Publications

Responsible Disclosure is a Two-Way Street: Empirically Measuring the Responsible Disclosure Contract in the Firmware Ecosystem
Responsible disclosure is the process by which researchers and vendors cooperate to release information on newly discovered …
PDF Cite
Oxidizer: Toward Concise and High-fidelity Rust Decompilation
Rust is an increasingly popular language that has gained traction among developers. As a memory-safe language, Rust reduces the burden …
PDF Cite Code
Discovering Blind-Trust Vulnerabilities in PLC Binaries via State Machine Recovery.
Programmable Logic Controllers (PLCs) are industrial computers that control devices with real-world physical effects, and safety …
PDF Cite Code Slides
BUILD-BENCH: Benchmarking LLM Agents on Compiling Real-World Open-Source Software
Automatically compiling open-source software (OSS) projects is a vital, labor- intensive, and complex task, which makes it a good …
PDF Cite
Fuzz to the Future: Uncovering Occluded Future Vulnerabilities via Robust Fuzzing
The security landscape of software systems has witnessed considerable advancements through dynamic testing methodologies, especially …
PDF Cite Code
Operation Mango: Scalable Discovery of Taint-Style Vulnerabilities in Binary Firmware Services
The rise of IoT (Internet of Things) devices has created a system of convenience, which allows users to control and automate almost …
PDF Cite Code Slides
Greenhouse: Single-Service Rehosting of Linux-Based Firmware Binaries in User-Space Emulation
As IoT devices grow more widespread, scaling current analysis techniques to match becomes an increasingly critical task. Part of this …
PDF Cite Code Slides
Scalable and Lightweight CTF Infrastructures Using Application Containers
Attack-defence Capture The Flag (CTF) competitions are effective pedagogic platforms to teach secure coding practices due to the …
PDF Cite Code Slides