Associate Professor at Purdue. Former DefconCTF organizer. Hiring interns/PhDs/PostDocs in Mobile Security/Authentication/IoT/Trustzone/Binary Analysis
POV: You are a security researcher looking to advance the state of the art and science in offensive security. Submit to WOOT and show us all the hacks you're cooking up 🧑🍳
The USENIX WOOT Conference has two submission deadlines this year!
- Cycle 1: December 12, 2025 (in less than 1 month!)
- Cycle 2: March 3, 2026
WOOT still has a SoK track and an "Up-and-coming track" (~Industry)
Check the CFP for details:
https://t.co/49FRaHuK9d
I am happy to share that our paper deepSURF (led by my student George Androutsopoulos) has been accepted to IEEE S&P 2026!
We combined program analysis and LLMs to uncover memory safety bugs in Rust’s unsafe code.
Check code/paper:
https://t.co/p5jreh8rDo
#RUST#Security
Excited to share that our research on LLM agents and dark patterns was accepted to IEEE S&P (Oakland) 2026. Work lead by @BrandonLeeCS and Devin Ersoy, in collaboration with @ZBerkayCelik and @anton00b.
As promised, the 2024 ACSAC CTF is now LIVE and playable on @pwncollege , complete with game-used challenge interface and the ability to win the sweet 🌴 award for solving all the challenges
Interested in graduate studies? Consider applying for a PhD in CS at Purdue.
I am seeking motivated students with interests in software/systems security, binary/program analysis, and mobile security.
The deadline for Fall'25 is Dec. 20.
You can reach me at: [email protected]
As part of the Shellphish team, we qualified for the DARPA/ARPA-H AIxCC Final Event and got a $2,000,000 gift!
Thank you to all the Purdue's students and faculties involved and to the entire Shellphish team!
#aixcc@LifeAtPurdue@shellphish
https://t.co/OWuxDn8PWo
AI Cyber Challenge Semifinal Competition results are in! Congratulations to the top seven scoring teams who will advance to finals, and to all the competitors who worked to help safeguard the code that underpins critical infrastructure. More: https://t.co/LktjU8rBB5
In our testing, ARTIPHISHELL finds and successfully patches all the OSS challenge problems (such as nginx, Jenkins, and THE LINUX KERNEL) as well as several OSS-Fuzz programs!
Whatever happens in the competition, it was a crazy journey, made possible through the blood, sweat, tears and red noses of the @shellphish team as well as support from @ASU, @ucsantabarbara, and @LifeAtPurdue, not to mention the Shellphish Support Syndicate
Introducing ARTIPHISHELL! An LLM-Based Cyber Reasoning System made by @shellphish that autonomously finds and patches vulnerabilities for the @DARPA AIxCC competition (https://t.co/4dcUPR6SnI)
@PurSecLab is proud to lead the initiative to secure cyber physical systems under the DARPA firefly program. Stay tuned for exciting tools we’re baking in-house for this initiative!
Patching a binary in 1 tweet :)
from patcherex2 import *
p = Patcherex("add")
asm_str = """
add edi, edi
add edi, 5
"""
p.patches.append(InsertInstructionPatch(0x114d,asm_str))
p.apply_patches()
p.binfmt_tool.save_binary()
I am happy to announce Patcherex2 (https://t.co/8R3ygd5wOO), an easy-to-use, Python-based binary patching tool, designed to be extensible and compatible with multiple architectures.
The code was mainly written by my student @__Han_Dai__ at @PurdueCS, for the DARPA AMP program.
Thrilled to announce I'll be joining the CS Department at Indiana University, Bloomington (@IUBloomington, @IULuddy) as an Assistant Professor in Fall 2024. Huge thanks to my mentors and beloved family members for their unwavering support. Super excited about this new chapter!