Exploring the World of Cybersecurity and Embedded Systems

Firmware Security Intern

Netrise, USA - Summer 2023

  • Conducted research and development on IoT firmware fuzzing, exploring tools such as AFL++, LibFuzzer, LibAFL, and OSS-Fuzz.
  • Investigated the use of LLM (Large Loop Modes) in fuzzing techniques.
  • Tested and analyzed 263 BusyBox packages for potential vulnerabilities.
  • This work assisted Netrise in developing an initial test prototype for incorporating firmware fuzzing into their framework.

Firmware Security Intern

Netrise, USA - Summer 2022

  • Led research and implementation efforts for Control Flow Graph-based static analysis.
  • Prototyped binary function similarity using Python to enhance firmware analysis.
  • Contributed to identifying third-party software components in firmware targets.
  • This contribution helped Netrise create a Proof of Concept (PoC) for adding binary similarity identification features to their framework, enhancing the identification of third-party software components more accurately.

IoT Security Consultant

Payatu, India - October 2019 to September 2021

  • Conducted embedded hardware and firmware security assessments, including IoT protocol analysis and basic side-channel and fault injection attacks.
  • Performed security assessments on a wide range of IoT products, including smart cameras, medical devices, access control systems, wireless modems, and ECUs.
  • Served as a security architect for an automotive client, integrating security into product design.
  • Delivered training sessions on IoT hacking, training approximately 50-100 participants at events like Nullcon, CPX360 Checkpoint and other organizations.
  • Contributed to the Expliot framework (Link).
  • Authored insightful blogs on cybersecurity topics (Link).
  • This work helped Payatu efficiently deliver security assessment outcomes to their clients and expand their training programs across different organizations.

Graduate Engineering Trainee

Zerowav Pvt Ltd (Fountlab), India - March 2019 to September 2019

  • Engaged in embedded firmware development.
  • Worked on the design and deployment of an access control system.
  • This role contributed to Zerowav successfully delivering the access control system product to clients.

Research Assistant

Pralhad P. Chhabria Research Center, India - June 2018 to February 2019

  • Contributed to the design of embedded system prototypes for research purposes.
  • Collaborated on various projects, including nanotechnology laboratory instrument automation, solar power systems, battery management, control systems, 3D printing, and IoT-based projects.
  • Co-authored research papers (Link) and organized workshops for approximately 100-200 students.

These experiences have enriched my understanding of cybersecurity, embedded systems, and IoT security, allowing me to contribute meaningfully to these fields.