Publications & Talks

Selected Publications

Publications are grouped by their primary research focus and listed newest first. Preprints and their published or accepted versions are shown as a single entry. See my Google Scholar profile for the complete and most recent list.

AI Security

• SandScope: A Behavioral Audit Layer for MCP Tools in LLM Agent Supply Chains: SCORED 2026

• MCP Pitfall Lab: Exposing Developer Pitfalls in MCP Tool Server Security under Multi-Vector Attacks: arXiv preprint, 2026

• Attesting LLM Pipelines: Enforcing Verifiable Training and Release Claims: LLMSC @ FSE 2026 Companion

Software Supply Chain Security

• An Empirical Study of Observability Limits in Advanced Software Supply Chain Attacks: ACM CCS 2026 (accepted)

• FuseChain: Runtime Evidence Reconstruction for Software Supply-Chain Attacks: arXiv preprint, 2026

• Operational Runtime Behavior Mining for Open-Source Supply Chain Security: arXiv preprint, 2026

• Advanced Persistent Threats Based on Supply Chain Vulnerabilities: Challenges, Solutions & Future Directions: IEEE Internet of Things Journal, 2025

• Unified Parallel Semantic Log Parsing Based on Causal Graph Construction for Attack Attribution: IEEE ICDCS Workshops, 2025

• OSPtrack: A Labeled Dataset Targeting Simulated Execution of Open-Source Software: IEEE/ACM MSR, 2025

---

Talks & Industry Presentations

Conference presentations, invited talks, and industry technical sessions.

• Invited Talk at WF-IOT 2025: Advanced Persistent Threats Based on Supply Chain Vulnerabilities: Challenges, Solutions & Future Directions

• School of Computing Science, System Seminar: An Empirical Study of Observability Limits in Advanced Software Supply Chain Attacks (28 July, 2026)