I am Duc Bui, a Privacy Engineer at Snap Inc., where I build systems to enhance data security and ensure privacy compliance.

I earned a PhD in Computer Science from the University of Michigan. I worked with Professor Kang G. Shin and excellent people at the Real-Time Computing Lab in the CSE Department. My PhD research was at the intersection of user privacy, program analysis and natural language processing. I developed end-to-end automated systems and formal models that analyze the consistency between privacy policies and actual data collection of mobile and web apps. I previously worked on mobile systems and networking where I developed novel quality-of-service-guaranteed energy-efficient technologies for the Chrome web browser and real-time video streaming.

Publications

1. Detection of Inconsistencies in Privacy Practices of Browser Extensions
   Duc Bui, Brian Tang, and Kang G. Shin
   In 2023 IEEE Symposium on Security and Privacy (SP), San Francisco, CA, US, 2023. pp. 37-55.
2. Do Opt-Outs Really Opt Me Out?
   Duc Bui, Brian Tang, and Kang G. Shin
   Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security (CCS '22). Association for Computing Machinery, New York, NY, USA, 425–439. https://doi.org/10.1145/3548606.3560574
   Datasets Demo Website
3. Consistency Analysis of Data-Usage Purposes in Mobile Apps
   Duc Bui, Yuan Yao, Kang G. Shin, Jong-Min Choi, and Junbum Shin
   The 28th ACM SIGSAC Conference on Computer and Communications Security (CCS'21), Virtual event, South Korea, November 2021.
   Source code
4. Automated Extraction and Presentation of Data Practices in Privacy Policies
   Duc Bui, Kang G. Shin, Jong-Min Choi, and Junbum Shin
   The 21st Privacy Enhancing Technologies Symposium (PETS 2021), Virtual conference, July 2021.
   Datasets
5. Federated User Representation Learning
   Duc Bui, Kshitiz Malik, Jack Goetz, Honglei Liu, Seungwhan Moon, Anuj Kumar, and Kang G. Shin
   arXiv preprint arXiv:1909.12535, 2019.
6. Active Federated Learning
   Jack Goetz, Kshitiz Malik, Duc Bui, Seungwhan Moon, Honglei Liu, and Anuj Kumar
   Workshop on Federated Learning for Data Privacy and Confidentiality (in Conjunction with NeurIPS) 2019.
7. Cross-Platform Support for Rapid Development of Mobile Acoustic Sensing Applications [Presentation video]
   Yu-Chih Tung, Duc Bui, and Kang G. Shin
   ACM International Conference on Mobile Systems, Applications and Services (MobiSys) 2018.
   
8. Mobile Plus: Multi-device Mobile Platform for Cross-device Functionality Sharing.
   Sangeun Oh, Hyuck Yoo, Dae R. Jeong, Duc Hoang Bui, and Insik Shin
   ACM International Conference on Mobile Systems, Applications and Services (MobiSys) 2017.
   
9. Demo: Mobile Plus: Mobile platform for Transparent Sharing of Functionalities Across Devices.
   Sangeun Oh, Hyuck Yoo, Daelyong Jeong, Sooyoung Park, Duc Hoang Bui, Sungsoo Moon, and Insik Shin.
   ACM International Conference on Mobile Systems, Applications and Services (MobiSys) 2016.
   
10. Rethinking Energy-Performance Trade-Off in Mobile Web Page Loading.
    Duc Hoang Bui, Yunxin Liu, Hyosu Kim, Insik Shin, and Feng Zhao.
    ACM SIGMOBILE GetMobile Magazine (Research highlights), Volume 20, Issue 2, April 2016.
    
11. Rethinking Energy-Performance Trade-Off in Mobile Web Page Loading. [Intro video, slides]
    Duc Hoang Bui, Yunxin Liu, Hyosu Kim, Insik Shin, and Feng Zhao.
    ACM International Conference on Mobile Computing and Networking (MobiCom) 2015.
    Featured on Phys.org, OnMSFT, and Microsoft Research Blog.
    Project page Source code
12. GreenBag: Energy-efficient Bandwidth Aggregation for Real-time Streaming in Heterogeneous Mobile Wireless Networks.
    Duc Hoang Bui, Kilho Lee, Sangeun Oh, Hyojeong Shin, Insik Shin, Honguk Woo, and Daehyun Ban.
    IEEE Real-Time Systems Symposium (RTSS) 2013.
    Project page Source code
13. A Case Study of the Application of Dynamic Symbolic Execution to Real-World Binary Programs.
    Duc Bui Hoang, Yunho Kim, and Moonzoo Kim.
    Korea Conference on Software Engineering (KCSE) 2012.
14. A method of verifying web service composition.
    Thang Huynh Quyet, Quynh Pham Thi, and Duc Bui Hoang.
    ACM International Symposium on Information and Communication Technology (SoICT) 2010.

Patents

1. Electronic Device for Protecting Personal Information and Operation Method Thereof
   Inventors: Jongmin Choi, Duc Hoang Bui, Kanggeun Shin, and Junbum Shin
   WIPO International Patent Publication No. WO/2022/050684. 2022. [WIPO Patent]
2. Electronic Device and Method for Personal Data Protection
   Inventors: Jongmin Choi, Duc Hoang Bui, Kanggeun Shin, and Junbum Shin
   Korean Patent No. KR356029606. 2022. [WIPO patent]

Honors and Awards

• Naver PhD Fellowship 2016, by Naver Corporation for excellent PhD students in computer science.
• Microsoft Research Asia Fellowship 2015: Nomination Award, ranked 14th out of 90 students from top universities in Asia.
• Microsoft Research Asia Excellent Award 2015, in the Stars of Tomorrow Internship Program.
• Qualcomm Innovation Award 2015: Finalist, ranked in top ten, out of 37 final-round projects.
• Outstanding M.S. Thesis Award in Computer Science, 2013.
• Korean Government Scholarship for Master’s degree at KAIST, 2010.
• Scholarship for Outstanding Students, Vietnam Ministry of Information and Communications, 2009

Theses

• Assessment of Privacy Risks in Mobile and Web Applications/Services. PhD thesis. The University of Michigan, May 2022.
• GreenBag: Energy-efficient Bandwidth Aggregation for Real-time Streaming in Heterogeneous Mobile Wireless Networks [Slides]. Master's thesis. KAIST, June 2013.
• A Method of BPEL Process Verification. Bachelor's thesis. Hanoi University of Science and Technology, June 2010.