Ruchith Fernando abqiy4@r.postjobfree.com

Ph.D. Student

Computer Science Department

Purdue University

EDUCATION

Purdue University, West Lafayette, IN

Ph.D. Computer Science, expected December 2013

Purdue University, West Lafayette, IN

M.Sc. Computer Science, May 2012

University of Moratuwa, Moratuwa, Sri Lanka

B.Sc. Computer Science and Engineering, 2004

RESEARCH INTERESTS

Primary research interests are in areas of privacy, identity management and applied cryptography. Experienced

in developing secure middleware infrastructure and contributed to open source projects. Current research focus

is on private anonymous social messaging.

PUBLICATIONS

1. Ruchith Fernando, Bharat Bhargava, Mark Linderman, Private Anonymous Messaging, Workshop on

Dependable Network Computing and Mobile Systems 2012

2. Ruchith Fernando, Bharat Bhargava, Poster: Private Anonymous Messaging, Honorable Mention at the

CERIAS Poster Competition 2012

3. Nan Guo, Tianhan Gao, Bin Zhang, Ruchith Fernando, Elisa Bertino, Aggregated Privacy-Preserving

Identity Verification for Composite Web Services, IEEE International Conference on Web Services

2011

4. Kevin Steuer, Jr., Ruchith Fernando, Elisa Bertino, Privacy Preserving Identity Attribute Verification

in Windows CardSpace, 6th ACM workshop on Digital identity management of 18th ACM Conference

on Computer and Communications Security

5. Federica Paci, Ning Shang, Kevin Steuer Jr., Ruchith Fernando, Elisa Bertino : VeryIDX - A Privacy

Preserving Digital Identity Management System for Mobile Devices. [Demo paper], Mobile Data

Management 2009

6. Chamikara Jayalath, Ruchith Fernando : A Modular Architecture for Secure and Reliable Distributed

Communication, International Conference on Availability, Reliability and Security 2007 (IEEE ARES

2007)

7. Ruchith Fernando, Dimuthu Leelarathne, Malinda Kaushalye : SecureZone: A Framework for WS-

Secure Conversation and WS-Trust, International Information Technology Conference 2004

8. Eirik rsand, Ole Anders Walseth, Niklas Andersson, Ruchith Fernando, Ove Granberg, Johan G.

Bellika, Gunnar Hartvigsen, Using Blood Glucose Data as an Indicator for Epidemic Disease Outbreaks,

Medical Informatics Europe 2005

RESEARCH PROJECTS

AnonEncrypt

Implemented of an encryption scheme, which utilizes hierarchical identity based encryption, to provide

new privacy and anonymity grantees for p2p information sharing.

Attack Modeler

A toolkit that allows insertion of attacks into a datasets of resource access logs providing evidence of all

resource accesses while maintaining their causal relationships.

VeryIDX

Designed and implemented a standard Web services interface for: the challenge response protocol of the

zero knowledge proof of knowledge (ZKPK) of identity attributes and the aggregate signature scheme.

Extended a Microsoft CardSpace Identity Provider to issue unlikable security tokens for proof of

knowledge of identity attributes and implemented the relying party components to carryout the proof.

SecureZone

Implemented WS-Trust and WS-SecureConversation specification for Apache Axis. (Best final year

project student award-2005)

PROFESSIONAL EXPERIENCE

Graduate Assistant Rosen Center for Advanced Computing

Purdue University, West Lafayette, IN August 2008

Designed and implemented the core HUBzero database technologies for web-forms data contribution,

processing, and validation. This is used across 10 medical and scientific databases across 8 Hubs. This

work further included implementing data encryption to comply with HIPPA regulations.

Member of the Infusion Pump Informatics system development team responsible for data parser that

process smart pump device output, administration component, authorization framework, performance

optimization and dashboard.

Interim Engineering Intern Qualcomm Inc.

San Diego, USA Summer 2011

Privacy of sensor data contribution for collaborative analysis.

Technical Lead and Senior Software Engineer WSO2 Inc.

Colombo, Sri Lanka May2005 - August 2008

Designed and implemented the Web service security specifications for Apache Axis2 in the form of the

Apache Rampart project.

Actively contributed to Apache AXIOM, Apache WSS4J projects.

Member of the Web Services Application Server (WSAS) development team responsible for the web

services security components.

Architected and lead development of WSO2 Identity Server based on Apache Axis2 and Apache

Rampart frameworks.

Carried out on-site and online customer training programs on Web services security, Apache and WSO2

Web services frameworks.

Represented WSO2 and Apache Software Foundation at interoperability workshops and successfully

completed all Web service security interoperability scenarios.

Published a host of tutorials and articles on the developer portal.

Software Engineer Eurocenter DDC

Colombo, Sri Lanka December 2004 April 2005

Member of the R&D department.

Software Engineer Intern Norwegian Centre for Telemedicine

University Hospital of North Norway, Troms, Norway September 2004 December 2004

Contributed one publication working with the diabetes research team to use blood glucose data for

epidemic disease outbreak detection.

Software Engineer Intern Virtusa Pvt Ltd.

Colombo, Sri Lanka September 2004 December 2004

Created a portal product evaluation tool with the R&D department and worked on creating web parts for

the knowledge management portal.

Committer Apache Software Foundation

Member since 2007 Since 2005

Active contributor to the Web services project since 2004 founder and architect of Apache Rampart.

OTHER EXPERIENCE

Technical Committees

WS-SX Technical Committee of Organization for the Advancement of Structured Information

Standards (OASIS)

WS-Policy Working Group of World Wide Web Consortium (W3C).

External mentor of final year undergraduate project (CS 420) at Computer Science and Engineering

department, University of Moratuwa.

Instructor, University of Moratuwa, Computer Science and Engineering Department

Mentor, Google Summer of Code Representing Apache Software Foundation.

Mentor, FOSSCode Representing Apache Software Foundation

TECHNOLOGIES AND SKILLS

Java, PHP, JavaScript, C

XML, CSS, HTML, XSL, SQL

SOAP/WS-*

Apache Axis2, Apache Rampart, Apache WSS4J, Apache Tomcat, MySQL

Android

Eclipse IDE

Linux

AWARDS

Honorable Mention, Research Poster Competition, 13th Annual Information Security Symposium,

CERIAS

Best final year project student 2005, Computer Science and Engineering, University of Moratuwa, Sri

Lanka

Dean's list 3 semesters, University of Moratuwa, Sri Lanka

Contact this candidate