MSCS, Georgia Tech — binary analysis and software supply-chain security

Tunis, Tunisia

Karim RazgallahPhD applicant in systems security and program analysis

I work on deciding whether a security patch is actually present in a compiled binary, without access to source code. My current focus is making that decision hold when the binary was built with a different compiler, architecture, or optimization level than the reference.

Applying — Fall 2027

EmailCV (PDF)
  • Google Scholar
  • GitHub
  • LinkedIn
  • ORCID

RESEARCH

[01] Selected work

01In progress

Binary patch presence testing under domain shift

ProblemExisting patch-presence detectors degrade when the target binary was built with a different compiler, architecture, or optimization level than the reference.

ApproachA Ghidra headless pipeline that treats compilation itself as a supervision signal, combining contrastive learning with domain-adversarial regularization. Evaluated leave-one-domain-out, so every reported number comes from a compiler, architecture, or optimization level the model never saw during training. Calibrated abstention lets the tool decline to answer rather than guess.

  • binary analysis
  • program analysis
  • ml for security
02status

MAM: Multimodal Agentic Memory

Problemone-line problem statement

Approachtwo-to-three-line contribution in non-specialist language

  • agentic systems
  • llm
03In progress

Cross-sectional prediction of mutual fund flows

Problemone-line problem statement

ApproachWalk-forward validation with winsorized features and regularized linear models, evaluated on rank IC and out-of-sample R² so results are not read off a single in-sample fit.

  • applied ml
  • finance

Showing all 3 projects.

PUBLICATIONS

[02] Reverse chronological

  1. [01]

    MAM: Multimodal Agentic Memory

    Karim Razgallah, Vijay K. Madisetti

    venueyearkind

FOCUS

[03] Directions for a PhD

EXPERIENCE

[04] Positions and education

Positions

  1. Researcher

    Cyber-Physical Systems Security Lab, Georgia Tech

    Patch presence testing and binary analysis. TODO: advisor name, if listable

    starttoPresent

  2. Software engineer

    employers

    Freelance and full-time, full-stack. 4+ years. TODO: titles

    starttoend

Education

  1. M.S. Computer Science

    Georgia Institute of Technology

    Machine Learning/AIGPA 4.0

    starttoend

  2. B.S. Finance

    institution

    With graduate financial engineering coursework

    starttoend

CONTACT

[05] No form

I am applying for PhD positions starting Fall 2027. If your group works on binary analysis, patch management, or software supply-chain integrity, I would like to talk. Email is the fastest way to reach me.