on Computer and Communications Security (ASIA CCS '21). Association for Computing Machinery, New York, NY, USA, 716–730. DOI: 10.1145/3433210.3453096