Portfolio

ROS 2 and DDS Security Research

Project manager and DDS researcher, r0s4ngeles

2025.07 - 2026.01

• Found denial-of-service vulnerabilities in DDS implementations.
• Helped develop a memory disclosure demonstration from a teammate's finding.
• Managed the project schedule, ran team meetings, and reviewed vulnerability analysis reports.
• Contributed research and presentation materials for the team's talk at ROSCon Korea 2026.

Conducted as part of the Vulnerability Analysis Track in Best of the Best (BoB), 14th Cohort. The team found 20 vulnerabilities and demonstrated memory address disclosure and a denial-of-service attack against a TurtleBot3 robot.

PCAP Fuzzer for tcpreplay

Individual project

2025.05

• Built a PCAP fuzzer in C to reproduce CVE-2024-3024 in tcpreplay.
• Implemented input mutation, crash detection, and saving of crash-inducing inputs.
• Reproduced the crash and used AddressSanitizer logs and source code to investigate its cause.