About Me

I completed my Bachelor of Science in Computer Science with Honors and a Bachelor of Arts in Philosophy from Purdue University in 2020. I am currently pursuing my Ph.D. in Computer Science at Purdue University, with a research focus on Autonomous Vehicle Software Security and Robustness. My specific research interests lie in developing techniques to enhance the resilience of autonomous driving systems against adversarial attacks and perception failures. My advisors are Dr. Z. Berkay Celik and Dr. Antonio Bianchi.

News

• [Sept. 2026] Our work "Stable GFlowNets with TV Monitoring and Probabilistic Guarantees" is accepted to NeurIPS 2026! Congrats to Zengxiang!
• [Aug. 2026] Our work "Investigating Planning Attacks against End-to-End Autonomous Driving" is accepted to CCS 2026! Thanks for all co-authors' support!
• [Jan. 2026] Our work "BADControl: Backdoor Attacks Against Control Systems" is accepted to Usenix Security 2026! Congrats to Luis!
• [Nov. 2025] Our work "CP-FREEZER: Latency Attacks against Vehicular Cooperative Perception" is accepted to AAAI 2026! Congrats to Chenyi!

• [Oct. 2025] I'm excited to share that I passed my Ph.D. preliminary exam! 🎉

  A huge thank you to my committee members: Prof. Z. Berkay Celik, Prof. Antonio Bianchi, Prof. Aniket Bera, and Prof. Dongyan Xu for their valuable feedback and guidance throughout this process.

  I also want to thank my amazing labmates at PurSec Lab for their support and encouragement. Looking forward to the exciting research ahead!

• [Aug. 2025] Our work "From Threat to Trust: Exploiting Attention Mechanisms for Attacks and Defenses in Cooperative Perception" is accepted to Usenix Security 2025!
• [May 2025] Our work "Investigating Physical Latency Attacks against Camera-based Perception" is accepted to S&P 2025!
• [Nov. 2024] 3rd USENIX VehicleSec Symposium is announced! Please consider submitting your work!
• [Oct. 2024] Please consider submitting your work to 1st International Workshop on Software Engineering for Autonomous Driving Systems (SE4ADS 2025)!
• [Oct. 2024] Our new preprint "Enhancing LLM-based Autonomous Driving Agents to Mitigate Perception Attacks" is now available on arXiv!
• [June 2023] Our work about adversarial driving maneuvers against autonomous vehicles is accepted to Usenix Security 2023!
• [Oct. 2022] Our work about evasion attacks and defenses on physical event verification systems is accepted to NDSS 2023!

Publications

• Stable GFlowNets with TV Monitoring and Probabilistic Guarantees [pdf]
  Zengxiang Lei, Ananth Shreekumar, Jonathan Rosenthal, Ruoyu Song, Alvaro A. Cardenas, Daniel J. Fremont, Dongyan Xu, Satish Ukkusuri, Z. Berkay Celik
  NeurIPS 2026 (Acceptance Rate: 25.7%)
• Investigating Planning Attacks against End-to-End Autonomous Driving [pdf]
  Ruoyu Song, Chenyi Wang, Raymond Muller, Jean-Philippe Monteuuis, Ryan Gerdes, Jonathan Petit, Ming F. Li, Antonio Bianchi, Z. Berkay Celik
  CCS 2026 (Acceptance Rate: TBD)
• BADControl: Backdoor Attacks Against Control Systems [pdf]
  Luis Burbano, Hampei Sasahara, Ruoyu Song, Z. Berkay Celik, and Alvaro A. Cardenas
  Usenix Security 2026 (Acceptance Rate: 14%)
• CP-FREEZER: Latency Attacks against Vehicular Cooperative Perception[pdf]
  Chenyi Wang, Ruoyu Song, Raymond Muller, Jean-Philippe Monteuuis, Z Berkay Celik, Jonathan Petit, Ryan Gerdes, Ming Li
  AAAI 2026 (Acceptance Rate: 17.6%)
• From Threat to Trust: Exploiting Attention Mechanisms for Attacks and Defenses in Cooperative Perception [pdf]
  Chenyi Wang, Raymond Muller, Ruoyu Song, Jean-Philippe Monteuuis, Jonathan Petit, Yanmao Man, Ryan Gerdes, Z Berkay Celik, Ming Li
  Usenix Security 2025 (Acceptance Rate: 17%)
• Investigating Physical Latency Attacks against Camera-based Perception[pdf]
  Raymond Muller, Ruoyu Song, Chenyi Wang, Yuxia Zhan, Jean-Philippe Monteuuis, Yanmao Man, Ming Li, Ryan Gerdes, Jonathan Petit, and Z Berkay Celik
  IEEE Security and Privacy Symposium (Oakland) 2025 (Acceptance Rate: 15.1%)
• Discovering Adversarial Driving Maneuvers against Autonomous Vehicles[pdf]
  Ruoyu Song, Muslum Ozgur Ozmen, Hyungsub Kim, Raymond Muller, Z. Berkay Celik, and Antonio Bianchi
  Usenix Security 2023 (Acceptance Rate: 29%)
• Evasion Attacks and Defenses on Smart Home Physical Event Verification[pdf]
  Muslum Ozgur Ozmen, Ruoyu Song, Habiba Farrukh and Z. Berkay Celik
  NDSS 2023 (Acceptance Rate: 16.2%)

Preprints

• Enhancing LLM-based Autonomous Driving Agents to Mitigate Perception Attacks [pdf]
  Ruoyu Song, Muslum Ozgur Ozmen, Hyungsub Kim, Antonio Bianchi, Z. Berkay Celik