I am a second year CS PhD student at UW Madison. I am furtunate to work in the Wisc Privacy Lab, advised by Prof. Kassem Fawaz. I’m currently excited about reverse engineering mobile and web applications for privacy, and extracting ML models from them. Before this, I got my BS/MS from UC San Diego. I was lucky to work with Prof. Earlence Fernandes in the cryptosec group on building better authorization systems for cloud apps.

Publications

Analysis of Always-Listening Services on Android
Leo Cao, Jack West, Kassem Fawaz.
Conditionally Accepted at ACM MobiSys 2026. Cambridge, UK.
[Paper TBA] [Code TBA]


Stateful Least Privilege Authorization for the Cloud
Leo Cao*, Luoxi Meng*, Deian Stefan, and Earlence Fernandes.
33rd USENIX Security Symposium (USENIX Security 24). Philadelphia, PA.
[Paper] [Code]