LLM & Agentic System Security
Understanding and containing risks in AI agents and the systems around them.
Related papers →Making cloud systems measurably secure.
Research Scientist at IBM Research, System and Cloud Security group.
I obtained my Ph.D. in Computer Science from Virginia Tech, supervised by Prof. Daphne Yao. My research focuses on developing deployable tools with concrete methodologies and metrics to quantify and measure security assurance, as well as improve cloud security.
Earlier, I worked on the automation and security of connected-vehicle technology and platform tools for embedded and mobile devices. I earned my bachelor's from BUET (2013) and worked as a Software and Senior Software Engineer at Samsung R&D. Outside work, I play soccer and cricket.
Click a theme to filter the publication list.
Understanding and containing risks in AI agents and the systems around them.
Related papers →Trusted execution environments, Intel TDX, and confidential containers.
Related papers →Container scheduling and metrics that turn security from opinion into evidence.
Related papers →Quantifying randomization, data-oriented attacks, and exploitable surface.
Related papers →A few papers I'd start with.
Loads more automatically as you scroll.
paperOur paper “Towards Safe Agentic AI Performance Engineering” appeared at the 4th Workshop on Practical Adoption Challenges of ML for Systems.
paperOur paper on GPU Travelling accepted at ACM CCS 2025 with minor revision.
paperOur paper “NVIDIA GPU Confidential Computing Demystified” is available on arXiv.
patentOur patent related to object guided fuzzing has been published.
patentOur patent related to dynamic quarantining of bad containers has been published.
paperOur paper “Crossing Shifted Moats: Replacing Old Bridges with New Tunnels to Confidential Containers” accepted at ACM CCS 2024.
paperOur paper titled Fast (Trapless) Kernel Probes accepted at USENIX ATC '24.
patentOur patent related to security risk-aware scheduling has been granted.
paperOur workshop paper on eBPF kCFI accepted at SIGCOMM 2023 Workshop (eBPF '23).
paperOur paper on prioritizing sensitive data accepted at USENIX Security '23.
paperOur paper on Intel TDX Demystified: A Top-Down Approach is available on arXiv.
paperOur paper on container security using a syscall-aware scheduler accepted at AsiaCCS 2023.
patentA patent related to container security through container scheduling is filed.
patentA patent related to OS fuzzing is filed.
paperOur magazine article on privacy guarantees of BLE contact tracing has been published.
paperNews article on BLE contact tracing has been published.
careerJoined IBM Thomas J. Watson Research Center as a Research Staff Member.
careerDefended my Ph.D. dissertation on quantifying system security assurance.
paperAn article on privacy guarantees of BLE contact tracing accepted in IEEE Computer.
paperOur tutorial on system security assurance accepted at IEEE SecDev 2021.
paperOur journal paper on data-oriented attacks accepted in ACM TOPS.
careerAnother milestone achieved. Passed prelim.
paperOur ASLR manuscript is released on arXiv.
paperOur ASLR measurement work has been accepted at ACM CCS 2020.
careerGot an offer from IBM Research as a Research intern for the upcoming summer.
paperOur poster on fine-grained code randomization evaluation accepted at NDSS '20.
awardNominated for the IBM PhD Fellowship Award from CS@VT.
paperOur SoK paper on Data-Oriented Attacks is accepted at SecDev.
careerMy Plan of Study (PoS) is approved.
careerPassed Ph.D. Qualifier Exam.
awardMy MS thesis is selected as the outstanding MS thesis by TCGS [News].
Search, filter, and copy BibTeX. Also on Google Scholar.
Topic: · clear
@misc{zhao2026patent,
title = {Traveling Hardware Accelerator for Data Sharing in Collaborative Learning},
author = {Shixuan Zhao and Zhongshu Gu and Salman Ahmed and Enriquillo Valdez and Hani Jamjoom},
note = {US Patent Application 18/933,171 (US 2026/0120000 A1)},
year = {2026}
}@inproceedings{zhao2025gpu,
title = {GPU Travelling: Efficient Confidential Collaborative Training with TEE-Enabled GPUs},
author = {Shixuan Zhao and Zhongshu Gu and Salman Ahmed and Enriquillo Valdez and Hani Jamjoom and Zhiqiang Lin},
booktitle = {ACM SIGSAC Conference on Computer and Communications Security (CCS) 2025, pp. 2653–2667},
year = {2025}
}@inproceedings{williams2025agentic,
title = {Towards Safe Agentic AI Performance Engineering},
author = {Dan Williams and Milo Craun and Michael V. Le and Julian Stephen and Salman Ahmed and Hani Jamjoom},
booktitle = {4th Workshop on Practical Adoption Challenges of ML for Systems, 2025, pp. 63–68},
year = {2025}
}@misc{gu2025nvidia,
title = {NVIDIA GPU Confidential Computing Demystified},
author = {Zhongshu Gu and Enriquillo Valdez and Salman Ahmed and Julian James Stephen and Michael Le and Hani Jamjoom and Shixuan Zhao and Zhiqiang Lin},
note = {arXiv:2507.02770},
year = {2025}
}@inproceedings{valdez2024moats,
title = {Crossing Shifted Moats: Replacing Old Bridges with New Tunnels to Confidential Containers},
author = {Enriquillo Valdez and Salman Ahmed and Zhongshu Gu and Christophe de Dinechin and Pau-Chen Cheng and Hani Jamjoom},
booktitle = {ACM SIGSAC Conference on Computer and Communications Security (CCS) 2024, pp. 1390–1404},
year = {2024}
}@article{cheng2024tdx,
title = {Intel TDX Demystified: A Top-Down Approach},
author = {Pau-Chen Cheng and Wojciech Ozga and Enriquillo Valdez and Salman Ahmed and Zhongshu Gu and Hani Jamjoom and Hubertus Franke and James Bottomley},
journal = {ACM Computing Surveys 56(9), 1–33},
year = {2024}
}@article{xiao2024embedding,
title = {Measurement of Embedding Choices on Cryptographic API Completion Tasks},
author = {Ya Xiao and Wenjia Song and Salman Ahmed and Xinyang Ge and Bimal Viswanath and Na Meng and Danfeng (Daphne) Yao},
journal = {ACM Transactions on Software Engineering and Methodology (TOSEM) 33(3), 1–30},
year = {2024}
}@inproceedings{jia2024probes,
title = {Fast (Trapless) Kernel Probes Everywhere},
author = {Jinghao Jia and Michael V. Le and Salman Ahmed and Dan Williams and Hani Jamjoom and Tianyin Xu},
booktitle = {USENIX Annual Technical Conference (USENIX ATC) 2024, pp. 379–386},
year = {2024}
}@misc{jia2024patent,
title = {Critical-Object Guided Operating System Fuzzing},
author = {Jinghao Jia and Michael V. Le and Salman Ahmed and Hani Jamjoom},
note = {US Patent Application 18/121,650 (US 2024/0311491 A1)},
year = {2024}
}@misc{ahmed2024patent,
title = {Dynamic Quarantining of Containers},
author = {Salman Ahmed and Michael V. Le and Hani Jamjoom},
note = {US Patent Application 18/178,508 (US 2024/0297893 A1)},
year = {2024}
}@inproceedings{ahmed2023dpp,
title = {Not All Data are Created Equal: Data and Pointer Prioritization for Scalable Protection Against Data-Oriented Attacks},
author = {Salman Ahmed and Hans Liljestrand and Hani Jamjoom and Matthew Hicks and N. Asokan and Danfeng (Daphne) Yao},
booktitle = {USENIX Security Symposium},
year = {2023}
}@inproceedings{le2023syscall,
title = {Securing Container-based Clouds with Syscall-aware Scheduling},
author = {Michael V. Le and Salman Ahmed and Dan Williams and Hani Jamjoom},
booktitle = {ACM Asia Conference on Computer and Communications Security},
year = {2023}
}@inproceedings{jia2023kcfi,
title = {Practical and Flexible Kernel CFI Enforcement using eBPF},
author = {Jinghao Jia and Michael V. Le and Salman Ahmed and Dan Williams and Hani Jamjoom},
booktitle = {eBPF Workshop at ACM SIGCOMM 2023, pp. 84–85},
year = {2023}
}@misc{yao2023patent,
title = {Probabilistic Evidence Based Insider Threat Detection and Reasoning},
author = {Danfeng Yao and Salman Ahmed and Ya Xiao},
note = {US Patent Application 18/009,873 (US 2023/0269264 A1)},
year = {2023}
}@article{ahmed2022ble,
title = {Privacy Guarantees of Bluetooth Low Energy Contact Tracing: A Case Study on COVIDWISE},
author = {Salman Ahmed and Ya Xiao and Taejoong (Tijay) Chung and Carol Fung and Moti Yung and Danfeng (Daphne) Yao},
journal = {IEEE Computer, vol. 55, no. 2, pp. 54–62, Feb. 2022},
year = {2022}
}@inproceedings{ahmed2022blePoster,
title = {POSTER: Privacy Guarantees of BLE Contact Tracing for COVID-19 and Beyond: A Case Study on COVIDWISE},
author = {Salman Ahmed and Ya Xiao and Taejoong Chung and Carol Fung and Moti Yung and Danfeng (Daphne) Yao},
booktitle = {ACM Asia Conference on Computer and Communications Security (AsiaCCS) 2022},
year = {2022}
}@inproceedings{xiao2022icse,
title = {Poster: Comprehensive Comparisons of Embedding Approaches for Cryptographic API Completion},
author = {Ya Xiao and Salman Ahmed and Xinyang Ge and Bimal Viswanath and Na Meng and Danfeng (Daphne) Yao},
booktitle = {IEEE/ACM 44th International Conference on Software Engineering: Companion (ICSE-Companion) 2022, pp. 360–361},
year = {2022}
}@inproceedings{ahmed2022spposter,
title = {Poster: Automatic Identification and Protection of Memory-resident Sensitive Data to Defend Against Data-Oriented Attacks},
author = {Salman Ahmed and Hans Liljestrand and N. Asokan and Danfeng (Daphne) Yao},
booktitle = {IEEE Symposium on Security and Privacy (S&P) 2022 Posters},
year = {2022}
}@inproceedings{xiao2022ndssposter,
title = {Poster: Comparing Neural Network Solutions in Cryptographic API Completion},
author = {Ya Xiao and Salman Ahmed and Wenjia Song and Bimal Viswanath and Na Meng and Patrick McDaniel and Xinyang Ge and Danfeng (Daphne) Yao},
booktitle = {Network and Distributed System Security (NDSS) Symposium 2022 Posters},
year = {2022}
}@phdthesis{ahmed2022phd,
title = {Quantitative Metrics and Measurement Methodologies for System Security Assurance},
author = {Salman Ahmed},
booktitle = {Ph.D. Dissertation, Virginia Tech},
year = {2022}
}@misc{le2022patent,
title = {Security Risk-Aware Scheduling on Container-Based Clouds},
author = {Michael V. Le and Salman Ahmed and Hani Jamjoom},
note = {US Patent Application 17/340,145 (US 2022/0391532 A1)},
year = {2022}
}@article{cheng2021dop,
title = {Exploitation Techniques for Data-Oriented Attacks with Existing and Potential Defense Approaches},
author = {Long Cheng and Salman Ahmed and Hans Liljestrand and Thomas Nyman and Haipeng Cai and Trent Jaeger and N. Asokan and Danfeng (Daphne) Yao},
journal = {ACM Transactions on Privacy and Security (TOPS)},
year = {2021}
}@inproceedings{ahmed2021tutorial,
title = {Tutorial: Investigating Advanced Exploits for System Security Assurance},
author = {Salman Ahmed and Long Cheng and Hans Liljestrand and N. Asokan and Danfeng (Daphne) Yao},
booktitle = {IEEE Secure Development Conference (SecDev) 2021, pp. 3–4},
year = {2021}
}@misc{xiao2021embedding,
title = {Embedding Code Contexts for Cryptographic API Suggestion: New Methodologies and Comparisons},
author = {Ya Xiao and Salman Ahmed and Wenjia Song and Xinyang Ge and Bimal Viswanath and Danfeng (Daphne) Yao},
note = {arXiv:2103.08747},
year = {2021}
}@inproceedings{ahmed2020aslr,
title = {Methodologies for Quantifying (Re-)randomization Security and Timing under JIT-ROP},
author = {Salman Ahmed and Ya Xiao and Gang Tan and Kevin Snow and Fabian Monrose and Danfeng (Daphne) Yao},
booktitle = {ACM SIGSAC Conference on Computer and Communications Security (CCS'20)},
year = {2020}
}@inproceedings{ahmed2020poster,
title = {Poster: Methodologies for Quantifying (Re-)Randomization Security and Timing under JIT-ROP},
author = {Salman Ahmed and Ya Xiao and Gang Tan and Kevin Snow and Fabian Monrose and Danfeng (Daphne) Yao},
booktitle = {Network and Distributed System Security (NDSS) Symposium 2020},
year = {2020}
}@article{hoque2020v2v,
title = {The extent of reliability for vehicle-to-vehicle communication in safety critical applications: an experimental study},
author = {Mohammad A. Hoque and Jackeline Rios-Torres and Ramin Arvin and Asad Khattak and Salman Ahmed},
journal = {Journal of Intelligent Transportation Systems 24(3): 264–278},
year = {2020}
}@inproceedings{cheng2019dop,
title = {Exploitation Techniques and Defenses for Data-Oriented Attacks},
author = {Long Cheng and Hans Liljestrand and Salman Ahmed and Thomas Nyman and Trent Jaeger and N. Asokan and Danfeng (Daphne) Yao},
booktitle = {IEEE Secure Development Conference (SecDev) 2019},
year = {2019}
}@inproceedings{ahmed2018anti,
title = {POSTER: Extracting Anti-specifications from Vulnerabilities for Program Hardening},
author = {Salman Ahmed and Danfeng (Daphne) Yao and Haipeng Cai},
booktitle = {IEEE Secure Development Conference (SecDev) 2018},
year = {2018}
}@misc{carter2018visualization,
title = {Developing Mobility and Traffic Visualization Applications for Connected Vehicles},
author = {Noah Carter and Salman Ahmed and Jacob Hoyos and Matthew Dale and JT Blevins and Nick Hodge and Nusrat Chowdhury and Mohammad A. Hoque},
note = {arXiv:1811.11012 (technical report)},
year = {2018}
}@article{hoque2018simulator,
title = {Parallel Closed-Loop Connected Vehicle Simulator for Large-Scale Transportation Network Management: Challenges, Issues, and Solution Approaches},
author = {Mohammad A. Hoque and Xiaoyan Hong and Salman Ahmed},
journal = {IEEE Intelligent Transportation Systems Magazine 11(4), 62–77},
year = {2018}
}@inproceedings{carter2018bsm,
title = {Simulating Vehicle Movement and Multi-Hop Connectivity from Basic Safety Messages},
author = {Noah Carter and Mohammad A. Hoque and Salman Ahmed},
booktitle = {IEEE SoutheastCon 2018, pp. 1–6},
year = {2018}
}@inproceedings{ahmed2018freewaytrb,
title = {A Cooperative Freeway Merge Assistance System Using Connected Vehicles},
author = {Salman Ahmed and Mohammad A. Hoque and Jackeline Rios-Torres and Asad Khattak},
booktitle = {Transportation Research Board (TRB) 97th Annual Meeting, 2018},
year = {2018}
}@inproceedings{hoque2018v2v,
title = {Impact of Vehicle-to-Vehicle Communication Reliability on Safety Applications: An Experimental Study},
author = {Mohammad A. Hoque and Salman Ahmed and Jackeline Rios-Torres and Asad Khattak and Ramin Arvin},
booktitle = {Transportation Research Board (TRB) Annual Meeting, 2018},
year = {2018}
}@inproceedings{ahmed2018v2i,
title = {Intersection Approach Advisory through Vehicle-to-Infrastructure Communication Using Signal Phase and Timing Information at Signalized Intersection},
author = {Salman Ahmed and Mohammad A. Hoque and Asad Khattak},
booktitle = {Transportation Research Board (TRB) Annual Meeting, 2018},
year = {2018}
}@inproceedings{ahmed2017freeway,
title = {Freeway merge assistance system using DSRC},
author = {Salman Ahmed and Mohammad A. Hoque and Jackeline Rios-Torres and Asad Khattak},
booktitle = {2nd ACM International Workshop on Smart, Autonomous, and Connected Vehicular Systems and Services},
year = {2017}
}@phdthesis{ahmed2017thesis,
title = {An Investigation into the Performance Evaluation of Connected Vehicle Applications: From Real-World Experiment to Parallel Simulation Paradigm},
author = {Salman Ahmed},
booktitle = {Dissertation, East Tennessee State University},
year = {2017}
}@article{ahmed2017spmm,
title = {Reducing Inter-Process Communication Overhead in Parallel Sparse Matrix-Matrix Multiplication},
author = {Salman Ahmed and Jennifer Houser and Mohammad A. Hoque and Rezaul Raju and Phil Pfeiffer},
journal = {International Journal of Grid and High Performance Computing (IJGHPC)},
year = {2017}
}@inproceedings{jordan2017doppler,
title = {Poster: Investigating Doppler Effects on Vehicle-to-Vehicle Communication: An Experimental Study},
author = {Dwayne Jordan and Nicholas Kyte and Scott Murray and Mohammad A. Hoque and Salman Ahmed and Asad Khattak},
booktitle = {Poster, ACM CarSys 2017},
year = {2017}
}@inproceedings{ahmed2016partition,
title = {Partitioning of Urban Transportation Networks Utilizing Real-World Traffic Parameters for Distributed Simulation in SUMO},
author = {Salman Ahmed and Mohammad A. Hoque},
booktitle = {IEEE Vehicular Networking Conference (VNC) 2016},
year = {2016}
}@inproceedings{ahmed2016demo,
title = {Demo: Real-time Vehicle Movement Tracking on Android Devices through Bluetooth Communication with DSRC Devices},
author = {Salman Ahmed and Mohammad A. Hoque},
booktitle = {IEEE Vehicular Networking Conference (VNC) 2016},
year = {2016}
}@inproceedings{ahmed2016simulators,
title = {Comparative study of connected vehicle simulators},
author = {Salman Ahmed and Mohammad A. Hoque and Phil Pfeiffer},
booktitle = {IEEE SoutheastCon 2016},
year = {2016}
}No publications match your search.
The line draws itself as you scroll.
System and Cloud Security group, Thomas J. Watson Research Center.
Quantifying system security assurance. Advisor: Daphne Yao.
Outstanding Thesis Award; connected-vehicle performance evaluation.
Platform tools for embedded and mobile devices.
Bangladesh University of Engineering and Technology.