news

Jun 20, 2025 The two papers “Extract: A PHP Foot-Gun Case Study” and “Confusing Value with Enumeration: Studying the Use of CVEs in Academia” I contributed to were accepted at WOOT and USENIX 2025.
Jun 02, 2025 I started my new postdoc position at the Security and Privacy Lab of Rainer Böhme at the University of Innsbruck.
Apr 14, 2025 I successfully defended my PhD and got a summa cum laude. Very greatful to have finally passed this milestone.
Feb 12, 2025 Our paper “HyTrack: Resurrectable and Persistent Tracking Across Android Apps and the Web” has been accepted to USENIX’25 and just passed the artifact available evaluation.
Dec 19, 2024 I finally finished and submitted my dissertation “Analyzing Privacy and Data Protection Violations in Mobile Applications”.
Aug 01, 2024 Happy to announce, that we got accepted to PETS’25 with “The Impact of Default Mobile SDK Usage on Privacy and Data Protection”.
Jul 20, 2024 Our artifact for our USENIX’24 paper “SSRF vs Developers: A Study of SSRF-Defenses in PHP Applications” is now available here. In tandem with the artifact we also release our PHP Bytecode CPG and its corresponding tooling in a dedicated github org for future updates and additional features.
Jul 05, 2024 Our shepherd agreed with our revision of “SSRF vs Developers: A Study of SSRF-Defenses in PHP Applications” which is going to appear at USENIX’24.
Mar 08, 2024 Our shepherd agreed with our revision of “A Black-Box Privacy Analysis of Messaging Service Providers’ Chat Message Processing” which is going to appear at PETS’24.
Mar 01, 2024 I presented The Fault in Our Stars at MADWeb and am honored to receive the Distinguished Presentation Award.