Trust but Verify: Uncovering the Hidden Risks of Inaccurate SBOMs with JBomAudit
- Yue Xiao
- Jiyong Jang
- et al.
- 2025
- OSSNA 2025
Dhilung Kirat
Title
Senior Research Scientist, Security Research
Bio
Dhilung Kirat is a Research Scientist in the AI Supply Chain Security group of the Security Research department at IBM T.J. Watson Research Center. Dhilung received his PhD in Computer Science from University of California, Santa Barbara in 2015. His research interests revolve around the intersection of cybersecurity and AI, supply chain security, and ethical hacking research. He has led the research behind Watson for Cyber Security and the study of potential misuse and weaponization of AI in cyber attacks dubbed DeepLocker.
| dhilung.com | LinkedIn | Google Scholar |
Publications
JBomAudit: Assessing the Landscape, Compliance, and Security Implications of Java SBOMs
- Yue Xiao
- Dhilung Kirat
- et al.
- 2025
- NDSS 2025
Uncovering Supply Chain Attack with Code Genome Framework
- Dhilung Kirat
- Jiyong Jang
- et al.
- 2024
- Black Hat USA 2024
SyzGen++: Dependency Inference for Augmenting Kernel Driver Fuzzing
- Weiteng Chen
- Yu Hao
- et al.
- 2024
- S&P 2024
Evidential Cyber Threat Hunting
- Fred Araujo
- Dhilung Kirat
- et al.
- 2021
- SDM 2021
Scarecrow: Deactivating Evasive Malware via Its Own Evasive Logic
- Jialong Zhang
- Zhongshu Gu
- et al.
- 2020
- DSN 2020
DeepLocker - Concealing Targeted Attacks with AI Locksmithing
- Dhilung Kirat
- Jiyong Jang
- et al.
- 2018
- Black Hat USA 2018
BAYWATCH: Robust beaconing detection to identify infected hosts in large-scale enterprise networks
- Xin Hu
- Jiyong Jang
- et al.
- 2016
- DSN 2016
Scalable malware classification with multifaceted content features and threat intelligence
- Xin Hu
- Jiyong Jang
- et al.
- 2016
- IBM J. Res. Dev
Scalable analytics to detect DNS misuse for establishing stealthy communication channels
- Douglas L. Schales
- Jiyong Jang
- et al.
- 2016
- IBM J. Res. Dev
Patents
- JP
- 7575842
- US
- 11947956
- JP
- 7436501
- US
- 11818145
- CN
- ZL201910559402.8
- US
- 11520939
- CN
- ZL202080025376.1
- GB
- 2598493
- US
- 11171982
- US
- 11144642
Projects
Top collaborators
JJ
Jiyong Jang
Principal Research Scientist & Manager, AI Supply Chain Security
MS
Marc Ph. Stoecklin
Department Head, Security | Principal Research Scientist
DS
Douglas Schales
STSM - Security Analytics
XS
Xiaokui Shu
Senior Research Scientist