Cybernews covers our DJI drone security research
Cybernews covered the Bluetooth vulnerability in DJI drones (CVE-2026-78306) discovered by my student Abdelrahman Yousef and me. Read the Cybernews article.
Dr. Jordan Samhi
Building sound, practical program-analysis methods for secure and reliable software.
I am a Research Scientist at the University of Luxembourg's Interdisciplinary Centre for Security, Reliability and Trust (SnT) and a member of the TruX Research Group. I develop sound, practical program-analysis methods that combine static, dynamic, and AI-assisted techniques to automate software security and improve system reliability.
I completed my Ph.D. with Prof. Dr. Jacques Klein and Prof. Dr. Tegawendé F. Bissyandé, followed by a postdoctoral position at CISPA with Prof. Dr. Andreas Zeller. During my doctoral studies, I visited the PLSE group at the University of Washington, collaborating with Prof. Dr. Michael D. Ernst and Prof. Dr. René Just.
Software Engineering
Software Security
Program Analysis
Latest news
Five new DJI CVEs published
Together with my student Abdelrahman Yousef, I registered five new vulnerabilities affecting DJI drones: CVE-2026-77812, CVE-2026-78251, CVE-2026-78255, CVE-2026-78306, and CVE-2026-78321. The findings cover cleartext BLE exposure of Wi-Fi credentials, unauthenticated media and command access, FTP storage exhaustion, and HTTP connection-pool exhaustion.
Program Committee member for USENIX Security '27
I am delighted to have been invited to serve on the Program Committee of the 36th USENIX Security Symposium (USENIX Security '27).
Vice Program Chair of IEEE SecDev 2027
I am delighted to have been invited to serve as Vice Program Chair of the IEEE Secure Development Conference (SecDev) 2027.
🚀 Good news! Google.org Luxembourg awarded us $25 000 worth of GCP Credits 🤖
Listed among DJI Security Contributors
🛡️ My student Abdelrahman Yousef and I are listed among DJI Security Contributors for December 2025–June 2026 in the Devices and APPs category, recognizing our responsible disclosure work to help make DJI platforms safer.
🥳 One paper accepted at TSE, congrats Chuyang Xu!
View all 82 updates Hide older updates 75 older
Distinguished Reviewer
🎉 I got recognized as a Distinguished Reviewer for SecDev 2026!
Distinguished Reviewer
🎉 I got recognized as a Distinguished Reviewer for FSE 2026!
Visiting colleagues, Prof. Li Li and Prof. Dan Hao in Beijing, China 🇨🇳
Authorization to supervise doctoral research
🥳 Happy to announce that I have received the ADR from the University of Luxembourg, i.e., I can now officially supervise Ph.D. students.
🥳 One paper accepted at TOSEM, congrats Marco Alecci!
🥳 One paper accepted at EAI AFRICATEK (Main Track) 2026, congrats Aicha War!
🥳 One paper accepted at ISSTA (Main Track) 2026, congrats Marco Alecci!
🇧🇷 Attending ICSE 2026 in Rio de Janeiro! 🌴
🇫🇷 Attending the InCyber International Forum in Lille, France!
🇩🇪 Visiting Prof. Dr. Eric Bodden in Paderborn, Germany!
🇫🇷 Attending the first edition of the Alliance Cyber in Paris!
🇸🇳 Currently attending a workshop in Dakar as part of the SnT4Dev project (more info) together with the GIM-UEMOA.
🥳 One paper accepted at ICSE (NIER Track) 2026, congrats Marco Alecci!
🚀 Good news! The AndroThreat project has been accepted for funding! (465.7k€)
🚀 Good news! Google.org Luxembourg awarded us $25 000 worth of GCP Credits 🤖
🇰🇷 I am attending ASE 2025 in Seoul, South Korea!
Meet Jordan video profile
📺 There even is a video here.
Meet Jordan: securing tomorrow's software
📰 You can read my recent interview from SnT here.
🥳 One paper accepted at TOSEM, congrats Marco Alecci!
🚀 Good news! Google.org has decided to support us with a 200 000 euros gift for our research on "From Multi-Linguality to Cross-Linguality via Multimodality"
🇸🇦 Visiting our colleague Prof. Saad Ezzini at the King Fahd University of Petroleum and Minerals (KFUPM) in Saudi Arabia!
🥳 One paper accepted at ASE (NIER Track) 2025, congrats Tiezhu Sun!
🎉 Our Static Analysis Workshop will have its second edition this year, co-located with ICSE 2026!
🥳 One paper accepted at ICSME (NIER Track) 2025, congrats Tiezhu Sun!
🥳 One paper accepted at JSS 2025, congrats Léuson Da Silva!
🇳🇴 I attended FSE 2025 in Trondheim, Norway!
🥳 One paper accepted at ICSE 2026, congrats Alberick Djire!
🥳 One paper accepted at EMSE 2025, congrats Alioune Diallo!
🇫🇷 I attended the SSTIC 2025 in Rennes! 🌳
🎤 I delivered a talk at the 1st International Workshop on Advancing Static Analysis for Researchers and Industry Practitioners in Software Engineering, co-located with ICSE 2025 (STATIC 2025) in Ottawa (Canada)!
🇨🇦 I attended ICSE 2025 in Ottawa! 🍁
🎤 I delivered two invited talks at the Cyberus Spring School 2025 (Titles: Program Analysis: Challenges and Opportunities and Mobile Security: years of improvement, yet challenges remain)
🥳 One paper accepted at TOSEM 2025!
🎤 I delivered a talk at the Inaugural FutureFinTech Federated Conference 2025 (F3C2025) in Luxmebourg!
🥳 Two papers accepted at FSE-IVR 2025, congrats to all my co-authors!
Cybersecurity and psychology: promising researchers in the spotlight
🥳 One paper accepted at SANER, congrats Pedro Jesús Ruiz Jiménez!
💼 I recently started a new position at the University of Luxembourg as a Research Scientist!
Coverage of the FNR Outstanding Ph.D. Thesis Award
Coverage includes Science.lu, RTL Luxembourg, Luxembourg Wort, the University of Luxembourg, SnT, and the Luxembourg National Research Fund.
Outstanding Ph.D. Thesis Award
🎉 I received an Outstanding Ph.D. Thesis Award from the National Research Fund of Luxembourg!
🥳 One paper accepted at TOSEM, congrats Yonghui Liu!
🇦🇹 I attended and presented a paper at ISSTA 2024 in Vienna! 🎻
🎉 Our Static Analysis Workshop proposal has been accepted at ICSE 2025!
🥳 One paper accepted at ISSTA 2024!
Distinguished Reviewer recognition
🎉 I got recognized as a Distinguished Reviewer for TSE!
🥳 One paper accepted at FSE 2024!
🇵🇹 I attended ICSE 2024 in Lisbon, Portugal and presented a paper at MSR! 🐟
🥳 One paper accepted at MSR 2024!
🥳 One paper accepted at TDSC, congrats Marco Alecci!
Excellent Doctoral Thesis Award
🎉 I received an Excellent Doctoral Thesis Award from the University of Luxembourg!
🎉 First CORE project (UNLOCK) written accepted for funding (739k€)!
🥳 One paper accepted at ICSE 2024, congrats Marco Alecci!
🎤 I delivered a keynote at A-Mobile 2023 (Title: On the Soundness of Android Static Analysis)
👨🔬 I started a new Post-Doc position at CISPA with Prof. Dr. Andreas Zeller
🚀 I released the first version of AndroSpecter, a library to facilitate the static analysis of Java programs and Android apps!
In conversation with our young researchers
🎙 I was interviewed by Research Luxembourg: I shared insights from my research in Software Engineering and Software Security
🇦🇺 I attended ICSE 2023 in Melbourne, Australia! 🦘
🥳 One paper accepted at MobileSoft 2023, congrats Maria Kober!
🇲🇴 I attended and presented a paper at SANER 2023 in Macau SAR, China! 🎰
👨🎓 I successfully defended my Ph.D.! 🎓
🥳 One paper accepted at SANER 2023!
🇸🇬 I attended FSE 2022 in Singapore!
🥳 One paper accepted at TOSEM, congrats Xiaoyu Sun!
🇺🇸 I attended and presented two papers at ICSE 2022 in Pittsburgh, USA!
🥳 One paper accepted at MSR 2022!
🇺🇸 I started a 4-month visiting research stay at the University of Washington with Prof. Dr. Michael D. Ernst and Prof. Dr. René Just in Seattle (WA), USA!
🚀 First JUMP project (SECUBOX) written accepted for funding (250k€)!
🥳 Two papers accepted at ICSE 2022!
🥳 One paper accepted at TDSC!
🥳 One paper accepted at MLHat, congrats Nadia Daoudi!
🥳 One paper accepted at EMSE!
🥳 One paper accepted at ICSE 2021!
🚀 My Ph.D. was accepted for funding thanks to the FNR (~130k€) 🥳
Latest research
All publications →
Newest publication
Conference ACSAC Main Track
SoK: Ten Years of Dark Jargon Detection and Interpretation from an NLP Perspective
42nd IEEE Annual Computer Security Applications Conference
Featured videos
Recent publications
All publications →
Workshop TAKEDOWN Main Track
Position: A Resource-First Architecture for Textual Geospatial Intelligence in Criminal Online Communication
Journal TSE
LLM-Based Directed Input Generation for Repositories
Journal TOSEM
TaskFlow: LLMs for Android Taint Specification
Conference EAI AFRICATEK Main Track