Research
- Binary code representation
- Learning representations that connect the compiled forms of a function to what it does, so analysts can find known code across processors, compilers and optimization settings.
- Explainable vulnerability analysis
- Moving vulnerability assessment from a score to code-level evidence an analyst can inspect, through learned detection, rule generation and patch screening.
- Malware beyond known families
- Comparing unfamiliar malware with the available evidence instead of forcing it into a known class, using open-set recognition, functional decomposition and authorship analysis.
- Firmware and supply-chain security
- Recovering the software components and capabilities of a firmware image from the image itself, without relying on the supplier.
- Avionics intrusion detection
- Resource-aware, adaptive and unsupervised detection for aircraft data buses such as MIL-STD-1553, built on attack analysis and controlled simulation.
Publications
- UniSafe: Modality-Agnostic Hateful Content Detection via Shared-Space Projection International World Wide Web Conference (WWW), 2026
- Supplier-Independent Capability Verification of Software and Firmware with AI-Driven ATT&CK Mapping International Conference on Cyber Conflict (CyCon), 2026
- Reinforced Graph Reduction for Efficient Anomaly Detection in Large-Scale Networks IEEE Swiss Conference on Data Science (SDS), 2026
- Security risk assessment of android automotive OS software supply chain using firmware reverse engineering Computers & Security, 2026
- SATCLIP-GNN: Cold-Start PM2.5 Forecasting with Satellite-Derived Location Priors IEEE Mediterranean and Middle-East Geoscience and Remote Sensing Symposium (M2GARSS), 2026
- Transforming Generic Coder LLMs to Effective Binary Code Embedding Models for Similarity Detection NeurIPS, 2025
- TALME: Topical Adversarial LLM-based Misinformation Enforcer International Conference on Advances in Artificial Intelligence (ICAAI), 2025
- ProvSpider: A Robust and Universal Toolkit for Binary Provenance Analysis Using Deep Learning IEEE International Symposium on Network Computing and Applications (NCA), 2025
- Toward a Robust Detection of PowerShell Malware against Code Mixing and Obfuscation by Using Sentence Transformer and Similarity Learning ACM Transactions on Privacy and Security, 2025
- MalGPT: A Generative Explainable Model for Malware Binaries ECML PKDD, 2025
All publications (55)
- Vulnerability Patch Verification for Military Software Systems Through AI-Driven Code-Level Rule Generation International Conference on Cyber Conflict, 2025
- Understanding Abandonment and Slowdown Dynamics in the Maven Ecosystem International Conference on Mining Software Repositories (MSR), 2025
- Obfuscated Clone Search in JavaScript based on Reinforcement Subsequence Learning ACM Transactions on Software Engineering and Methodology, 2025
- Mecha: A Neural-Symbolic Open-Set Homogeneous Decision Fusion Approach for Zero-Day Malware Similarity Detection IEEE Transactions on Software Engineering, 2025
- Automating SBOM Generation with Zero-Shot Semantic Similarity International Conference on Signal Processing and Information Communications (ICSPIC), 2025
- Leveraging Human Knowledge in Large Language Model for Obfuscation-Resisted Phishing URL Detection International Conference on Mobile and Secure Services (MobiSecServ), 2024
- A First Look at Self-Admitted Miscommunications in GitHub Issues IEEE/ACM International Conference on Automated Software Engineering Workshops (ASEW), 2024
- Dynamic Neural Control Flow Execution: an Agent-Based Deep Equilibrium Approach for Binary Vulnerability Detection ACM International Conference on Information and Knowledge Management (CIKM), 2024
- NeuroYara: Learning to Rank for Yara Rules Generation Through Deep Language Modeling and Discriminative N-Gram Encoding IEEE Transactions on Dependable and Secure Computing, 2024
- An empirical study on developers’ shared conversations with ChatGPT in GitHub pull requests and issues Empirical Software Engineering, 2024
- PulseAnomaly: Unsupervised Anomaly Detection on Avionic Platforms With Seasonality and Trend Modeling in Transformer Networks IEEE Transactions on Dependable and Secure Computing, 2024
- VeriBin: A Malware Authorship Verification Approach for APT Tracking through Explainable and Functionality-Debiasing Adversarial Representation Learning ACM Transactions on Privacy and Security, 2024
- ERS0: Enhancing Military Cybersecurity with AI-Driven SBOM for Firmware Vulnerability Detection and Asset Management International Conference on Cyber Conflict, 2024
- Accelerating Autonomous Cyber Operations: A Symbolic Logic Planner Guided Reinforcement Learning Approach International Conference on Computing, Networking and Communications (ICNC), 2024
- Unmasking of Maskware: Detection and Prevention of Next-Generation Mobile Crypto-Ransomware International Symposium on Foundations and Practice of Security, 2024
- Ch4os: Discretized Generative Adversarial Network for Functionality-Preserving Evasive Modification on Malware International Conference on Artificial Neural Networks (ICANN), 2024
- Variational Autoencoder with Temporal Condition for Effective Shape-based Calcium Imaging Neuron Registration IEEE International Conference on Bioinformatics and Biomedicine (BIBM), 2023
- GenTAL: Generative Denoising Skip-gram Transformer for Unsupervised Binary Code Similarity Detection International Joint Conference on Neural Networks (IJCNN), 2023
- TDRLM: Stylometric learning for authorship verification by Topic-Debiasing Expert Systems with Applications, 2023
- MaGnn: Binary-Source Code Matching by Modality-Sharing Graph Convolution for Binary Provenance Analysis IEEE Annual International Computer Software and Applications Conference (COMPSAC), 2023
- Milo: Attacking Deep Pre-trained Model for Programming Languages Tasks with Anti-analysis Code Obfuscation IEEE Annual International Computer Software and Applications Conference (COMPSAC), 2023
- Asm2Seq: Explainable Assembly Code Functional Summary Generation for Reverse Engineering and Vulnerability Analysis Digital Threats Research and Practice, 2023
- AIM: An Android Interpretable Malware detector based on application class modeling Journal of Information Security and Applications, 2023
- VulANalyzeR: Explainable Binary Vulnerability Detection with Multi-task Learning and Attentional Graph Convolution ACM Transactions on Privacy and Security, 2023
- SV1DUR: A Real-Time MIL-STD-1553 Bus Simulator with Flight Subsystems for Cyber-Attack Modeling and Assessments IEEE Military Communications Conference (MILCOM), 2022
- Adversarial Variational Modality Reconstruction and Regularization for Zero-Day Malware Variants Similarity Detection IEEE International Conference on Data Mining (ICDM), 2022
- D2D-MAP: A Drone to Drone Authentication Protocol Using Physical Unclonable Functions IEEE Transactions on Vehicular Technology, 2022
- AdaptIDS: Adaptive Intrusion Detection for Mission-Critical Aerospace Vehicles IEEE Transactions on Intelligent Transportation Systems, 2022
- OD1NF1ST: True Skip Intrusion Detection and Avionics Network Cyber-attack Simulation ACM Transactions on Cyber-Physical Systems, 2022
- H4rm0ny: A Competitive Zero-Sum Two-Player Markov Game for Multi-Agent Learning on Evasive Malware Generation and Detection IEEE International Conference on Cyber Security and Resilience (CSR), 2022
- JARV1S: Phenotype Clone Search for Rapid Zero-Day Malware Triage and Functional Decomposition for Cyber Threat Intelligence International Conference on Cyber Conflict, 2022
- SCS-Gan: Learning Functionality-Agnostic Stylometric Representations for Source Code Authorship Verification IEEE Transactions on Software Engineering, 2022
- A Review and Analysis of Attack Vectors on MIL-STD-1553 Communication Bus IEEE Transactions on Aerospace and Electronic Systems, 2022
- CamoDroid: An Android application analysis environment resilient against sandbox evasion Journal of Systems Architecture, 2022
- TASR: Adversarial learning of topic-agnostic stylometric representations for informed crisis response through social media Information Processing & Management, 2022
- Cut It: Deauthentication Attacks on Protected Management Frames in WPA2 and WPA3 International Symposium on Foundations and Practice of Security, 2022
- I-MAD: Interpretable malware detector using Galaxy Transformer Computers & Security, 2021
- ER-AE: Differentially Private Text Generation for Authorship Anonymization Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies (NAACL-HLT), 2021
- A Novel and Dedicated Machine Learning Model for Malware Classification International Conference on Software Technologies (ICSOFT), 2021
- Detecting High-Engaging Breaking News Rumors in Social Media ACM Transactions on Management Information Systems, 2020
- Asm2Vec: Boosting Static Representation Robustness for Binary Clone Search against Code Obfuscation and Compiler Optimization IEEE Symposium on Security and Privacy (S&P), 2019
- Detecting breaking news rumors of emerging topics in social media Information Processing & Management, 2019
- Arabic Authorship Attribution ACM Transactions on Asian and Low-Resource Language Information Processing, 2018
- Learning Stylometric Representations for Authorship Analysis IEEE Transactions on Cybernetics, 2017
- A Visualizable Evidence-Driven Approach for Authorship Attribution ACM Transactions on Information and System Security, 2015