Bust outside CSE building at UCSD
Sumanth Rao
Ph.D. student, Computer Science
UC San Diego

I am a PhD student at the Department of Computer Science and Engineering at the University of California, San Diego. I'm fortunate to be advised by Stefan Savage and Geoff Voelker.

I study real-world cybersecurity problems through empirical measurement. My recent work has looked at ransomware affecting hospitals, large-scale email abuse, automotive security, and other threats to critical infrastructure. I'm a member of the Sysnet and CryptoSec research groups at UC San Diego. My hometown is Bangalore (ಬೆಂಗಳೂರು), India.

Publications
BLE Theft Auto: Evaluating the Security of Aftermarket BLE-based Automotive Remote Control Systems
Jerry Yu*, Yibo Wei*, Sumanth Rao, Mohak Vaswani, Jefferson Chien, Christian Dameff, Nishant Bhaskar, Aaron Schulman.
To appear at USENIX Security, Baltimore, MD, August 2026
News: Wired [video] (watch me hack my own car!), [story]

Lost in Translation: Text Message Spoofing via Email - Distinguished Paper Award
Sumanth Rao, Ye Shu, Stefan Savage, Aaron Schulman, Geoffrey M. Voelker, Enze Liu.
IEEE Symposium on Security and Privacy (Oakland), San Francisco, May 2026

Patient Care Technology Disruptions Associated With the CrowdStrike Outage
Jeffrey L. Tully*, Sumanth Rao*, Isabel Straw, Rodney A. Gabriel, Chris Longhurst, Stefan Savage, Geoffrey M. Voelker, Christian J. Dameff.
JAMA Network Open, July 2025
News: Wired, Forbes

Unfiltered: Measuring Cloud-based Email Filtering Bypasses
Sumanth Rao, Enze Liu, Grant Ho, Geoffrey M. Voelker, Stefan Savage.
ACM Web Conference (WWW), Singapore, May 2024

IRRegularities in the Internet Routing Registry
Ben Du, Katherine Izhikevich, Sumanth Rao, Gautam Akiwate, Cecilia Testart, Alex C. Snoeren, and kc claffy.
ACM Internet Measurement Conference (IMC), Montréal, Canada, October 2023

No Privacy Among Spies: Assessing the Functionality and Insecurity of Consumer Android Spyware Apps
Enze Liu, Sumanth Rao, Sam Havron, Grant Ho, Stefan Savage, Geoffrey M. Voelker, and Damon McCoy.
Privacy Enhancing Technologies Symposium (PETS), Lausanne, Switzerland, July 2023

*Equal contribution.

Awards

- 2026. CSE Doctoral Award for Excellence in Service and Leadership, UC San Diego.
- 2026. Distinguished Paper Award, IEEE Symposium on Security and Privacy (Oakland) - News
- 2024. Finalists, NatSec Hackathon (Stanford DEFCON and Shield Capital)
- 2021-2022. Recipient of JN Tata Scholarship.

Service

- Program Committee, Research in Attacks, Intrusions and Defenses (RAID) 2026
- CSE Chezbob Coordinator, UC San Diego (2026-2027)
- CSE Visit Day Coordinator, UC San Diego (2026)
- Allyship Co-Chair, UCSD Graduate Women in Computing (2023-2024)
- VP External, Jacobs Graduate Student Council (JGSC), UC San Diego (2021-2023)

Talks

- Lost in Translation: Text Message Spoofing via Email
IEEE Symposium on Security and Privacy (Oakland), May 2026
- Measuring hospital ransomware attacks
CAIDA AIMS-5, Feb 2025
- Unfiltered: Measuring Cloud-based Email Filtering Bypasses
The Web Conference, May 2024
- Panel 6: Mobile Device Security
FTC PrivacyCon, March 2024
- Having a great GSoC as an Open Source Newbie!
Google Open Source YouTube, Nov 2022

Teaching & Mentoring

I was a teaching assistant for the following courses at UC San Diego:
- Spring 2023, Intro to Computer Security
- Winter 2023, Graduate Operating Systems
- Fall 2022, Intro to Computer Security
- Spring 2022, Intro to Computer Security

I'm a big advocate for open source and have mentored five students through Google Summer of Code (2020 (1), 2020 (2), 2021, 2024). I was a GSoC student myself in 2019 with the Zulip Open Source Project.

Industry Experience
Gmail Delivery Security Team, Google
Student Researcher (Jun 2026 - Sep 2026)
Mentors: Weihaw Chaung

Corelight Labs, San Francisco
Research Intern (Jun 2025 - Sep 2025)
Mentors: Yacin Nadji, Vern Paxson
Fingerprinted malicious domain controllers in E/W traffic from Zeek logs.

Virtual Cluster, Google Cloud Platforms, Google
Software Engineering Intern (Jun 2022 - Sep 2022)
Mentors: Yang Shi, Bas Nowaira
Improved user experience when spawning new Borg clusters.

Citrix Licensing team, Citrix
Software Engineer (Aug 2020 - Aug 2021)
Designed a Docker-based automation framework deployed via a hybrid cloud model.

Education
Ph.D. in Computer Science, expected 2027
University of California, San Diego
M.S. in Computer Science, 2021 - 2025
University of California, San Diego
B.S. in Computer Science, 2016 - 2020
PES University, Bengaluru



Website design inspired by this page, code here.