His research focuses on the privacy and security of the Android platform, including the first comprehensive study on Android contact tracing applications and a black-box syntax inference approach to fuzzing IoT firmware and Android companion applications, which has resulted in several security vulnerabilities disclosures to vendors with resulting positive feedback as well as the removal of offending apps from the Google Play Store.