Purdue University Cybersecurity News

06-10-2025 Purdue Computer Science News: Purdue University’s cybersecurity researchers have been awarded a contract by the Defense Advanced Research Projects Agency (DARPA) to investigate security vulnerabilities affecting modern smartphones. The project, led by Principal Investigator Antonio Bianchi, assistant professor, alongside co-Principal Investigators Dave (Jing) Tian, assistant professor, and Eugene H. Spafford, professor, will receive approximately $2.2 million in funding. The funding will be provided as part of the DARPA INGOTS program, and it will primarily support Ph.D. students, with opportunities for master’s and undergraduate researchers to contribute. The research team, based at the Purdue Security Laboratory (PurSec Lab) and affiliated with the Center for Education and Research in Information Assurance and Security (CERIAS), intends to systematically analyze smartphone vulnerabilities and their exploitability at scale. “Our goal is to move beyond the current case-by-case approach to smartphone security research and develop systematic, automated techniques for identifying and exploiting vulnerabilities,” said Bianchi. “This project will help us better understand the security landscape of modern smartphones and develop methods to strengthen their resilience against attacks.” The research will focus on studying existing vulnerabilities in Android devices, examining real-world software exploits, and compiling a comprehensive database of security flaws and their impact. The team is particularly interested in vulnerabilities related to Linux-based systems and software exploitation, making Purdue an ideal environment for this research, given its past contributions to Android security analysis. Despite significant efforts by major software companies to enhance smartphones’ security over the past two decades, vulnerabilities continue to be discovered and exploited by malicious actors. This project addresses the lack of effective automation in detecting software bugs and their root causes, which remains a major challenge. “This project enables us to tackle critical security concerns affecting billions of users worldwide,” said Bianchi. “By developing scalable methods for vulnerability discovery and exploitation, we intend to make a lasting impact on the field of cybersecurity.” The Purdue team is actively seeking students and postdoctoral researchers interested in joining the project. Those with experience in Linux and software exploitation are encouraged to apply.   About the Department of Computer Science at Purdue University Founded in 1962, the Department of Computer Science was created to be an innovative base of knowledge in the emerging field of computing as the first degree-awarding program in the United States. The department continues to advance the computer science industry through research. US News & Reports ranks Purdue CS #8 in computer engineering and #19, #16, and #18 overall in undergraduate and graduate computer science, respectively. Additionally, the program is ranked 6th in cybersecurity, 8th in software engineering, 13th in systems, 15th in programming languages and data analytics, and 18th in theory. Graduates of the program are able to solve complex and challenging problems in many fields. Our consistent success in an ever-changing landscape is reflected in the record undergraduate enrollment, increased faculty hiring, innovative research projects, and the creation of new academic programs. The increasing centrality of computer science in academic disciplines and society, and new research activities—centered around foundations and applications of artificial intelligence and machine learning, such as natural language processing, human-computer interaction, vision, and robotics, as well as systems and security—are the future focus of the department. cs.purdue.edu About CERIAS The Center for Education and Research in Information Assurance and Security at Purdue University is a world-renowned interdisciplinary academic center dedicated to advancing the knowledge and practice of information assurance, security and privacy. It is the world’s foremost interdisciplinary academic center for cyber and cyber-physical systems. More than a hundred CERIAS researchers are addressing issues of security, privacy, resiliency, trusted electronics, autonomy and explainable artificial intelligence.

Writer(s): Molly Walker Purdue CS News: The Purdue University Board of Trustees ratified several faculty appointments and passed resolutions of appreciation at its most recent meeting. Among these, Professor Eugene H. Spafford was named a Distinguished Professor of Computer Science in recognition of his exceptional impact on the field. The title of Distinguished Professor is one of the highest honors conferred by Purdue University and acknowledges faculty who have achieved exceptional recognition for their accomplishments in their fields. Spafford has long been a cornerstone of Purdue’s Department of Computer Science and an influential voice in cybersecurity and computing, globally. His appointment to Distinguished Professor honors decades of research, leadership, and service to the academic and professional computing fields. A pioneer in cybersecurity, Spafford has contributed foundational work in systems security, cybercrime, and policy, and is especially known for his advocacy for ethical computing and responsible innovation. He founded the Center for Education and Research in Information Assurance and Security (CERIAS), one of the world’s leading multidisciplinary cybersecurity research centers. Spafford’s work has earned numerous accolades, including the Harold F. Tipton Lifetime Achievement Award from (ISC)², the IFIP Kristian Beckman Award, fellow status with the ACM, IEEE, AAAS, the American Academy of Arts and Sciences, and Distinguished Fellow of the ISSA. He has advised government agencies, private sector organizations, and academic bodies on issues of computing, and national and global security.  In 2012, Spafford received Purdue’s Morrill Award, the highest honor the university confers upon a member of its faculty.  In 2016, he was awarded Indiana’s highest state honor by being named a Sagamore of the Wabash. He has also been inducted into the Cybersecurity Hall of Fame. “Professor Spafford’s appointment as a Distinguished Professor is an extremely well-deserved recognition of his profound and lasting impact on cybersecurity research and education,” said Petros Drineas, Professor and Head of the Department of Computer Science. “His visionary leadership in shaping cybersecurity policy, his dedication to mentoring the next generation of leaders, and his commitment to advancing ethical standards in computing embody the spirit of excellence that has defined our department since its founding as the nation’s first computer science department.” Spafford has also been a committed mentor and educator throughout his career, guiding countless students who have gone on to lead in academia, industry, and government. His legacy is visible not only in his scholarly contributions, but in the robust culture of integrity and public service he has fostered within the computing community. About the Department of Computer Science at Purdue University Founded in 1962, the Department of Computer Science was created to be an innovative base of knowledge in the emerging field of computing as the first degree-awarding program in the United States. The department continues to advance the computer science industry through research. U.S. News & World Report ranks the department No. 8 in computer engineering and No. 16 overall in undergraduate and graduate computer science. Additionally, the program is ranked No. 6 in cybersecurity, No. 8 in software engineering, No. 13 in systems, No. 15 in programming languages and data analytics, and No. 18 in theory. Graduates of the program are able to solve complex and challenging problems in many fields. Our consistent success in an ever-changing landscape is reflected in the record undergraduate enrollment, increased faculty hiring, innovative research projects, and the creation of new academic programs. The increasing centrality of computer science in society, academic disciplines and new research activities — centered around foundations and applications of artificial intelligence and machine learning, such as natural language processing, human computer interaction, vision, and robotics, as well as systems and security — are the future focus of the department. Learn more at cs.purdue.edu.  

Marcus Rogers, professor and associate dean for faculty at Purdue Polytechnic, has been elected treasurer of the American Academy of Forensic Sciences (AAFS). This position puts Rogers onto AAFS’ board of directors, where he joins an accomplished group of 12 directors plus six officers. More information »

WEST LAFAYETTE, Ind. — Dongyan Xu, the Samuel D. Conte Professor of Computer Science in the College of Science and director of the Center for Education and Research in Information Assurance and Security (CERIAS), has been chosen to receive the 2024 Arden L. Bement Jr. Award. The award is Purdue University’s most prestigious recognition for contributions in pure and applied science and engineering. Xu is a leading authority in cybersecurity, particularly in cyber-physical system (CPS) security. His pioneering research has advanced security frameworks for critical infrastructures and systems, including unmanned aerial systems (UAS), industrial control systems and Internet of Things (IoT) networks. His work has been widely recognized for its impact on national security and real-world applications. “Xu’s research has transformed the way we approach cybersecurity in cyber-physical systems, bridging the gap between cyber and physical security layers,” said Dan DeLaurentis, vice president for Discovery Park District Institutes and Centers. “His contributions not only advance academic knowledge but also have direct applications in national security and defense, manufacturing, and supply chain management.” Xu expressed deep gratitude for the recognition. “I am sincerely humbled and honored by this award, and I feel very grateful to my colleagues and the Purdue research community for all their inspiration and support through the years,” he said. “I am fortunate to work in cybersecurity, an area of long-time excellence at Purdue and an area with ever-changing challenges and opportunities.” Xu has led research projects totaling more than $28 million from government agencies and industry partners in the past decade. His cross-layer security methodology, which integrates system modeling, vulnerability discovery, attack simulation and system hardening, has led to critical security advancements in CPS environments. His research in UAS security, for example, has identified and mitigated vulnerabilities in widely used autopilot software, benefiting commercial and defense sectors. His work on IoT security has influenced global standards, revealing critical vulnerabilities in Bluetooth and Controller Area Network bus protocols used in vehicles and industrial automation. Xu and his colleagues have helped develop security remedies adopted by major technology firms, including Apple, Google and Intel. His cybersecurity methodologies also have played a key role in securing next-generation manufacturing and supply chains through the Department of Energy-sponsored Cybersecurity Manufacturing Innovation Institute (CyManII), which he served as vice president for secure automation and supply chains. Xu’s over-arching goal for his future work at Purdue is to advance cybersecurity in all useful applications. “My goal is to help realize the fusion of cybersecurity and other science and engineering disciplines to make more real-world systems and infrastructures cyber-secure.” he said. Xu has authored over 100 peer-reviewed papers, winning best paper awards at premier cybersecurity conferences. Beyond research, he’s contributed to national cybersecurity policies through the National Science Foundation’s AI Institute for Cyber Threat Intelligence and Operations (ACTION) and cybersecurity R&D strategies for organizations like MITRE Corp., Sandia National Laboratories and Cisco Systems. The Bement award recognizes Purdue faculty whose research has made a significant impact on science and engineering. Established in honor of Arden L. Bement Jr., a distinguished professor and former director of the National Science Foundation, the award highlights innovative and influential contributions to global scientific advancements. Xu’s award will be among awards presented at the 2024 Excellence in Research Awards Distinguished Lecture event from 9 to 11:30 a.m. on May 5 at the Burton D. Morgan Center for Entrepreneurship. Xu will present a lecture about his work at the event. Registration is requested here. About Purdue University Purdue University is a public research university leading with excellence at scale. Ranked among top 10 public universities in the United States, Purdue discovers, disseminates and deploys knowledge with a quality and at a scale second to none. More than 107,000 students study at Purdue across multiple campuses, locations and modalities, including more than 58,000 at our main campus in West Lafayette and Indianapolis. Committed to affordability and accessibility, Purdue’s main campus has frozen tuition 13 years in a row. See how Purdue never stops in the persistent pursuit of the next giant leap — including its comprehensive urban expansion, the Mitch Daniels School of Business, Purdue Computes and the One Health initiative — at https://www.purdue.edu/president/strategic-initiatives. Media contact: Amy Raley, araley@purdue.edu

Ananth Grama, the Samuel D. Conte Distinguished Professor of Computer Science, has been appointed as director of the Purdue Institute for Physical AI (IPAI). More information »

WEST LAFAYETTE, Ind. — A world-renowned cybersecurity expert and Fulbright Scholar is using his time at Purdue University to advance worldwide cybersecurity in collaboration with CERIAS, Purdue’s Center for Education and Research in Information Assurance and Security. Ali Al-Haj, professor of cybersecurity and computer engineering at Princess Sumaya University for Technology (PSUT) in Jordan, is ranked among the top 2% of cited researchers globally. While at Purdue for the 2024-25 academic year, he is working to bridge gaps between academia and industry, foster international collaboration, and increase the depth and breadth of multidisciplinary approaches to cybersecurity. “Cybersecurity is far more than technology. It’s multidisciplinary. It’s about policy, governance, ethics and human behavior. Without those dimensions, even the best technical defenses can fail,” Al-Haj said. “I aim to learn from Purdue’s global leadership in cybersecurity while offering insights from my experience building one of the first cybersecurity programs in Jordan.” During his time at Purdue, Al-Haj said he wants to advance research on cybersecurity policy and governance, develop workforce education strategies, and lay the groundwork for the future Cybersecurity Center of Excellence in Jordan. Al-Haj’s journey to Purdue is personal as well as professional. His connection to the U.S. dates back to his time as a foreign exchange student in Ohio in the 1980s. “The bonds I built back then opened doors that eventually led me to Purdue through the Fulbright Program,” he said. “This collaboration is part of a broader vision to strengthen ties between PSUT and Purdue, including opportunities for student exchanges and collaborative projects.” By engaging with CERIAS faculty and Purdue Policy Research Institute staff, Al-Haj is exploring societal and legal aspects of cybersecurity, including privacy, ethics and digital trust. “Dr. Al-Haj exemplifies the Fulbright spirit, blending cultural exchange with academic excellence,” said Joel Rasmus, CERIAS managing director. “His work is helping Purdue and PSUT achieve a greater global impact. Our early interactions have already contributed to Purdue University’s CERIAS, in collaboration with the Purdue Applied Research Institute, establishing a cybersecurity academy for Jordanian college students.” The future Cybersecurity Center of Excellence in Jordan will integrate research, workforce development and industry collaboration, targeting critical infrastructure security and interdisciplinary education. “My goal is to create pathways for Jordanian students to pursue advanced studies and contribute to the global cybersecurity community. Networking at Purdue helps me open those doors,” Al-Haj said. Al-Haj will present some of his findings Feb. 26 as part of the weekly series of CERIAS Security Seminars. His talk is scheduled for 4:30-5:20 p.m. and will be available via Zoom. He also will be a speaker for the 26th annual CERIAS Cybersecurity Symposium, April 1-2 on the West Lafayette campus, before he returns to Jordan in June 2025. About CERIAS Purdue is annually ranked as a top 10 U.S. university for cybersecurity education and is the top-ranked U.S. university for cybersecurity research. CERIAS is a stand-alone institute that fosters cybersecurity collaboration and coordination across eight of Purdue’s colleges and 20 academic departments. Purdue serves as an unbiased resource to the worldwide cybersecurity community. About Purdue University Purdue University is a public research university leading with excellence at scale. Ranked among top 10 public universities in the United States, Purdue discovers, disseminates and deploys knowledge with a quality and at a scale second to none. More than 107,000 students study at Purdue across multiple campuses, locations and modalities, including more than 58,000 at our main campus in West Lafayette and Indianapolis. Committed to affordability and accessibility, Purdue’s main campus has frozen tuition 13 years in a row. See how Purdue never stops in the persistent pursuit of the next giant leap — including its comprehensive urban expansion, the Mitch Daniels School of Business, Purdue Computes and the One Health initiative — at https://www.purdue.edu/president/strategic-initiatives. Media contact: Amy Raley, araley@purdue.edu

Vijay Raghunathan, Purdue’s vice president for global partnerships and programs, director of semiconductor education, and a professor in the Elmore Family School of Electrical and Computer Engineering, has been appointed as an inaugural member of the Workforce Advisory Board for the National Semiconductor Technology Center (NSTC). More information »

(Purdue CS News) – This prestigious appointment recognizes Grama’s distinguished career as a researcher and educator. Throughout his tenure at Purdue Computer Science, he has made impactful contributions to the development of software systems and methodologies for resource management and the execution of complex scientific applications across a range of platforms—from small embedded controllers to large-scale cloud-powered data centers. Grama is also known for authoring widely used textbooks and materials that have become foundational references within the computing community. Grama’s extensive accolades include serving on editorial boards for prominent journals such as Parallel Computing and IEEE Transactions on Parallel and Distributed Computing. He has been an active member of program committees for leading conferences and has chaired study sections for the National Institutes of Health, as well as review and advisory boards for the National Science Foundation and Department of Energy. A fellow of the American Association for the Advancement of Science, Grama’s honors include a National Science Foundation CAREER Award, Purdue’s Faculty Scholar Award, College of Science Outstanding Teacher Award, and College of Science Distinguished Research Award. Additionally, he has been recognized as a University of Minnesota Distinguished Alumnus and received the Amazon Research Award, among other distinctions. “Professor Ananth Grama’s numerous contributions to parallel and distributed computing encompass architectures, algorithms, and software, with broad applications in data science and machine learning,” said Petros Drineas, professor and head of the Department of Computer Science. “His dedication to research and education shapes the future of Purdue’s Department of Computer Science and enhances our global reputation. We are very proud to celebrate his appointment as a Distinguished Professor of Computer Science.”   About the Department of Computer Science at Purdue University Founded in 1962, the Department of Computer Science was created to be an innovative base of knowledge in the emerging field of computing as the first degree-awarding program in the United States. The department continues to advance the computer science industry through research. US News & Reports ranks Purdue CS #8 in computer engineering and #19 and #16 and #18 overall in undergraduate and graduate computer science, respectively. Additionally the program is ranked 6th in cybersecurity, 8th in software engineering, 13th in systems, 15th in programming languages and data analytics, and 18th in theory. Graduates of the program are able to solve complex and challenging problems in many fields. Our consistent success in an ever-changing landscape is reflected in the record undergraduate enrollment, increased faculty hiring, innovative research projects, and the creation of new academic programs. The increasing centrality of computer science in academic disciplines and society, and new research activities—centered around foundations and applications of artificial intelligence and More information »

Santiago Torres-Arias, assistant professor in Purdue University’s Elmore Family School of Electrical and Computer Engineering, recently took center stage at KubeCon 2024 as a keynote speaker. The conference, a cornerstone event for the cloud-native community, showcased insights and innovations shaping the future of open-source technologies. Torres-Arias’ keynote, titled “Open Source Security is Not a Spectator Sport,” underscored the collaborative nature and critical importance of proactive security measures in open source software development. More information »

Two Purdue University faculty members, representing the College of Engineering and the College of Science, have been named fellows of the National Academy of Inventors, the organization announced Tuesday (Dec. 10). The 2024 fellow class represents 170 research universities and governmental and nonprofit research institutions worldwide. Edward Delp, the Charles William Harrison Distinguished Professor in the Elmore Family School of Electrical and Computer Engineering and professor of biomedical engineering, and Arun Ghosh, the Ian P. Rothwell Distinguished Professor of Chemistry and professor of medicinal chemistry and molecular pharmacology, will be inducted during NAI’s 14th annual meeting in June 2025 in Atlanta. More information »