Santiago Arias
Assistant Professor at Purdue University
New York, New York, United States
Summary
🤩
Rockstar🎓
Top SchoolSantiago Arias is an Assistant Professor of ECE at Purdue University with 13 years of experience at the intersection of software supply chain security, applied cryptography, and systems security. He combines academic rigor (NYU MS, PhD work in computer science) with deep hands-on engineering, contributing to high-profile open-source projects like in-toto, Git, and python-tuf to harden package and update integrity. His work spans full-stack development, back-end systems, and test automation—ranging from implementing validator and metadata formats in in-toto to adding tag-inspection features and tests in Git. Based in New York, he brings practical industry experience from consulting and teaching, and a knack for turning formal security concepts into usable tooling that improves real-world software distribution.
13 years of coding experience
Master’s Degree, Computer Science, 3.95, Master’s Degree, Computer Science, 3.95 at New York UniversityBachelor of Science (BS), Electrical, Electronics and Communications Engineering, Bachelor of Science (BS), Electrical, Electronics and Communications Engineering at Universidad Iberoamericana, Ciudad de México
English, Spanish, French, German
Stackoverflow
23reputation
1kreached
1answer
1question
Github Skills (22)
git10
python10
testing10
supply-chain-management10
tuf10
c1110
security10
c1710
version-control10
test-automation10
command-line-interface9
key-management9
git-repository9
package-repository9
command-line9
Programming languages (25)
Github contributions (5)
in-toto/in-toto
May 2016 - Dec 2022
in-toto is a framework to protect supply chain integrity.
Role in this project:
Full-stack Developer
Full-stack DeveloperContributions:7 releases, 14 reviews, 283 commits in 6 years 7 months
Contributions summary:Santiago's commits primarily focus on the development of the "Toto" framework, a series of scripts designed to secure software supply chains. They implemented the foundational modules and test scripts and set up the initial setup.py file for installation. Furthermore, they implemented a validator to handle the match rules, and added a new metadata format.
protectnew-york-universitytotosecure-systems-labsecurity
theupdateframework/python-tuf
Nov 2013 - May 2020
Python reference implementation of The Update Framework (TUF)
Role in this project:Back-end & Security Engineer
Back-end & Security EngineerContributions:1 release, 71 commits, 6 PRs in 6 years 6 months
Contributions summary:Santiago primarily worked on the 'python-tuf' repository, which is a Python implementation of The Update Framework (TUF). Their commits involve merging branches and modifying the core updater functionality. These changes include modifications to the updater, delegation implementation and handling of project configuration. This suggests a focus on enhancing the security and functionality of the TUF framework.
pythonsecuritycompromiserevocationupdate
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.