Research Interests

Cyber-Physical and Robotic System Security: predictive runtime monitoring, failure detection, incident root cause analysis, and forensic analysis.

Computer System Security: trusted execution environments (TEE), ARM TrustZone, Intel SGX, and secure system architectures.

AI for Security: machine learning-based intrusion/fault detection, autonomous system protection.

Adversarial Machine Learning: attack and defense techniques for learning models in safety- and mission-critical applications.

Publication

1. DNN Latency Sequencing: Extracting DNN Architectures from Intel SGX Enclaves with Single-Stepping Attacks   NDSS 2026 (to appear)
   code bibtex
   Minkyung Park, Zelun Kong, Dave (Jing) Tian, Z. Berkay Celik, Chung Hwan Kim

   
   @inproceedings{dls,
    author = {Park, Minkyung and Kong, Zelun and Tian, Dave (Jing) and Celik, Z. Berkay and Kim, Chung Hwan},
    title = {{DNN Latency Sequencing: Extracting DNN Architectures from Intel SGX Enclaves with Single-Stepping Attacks (to appear)}},
    booktitle = {Proceedings in the 33rd Network and Distributed System Security Symposium (NDSS 2026)},
    month = Feb,
    year = {2026},
    address = {San Diego, CA},
    doi = {10.14722/ndss.2026.231455},
    url = {https://dx.doi.org/10.14722/ndss.2026.231455},
   }
                 

2. IMUFUZZER: Resilience-based Discovery of Signal Injection Attacks on Robotic Aerial Vehicles   ASE 2025 (to appear)
   code bibtex
   Sudharssan Mohan, Kyeongseok Yang, Zelun Kong, Yonghwi Kwon, Junghwan Rhee, Tyler Summers, Hongjun Choi, Heejo Lee, Chung Hwan Kim

   
   @inproceedings{imufuzzer,
    author = {Mohan, Sudharssan and Yang, Kyeongseok and Kong, Zelun and Kwon, Yonghwi and Rhee, Junghwan and Summers, Tyler and Choi, Hongjun and Lee, Heejo and Kim, Chung Hwan},
    title = {{IMUFUZZER: Resilience-based Discovery of Signal Injection Attacks on Robotic Aerial Vehicles (to appear)}},
    booktitle = {Proceedings of the 40th IEEE/ACM International Conference on Automated Software Engineering (ASE 2025)},
    month = Nov,
    year = {2025},
    address = {Seoul, South Korea},
   }
                 

3. TZ-DATASHIELD: Automated Data Protection for Embedded Systems via Data-Flow-Based Compartmentalization   NDSS 2025
   code artifact slides bibtex
   Zelun Kong, Minkyung Park, Guan Le, Ning Zhang, Chung Hwan Kim

   
   @inproceedings{tzds,
     author={Kong, Zelun and Park, Minkyung and Guan, Le and Zhang, Ning and Kim, Chung Hwan},
     title={TZ-DATASHIELD: Automated Data Protection for Embedded Systems via Data-Flow-Based Compartmentalization},
     booktitle={Proceedings of the 32nd Network and Distributed System Security Symposium (NDSS 2025)},
     address={San Diego, CA},
     year={2025},
     month=feb,
     doi={10.14722/ndss.2025.240563},
   }
                 

4. Adv-makeup: A new imperceptible and transferable attack on face recognition   IJCAI 2021
   bibtex
   Bangjie Yin, Wenxuan Wang, Taiping Yao, Junfeng Guo, Zelun Kong, Shouhong Ding, Jilin Li, Cong Liu

   
   @inproceedings{adv_makeup,
       author    = {Yin, Bangjie and Wang, Wenxuan and Yao, Taiping and Guo, Junfeng and Kong, Zelun and Ding, Shouhong and Li, Jilin and Liu, Cong},
       title     = {Adv-Makeup: A New Imperceptible and Transferable Attack on Face Recognition},
       booktitle = {Proceedings of the Thirtieth International Joint Conference on Artificial Intelligence (IJCAI 2021)},
       publisher = {International Joint Conferences on Artificial Intelligence Organization},
       address   = {virtual},
       year      = {2021},
       month     = aug,
       pages     = {1252-1258},
       doi       = {10.24963/ijcai.2021/173},
   }
                 

5. PhysGAN: Generating Physical-World-Resilient Adversarial Examples for Autonomous Driving   CVPR 2020
   bibtex
   Zelun Kong, Junfeng Guo, Ang Li, Cong Liu

   
   @inproceedings{physgan,
       author={Kong, Zelun and Guo, Junfeng and Li, Ang and Liu, Cong},
       title={PhysGAN: Generating Physical-World-Resilient Adversarial Examples for Autonomous Driving},
       booktitle={2020 IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR 2020)},
       publisher={IEEE},
       address={virtual},
       year={2020},
       month=jun,
       pages={14242-14251},
       doi={10.1109/CVPR42600.2020.01426}
   }
                 

6. DeepBillboard: Systematic Physical-World Testing of Autonomous Driving Systems   ICSE 2020
   bibtex
   Husheng Zhou, Wei Li, Zelun Kong, Junfeng Guo, Yuqun Zhang, Bei Yu, Lingming Zhang, Cong Liu

   
   @inproceedings{deepbillboard,
       author={Zhou, Husheng and Li, Wei and Kong, Zelun and Guo, Junfeng and Zhang, Yuqun and Yu, Bei and Zhang, Lingming and Liu, Cong},
       title={DeepBillboard: Systematic Physical-World Testing of Autonomous Driving Systems},
       booktitle={2020 IEEE/ACM 42nd International Conference on Software Engineering (ICSE 2020)},
       publisher={IEEE},
       address={Seoul, South Korea},
       year={2020},
       month=oct,
       pages={347-358},
   }
                 

7. Robust high dimensional stream classification with novel class detection   ICDE 2019
   bibtex
   Zhuoyi Wang, Zelun Kong, Swarup Changra, Hemeng Tao, Latifur Khan

   
   @inproceedings{hdsc,
       author={Wang, Zhuoyi and Kong, Zelun and Changra, Swarup and Tao, Hemeng and Khan, Latifur},
       title={Robust High Dimensional Stream Classification with Novel Class Detection},
       booktitle={2019 IEEE 35th International Conference on Data Engineering (ICDE 2019)},
       publisher={IEEE},
       address={Macau, China},
       year={2019},
       month=apr,
       pages={1418-1429},
       doi={10.1109/ICDE.2019.00128}
   }
                 

8. Metric Learning based Framework for Streaming Classification with Concept Evolution   IJCNN 2019
   bibtex
   Zhuoyi Wang, Hemeng Tao, Zelun Kong, Swarup Chandra, Latifur Khan

   
   @inproceedings{8851934,
     author={Wang, Zhuoyi and Tao, Hemeng and Kong, Zelun and Chandra, Swarup and Khan, Latifur},
     booktitle={2019 International Joint Conference on Neural Networks (IJCNN 2019)},
     title={Metric Learning based Framework for Streaming Classification with Concept Evolution},
     publisher={IEEE},
     address={Budapest, Hungary},
     year={2019},
     month=jul,
     pages={1-8},
     doi={10.1109/IJCNN.2019.8851934}
   }
                 

9. A general analysis framework for soft real-time tasks   TPDS 2018
   bibtex
   Zheng Dong, Cong Liu, Soroush Bateni, Zelun Kong, Liang He, Lingming Zhang, Ravi Prakash, Yuqun Zhang

   
   @article{8565912,
     author={Dong, Zheng and Liu, Cong and Bateni, Soroush and Kong, Zelun and He, Liang and Zhang, Lingming and Prakash, Ravi and Zhang, Yuqun},
     title={A General Analysis Framework for Soft Real-Time Tasks},
     journal={IEEE Transactions on Parallel and Distributed Systems (TPDS 2019)},
     publisher={IEEE},
     year={2019},
     month=jun,
     volume={30},
     number={6},
     pages={1222-1237},
     doi={10.1109/TPDS.2018.2884980}
   }