Publications

(2026). ORANClaw: Shredding E2 Nodes in O-RAN via Structure-aware MiTM Fuzzing (WiSec 2026). 19th ACM Conference on Security and Privacy in Wireless and Mobile Networks (WiSec 2026), pp. 163–175.
(2025). SNI5GECT: A Practical Approach to Inject aNRchy into 5G NR (USENIX Security 2025). 34th USENIX Security Symposium (USENIX Security 25), pp. 5385–5404.
(2025). 5Ghoul: Unleashing Chaos on 5G Edge Devices via Stateful Multi-Layer Fuzzing (IEEE TDSC 2025). IEEE Transactions on Dependable and Secure Computing, vol. 22, no. 6, pp. 6230–6247 (2025).
(2024). VaktBLE: A Benevolent Man-in-the-Middle Bridge to Guard against Malevolent BLE Connections (ACSAC 2024). 2024 Annual Computer Security Applications Conference (ACSAC), pp. 621–635.
(2024). AirBugCatcher: Automated Wireless Reproduction of IoT Bugs (ACSAC 2024). 2024 Annual Computer Security Applications Conference (ACSAC), pp. 607–620.
(2024). U-Fuzz: Stateful Fuzzing of IoT Protocols on COTS Devices (ICST 2024). IEEE Conference on Software Testing, Verification and Validation (ICST 2024).
(2023). VitroBench: Manipulating In-vehicle Networks and COTS ECUs on Your Bench (Vehicular Communications 2023). Vehicular Communications, vol. 43, article 100649 (2023).
(2022). Towards Automated Fuzzing of 4G/5G Protocol Implementations Over the Air (GLOBECOM 2022). IEEE Global Communications Conference (2022).
(2022). BrakTooth: Causing Havoc on Bluetooth Link Manager via Directed Fuzzing (Usenix Security 2022). 31st USENIX Security Symposium (USENIX Security 22).
(2020). SweynTooth: Unleashing Mayhem over Bluetooth Low Energy (Usenix ATC). USENIX Annual Technical Conference (2020).