Scaling AI Capabilities from Research to Production.

The Challenge

School districts lacked predictive visibility into IEP compliance, academic progress, and operational risk — relying on slow, fragmented manual data aggregation across disparate assessment platforms.

Architecture

• Modernized core data pipelines using Microsoft Fabric, advanced Python, and optimized SQL stored procedures
• Designed an Agentic AI system to fully automate complex ETL processes and intelligent data routing
• Built an Assessment Integration Engine standardizing iReady, NWEA, and IXL data against State Testing levels for real-time academic progress prediction
• Engineered compliance dashboards in Power BI / DAX: FAPE Compliance Prediction, IEP Risk Projection, Student Services Tracking, Achievement Gap, and State Performance Plan Indicators
• Developed iTAAP Insights Email Alerts to automatically notify districts of at-risk students requiring early intervention
• Architected secure data endpoints enabling cross-team consumption of centralized iTAAP data for other company products

Business Impact

Platform deployed across nearly 30 school districts. Achieved a 90% reduction in data processing time via Agentic AI automation. Mentors data science interns on internal tooling, continuously improving the iTAAP operational lifecycle.

The Challenge

Transparent proxies silently intercept and modify web traffic without user awareness, but their true prevalence, behavior, and network-wide impact were poorly understood at scale.

Methodology

• Designed a large-scale active measurement system to detect and fingerprint transparent proxies across global internet paths
• Built Python-based data collection and analysis pipelines processing millions of network probes
• Developed novel detection heuristics combining HTTP header analysis and TCP-level signals

Academic Impact

Published at IEEE INFOCOM 2024 — one of the top-ranked venues in computer networking, revealing the significant hidden influence of transparent proxies on internet traffic integrity.

The Challenge

The open proxy landscape — used for anonymization, censorship circumvention, and malicious activity — had never been comprehensively characterized in terms of scale, geography, and behavior.

Methodology

• Crawled, scanned, and analyzed 436,000+ open proxies across the global internet
• Built large-scale data collection infrastructure using Python and AWS for distributed scanning
• Applied statistical modeling and traffic analysis to characterize proxy behavior, uptime, and abuse patterns

Academic Impact

Published in Computer Networks (Elsevier), 2022 — delivering the first comprehensive analysis of the open proxy ecosystem and its security implications at internet scale.

The Challenge

Remote peering in BGP networks was known to distort anycast routing decisions, but the extent of this unintended impact on global traffic distribution — including for major cloud providers — had not been passively quantified.

Methodology

• Developed a passive BGP measurement methodology to infer anycast catchment boundaries without active probing
• Analyzed global BGP routing tables and AS-path data across hundreds of vantage points
• Correlated routing anomalies with remote peering relationships at internet exchange points (IXPs)

Academic Impact

Published in ACM SIGCOMM Computer Communication Review, 2019 — a flagship networking venue — establishing foundational methodology for passive anycast analysis used in subsequent internet measurement research.

The Challenge

As AI crawlers become ubiquitous, websites are moving beyond binary blocking (robots.txt) to a more sophisticated, unmeasured tactic: returning HTTP 200 responses to both humans and AI bots, but serving degraded, watermarked, or "poisoned" content specifically to crawlers like GPTBot.

Methodology

• Twin-crawler framework (Playwright) visiting Tranco Top 10,000 domains — once as a standard browser UA, once as GPTBot
• DOM tree structural comparison and text similarity scoring via Jaccard & TF-IDF cosine similarity
• Sector-level taxonomy: paywall injection, text truncation, gibberish poisoning, visual watermarking

Novelty

Unlike prior work measuring blocking, this measures deception — filling a critical gap in understanding how the web's content landscape diverges between human and AI readers.

The Challenge

LLMs are widely used to generate Infrastructure-as-Code (Terraform, Kubernetes YAML, Nginx configs). If a model hallucinates a plausible but unregistered domain endpoint, an attacker could register that domain to intercept live API traffic or credentials from deployed systems.

Methodology

• 1,000+ DevOps-focused prompts submitted to GPT-4o, Claude 3.5 Sonnet, and Llama-3-70B
• Regex extraction of all generated domains, filtered against known public registries
• DNS resolution + Registrar API queries to quantify hallucination rate and live registrability of phantom endpoints

Novelty

Distinct from package hallucination studies — this targets DNS-level infrastructure interception, a critical supply chain risk not previously measured in the LLM security literature.