- Built an automated benchmarking pipeline evaluating LLM agents across on-device mobile tasks with real app integrations.
- Ran indirect prompt injection red-teaming of on-device agents: designed cross-app attack scenarios and executed end-to-end attacks to probe robustness.
Md Ajwad Akil
PhD student in Computer Science, Purdue University
I'm a 4th-year CS PhD student at Purdue, advised by Elisa Bertino. My research interest sits at the intersection of machine learning and security: adversarial malware and evasion of ML-based detectors, LLM and agent security (prompt injection, code-hallucination detection), and reasoning over low-level code.
I am working as a Research Engineer Intern at Samsung Research America this Fall and also worked as a Machine Learning Engineer Intern at DoorDash. Before Purdue, I earned my B.Sc. from BUET and taught as a lecturer at United International University, Dhaka, Bangladesh.
I like working on both sides of security - attack and defense. If that resonates, feel free to reach out.
News
- Sep 2026PhantomCall, my first-author work on function call graph evasion, is on arXiv and under submission.
- Aug 2026Started as a Research Engineer Intern at Samsung Research America (Mobile Platforms and Solutions Lab).
- Aug 2026Wrapped up my Machine Learning Engineer internship at DoorDash.
- May 2026Joined DoorDash as a Machine Learning Engineer Intern (New Verticals, Agentic Catalog Team).
- Apr 2026AdvDA, on the robustness of drift-adaptive malware detectors, is available as an arXiv preprint.
- Nov 2025LLMalMorph received the Best Paper Award 🏆 at IEEE TPS 2025.
- Jan 2025Received the Distinguished Artifact Reviewer Award at ACSAC 2024.
Publications
Experience
- Integrated an in-house MCP web-search service into a catalog-enrichment agent with observable multi-round tool calling.
- Fine-tuned Qwen3.5 9B/27B VLMs (LoRA, assistant-only loss masking, BF16, multi-GPU DDP) for grounded tool use and attribute extraction.
- Reached 95.5% precision; the 27B model beat Gemini's attribute coverage by 1.18pp while cutting serving-and-search cost by 43%.
- PhantomCall — black-box FCG-perturbation attack on Windows PE malware; 85–100% attack success across three detectors.
- LLMalMorph — LLM-driven functional malware variant generation; Best Paper, IEEE TPS 2025.
- LLM code security — training-free method contrasting an auditor LLM's security- vs. style-review signals to select more secure LLM-generated code and localize likely-vulnerable lines, outperforming a frontier LLM judge at selection.
- Built noise-robust audio event detection and multilingual OCR pipelines (≤12% WER), deployed on Azure as a POC.
CV
Full education, teaching, awards, and skills below. For the formatted one-page version:
Download PDF