news

Feb 20, 2026 I am honored to be one of the three Cast-award finalists to present their dissertation at the GI-Sicherheit in Hamburg.
Sep 29, 2025 Happy to announce that our paper “Uncovering Bigger Truths: Deobfuscating PHP with Phoebe” has been accepted to ACSAC’25.
Jun 20, 2025 The two papers “Extract: A PHP Foot-Gun Case Study” and “Confusing Value with Enumeration: Studying the Use of CVEs in Academia” I contributed to were accepted at WOOT and USENIX 2025.
Jun 02, 2025 I started my new postdoc position at the Security and Privacy Lab of Rainer Böhme at the University of Innsbruck.
Apr 14, 2025 Announcement_8
Feb 12, 2025 Our paper “HyTrack: Resurrectable and Persistent Tracking Across Android Apps and the Web” has been accepted to USENIX’25 and just passed the artifact available evaluation.
Dec 19, 2024 Announcement_7
Aug 01, 2024 Happy to announce, that we got accepted to PETS’25 with “The Impact of Default Mobile SDK Usage on Privacy and Data Protection”.
Jul 20, 2024 Our artifact for our USENIX’24 paper “SSRF vs Developers: A Study of SSRF-Defenses in PHP Applications” is now available here. In tandem with the artifact we also release our PHP Bytecode CPG and its corresponding tooling in a dedicated github org for future updates and additional features.
Jul 05, 2024 Our shepherd agreed with our revision of “SSRF vs Developers: A Study of SSRF-Defenses in PHP Applications” which is going to appear at USENIX’24.
Mar 08, 2024 Our shepherd agreed with our revision of “A Black-Box Privacy Analysis of Messaging Service Providers’ Chat Message Processing” which is going to appear at PETS’24.
Mar 01, 2024 I presented The Fault in Our Stars at MADWeb and am honored to receive the Distinguished Presentation Award.