Posts in Security
A Signal Injection Attack Against Zero Involvement Pairing and Authentication for the Internet of Things
- 28 December 2024
Zero Involvement Pairing and Authentication (ZIPA) is a technique for automatically provisioning large networks of Internet-of-Things (IoT) devices with no user involvement. Prior ZIPA work generally assumes that the environment used for pairing is sufficiently isolated from external, adversarial signals. In our DESTION 2024 paper (see Citation below), we present the first signal-injection attack capable of influencing ZIPA-based key generation, demonstrating that these assumptions can fail in realistic settings.
SingleAdv: Targeted Adversarial Attacks on Interpretable Deep Learning (IEEE TIFS 2024)
- 01 March 2024
This paper was led by Elmurod Abdukhamidov and Mohammed Abuhamad (Hanyang University, Korea), with Hyoungshick Kim and Tamer Abuhmed as co-leads. I am one of the key leaders of this research project, contributing to the threat modeling and evaluation design. The work appeared in IEEE Transactions on Information Forensics and Security.
An Empirical Study of Artifacts and Security Risks in the Pre-Trained Model Supply Chain (SCORED 2022)
- 07 November 2022
This paper was led by Wenxin Jiang (Purdue University, working with James C. Davis), with contributions from Nicholas Synovic, Rohan Sethi, Aryan Indarapu, Matt Hyatt, and Taylor R. Schorlemmer. I am one of the key leaders of this research project. The work appeared at SCORED ‘22 (ACM Workshop on Software Supply Chain Offensive Research and Ecosystem Defenses), co-located with ACM CCS 2022.