Doctoral Symposium Program

Time Session & Title & Authors
8:30 AM – 8:40 AM Welcome remarks
8:40 AM – 10:10 AM

Session 1 (Chair: TBD)

Secure Software, Vulnerabilities, and Exploitation

Comprehending the Vulnerability Lifecycle: Targeting, Testing, and Repairing Security-Critical Systems

Han Zheng (EPFL)

Bits to Boot: Automated Vulnerability Discovery and Exploitation Analysis of Firmware

Connor Everett Glosner (Purdue University)

A Unified Approach to Bridge Snapshot Fuzzing from Low-Level Browser Vulnerabilities to Web Applications

Jan Drescher (TU Braunschweig)

Software Exploitation in the Post-Control Flow Integrity Era

Marcos Bajo (CISPA Helmholtz Center for Information Security)

Mitigations and Formal Verification for Speculative Execution Attacks in CHERI Architectures

Maria Emilia Caldara (INRIA)

Memory Safety for Commodity Graphics Processing Units

Jonas Roels (DistriNet, KU Leuven)

10:10 AM – 10:30 AM Conference coffee break
10:30 AM – 12:30 PM

Session 2 (Chair: TBD)

Trustworthy AI and Adaptive Cyber Defense

Trustworthy LLM Unlearning and Beyond

Xiaoyu Xu (The Hong Kong Polytechnic University)

Auditable Uncertainty Control for Secure LLM Agents

Chandan Kumar Sah (Beihang University)

Improving Transparency and Accountability in AI Data Use

Steven Seiden (Duke University)

Characterizing and Enforcing Interaction Integrity on the Immersive Web

Chandrika Mukherjee (Purdue University)

Large Language Models For Narrative-Driven Cyber Deception

Muris Sladić (Czech Technical University in Prague)

Knock, Knock: Who’s There? Towards Adversary-Aware Adaptive Cyber-Deception

Anastasia Safargalieva (Technical University of Denmark)

Securing Software in the Age of Large Language Models

Varun Gadey (University of Duisburg-Essen)

Evaluating Anti-Phishing Systems in Practice

Anish Chand (Louisiana State University)

12:30 PM – 2:00 PM Lunch and mentoring session
2:00 PM – 3:30 PM

Session 3 (Chair: TBD)

Cryptography and Secure Communication

Blockchain Protocols across Heterogeneous Cryptocurrencies

Javier Gomez-Martinez (Universidad Politécnica de Madrid, IMDEA Software Institute)

From First Secret to Moving Target: Measuring Information Access Under Network Control

Iman Alipour (Max Planck Institute for Informatics)

Beyond Approximate Arithmetic: Efficient Homomorphic Computation with Discrete CKKS

Elias Suvanto (University of Luxembourg)

Towards Practical Post-Quantum Signature Aggregation

Yini Lin (Monash University)

Towards Quantum-Resistant Crypto-Agile Authentication, Authorization, and Accountability for Time-Critical Communication in IEC 61850 Digital Substations

Moritz Gstür (Karlsruhe Institute of Technology)

Practical Post-Quantum Quorum Privacy via Structured Threshold Ring Signatures

Nikai Jagganath (Monash University)

3:30 PM – 4:00 PM Conference coffee break
4:00 PM – 5:00 PM

Session 4 (Chair: TBD)

Privacy

From Implicit Defaults to Deliberate Decisions: Privacy Design for Vibe-Coded Applications

Qiyu Li (University of California, San Diego)

Systematic Security and Privacy Auditing of the Android Ecosystem via Automated System-Level Re-Hosting

Thomas Sutter (University of Bern)

Structure-Aware Verifiability for Privacy-Enhancing Computation: Efficient, Dynamic, Deployable

Chuanwei Lin (Karlsruhe Institute of Technology and University of Luxembourg)

Post-Signing Privacy for Signatures and Source-Verifiable Systems

Ying-Teng Chen (Monash University)