Sihat Afnan

Sihat Afnan

Doctoral Researcher at University of California, Irvine

Hi! I am a PhD student in Computer Science at the University of California, Irvine, advised by Dr. Habiba Farrukh in the SPECT Lab. Before UCI, I received my B.Sc. in Computer Science and Engineering from Bangladesh University of Engineering and Technology (BUET) and taught at BRAC University as a Lecturer.

My research focuses on the security and privacy of embodied AI and other emerging systems, spanning robot learning and teleoperation, AR/VR, and autonomous driving, with an adversarial machine learning lens. I study how the sensors, motion data, and learned perception pipelines these systems depend on can be manipulated by adversaries or leak sensitive information about the people who operate and use them, and I build simulation and measurement frameworks that expose these risks before deployment.

Questions I am working on
  • Embodied AI privacy: what robot learning and teleoperation data reveals about the humans who recorded it
  • AR/VR security: how a headset's own hardware can be turned against its spatial understanding
  • Autonomous driving: how physical adversarial attacks play out when a human driver is back in the loop
  • ML for security: detecting advanced persistent threats from system provenance data

Outside research, I enjoy jogging, travelling, reading non-fiction and op-eds, and listening to qawwali music.

Embodied AI Security & Privacy Robot Learning & Teleoperation AR/VR Systems Autonomous Driving Adversarial Machine Learning

News

Dec 2026 Upcoming Presenting our paper on operator leakage in humanoid datasets at NeurIPS 2026 in Atlanta, GA.
Sep 2026: Accepted Who Moved the Robot? Humanoid Datasets Remember Their Operators was accepted to NeurIPS 2026!
2026: Serving on the Artifact Evaluation Committee for NDSS 2027.
Jun 2025: Started as a Graduate Student Researcher in the SPECT Lab at UC Irvine.
Sep 2024: Started my PhD in Computer Science at UC Irvine.

Publications · Google Scholar

2026
Who Moved the Robot? Humanoid Datasets Remember Their Operators
Sihat Afnan, Unnat Jain, Habiba Farrukh
NeurIPS 2026 Accepted

Motion retargeting, which maps a human operator's demonstrations onto a shared robot skeleton, is widely assumed to be a lossy, anonymizing projection. We show the map is effectively invertible: UNVEIL, a skeleton-aware spatiotemporal graph network, recovers operator gender, identity, and age/height from retargeted robot motion alone, generalizing to unseen operators, tasks, and retargeting implementations. Shared humanoid teleoperation datasets can therefore act as a biometric fingerprint of the people who recorded them.

Under Review
Who's Watching the Road? Revisiting Physical Adversarial Attacks on Autonomous Driving in the Presence of Human Drivers
Sihat Afnan, Mutahar Ali, Chi Zhang, Praneetsai Vasu Iddamsetty, Mohammad Al Faruque, Qi Alfred Chen, Habiba Farrukh
USENIX Security 2027 Under Review

Revisits physical adversarial attacks on autonomous driving with the human driver back in the loop. Built a high-fidelity CARLA-based VR simulator integrating a full AV stack (sensor simulation, ML perception, planning, control) with real-time eye tracking and behavioral logging, and used it to measure whether and how quickly drivers notice and recover from stop-sign manipulation, lane-detection failures, and phantom obstacles.

Manipulating XR Spatial Understanding Using On-Device Speakers
Sihat Afnan, Habiba Farrukh
IEEE S&P (Oakland) 2027 Under Review

The first on-device acoustic attack on XR spatial understanding: an optimization framework drives a headset's own built-in speakers to perturb camera odometry, RGB imaging, and depth sensing, producing controlled geometric distortions in the reconstructed 3D map with no added hardware. Demonstrated object addition/removal, surface misclassification, and degraded user task performance across Meta Quest 3S, Apple iPad, and Project Aria glasses, corrupting over 91% of spatial maps in real-world Quest 3S trials.

Preprints
LogShield: A Transformer-based Advanced Persistent Threat Detection System Leveraging Self-Attention
Sihat Afnan*, Mushtari Sadia*, Shahrear Iqbal, Anindya Iqbal (*equal contribution)
arXiv 2023

A self-attention framework for detecting APT patterns in event sequences derived from system provenance graphs, reaching F1 scores of 98% and 95% on DARPA OpTC and DARPA TC E3, compared with 96% and 94% for LSTM baselines.

Education & Experience

Education

University of California, Irvine

Ph.D. in Computer Science · Advisor: Dr. Habiba Farrukh (SPECT Lab)
Sept 2024 - Present, Irvine, California

Bangladesh University of Engineering and Technology (BUET)

B.Sc. in Computer Science and Engineering
April 2018 - June 2023, Dhaka, Bangladesh

Professional Experience

University of California, Irvine

Graduate Student Researcher
Summer 2026

Conducting research on security and privacy of perception modules in emerging systems, including AR/VR, autonomous vehicles, and embodied AI.

University of California, Irvine

Graduate Teaching Assistant and Fellow
September, 2024 - June, 2026

Assisted in teaching CS 130 (Introduction to Computer Security), ICS 33 (Intermediate Programming with Python), and ICS H32 (Python Programming with Libraries - Accelerated).

BRAC University

Lecturer, Department of CSE, School of Data and Sciences
June, 2023 - August, 2024, Dhaka, Bangladesh

Taught courses on Computer Architecture, Microprocessor, Operating Systems and Discrete Mathematics.

Spectrum Software & Consulting Ltd

Machine Learning Engineer
Feb, 2023 - May, 2023

Deployed mathematical models, built machine learning tools and devised financial engineering solutions.

Class Projects

Search Engine over the UCI ICS Web Domain
UC Irvine · Search & Ranking

Full-scale search engine over 55,000+ UCI ICS web documents with an inverted index, TF-IDF ranking, PageRank authority scoring, n-gram phrase matching, and SimHash near-duplicate detection. A two-pass retrieval pipeline pools candidates quickly, then re-ranks them using positional proximity and anchor-text signals, served through a Flask web UI and validated over 40 queries.

Explainability for Learning-Enabled Systems Controllers (Agua Revisited)
UC Irvine · ML for Systems

Extended the Agua framework to generate concept-based, human-understandable explanations for learning-enabled controllers across adaptive bitrate streaming, congestion control, and DDoS detection, using LLM-generated descriptions of system states and trained projection layers that map controller features to interpretable concepts.

Flow Classification on a Programmable Data Plane using P4 Switches
Networking · P4

Classifies network flows at an early stage from flow size, packet count, inter-arrival time, and duration, using decision trees that can be implemented directly in the PISA architecture.

Improving RTT & RTO
Networking · NS-3

Open-source implementation of Peak-Hopper: A New End-to-End Retransmission Timer for Reliable Unicast Transport, improving on the retransmission timer specified in RFC 2988, in the NS-3 network simulator.

Bengali Complex Named Entity Recognition
NLP · BERT

Identifies and classifies named entities in Bangla text with a BERT model, for use in text analytics and information retrieval systems.

Operating Systems Projects
Course Project · xv6

Added system calls, threading, and scheduling to xv6, implemented a Linux shell, and built xv6's memory management module.

Pipelined MIPS-like Processor
Course Project · Computer Architecture

An 8-bit processor with a pipelined datapath for a subset of the MIPS instruction set.

A Smart Stick for Blind People with Object Detection and Direction Guidance
Course Project · Embedded Systems

An embedded system built on an ATMega32 microcontroller with mounted sensors for obstacle detection and direction guidance.

Ray Tracing from Scratch using OpenGL
Course Project · Computer Graphics

Shoots rays from the observer's eye through the screen into a scene, finds the nearest object intersection, and shades the surface from its material and lighting conditions.

Coursework

Graduate Courses at UC Irvine

Awards & Service

Awards

  • Computer Science Department Research Fellowship (UCI) — Graduate Fellow
  • Champion, international Grammatical Error Detection Competition (Kaggle)
  • 2nd Runner Up, NLP Hackathon 2023, Bangladesh Open Source Network
  • 1st Runner Up, HackNSU 2020, NSU ACM Student Chapter
  • Top Seven, HackTheVerse 2020, IIT, University of Dhaka
  • University Dean's List Scholarship (BUET), 2019-2023
  • University Merit Scholarship (BUET), 2018-2023
  • Talentpool Scholarship (HSC/O Level), 8th position in Dhaka Board
  • Talentpool Scholarship (SSC/A Level), 20th position in Dhaka Board

Service

  • Artifact Evaluation Committee, NDSS 2027
  • Program Committee, BEA-ACL 2023 Workshop
  • Coordinator and Problem Setter, ICT Olympiad of St. Joseph High School, Dhaka

Resources

Reading and lectures I keep coming back to.

Contact

  • Email: sihata@uci.edu
  • Office: ICS Building 1, Room 430B, Donald Bren School of Information & Computer Sciences, University of California, Irvine, CA 92697