Dr. Simon Koch
I am a postdoctoral fellow at the Security and Privacy Lab at the University of Innsbruck, working with Rainer Böhme. I completed my doctoral studies on mobile privacy under Martin Johns at the Institute for Application Security, TU Braunschweig, and defended in April 2025. My ongoing research spans questions in privacy and security.
On the privacy side, my focus is on mobile privacy where I want to understand what data is leaked when we are using mobile apps and what happens to it afterward. On the security side, I work on static program analysis, particularly for web applications, detecting vulnerabilities and analyzing code patterns. Currently, I'm also branching into software supply chain security, with a focus on SBOMs, where I want to discern the limitations of current SBOM generation as well as options for improvement.
If any of this sounds interesting to you, I'm always happy to talk about potential collaborations.
Latest News
- — Our paper 'On the Mismatch of Disclosure Practices in Security and Privacy Research' was accepted to MetaCRISP.
- — I am honored to be one of the three CAST-award finalists to present their dissertation at the GI-Sicherheit in Hamburg.
- — Our paper 'Uncovering Bigger Truths: Deobfuscating PHP with Phoebe' has been accepted to ACSAC'25.
Featured Publications
On the Mismatch of Disclosure Practices in Security and Privacy Research
SSRF vs Developers: A Study of SSRF-Defenses in PHP Applications
The OK is Not Enough: Large Scale Study of Consent Dialogs in Smartphone Applications