Research
Our work is organized around stable themes that drive innovation in CPS security, IoT privacy, digital-twin verification, and brain-centered computing.

Cyber-Physical Systems Security & Semantics
Semantics-driven hardening of legacy and modern CPS; symbolic recovery of logic; testbed-based security experimentation.
Selected publications
- • ICSTracker: Backtracking Intrusions in Modern Industrial Control Systems
- • SPHERE CPS Enclave: A Reconfigurable Testbed for Industrial Control System Security Experimentation
- • AutoCPS: Control Software Dataset Generation for Semantic Reverse Engineering
- • HyPLC: Hybrid programmable logic controller program translation for verification
Related publications
- • HyTwin: Hybrid Program Semantics for Digital Twin-Based Security Interventions in Industrial Control Systems
- • Property-Guided Cyber-Physical Reduction and Surrogation for Safety Analysis in Robotic Vehicles
- • SensorLoader: Bridging the Gap in Cyber-Physical Reverse Engineering Across Embedded Peripheral Devices
- • Poster: Known Vulnerability Detection for WebAssembly Binaries
- • PERFUME: Programmatic Extraction and Refinement for Usability of Mathematical Expression
- • Hey, My Malware Knows Physics! Attacking PLCs with Physical Model Aware Rootkit

Digital Twins & Formal Verification
Formal and hybrid systems verification; fidelity-aware digital twins; verification-driven testbed design.
Selected publications
- • SPHERE CPS Enclave: A Reconfigurable Testbed for Industrial Control System Security Experimentation
- • HyTwin: Hybrid Program Semantics for Digital Twin-Based Security Interventions in Industrial Control Systems
- • Collaborative Research: FMitF: Track I: A Formal Verification and Implementation Stack for Programmable Logic Controllers
- • $\{$PAtt$\}$: Physics-based Attestation of Control Systems
Related publications
- • PhysioGAN: Training High Fidelity Generative Model for Physiological Sensor Readings
- • Collaborative Research: FMitF: Track I: A Formal Verification and Implementation Stack for Programmable Logic Controllers
- • A Hybrid Neuro-Symbolic Approach for Complex EventProcessing
- • A Hybrid Neuro-Symbolic Approach for Complex EventProcessing
- • HyPLC: Hybrid programmable logic controller program translation for verification
- • A hybrid neural-symbolic approach to uncertainty-aware complex event detection

IoT & Sensor Privacy
Privacy-preserving sensing and information flow for trustworthy ubiquitous systems, from edge to cloud.
Selected publications
- • Understanding factors behind IoT privacy--A user's perspective on RF sensors
- • PrivacyOracle: Configuring Sensor Privacy Firewalls with Large Language Models in Smart Built Environments
- • SecDeep: Secure and Performant On-device Deep Learning Inference Framework for Mobile and IoT Devices
- • I Always Feel Like Somebody's Sensing Me! A Framework to Detect, Identify, and Localize Clandestine Wireless Sensors
Related publications
- • Understanding factors behind IoT privacy--A user's perspective on RF sensors
- • Locomote: Ai-driven sensor tags for fine-grained undersea localization and sensing
- • Aerogel: Lightweight Access Control Framework for WebAssembly-Based Bare-Metal IoT Devices
- • I Always Feel Like Somebody's Sensing Me! A Framework to Detect, Identify, and Localize Clandestine Wireless Sensors
- • Neuroplex: learning to detect complex events in sensor networks through knowledge injection

Brain-Centered CPS / NeuroIoT
Human-in-the-loop CPS with neural & environmental sensing; multimodal fusion and memory-centric modeling.
Selected publications
- • Detecting Context Shifts in the Human Experience Using Multimodal Foundation Models
- • Collaborative Research: NCS: FO: Enhancing Episodic Memory through Real-world Integration of Brain Recording and Stimulation with Semantic Alignment of Human and IoT Perception
- • Continuous Stress Monitoring for Healthcare Workers: Evaluating Generalizability Across Real-World Datasets
- • Neuroplex: learning to detect complex events in sensor networks through knowledge injection
Related publications

Digital Twinning for Industrial Control Systems
This theme develops fidelity-aware digital twins that bridge engineered control code, physical process models, and experimental testbeds. Our work spans formal verification, real-system validation, and runtime conformance checking. We also leverage agentic testing frameworks for CPS that allow autonomous evaluation of system resilience, enabling verification and mitigation synthesis across realistic testbeds. Together, these efforts establish a principled foundation for trustworthy experimentation and security in cyber-physical infrastructure.
Selected publications
- • ICSTracker: Backtracking Intrusions in Modern Industrial Control Systems
- • SPHERE CPS Enclave: A Reconfigurable Testbed for Industrial Control System Security Experimentation
- • HyTwin: Hybrid Program Semantics for Digital Twin-Based Security Interventions in Industrial Control Systems
- • HyPLC: Hybrid programmable logic controller program translation for verification
Related publications
- • Collaborative Research: FMitF: Track I: A Formal Verification and Implementation Stack for Programmable Logic Controllers
- • Towards Cross-Physical-Domain Threat Inference for Industrial Control System Defense Adaptation
- • Collaborative Research: FMitF: Track I: A Formal Verification and Implementation Stack for Programmable Logic Controllers
- • Modeling Human-Cyber Interactions in Safety-Critical Cyber-Physical/Industrial Control Systems
- • $\{$PAtt$\}$: Physics-based Attestation of Control Systems
- • Tell Me More Than Just Assembly! Reversing Cyber-Physical Execution Semantics of Embedded IoT Controller Software Binaries