Yu-Fu Fu

PhD Candidate — Georgia Institute of Technology · SSLab

I build vulnerability discovery and formal verification systems, with and without LLMs. My work includes CRSBench, a large-scale AI Cyber Reasoning System evaluation platform running 2,000+ CPU campaigns on GCP that found 14 real 0-days (3 acknowledged upstream); OSS-CRS, an OpenSSF sandbox project that found 7 additional 0-days using the AIxCC-winning CRS; and autofz, the first non-intrusive meta-fuzzer for runtime composition and resource scheduling of existing fuzzers based on per-workload feedback, outperforming state-of-the-art collaborative fuzzing on 19 of 20 benchmarks. I also work on formal verification: certified cryptographic program verification in Coq (CryptoLine, CAV/CCS) and LLM-based specification generation for Move smart contracts (ASE 2025). I am advised by Prof. Taesoo Kim at SSLab.

Contributed security benchmark creation to Team Atlanta, DARPA AIxCC winner ($4M prize). 3× DEFCON CTF finalist (2nd, 4th, 12th).