School of Cybersecurity and Privacy (SCP), College of Computing
Georgia Institute of Technology
Advisor: Dr. Taesoo Kim
Cyber-physical systems security (drones, self-driving vehicles, robots, IoT); Test-driven security.
I am deeply passionate about investigating the security and robustness of Cyber-Physicsl Systems (CPS), which encompass practical systems such as drones, self-driving vehicles, robotic systems, and the Internet of Things (IoT) devices.
Throughout the journey of pursuing my M.S. and Ph.D. degrees, I have developed systematic testing methodologies tailored for each building block of CPS, including the OS layer (VUDDY [S&P'17], Hydra [SOSP'19]), communication protocol layer (under review), middleware layer (RoboFuzz [ESEC/FSE'22]), and application/logic layer (DriveFuzz [CCS'22]). These work have facilitated comprehensive testing of CPS, resulting in the discovery of critical bugs and vulnerabilities, as documented in the respective papers published in top-tier conferences in the fields of Security, Systems, and Software Engineering.
In my recently submitted work, I designed and implemented a fuzzer for a widely-used communication protocol in Cyber-Physical Systems. This fuzzer successfully uncovered numerous zero-day vulnerabilities, resulting in CVEs, and also identified specification violations within popular implementations of the protocol. Currently, the work is under review.
I am actively engaged in several fascinating projects at the moment. These include the preemptive physical security measures for robotic vehicles, automated causality analysis of robotic bugs, and the development of robust attack detection mechanisms under varying physical properties, to name just a few.