Akira Moroo

Security researcher and software engineer.

Field of interest: Firmware security, OS kernel, hypervisor, unikernel, binary analysis, fuzzing, and hardware tracing.

Publications (Peer-reviewed)

• Akira Moroo, Hajime Tazaki, Kenichi Yasukata, “svc-hook: hooking system calls on ARM64 by binary rewriting”, MIDDLEWARE, 2025 PDF
• Hajime Tazaki, Akira Moroo, Yohei Kuga, and Ryo Nakamura, “How to design a library OS for practical containers?”, VEE, 2021 PDF
• Hajime Tazaki, Akira Moroo, Ryo Nakamura, “Jail to the Outside World: Revisit the Container Architecture”, USENIX OSDI, 2018
• Akira Moroo, Akiko Aizawa, Takayuki Hamamoto, “Reranking-based Crash Report Deduplication”, SEKE, 2017 PDF

Publications (Non Peer-reviewed)

• Akira Moroo, Yuichi Sugiyama, “Armored Coresight: Towards Efficient Binary-Only Fuzzing” Online 2021 Blog Post

Slides (Selected)

• Lessons Learned from a 4-Year Journey on Developing a Generic Fuzzing Framework, HITCON CMT, 2024
• Practical Rust (Hypervisor) Firmware Kernel/VM Online Part 3, July 10, 2021
• Bypassing UEFI Secure Boot with Thin-Hypervisor BitVisor Summit 9, November 30, 2020
• Porting Linux to Nabla Containers Container Runtime Meetup #2, August 22, 2020
• Network Boot from Bell Labs Kernel/VM Online Part 1, June 6, 2020
• LLVM Backend Development for EFI Byte Code Kernel/VM Tokyo 15, July 20, 2019
• EFI Byte Code Virtual Machine for Fun and Profit Kernel/VM Hokuriku Part 4, November 10, 2018
• yabits: Yet Another UEFI coreboot Payload, Open Source Firmware Conference, September 13, 2018
• LKL.js: Running Linux Kernel on JavaScript *Directly* Kernel/VM Tokyo 14, July 21, 2018

Vulnerabilities

• CVE-2026-8913: A command injection vulnerability in the WireGuard configuration of TP-Link Archer MR600 v5
• CVE-2025-61554: A divide-by-zero vulnerability in the VirtIO network device emulation in BitVisor
• CVE-2025-61553: OOB write in VirtIO network device emulation in BitVisor

Software

• 9pfsPkg, 9P Client File System for UEFI
• frankenlibc on Solo5
• EFI Byte Code Backend for LLVM
• LKL on Unikraft, Librarizing Linux Kernel for Unikernel
• EBC Backend for ELVM
• Rust Backend for ELVM
• ebcvm, EFI Byte Code Virtual Machine
• LKL.js, Running Linux Kernel on JavaScript Directly
• yabits, Yet Another UEFI coreboot Payload
• LLVM IR Backend for ELVM
• Lua Backend for ELVM
• mruby 1.2.0 on UEFI Shell