Academic research · Suhas Bhairav

Academic publications

Peer-reviewed work on IoT security, static analysis, fuzzing, denial of service and graph complexity reduction. This research still shapes how I build AI systems today: security and reliability are designed in, not bolted on.

Publications
9
Citations
389
Years
2017–2020

Publications

Google Scholar profile
  1. ACM SACConference

    OVER: Overhauling vulnerability detection for IoT through an adaptable and automated static analysis framework

    Vinay Sachidananda, Suhas Bhairav, Yuval Elovici

    Proceedings of the 35th Annual ACM Symposium on Applied Computing (ACM SAC), pp. 729-738. ACM.

    A static analysis framework for IoT that detects buffer overflows, memory leaks, code injection, TOCTOU, banned functions and other code-level vulnerabilities across kernels, protocol stacks, APKs and firmware. Over 21,000 IoT firmware images, 628 IoT APKs and 50 open-source IoT projects were unpacked and analysed.

    Read paper: OVER: Overhauling vulnerability detection for IoT through an adaptable and automated static analysis frameworkScholar: OVER: Overhauling vulnerability detection for IoT through an adaptable and automated static analysis frameworkCited by 22
  2. IEEE TrustComConference

    PIT: A probe into Internet of Things by comprehensive security analysis

    Vinay Sachidananda, Suhas Bhairav, Nirnay Ghosh, Yuval Elovici

    18th IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom/BigDataSE), pp. 522-529. IEEE.

    A modular, adaptable and tunable framework to probe IoT systems at different layers of design and implementation, combining penetration testing, fuzzing, static and dynamic analysis with an exploitation engine. It includes Applica, a new grey-box fuzzer built to overcome the limits of existing IoT fuzzers.

    Read paper: PIT: A probe into Internet of Things by comprehensive security analysisScholar: PIT: A probe into Internet of Things by comprehensive security analysisCited by 14
  3. EAI Transactions on Security and SafetyJournal

    Spill the Beans: Extrospection of Internet of Things by exploiting Denial of Service

    Vinay Sachidananda, Suhas Bhairav, Yuval Elovici

    EAI Endorsed Transactions on Security and Safety, 6(20), pp. 1. EAI.

    A large-scale study of Denial of Service across IoT protocols, introducing OWL, an attack and defence framework for IP, Bluetooth and Zigbee devices, plus two new metrics for resilience and QoS degradation. Experiments on real devices include DDoS with Mirai and permanent DoS with BrickerBot.

    Read paper: Spill the Beans: Extrospection of Internet of Things by exploiting Denial of ServiceScholar: Spill the Beans: Extrospection of Internet of Things by exploiting Denial of ServiceCited by 5
  4. IEEE Transactions on ReliabilityJournal

    Security testbed for Internet-of-Things devices

    Shachar Siboni, Vinay Sachidananda, Yair Meidan, Michael Bohadana, Yael Mathov, Suhas Bhairav, Asaf Shabtai, Yuval Elovici

    IEEE Transactions on Reliability, 68(1), pp. 23-44. IEEE.

    A security testbed framework for testing all types of IoT devices, with different software and hardware configurations, through standard and advanced security testing, including analysis processes based on machine learning.

    Read paper: Security testbed for Internet-of-Things devicesScholar: Security testbed for Internet-of-Things devicesCited by 282
  5. CRITISConference

    SMuF: State machine based mutational fuzzing framework for Internet of Things

    Neeraj Karamchandani, Vinay Sachidananda, Suhas Setikere, Jianying Zhou, Yuval Elovici

    International Conference on Critical Information Infrastructures Security (CRITIS), pp. 101-112. Springer.

    A mutation-based fuzzing framework that uses protocol state machines and level-aware packet generation to mutate fields by location, context and time. Evaluated in an IoT security testbed, it uncovered DoS, buffer overflow and session hijacking vulnerabilities.

    Read paper: SMuF: State machine based mutational fuzzing framework for Internet of ThingsScholar: SMuF: State machine based mutational fuzzing framework for Internet of ThingsCited by 2
  6. SecureCommConference

    Out of kilter: Holistic exploitation of Denial of Service in Internet of Things

    Suhas Setikere, Vinay Sachidananda, Yuval Elovici

    International Conference on Security and Privacy in Communication Systems (SecureComm), pp. 43-52. Springer.

    An initial attack and defence framework for DoS on IP and Bluetooth IoT devices, showing resource exhaustion and BLE packet injection, and proposing a metric for resilience against DoS, tested with Mirai and BrickerBot on real devices.

    Read paper: Out of kilter: Holistic exploitation of Denial of Service in Internet of ThingsScholar: Out of kilter: Holistic exploitation of Denial of Service in Internet of ThingsCited by 6
  7. IARIA Intelligent SystemsJournal

    User-guided graph exploration: A framework for algorithmic complexity reduction in large data sets

    Tim Grube, Florian Volk, Max Mühlhäuser, Suhas Bhairav, Vinay Sachidananda, Yuval Elovici

    International Journal on Advances in Intelligent Systems, 11, pp. 68-80. ThinkMind.

    The extended journal version of the graph complexity reduction work: a semi-automated, user-guided framework that reduces what a person has to look at in very large graphs while keeping their core structure.

    Scholar: User-guided graph exploration: A framework for algorithmic complexity reduction in large data sets
  8. IARIA CENTRICConferenceBest paper

    Complexity reduction in graphs: A user centric approach to graph exploration

    Tim Grube, Florian Volk, Max Mühlhäuser, Suhas Bhairav, Vinay Sachidananda, Yuval Elovici

    10th International Conference on Advances in Human-oriented and Personalized Mechanisms, Technologies, and Services (CENTRIC), pp. 24-31. IARIA.

    Combines graph-theoretic properties with community detection to hide less important detail in large social and citation networks without destroying core structure, giving a large reduction in displayed nodes and links.

    Read paper: Complexity reduction in graphs: A user centric approach to graph explorationScholar: Complexity reduction in graphs: A user centric approach to graph explorationCited by 3
  9. ACM IoTPTSWorkshop

    Let the cat out of the bag: A holistic approach towards security analysis of the Internet of Things

    Vinay Sachidananda, Shachar Siboni, Asaf Shabtai, Jinghui Toh, Suhas Bhairav, Yuval Elovici

    Proceedings of the 3rd ACM International Workshop on IoT Privacy, Trust, and Security (IoTPTS), pp. 3-10. ACM.

    Early work on security analysis for IoT devices, introducing a security IoT testbed and the design, requirements and architecture needed to analyse devices from smart homes to smart enterprises.

    Read paper: Let the cat out of the bag: A holistic approach towards security analysis of the Internet of ThingsScholar: Let the cat out of the bag: A holistic approach towards security analysis of the Internet of ThingsCited by 55

Citation counts from Google Scholar, October 2026.