Damn Vulnerable Drone Hands-on (Part 1)
Introduction This blog series is split into two parts. The GitHub challenge set has 8 challenges in total, which I’ll post in two groups of four. Part 1 covers the four challenges that belong to t...
astronaut0703
SOUNDBOOST: Effective RCA and Attack Detection for UAV via Acoustic Side-Channel
A review of SOUNDBOOST (DSN 2025), a post-hoc root cause analysis framework that uses a UAV's acoustic side-channel to attribute navigation failures to GPS spoofing or IMU biasing attacks.
[Paper Review] RoboFuzz: Fuzzing Robotic Systems over Robot Operating System (ROS) for Finding Correctness Bugs
A review of RoboFuzz (ESEC/FSE 2022), a fuzzing framework that finds correctness bugs in ROS-based robotic systems — bugs where the robot does not crash but behaves incorrectly.
What Should a Security Researcher Prepare For in an Era Where Agents Write the Exploits?
This post is a personal argument written after reading the panel discussion “Security in the Age of Agentic AI” from CODEGATE 2026 Open Talk (July 24, 2026; moderator Kim Yong-dae; panelists Kim Ta...
[Bad Epoll CVE-2026-46242] Addendum: Completing the AAR
Introduction While writing the three Bad Epoll blog posts, I thought I had understood the root process of Bad Epoll. But I hadn’t. While talking about Bad Epoll’s AAR with the people I study with...