Thorsten Holz

326 papers A* 88A 54B 16C 6Misc 3Journal 88Unranked 63
YearRankTypeTitle / Venue / Authors
2026 A* conf
"That's another doom I haven't thought about": A User Study on AI Labels as a Safeguard Against Image-Based Misinformation.
CHI
Sandra Höltervennhoff, Jonas Ricker, Maike M. Raphael, Charlotte Schwedes, Rebecca Weil, Asja Fischer, Thorsten Holz, Lea Schönherr, Sascha Fahl
2026 A* conf
The Algorithmic Self-Portrait: Deconstructing Memory in ChatGPT.
WWW
Abhisek Dash, Soumi Das, Elisabeth Kirsten, Qinyuan Wu, Sai Keerthana Karnam, Krishna P. Gummadi, Thorsten Holz, Muhammad Bilal Zafar, Savvas Zannettou
2026 J jnl
The Algorithmic Self-Portrait: Deconstructing Memory in ChatGPT.
CoRR
Abhisek Dash, Soumi Das, Elisabeth Kirsten, Qinyuan Wu, Sai Keerthana Karnam, Krishna P. Gummadi, Thorsten Holz, Muhammad Bilal Zafar, Savvas Zannettou
2025 J jnl
A Comparative Study of Fuzzers and Static Analysis Tools for Finding Memory Unsafety in C and C++.
CoRR
Keno Hassler, Philipp Görz, Stephan Lipp, Thorsten Holz, Marcel Böhme
2025 A* conf
A Comprehensive Memory Safety Analysis of Bootloaders.
NDSS
Jianqiang Wang, Meng Wang, Qinying Wang, Nils Langius, Li Shi, Ali Abbasi, Thorsten Holz
2025 J jnl
A-MemGuard: A Proactive Defense Framework for LLM-Based Agent Memory.
CoRR
Qianshan Wei, Tengchao Yang, Yaochen Wang, Xinfeng Li, Lijun Li, Zhenfei Yin, Yi Zhan, Thorsten Holz, Zhiqiang Lin, Xiaofeng Wang
2025 A* conf
AidFuzzer: Adaptive Interrupt-Driven Firmware Fuzzing via Run-Time State Recognition.
USENIX Security Symposium
Jianqiang Wang, Qinying Wang, Tobias Scharnowski, Li Shi, Simon Wörner, Thorsten Holz
2025 J jnl
An Empirical Study of Fuzz Harness Degradation.
CoRR
Philipp Görz, Joschua Schilling, Thorsten Holz, Marcel Böhme
2025 J jnl
Anota: Identifying Business Logic Vulnerabilities via Annotation-Based Sanitization.
CoRR
Meng Wang, Philipp Görz, Joschua Schilling, Keno Hassler, Liwei Guo, Thorsten Holz, Ali Abbasi
2025 A* conf
Confusing Value with Enumeration: Studying the Use of CVEs in Academia.
USENIX Security Symposium
Moritz Schloegel, Daniel Klischies, Simon Koch, David Klein, Lukas Gerlach, Malte Wessels, Leon Trampert, Martin Johns, Mathy Vanhoef, Michael Schwarz, Thorsten Holz, Jo Van Bulck
2025 A* conf
Empirical Security Analysis of Software-based Fault Isolation through Controlled Fault Injection.
CCS
Nils Bars, Lukas Bernhard, Moritz Schloegel, Thorsten Holz
2025 J jnl
Empirical Security Analysis of Software-based Fault Isolation through Controlled Fault Injection.
CoRR
Nils Bars, Lukas Bernhard, Moritz Schloegel, Thorsten Holz
2025 A conf
Exploration of the Dynamics of Buy and Sale of Social Media Accounts.
IMC
Mario Beluri, Bhupendra Acharya, Soheil Khodayari, Giada Stivala, Giancarlo Pellegrino, Thorsten Holz
2025 — conf
Exploring the Potential of LLMs for Code Deobfuscation.
DIMVA (1)
David Beste, Grégoire Menguy, Hossein Hajipour, Mario Fritz, Antonio Emanuele Cinà, Sébastien Bardin, Thorsten Holz, Thorsten Eisenhofer, Lea Schönherr
2025 A* conf
GDMA: Fully Automated DMA Rehosting via Iterative Type Overlays.
USENIX Security Symposium
Tobias Scharnowski, Simeon Hoffmann, Moritz Bley, Simon Wörner, Daniel Klischies, Felix Buchmann, Nils Ole Tippenhauer, Thorsten Holz, Marius Muench
2025 J jnl
Novelty Not Found: Exploring Input Shadowing in Fuzzing through Adaptive Fuzzer Restarts - RCR Report.
ACM Trans. Softw. Eng. Methodol.
Nico Schiller, Xinyi Xu, Lukas Bernhard, Nils Bars, Moritz Schloegel, Thorsten Holz
2025 J jnl
Novelty Not Found: Exploring Input Shadowing in Fuzzing through Adaptive Fuzzer Restarts.
ACM Trans. Softw. Eng. Methodol.
Nico Schiller, Xinyi Xu, Lukas Bernhard, Nils Bars, Moritz Schloegel, Thorsten Holz
2025 A* conf
Pirates of Charity: Exploring Donation-based Abuses in Social Media Platforms.
WWW
Bhupendra Acharya, Dario Lazzaro, Antonio Emanuele Cinà, Thorsten Holz
2025 A* conf
Protocol-Aware Firmware Rehosting for Effective Fuzzing of Embedded Network Stacks.
CCS
Moritz Bley, Tobias Scharnowski, Simon Wörner, Moritz Schloegel, Thorsten Holz
2025 J jnl
Protocol-Aware Firmware Rehosting for Effective Fuzzing of Embedded Network Stacks.
CoRR
Moritz Bley, Tobias Scharnowski, Simon Wörner, Moritz Schloegel, Thorsten Holz
2025 J jnl
Security Benefits and Side Effects of Labeling AI-Generated Images.
CoRR
Sandra Höltervennhoff, Jonas Ricker, Maike M. Raphael, Charlotte Schwedes, Rebecca Weil, Asja Fischer, Thorsten Holz, Lea Schönherr, Sascha Fahl
2025 A* conf
Space RADSIM: Binary-Agnostic Fault Injection to Evaluate Cosmic Radiation Impact on Exploit Mitigation Techniques in Space.
SP
Johannes Willbold, Tobias Cloosters, Simon Wörner, Felix Buchmann, Moritz Schloegel, Lucas Davi, Thorsten Holz
2025 A* conf
TWINFUZZ: Differential Testing of Video Hardware Acceleration Stacks.
NDSS
Matteo Leonelli, Addison Crump, Meng Wang, Florian Bauckholt, Keno Hassler, Ali Abbasi, Thorsten Holz
2025 J jnl
Understanding Regional Filter Lists: Efficacy and Impact.
Proc. Priv. Enhancing Technol.
Christian Böttger, Nurullah Demir, Jan Hörnemann, Bhupendra Acharya, Norbert Pohlmann, Thorsten Holz, Matteo Große-Kampmann, Tobias Urban
2025 J jnl
Unsafe Code Still a Hurdle Copilot Must Clear.
Commun. ACM
Thorsten Holz
2025 A conf
VMIGEN: Utilizing Virtual Machine Introspection for Fuzzing Complex Closed-Source Targets.
ACSAC
Florian Schweins, Moritz Schloegel, Moritz Bley, Nico Schiller, Thorsten Holz
2024 A* conf
A Binary-level Thread Sanitizer or Why Sanitizing on the Binary Level is Hard.
USENIX Security Symposium
Joschua Schilling, Andreas Wendler, Philipp Görz, Nils Bars, Moritz Schloegel, Thorsten Holz
2024 A* conf
A Representative Study on Human Detection of Artificially Generated Media Across Countries.
SP
Joel Frank, Franziska Herbert, Jonas Ricker, Lea Schönherr, Thorsten Eisenhofer, Asja Fischer, Markus Dürmuth, Thorsten Holz
2024 A conf
AI-Generated Faces in the Real World: A Large-Scale Case Study of Twitter Profile Images.
RAID
Jonas Ricker, Dennis Assenmacher, Thorsten Holz, Asja Fischer, Erwin Quiring
2024 J jnl
AI-Generated Faces in the Real World: A Large-Scale Case Study of Twitter Profile Images.
CoRR
Jonas Ricker, Dennis Assenmacher, Thorsten Holz, Asja Fischer, Erwin Quiring
2024 J jnl
An Explorative Study of Pig Butchering Scams.
CoRR
Bhupendra Acharya, Thorsten Holz
2024 A* conf
Atropos: Effective Fuzzing of Web Applications for Server-Side Vulnerabilities.
USENIX Security Symposium
Emre Güler, Sergej Schumilo, Moritz Schloegel, Nils Bars, Philipp Görz, Xinyi Xu, Cemal Kaygusuz, Thorsten Holz
2024 J jnl
Bad Neighbors: On Understanding VPN Provider Networks.
CoRR
Teemu Rytilahti, Thorsten Holz
2024 — conf
CodeLMSec Benchmark: Systematically Evaluating and Finding Security Vulnerabilities in Black-Box Code Language Models.
SaTML
Hossein Hajipour, Keno Hassler, Thorsten Holz, Lea Schönherr, Mario Fritz
2024 A* conf
Conning the Crypto Conman: End-to-End Analysis of Cryptocurrency-based Technical Support Scams.
SP
Bhupendra Acharya, Muhammad Saad, Antonio Emanuele Cinà, Lea Schönherr, Hoang Dai Nguyen, Adam Oest, Phani Vadrevu, Thorsten Holz
2024 J jnl
Conning the Crypto Conman: End-to-End Analysis of Cryptocurrency-based Technical Support Scams.
CoRR
Bhupendra Acharya, Muhammad Saad, Antonio Emanuele Cinà, Lea Schönherr, Hoang Dai Nguyen, Adam Oest, Phani Vadrevu, Thorsten Holz
2024 A* conf
DarthShader: Fuzzing WebGPU Shader Translators & Compilers.
CCS
Lukas Bernhard, Nico Schiller, Moritz Schloegel, Nils Bars, Thorsten Holz
2024 J jnl
DarthShader: Fuzzing WebGPU Shader Translators & Compilers.
CoRR
Lukas Bernhard, Nico Schiller, Moritz Schloegel, Nils Bars, Thorsten Holz
2024 J jnl
Exploration of the Dynamics of Buy and Sale of Social Media Accounts.
CoRR
Mario Beluri, Bhupendra Acharya, Soheil Khodayari, Giada Stivala, Giancarlo Pellegrino, Thorsten Holz
2024 J jnl
HexaCoder: Secure Code Generation via Oracle-Guided Synthetic Training Data.
CoRR
Hossein Hajipour, Lea Schönherr, Thorsten Holz, Mario Fritz
2024 J jnl
Memory Corruption at the Border of Trusted Execution.
IEEE Secur. Priv.
Tobias Cloosters, Oussama Draissi, Johannes Willbold, Thorsten Holz, Lucas Davi
2024 A* conf
No Peer, no Cry: Network Application Fuzzing via Fault Injection.
CCS
Nils Bars, Moritz Schloegel, Nico Schiller, Lukas Bernhard, Thorsten Holz
2024 J jnl
No Peer, no Cry: Network Application Fuzzing via Fault Injection.
CoRR
Nils Bars, Moritz Schloegel, Nico Schiller, Lukas Bernhard, Thorsten Holz
2024 J jnl
Pirates of Charity: Exploring Donation-based Abuses in Social Media Platforms.
CoRR
Bhupendra Acharya, Dario Lazzaro, Antonio Emanuele Cinà, Thorsten Holz
2024 J jnl
ScamChatBot: An End-to-End Analysis of Fake Account Recovery on Social Media via Chatbots.
CoRR
Bhupendra Acharya, Dominik Sautter, Muhammad Saad, Thorsten Holz
2024 A* conf
SoK: Prudent Evaluation Practices for Fuzzing.
SP
Moritz Schloegel, Nils Bars, Nico Schiller, Lukas Bernhard, Tobias Scharnowski, Addison Crump, Arash Ale Ebrahim, Nicolai Bissantz, Marius Muench, Thorsten Holz
2024 J jnl
SoK: Prudent Evaluation Practices for Fuzzing.
CoRR
Moritz Schloegel, Nils Bars, Nico Schiller, Lukas Bernhard, Tobias Scharnowski, Addison Crump, Arash Ale Ebrahim, Nicolai Bissantz, Marius Muench, Thorsten Holz
2024 A* conf
The Imitation Game: Exploring Brand Impersonation Attacks on Social Media Platforms.
USENIX Security Symposium
Bhupendra Acharya, Dario Lazzaro, Efrén López-Morales, Adam Oest, Muhammad Saad, Antonio Emanuele Cinà, Lea Schönherr, Thorsten Holz
2024 — conf
Towards the Detection of Diffusion Model Deepfakes.
VISIGRAPP (4): VISAPP
Jonas Ricker, Simon Damm, Thorsten Holz, Asja Fischer
2024 — conf
VSAsTer: Uncovering Inherent Security Issues in Current VSAT System Practices.
WISEC
Johannes Willbold, Moritz Schloegel, Robin Bisping, Martin Strohmeier, Thorsten Holz, Vincent Lenders
2024 — conf
WebAssembly as a Fuzzing Compilation Target (Registered Report).
FUZZING
Florian Bauckholt, Thorsten Holz
2023 — conf
A Case Study on Fuzzing Satellite Firmware.
SpaceSec
Tobias Scharnowski, Felix Buchmann, Simon Wörner, Thorsten Holz
2023 J jnl
A Representative Study on Human Detection of Artificially Generated Media Across Countries.
CoRR
Joel Frank, Franziska Herbert, Jonas Ricker, Lea Schönherr, Thorsten Eisenhofer, Asja Fischer, Markus Dürmuth, Thorsten Holz
2023 A conf
Container Orchestration Honeypot: Observing Attacks in the Wild.
RAID
Noah Spahn, Nils Hanke, Thorsten Holz, Christopher Kruegel, Giovanni Vigna
2023 — conf
CrabSandwich: Fuzzing Rust with Rust (Registered Report).
FUZZING
Addison Crump, Dongjia Zhang, Syeda Mahnur Asif, Dominik Christian Maier, Andrea Fioraldi, Thorsten Holz, Davide Balzarotti
2023 A* conf
Drone Security and the Mysterious Case of DJI's DroneID.
NDSS
Nico Schiller, Merlin Chlosta, Moritz Schloegel, Nils Bars, Thorsten Eisenhofer, Tobias Scharnowski, Felix Domke, Lea Schönherr, Thorsten Holz
2023 J jnl
EF/CF: High Performance Smart Contract Fuzzing for Exploit Generation.
CoRR
Michael Rodler, David Paaßen, Wenting Li, Lukas Bernhard, Thorsten Holz, Ghassan Karame, Lucas Davi
2023 A conf
EF↯CF: High Performance Smart Contract Fuzzing for Exploit Generation.
EuroS&P
Michael Rodler, David Paaßen, Wenting Li, Lukas Bernhard, Thorsten Holz, Ghassan Karame, Lucas Davi
2023 A* conf
FUZZILLI: Fuzzing for JavaScript JIT Compiler Vulnerabilities.
NDSS
Samuel Groß, Simon Koch, Lukas Bernhard, Thorsten Holz, Martin Johns
2023 A* conf
Fuzztruction: Using Fault Injection-based Fuzzing to Leverage Implicit Domain Knowledge.
USENIX Security Symposium
Nils Bars, Moritz Schloegel, Tobias Scharnowski, Nico Schiller, Thorsten Holz
2023 A* conf
Hoedur: Embedded Firmware Fuzzing using Multi-Stream Inputs.
USENIX Security Symposium
Tobias Scharnowski, Simon Wörner, Felix Buchmann, Nils Bars, Moritz Schloegel, Thorsten Holz
2023 J jnl
More than you've asked for: A Comprehensive Analysis of Novel Prompt Injection Threats to Application-Integrated Large Language Models.
CoRR
Kai Greshake, Sahar Abdelnabi, Shailesh Mishra, Christoph Endres, Thorsten Holz, Mario Fritz
2023 A* conf
No more Reviewer #2: Subverting Automatic Paper-Reviewer Assignment using Adversarial Learning.
USENIX Security Symposium
Thorsten Eisenhofer, Erwin Quiring, Jonas Möller, Doreen Riepel, Thorsten Holz, Konrad Rieck
2023 J jnl
No more Reviewer #2: Subverting Automatic Paper-Reviewer Assignment using Adversarial Learning.
CoRR
Thorsten Eisenhofer, Erwin Quiring, Jonas Möller, Doreen Riepel, Thorsten Holz, Konrad Rieck
2023 — conf
Not What You've Signed Up For: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection.
AISec@CCS
Sahar Abdelnabi, Kai Greshake, Shailesh Mishra, Christoph Endres, Thorsten Holz, Mario Fritz
2023 — conf
Novelty Not Found: Adaptive Fuzzer Restarts to Improve Input Space Coverage (Registered Report).
FUZZING
Nico Schiller, Xinyi Xu, Lukas Bernhard, Nils Bars, Moritz Schloegel, Thorsten Holz
2023 A conf
On the Similarity of Web Measurements Under Different Experimental Setups.
IMC
Nurullah Demir, Jan Hörnemann, Matteo Große-Kampmann, Tobias Urban, Norbert Pohlmann, Thorsten Holz, Christian Wressnegger
2023 J jnl
Privacy Rarely Considered: Exploring Considerations in the Adoption of Third-Party Services by Websites.
Proc. Priv. Enhancing Technol.
Christine Utz, Sabrina Amft, Martin Degeling, Thorsten Holz, Sascha Fahl, Florian Schaub
2023 A* conf
Space Odyssey: An Experimental Software Security Analysis of Satellites.
SP
Johannes Willbold, Moritz Schloegel, Manuel Vögele, Maximilian Gerhardt, Thorsten Holz, Ali Abbasi
2023 A* conf
Systematic Assessment of Fuzzers using Mutation Analysis.
USENIX Security Symposium
Philipp Görz, Björn Mathis, Keno Hassler, Emre Güler, Thorsten Holz, Andreas Zeller, Rahul Gopinath
2023 J jnl
Systematically Finding Security Vulnerabilities in Black-Box Code Generation Models.
CoRR
Hossein Hajipour, Thorsten Holz, Lea Schönherr, Mario Fritz
2023 — conf
Venomave: Targeted Poisoning Against Speech Recognition.
SaTML
Hojjat Aghakhani, Lea Schönherr, Thorsten Eisenhofer, Dorothea Kolossa, Thorsten Holz, Christopher Kruegel, Giovanni Vigna
2022 J jnl
Exploring accidental triggers of smart speakers.
Comput. Speech Lang.
Lea Schönherr, Maximilian Golla, Thorsten Eisenhofer, Jan Wiele, Dorothea Kolossa, Thorsten Holz
2022 A* conf
Fuzzware: Using Precise MMIO Modeling for Effective Firmware Fuzzing.
USENIX Security Symposium
Tobias Scharnowski, Nils Bars, Moritz Schloegel, Eric Gustafson, Marius Muench, Giovanni Vigna, Christopher Kruegel, Thorsten Holz, Ali Abbasi
2022 J jnl
How to Compare Fuzzers.
CoRR
Philipp Görz, Björn Mathis, Keno Hassler, Emre Güler, Thorsten Holz, Andreas Zeller, Rahul Gopinath
2022 A* conf
JIT-Picking: Differential Fuzzing of JavaScript Engines.
CCS
Lukas Bernhard, Tobias Scharnowski, Moritz Schloegel, Tim Blazytko, Thorsten Holz
2022 A* conf
Loki: Hardening Code Obfuscation Against Automated Attacks.
USENIX Security Symposium
Moritz Schloegel, Tim Blazytko, Moritz Contag, Cornelius Aschermann, Julius Basler, Thorsten Holz, Ali Abbasi
2022 A conf
Nyx-net: network fuzzing with incremental snapshots.
EuroSys
Sergej Schumilo, Cornelius Aschermann, Andrea Jemmett, Ali Abbasi, Thorsten Holz
2022 J jnl
Privacy Rarely Considered: Exploring Considerations in the Adoption of Third-Party Services by Websites.
CoRR
Christine Utz, Sabrina Amft, Martin Degeling, Thorsten Holz, Sascha Fahl, Florian Schaub
2022 A* conf
Reproducibility and Replicability of Web Measurement Studies.
WWW
Nurullah Demir, Matteo Große-Kampmann, Tobias Urban, Christian Wressnegger, Thorsten Holz, Norbert Pohlmann
2022 A* conf
SGXFuzz: Efficiently Synthesizing Nested Structures for SGX Enclave Fuzzing.
USENIX Security Symposium
Tobias Cloosters, Johannes Willbold, Thorsten Holz, Lucas Davi
2022 J jnl
Selected Papers From the 2021 IEEE Symposium on Security and Privacy.
IEEE Secur. Priv.
Terry Benzel, Thorsten Holz
2022 J jnl
Towards the Detection of Diffusion Model Deepfakes.
CoRR
Jonas Ricker, Simon Damm, Thorsten Holz, Asja Fischer
2022 A conf
xTag: Mitigating Use-After-Free Vulnerabilities via Software-Based Pointer Tagging on Intel x86-64.
EuroS&P
Lukas Bernhard, Michael Rodler, Thorsten Holz, Lucas Davi
2022 J jnl
xTag: Mitigating Use-After-Free Vulnerabilities via Software-Based Pointer Tagging on Intel x86-64.
CoRR
Lukas Bernhard, Michael Rodler, Thorsten Holz, Lucas Davi
2021 — conf
5G SUCI-catchers: still catching them all?
WISEC
Merlin Chlosta, David Rupprecht, Christina Pöpper, Thorsten Holz
2021 — conf
CollabFuzz: A Framework for Collaborative Fuzzing.
EuroSec@EuroSys
Sebastian Österlund, Elia Geretto, Andrea Jemmett, Emre Güler, Philipp Görz, Thorsten Holz, Cristiano Giuffrida, Herbert Bos
2021 B conf
Digging Deeper: An Analysis of Domain Impersonation in the Lower DNS Hierarchy.
DIMVA
Florian Quinkert, Dennis Tatang, Thorsten Holz
2021 A* conf
Dompteur: Taming Audio Adversarial Examples.
USENIX Security Symposium
Thorsten Eisenhofer, Lea Schönherr, Joel Frank, Lars Speckemeier, Dorothea Kolossa, Thorsten Holz
2021 J jnl
Dompteur: Taming Audio Adversarial Examples.
CoRR
Thorsten Eisenhofer, Lea Schönherr, Joel Frank, Lars Speckemeier, Dorothea Kolossa, Thorsten Holz
2021 B conf
Extended Abstract: A First Large-Scale Analysis on Usage of MTA-STS.
DIMVA
Dennis Tatang, Robin Flume, Thorsten Holz
2021 — conf
Likes are not Likes A Crowdworking Platform Analysis.
ICWSM Workshops
Dennis Tatang, Philip Kreißel, Michael Sehring, Florian Quinkert, Martin Degeling, Thorsten Holz
2021 J jnl
Loki: Hardening Code Obfuscation Against Automated Attacks.
CoRR
Moritz Schloegel, Tim Blazytko, Moritz Contag, Cornelius Aschermann, Julius Basler, Thorsten Holz, Ali Abbasi
2021 J jnl
Nyx-Net: Network Fuzzing with Incremental Snapshots.
CoRR
Sergej Schumilo, Cornelius Aschermann, Andrea Jemmett, Ali Abbasi, Thorsten Holz
2021 A* conf
Nyx: Greybox Hypervisor Fuzzing using Fast Snapshots and Affine Types.
USENIX Security Symposium
Sergej Schumilo, Cornelius Aschermann, Ali Abbasi, Simon Wörner, Thorsten Holz
2021 — conf
On the challenges of automata reconstruction in LTE networks.
WISEC
Merlin Chlosta, David Rupprecht, Thorsten Holz
2021 B conf
Spotlight on Phishing: A Longitudinal Study on Phishing Awareness Trainings.
DIMVA
Florian Quinkert, Martin Degeling, Thorsten Holz
2021 A conf
The Evolution of DNS-based Email Authentication: Measuring Adoption and Finding Flaws.
RAID
Dennis Tatang, Florian Zettl, Thorsten Holz
2021 — conf
Towards Automating Code-Reuse Attacks Using Synthesized Gadget Chains.
ESORICS (1)
Moritz Schloegel, Tim Blazytko, Julius Basler, Fabian Hemmer, Thorsten Holz
2021 J jnl
[RE] CNN-generated images are surprisingly easy to spot...for now.
CoRR
Joel Frank, Thorsten Holz
2020 A* conf
AURORA: Statistical Crash Analysis for Automated Root Cause Explanation.
USENIX Security Symposium
Tim Blazytko, Moritz Schlögel, Cornelius Aschermann, Ali Abbasi, Joel Frank, Simon Wörner, Thorsten Holz
2020 J jnl
An Exploratory Analysis of Microcode as a Building Block for System Defenses.
CoRR
Benjamin Kollenda, Philipp Koppe, Marc Fyrbiak, Christian Kison, Christof Paar, Thorsten Holz
2020 J jnl
Automated Multi-Architectural Discovery of CFI-Resistant Code Gadgets.
CoRR
Patrick Wollgast, Robert Gawlik, Behrad Garmany, Benjamin Kollenda, Thorsten Holz
2020 A conf
Be the Phisher - Understanding Users' Perception of Malicious Domains.
AsiaCCS
Florian Quinkert, Martin Degeling, Jim Blythe, Thorsten Holz
2020 A* conf
Beyond the Front Page: Measuring Third Party Dynamics in the Field.
WWW
Tobias Urban, Martin Degeling, Thorsten Holz, Norbert Pohlmann
2020 J jnl
Beyond the Front Page: Measuring Third Party Dynamics in the Field.
CoRR
Tobias Urban, Martin Degeling, Thorsten Holz, Norbert Pohlmann
2020 J jnl
Breaking and Fixing Destructive Code Read Defenses.
CoRR
Jannik Pewny, Philipp Koppe, Lucas Davi, Thorsten Holz
2020 A conf
CORSICA: Cross-Origin Web Service Identification.
AsiaCCS
Christian Dresen, Fabian Ising, Damian Poddebniak, Tobias Kappert, Thorsten Holz, Sebastian Schinzel
2020 J jnl
CORSICA: Cross-Origin Web Service Identification.
CoRR
Christian Dresen, Fabian Ising, Damian Poddebniak, Tobias Kappert, Thorsten Holz, Sebastian Schinzel
2020 A* conf
Call Me Maybe: Eavesdropping Encrypted LTE Calls With ReVoLTE.
USENIX Security Symposium
David Rupprecht, Katharina Kohls, Thorsten Holz, Christina Pöpper
2020 J jnl
Challenges in Designing Exploit Mitigations for Deeply Embedded Systems.
CoRR
Ali Abbasi, Jos Wetzels, Thorsten Holz, Sandro Etalle
2020 A conf
Cupid : Automatic Fuzzer Selection for Collaborative Fuzzing.
ACSAC
Emre Güler, Philipp Görz, Elia Geretto, Andrea Jemmett, Sebastian Österlund, Herbert Bos, Cristiano Giuffrida, Thorsten Holz
2020 J jnl
Detile: Fine-Grained Information Leak Detection in Script Engines.
CoRR
Robert Gawlik, Philipp Koppe, Benjamin Kollenda, Andre Pawlowski, Behrad Garmany, Thorsten Holz
2020 A* conf
ETHBMC: A Bounded Model Checker for Smart Contracts.
USENIX Security Symposium
Joel Frank, Cornelius Aschermann, Thorsten Holz
2020 J jnl
EvilCoder: Automated Bug Insertion.
CoRR
Jannik Pewny, Thorsten Holz
2020 A* conf
HYPER-CUBE: High-Dimensional Hypervisor Fuzzing.
NDSS
Sergej Schumilo, Cornelius Aschermann, Ali Abbasi, Simon Wörner, Thorsten Holz
2020 A* conf
IMP4GT: IMPersonation Attacks in 4G NeTworks.
NDSS
David Rupprecht, Katharina Kohls, Thorsten Holz, Christina Pöpper
2020 A* conf
Ijon: Exploring Deep State Spaces via Fuzzing.
SP
Cornelius Aschermann, Sergej Schumilo, Ali Abbasi, Thorsten Holz
2020 A conf
Imperio: Robust Over-the-Air Adversarial Examples for Automatic Speech Recognition Systems.
ACSAC
Lea Schönherr, Thorsten Eisenhofer, Steffen Zeiler, Thorsten Holz, Dorothea Kolossa
2020 A* conf
Leveraging Frequency Analysis for Deep Fake Image Recognition.
ICML
Joel Frank, Thorsten Eisenhofer, Lea Schönherr, Asja Fischer, Dorothea Kolossa, Thorsten Holz
2020 J jnl
Leveraging Frequency Analysis for Deep Fake Image Recognition.
CoRR
Joel Frank, Thorsten Eisenhofer, Lea Schönherr, Asja Fischer, Dorothea Kolossa, Thorsten Holz
2020 A conf
Measuring the Impact of the GDPR on Data Sharing in Ad Networks.
AsiaCCS
Tobias Urban, Dennis Tatang, Martin Degeling, Thorsten Holz, Norbert Pohlmann
2020 A* conf
On Using Application-Layer Middlebox Protocols for Peeking Behind NAT Gateways.
NDSS
Teemu Rytilahti, Thorsten Holz
2020 — conf
Plenty of Phish in the Sea: Analyzing Potential Pre-attack Surfaces.
ESORICS (2)
Tobias Urban, Matteo Große-Kampmann, Dennis Tatang, Thorsten Holz, Norbert Pohlmann
2020 J jnl
Static Detection of Uninitialized Stack Variables in Binary Code.
CoRR
Behrad Garmany, Martin Stoffel, Robert Gawlik, Thorsten Holz
2020 J jnl
Steroids for DOPed Applications: A Compiler for Automated Data-Oriented Programming.
CoRR
Jannik Pewny, Philipp Koppe, Thorsten Holz
2020 J jnl
Unacceptable, where is my privacy? Exploring Accidental Triggers of Smart Speakers.
CoRR
Lea Schönherr, Maximilian Golla, Thorsten Eisenhofer, Jan Wiele, Dorothea Kolossa, Thorsten Holz
2020 J jnl
VENOMAVE: Clean-Label Poisoning Against Speech Recognition.
CoRR
Hojjat Aghakhani, Thorsten Eisenhofer, Lea Schönherr, Dorothea Kolossa, Thorsten Holz, Christopher Kruegel, Giovanni Vigna
2020 J jnl
VPS: Excavating High-Level C++ Constructs from Low-Level Binaries to Protect Dynamic Dispatching.
CoRR
Andre Pawlowski, Victor van der Veen, Dennis Andriesse, Erik van der Kouwe, Thorsten Holz, Cristiano Giuffrida, Herbert Bos
2019 A conf
"
ACSAC
Tobias Urban, Martin Degeling, Thorsten Holz, Norbert Pohlmann
2019 A* conf
(Un)informed Consent: Studying GDPR Consent Notices in the Field.
CCS
Christine Utz, Martin Degeling, Sascha Fahl, Florian Schaub, Thorsten Holz
2019 J jnl
(Un)informed Consent: Studying GDPR Consent Notices in the Field.
CoRR
Christine Utz, Martin Degeling, Sascha Fahl, Florian Schaub, Thorsten Holz
2019 J jnl
A Study of Newly Observed Hostnames and DNS Tunneling in the Wild.
CoRR
Dennis Tatang, Florian Quinkert, Nico Dolecki, Thorsten Holz
2019 — conf
A Study on Subject Data Access in Online Advertising After the GDPR.
DPM/CBT@ESORICS
Tobias Urban, Dennis Tatang, Martin Degeling, Thorsten Holz, Norbert Pohlmann
2019 A* conf
Adversarial Attacks Against Automatic Speech Recognition Systems via Psychoacoustic Hiding.
NDSS
Lea Schönherr, Katharina Kohls, Steffen Zeiler, Thorsten Holz, Dorothea Kolossa
2019 J jnl
Analyzing leakage of personal information by malware.
J. Comput. Secur.
Tobias Urban, Dennis Tatang, Thorsten Holz, Norbert Pohlmann
2019 A* conf
AntiFuzz: Impeding Fuzzing Audits of Binary Executables.
USENIX Security Symposium
Emre Güler, Cornelius Aschermann, Ali Abbasi, Thorsten Holz
2019 — conf
Below the Radar: Spotting DNS Tunnels in Newly Observed Hostnames in the Wild.
eCrime
Dennis Tatang, Florian Quinkert, Thorsten Holz
2019 A* conf
Breaking LTE on Layer Two.
IEEE Symposium on Security and Privacy
David Rupprecht, Katharina Kohls, Thorsten Holz, Christina Pöpper
2019 A conf
Challenges in Designing Exploit Mitigations for Deeply Embedded Systems.
EuroS&P
Ali Abbasi, Jos Wetzels, Thorsten Holz, Sandro Etalle
2019 J jnl
Die DSGVO als internationales Vorbild?
Datenschutz und Datensicherheit
Christine Utz, Stephan Koloßa, Thorsten Holz, Pierre Thielbörger
2019 — conf
GDPiRated - Stealing Personal Information On- and Offline.
ESORICS (2)
Matteo Cagnazzo, Thorsten Holz, Norbert Pohlmann
2019 A* conf
GRIMOIRE: Synthesizing Structure while Fuzzing.
USENIX Security Symposium
Tim Blazytko, Cornelius Aschermann, Moritz Schlögel, Ali Abbasi, Sergej Schumilo, Simon Wörner, Thorsten Holz
2019 — conf
It's Not what It Looks Like: Measuring Attacks and Defensive Registrations of Homograph Domains.
CNS
Florian Quinkert, Tobias Lauinger, William K. Robertson, Engin Kirda, Thorsten Holz
2019 — conf
LTE security disabled: misconfiguration in commercial networks.
WiSec
Merlin Chlosta, David Rupprecht, Thorsten Holz, Christina Pöpper
2019 B conf
Large-Scale Analysis of Infrastructure-Leaking DNS Servers.
DIMVA
Dennis Tatang, Carl Richard Theodor Schneider, Thorsten Holz
2019 — conf
Lost traffic encryption: fingerprinting LTE/4G traffic on layer two.
WiSec
Katharina Kohls, David Rupprecht, Thorsten Holz, Christina Pöpper
2019 A* conf
NAUTILUS: Fishing for Deep Bugs with Grammars.
NDSS
Cornelius Aschermann, Tommaso Frassetto, Thorsten Holz, Patrick Jauernig, Ahmad-Reza Sadeghi, Daniel Teuchert
2019 A* conf
On the Challenges of Geographical Avoidance for Tor.
NDSS
Katharina Kohls, Kai Jansen, David Rupprecht, Thorsten Holz, Christina Pöpper
2019 — ed.
Proceedings of the ACM Workshop on Cyber-Physical Systems Security & Privacy, CPS-SPC@CCS 2019, London, UK, November 11, 2019.
CPS-SPC@CCS
Lorenzo Cavallaro, Johannes Kinder, Thorsten Holz
2019 A* conf
REDQUEEN: Fuzzing with Input-to-State Correspondence.
NDSS
Cornelius Aschermann, Sergej Schumilo, Tim Blazytko, Robert Gawlik, Thorsten Holz
2019 J jnl
Reverse Engineering x86 Processor Microcode.
CoRR
Philipp Koppe, Benjamin Kollenda, Marc Fyrbiak, Christian Kison, Robert Gawlik, Christof Paar, Thorsten Holz
2019 J jnl
Robust Over-the-Air Adversarial Examples Against Automatic Speech Recognition Systems.
CoRR
Lea Schönherr, Steffen Zeiler, Thorsten Holz, Dorothea Kolossa
2019 A conf
STEROIDS for DOPed Applications: A Compiler for Automated Data-Oriented Programming.
EuroS&P
Jannik Pewny, Philipp Koppe, Thorsten Holz
2019 — conf
Static Detection of Uninitialized Stack Variables in Binary Code.
ESORICS (2)
Behrad Garmany, Martin Stoffel, Robert Gawlik, Thorsten Holz
2019 — conf
Study of DNS Rebinding Attacks on Smart Home Devices.
CyberICPS/SECPRE/SPOSE/ADIoT@ESORICS
Dennis Tatang, Tim Suurland, Thorsten Holz
2019 — conf
Sustainable Security & Safety: Challenges and Opportunities.
CERTS
Andrew Paverd, Marcus Völp, Ferdinand Brasser, Matthias Schunter, N. Asokan, Ahmad-Reza Sadeghi, Paulo Jorge Esteves Veríssimo, Andreas Steininger, Thorsten Holz
2019 — conf
Towards Automated Application-Specific Software Stacks.
ESORICS (2)
Nicolai Davidsson, Andre Pawlowski, Thorsten Holz
2019 J jnl
Towards Automated Application-Specific Software Stacks.
CoRR
Nicolai Davidsson, Andre Pawlowski, Thorsten Holz
2019 A conf
VPS: excavating high-level C++ constructs from low-level binaries to protect dynamic dispatching.
ACSAC
Andre Pawlowski, Victor van der Veen, Dennis Andriesse, Erik van der Kouwe, Thorsten Holz, Cristiano Giuffrida, Herbert Bos
2019 J jnl
We Value Your Privacy ... Now Take Some Cookies - Measuring the GDPR's Impact on Web Privacy.
Inform. Spektrum
Martin Degeling, Christine Utz, Christopher Lentzsch, Henry Hosseini, Florian Schaub, Thorsten Holz
2019 A* conf
We Value Your Privacy ... Now Take Some Cookies: Measuring the GDPR's Impact on Web Privacy.
NDSS
Martin Degeling, Christine Utz, Christopher Lentzsch, Henry Hosseini, Florian Schaub, Thorsten Holz
2018 J jnl
Adversarial Attacks Against Automatic Speech Recognition Systems via Psychoacoustic Hiding.
CoRR
Lea Schönherr, Katharina Kohls, Steffen Zeiler, Thorsten Holz, Dorothea Kolossa
2018 — conf
An Empirical Study on Online Price Differentiation.
CODASPY
Thomas Hupperich, Dennis Tatang, Nicolai Wilkop, Thorsten Holz
2018 A* conf
An Exploratory Analysis of Microcode as a Building Block for System Defenses.
CCS
Benjamin Kollenda, Philipp Koppe, Marc Fyrbiak, Christian Kison, Christof Paar, Thorsten Holz
2018 — ch.
Attacking dynamic code.
The Continuing Arms Race
Felix Schuster, Thorsten Holz
2018 A conf
Masters of Time: An Overview of the NTP Ecosystem.
EuroS&P
Teemu Rytilahti, Dennis Tatang, Janosch Kopper, Thorsten Holz
2018 J jnl
On Security Research Towards Future Mobile Network Generations.
IEEE Commun. Surv. Tutorials
David Rupprecht, Adrian Dabrowski, Thorsten Holz, Edgar R. Weippl, Christina Pöpper
2018 B conf
On the Weaknesses of Function Table Randomization.
DIMVA
Moritz Contag, Robert Gawlik, Andre Pawlowski, Thorsten Holz
2018 A conf
Position-Independent Code Reuse: On the Effectiveness of ASLR in the Absence of Information Disclosure.
EuroS&P
Enes Göktas, Benjamin Kollenda, Philipp Koppe, Erik Bosman, Georgios Portokalidis, Thorsten Holz, Herbert Bos, Cristiano Giuffrida
2018 — conf
Preventing Malicious SDN Applications From Hiding Adverse Network Manipulations.
SecSoN@SIGCOMM
Christian Röpke, Thorsten Holz
2018 J jnl
RAPTOR: Ransomware Attack PredicTOR.
CoRR
Florian Quinkert, Thorsten Holz, K. S. M. Tozammel Hossain, Emilio Ferrara, Kristina Lerman
2018 A ed.
Research in Attacks, Intrusions, and Defenses - 21st International Symposium, RAID 2018, Heraklion, Crete, Greece, September 10-12, 2018, Proceedings
RAID
Michael D. Bailey, Thorsten Holz, Manolis Stamatogiannakis, Sotiris Ioannidis
2018 — conf
SoK: Make JIT-Spray Great Again.
WOOT @ USENIX Security Symposium
Robert Gawlik, Thorsten Holz
2018 J jnl
The Unwanted Sharing Economy: An Analysis of Cookie Syncing and User Transparency under GDPR.
CoRR
Tobias Urban, Dennis Tatang, Martin Degeling, Thorsten Holz, Norbert Pohlmann
2018 — conf
Threat modeling for mobile health systems.
WCNC Workshops
Matteo Cagnazzo, Markus Hertlein, Thorsten Holz, Norbert Pohlmann
2018 A conf
Towards Automated Generation of Exploitation Primitives for Web Browsers.
ACSAC
Behrad Garmany, Martin Stoffel, Robert Gawlik, Philipp Koppe, Tim Blazytko, Thorsten Holz
2018 — conf
Towards Understanding Privacy Implications of Adware and Potentially Unwanted Programs.
ESORICS (1)
Tobias Urban, Dennis Tatang, Thorsten Holz, Norbert Pohlmann
2018 J jnl
We Value Your Privacy ... Now Take Some Cookies: Measuring the GDPR's Impact on Web Privacy.
CoRR
Martin Degeling, Christine Utz, Christopher Lentzsch, Henry Hosseini, Florian Schaub, Thorsten Holz
2017 J jnl
An Empirical Study on Price Differentiation Based on System Fingerprints.
CoRR
Thomas Hupperich, Dennis Tatang, Nicolai Wilkop, Thorsten Holz
2017 A conf
Breaking and Fixing Destructive Code Read Defenses.
ACSAC
Jannik Pewny, Philipp Koppe, Lucas Davi, Thorsten Holz
2017 J jnl
Cross-architecture bug search in binary executables.
it Inf. Technol.
Jannik Pewny, Behrad Garmany, Robert Gawlik, Christian Rossow, Thorsten Holz
2017 A conf
ECFI: Asynchronous Control Flow Integrity for Programmable Logic Controllers.
ACSAC
Ali Abbasi, Thorsten Holz, Emmanuele Zambon, Sandro Etalle
2017 A* conf
How They Did It: An Analysis of Emission Defeat Devices in Modern Automobiles.
IEEE Symposium on Security and Privacy
Moritz Contag, Vector Guo Li, Andre Pawlowski, Felix Domke, Kirill Levchenko, Thorsten Holz, Stefan Savage
2017 A* conf
MARX: Uncovering Class Hierarchies in C++ Programs.
NDSS
Andre Pawlowski, Moritz Contag, Victor van der Veen, Chris Ouwehand, Thorsten Holz, Herbert Bos, Elias Athanasopoulos, Cristiano Giuffrida
2017 J jnl
May the Force Be with You: The Future of Force-Sensitive Authentication.
IEEE Internet Comput.
Katharina Krombholz, Thomas Hupperich, Thorsten Holz
2017 J jnl
On Security Research towards Future Mobile Network Generations.
CoRR
David Rupprecht, Adrian Dabrowski, Thorsten Holz, Edgar R. Weippl, Christina Pöpper
2017 A* conf
Reverse Engineering x86 Processor Microcode.
USENIX Security Symposium
Philipp Koppe, Benjamin Kollenda, Marc Fyrbiak, Christian Kison, Robert Gawlik, Christof Paar, Thorsten Holz
2017 — conf
SDN-Guard: Protecting SDN controllers against SDN rootkits.
NFV-SDN
Dennis Tatang, Florian Quinkert, Joel Frank, Christian Röpke, Thorsten Holz
2017 A* conf
Syntia: Synthesizing the Semantics of Obfuscated Code.
USENIX Security Symposium
Tim Blazytko, Moritz Contag, Cornelius Aschermann, Thorsten Holz
2017 J jnl
Toward Improved Audio CAPTCHAs Based on Auditory Perception and Language Understanding.
ACM Trans. Priv. Secur.
Hendrik Meutzner, Santosh Gupta, Viet-Hung Nguyen, Thorsten Holz, Dorothea Kolossa
2017 A conf
Towards Automated Discovery of Crash-Resistant Primitives in Binary Executables.
DSN
Benjamin Kollenda, Enes Göktas, Tim Blazytko, Philipp Koppe, Robert Gawlik, Radhesh Krishnan Konoth, Cristiano Giuffrida, Herbert Bos, Thorsten Holz
2017 A* conf
kAFL: Hardware-Assisted Feedback Fuzzing for OS Kernels.
USENIX Security Symposium
Sergej Schumilo, Cornelius Aschermann, Robert Gawlik, Sebastian Schinzel, Thorsten Holz
2016 A* ed.
25th USENIX Security Symposium, USENIX Security 16, Austin, TX, USA, August 10-12, 2016.
USENIX Security Symposium
Thorsten Holz, Stefan Savage
2016 A* conf
A Tough Call: Mitigating Advanced Code-Reuse Attacks at the Binary Level.
IEEE Symposium on Security and Privacy
Victor van der Veen, Enes Göktas, Moritz Contag, Andre Pawlowski, Xi Chen, Sanjay Rawat, Herbert Bos, Thorsten Holz, Elias Athanasopoulos, Cristiano Giuffrida
2016 — conf
Automated Multi-architectural Discovery of CFI-Resistant Code Gadgets.
ESORICS (1)
Patrick Wollgast, Robert Gawlik, Behrad Garmany, Benjamin Kollenda, Thorsten Holz
2016 B conf
Detile: Fine-Grained Information Leak Detection in Script Engines.
DIMVA
Robert Gawlik, Philipp Koppe, Benjamin Kollenda, Andre Pawlowski, Behrad Garmany, Thorsten Holz
2016 A* conf
Enabling Client-Side Crash-Resistance to Overcome Diversification and Information Hiding.
NDSS
Robert Gawlik, Benjamin Kollenda, Philipp Koppe, Behrad Garmany, Thorsten Holz
2016 — conf
Evaluating Analysis Tools for Android Apps: Status Quo and Robustness Against Obfuscation.
CODASPY
Johannes Hoffmann, Teemu Rytilahti, Davide Maiorca, Marcel Winandy, Giorgio Giacinto, Thorsten Holz
2016 A conf
EvilCoder: automated bug insertion.
ACSAC
Jannik Pewny, Thorsten Holz
2016 A conf
How Secure is TextSecure?
EuroS&P
Tilman Frosch, Christian Mainka, Christoph Bader, Florian Bergsma, Jörg Schwenk, Thorsten Holz
2016 B conf
Leveraging Sensor Fingerprinting for Mobile Device Authentication.
DIMVA
Thomas Hupperich, Henry Hosseini, Thorsten Holz
2016 A* conf
No Honor Among Thieves: A Large-Scale Analysis of Malicious Web Shells.
WWW
Oleksii Starov, Johannes Dahse, Syed Sharique Ahmad, Thorsten Holz, Nick Nikiforakis
2016 J jnl
On network operating system security.
Int. J. Netw. Manag.
Christian Röpke, Thorsten Holz
2016 A conf
On the Feasibility of TTL-Based Filtering for DRDoS Mitigation.
RAID
Michael Backes, Thorsten Holz, Christian Rossow, Teemu Rytilahti, Milivoj Simeonovski, Ben Stock
2016 B conf
Probfuscation: An Obfuscation Approach Using Probabilistic Control Flows.
DIMVA
Andre Pawlowski, Moritz Contag, Thorsten Holz
2016 — conf
Sensor Captchas: On the Usability of Instrumenting Hardware Sensors to Prove Liveliness.
TRUST
Thomas Hupperich, Katharina Krombholz, Thorsten Holz
2016 A conf
SkypeLine: Robust Hidden Data Transmission for VoIP.
AsiaCCS
Katharina Kohls, Thorsten Holz, Dorothea Kolossa, Christina Pöpper
2016 — conf
Subversive-C: Abusing and Protecting Dynamic Message Dispatch.
USENIX ATC
Julian Lettner, Benjamin Kollenda, Andrei Homescu, Per Larsen, Felix Schuster, Lucas Davi, Ahmad-Reza Sadeghi, Thorsten Holz, Michael Franz
2016 A conf
Use the Force: Evaluating Force-Sensitive Authentication for Mobile Devices.
SOUPS
Katharina Krombholz, Thomas Hupperich, Thorsten Holz
2015 A* ed.
24th USENIX Security Symposium, USENIX Security 15, Washington, D.C., USA, August 12-14, 2015.
USENIX Security Symposium
Jaeyeon Jung, Thorsten Holz
2015 A* conf
Counterfeit Object-oriented Programming: On the Difficulty of Preventing Code Reuse Attacks in C++ Applications.
IEEE Symposium on Security and Privacy
Felix Schuster, Thomas Tendyck, Christopher Liebchen, Lucas Davi, Ahmad-Reza Sadeghi, Thorsten Holz
2015 A* conf
Cross-Architecture Bug Search in Binary Executables.
IEEE Symposium on Security and Privacy
Jannik Pewny, Behrad Garmany, Robert Gawlik, Christian Rossow, Thorsten Holz
2015 A conf
Experience report: an empirical study of PHP security mechanism usage.
ISSTA
Johannes Dahse, Thorsten Holz
2015 A conf
Going Wild: Large-Scale Classification of Open DNS Resolvers.
Internet Measurement Conference
Marc Kührer, Thomas Hupperich, Jonas Bushart, Christian Rossow, Thorsten Holz
2015 A* conf
It's a TRaP: Table Randomization and Protection against Function-Reuse Attacks.
CCS
Stephen J. Crane, Stijn Volckaert, Felix Schuster, Christopher Liebchen, Per Larsen, Lucas Davi, Ahmad-Reza Sadeghi, Thorsten Holz, Bjorn De Sutter, Michael Franz
2015 — conf
Multi-layer Access Control for SDN-Based Telco Clouds.
NordSec
Bernd Jäger, Christian Röpke, Iris Adam, Thorsten Holz
2015 A conf
On the Robustness of Mobile Device Fingerprinting: Can Mobile Users Escape Modern Web-Tracking Mechanisms?
ACSAC
Thomas Hupperich, Davide Maiorca, Marc Kührer, Thorsten Holz, Giorgio Giacinto
2015 — conf
Retaining control over SDN network services.
NetSys
Christian Röpke, Thorsten Holz
2015 C conf
Revealing the relationship network behind link spam.
PST
Apostolis Zarras, Antonis Papadogiannakis, Sotiris Ioannidis, Thorsten Holz
2015 A conf
SDN Rootkits: Subverting Network Operating Systems of Software-Defined Networks.
RAID
Christian Röpke, Thorsten Holz
2015 A conf
Security Analysis of PHP Bytecode Protection Mechanisms.
RAID
Dario Weißer, Johannes Dahse, Thorsten Holz
2015 — conf
Tactile One-Time Pad: Leakage-Resilient Authentication for Smartphones.
Financial Cryptography
Sebastian Uellenbeck, Thomas Hupperich, Christopher Wolf, Thorsten Holz
2014 C conf
Automated generation of models for fast and precise detection of HTTP-based malware.
PST
Apostolis Zarras, Antonis Papadogiannakis, Robert Gawlik, Thorsten Holz
2014 C conf
CloudSylla: Detecting Suspicious System Calls in the Cloud.
SSS
Marc Kührer, Johannes Hoffmann, Thorsten Holz
2014 A* conf
Code Reuse Attacks in PHP: Automated POP Chain Generation.
CCS
Johannes Dahse, Nikolai Krein, Thorsten Holz
2014 A* conf
Dynamic Hooks: Hiding Control Flow Changes within Non-Control Data.
USENIX Security Symposium
Sebastian Vogl, Robert Gawlik, Behrad Garmany, Thomas Kittel, Jonas Pfoh, Claudia Eckert, Thorsten Holz
2014 A conf
Evaluating the Effectiveness of Current Anti-ROP Defenses.
RAID
Felix Schuster, Thomas Tendyck, Jannik Pewny, Andreas Maaß, Martin Steegmanns, Moritz Contag, Thorsten Holz
2014 A* conf
Exit from Hell? Reducing the Impact of Amplification DDoS Attacks.
USENIX Security Symposium
Marc Kührer, Thomas Hupperich, Christian Rossow, Thorsten Holz
2014 — conf
GraphNeighbors: Hampering Shoulder-Surfing Attacks on Smartphones.
Sicherheit
Irfan Altiok, Sebastian Uellenbeck, Thorsten Holz
2014 — conf
Hell of a Handshake: Abusing TCP for Reflective Amplification DDoS Attacks.
WOOT
Marc Kührer, Thomas Hupperich, Christian Rossow, Thorsten Holz
2014 J jnl
How Secure is TextSecure?
IACR Cryptol. ePrint Arch.
Tilman Frosch, Christian Mainka, Christoph Bader, Florian Bergsma, Jörg Schwenk, Thorsten Holz
2014 A conf
Leveraging semantic signatures for bug search in binary programs.
ACSAC
Jannik Pewny, Felix Schuster, Lukas Bernhard, Thorsten Holz, Christian Rossow
2014 A conf
Paint It Black: Evaluating the Effectiveness of Malware Blacklists.
RAID
Marc Kührer, Christian Rossow, Thorsten Holz
2014 J jnl
Scriptless attacks: Stealing more pie without touching the sill.
J. Comput. Secur.
Mario Heiderich, Marcus Niemietz, Felix Schuster, Thorsten Holz, Jörg Schwenk
2014 A* conf
Simulation of Built-in PHP Features for Precise Static Code Analysis.
NDSS
Johannes Dahse, Thorsten Holz
2014 A* conf
Static Detection of Second-Order Vulnerabilities in Web Applications.
USENIX Security Symposium
Johannes Dahse, Thorsten Holz
2014 A conf
The Dark Alleys of Madison Avenue: Understanding Malicious Advertisements.
Internet Measurement Conference
Apostolis Zarras, Alexandros Kapravelos, Gianluca Stringhini, Thorsten Holz, Christopher Kruegel, Giovanni Vigna
2014 A conf
Towards automated integrity protection of C++ virtual function tables in binary programs.
ACSAC
Robert Gawlik, Thorsten Holz
2014 — ed.
Trust and Trustworthy Computing - 7th International Conference, TRUST 2014, Heraklion, Crete, Greece, June 30 - July 2, 2014. Proceedings
TRUST
Thorsten Holz, Sotiris Ioannidis
2014 A conf
Using automatic speech recognition for attacking acoustic CAPTCHAs: the trade-off between usability and security.
ACSAC
Hendrik Meutzner, Viet-Hung Nguyen, Thorsten Holz, Dorothea Kolossa
2014 A* conf
You Can Run but You Can't Read: Preventing Disclosure Exploits in Executable Code.
CCS
Michael Backes, Thorsten Holz, Benjamin Kollenda, Philipp Koppe, Stefan Nürnberger, Jannik Pewny
2013 J jnl
A Security Layer for Smartphone-to-Vehicle Communication Over Bluetooth.
IEEE Embed. Syst. Lett.
Andrea Dardanelli, Federico Maggi, Mara Tanelli, Stefano Zanero, Sergio M. Savaresi, R. Kochanek, Thorsten Holz
2013 J jnl
An experimental security analysis of two satphone standards.
ACM Trans. Inf. Syst. Secur.
Benedikt Driessen, Ralf Hund, Carsten Willems, Christof Paar, Thorsten Holz
2013 A conf
Control-flow restrictor: compiler-based CFI for iOS.
ACSAC
Jannik Pewny, Thorsten Holz
2013 A conf
Mobile Malware Detection Based on Energy Fingerprints - A Dead End?
RAID
Johannes Hoffmann, Stephan Neumann, Thorsten Holz
2013 A conf
PSiOS: bring your own privacy & security to iOS devices.
AsiaCCS
Tim Werthmann, Ralf Hund, Lucas Davi, Ahmad-Reza Sadeghi, Thorsten Holz
2013 A* conf
Practical Timing Side Channel Attacks Against Kernel Space ASLR.
NDSS
Ralf Hund, Carsten Willems, Thorsten Holz
2013 A* conf
Practical Timing Side Channel Attacks against Kernel Space ASLR.
IEEE Symposium on Security and Privacy
Ralf Hund, Carsten Willems, Thorsten Holz
2013 B conf
Preventing Backdoors in Server Applications with a Separated Software Architecture - (Short Paper).
DIMVA
Felix Schuster, Stefan Rüster, Thorsten Holz
2013 A* conf
Quantifying the security of graphical passwords: the case of android unlock patterns.
CCS
Sebastian Uellenbeck, Markus Dürmuth, Christopher Wolf, Thorsten Holz
2013 Misc conf
Slicing droids: program slicing for smali code.
SAC
Johannes Hoffmann, Martin Ussath, Thorsten Holz, Michael Spreitzenbarth
2013 A* conf
Towards reducing the attack surface of software backdoors.
CCS
Felix Schuster, Thorsten Holz
2013 A conf
k-subscription: privacy-preserving microblogging browsing through obfuscation.
ACSAC
Panagiotis Papadopoulos, Antonis Papadogiannakis, Michalis Polychronakis, Apostolis Zarras, Thorsten Holz, Evangelos P. Markatos
2012 J jnl
An Empirical Analysis of Malware Blacklists.
Prax. Inf.verarb. Kommun.
Marc Kührer, Thorsten Holz
2012 A* conf
B@bel: Leveraging Email Delivery for Spam Mitigation.
USENIX Security Symposium
Gianluca Stringhini, Manuel Egele, Apostolis Zarras, Thorsten Holz, Christopher Kruegel, Giovanni Vigna
2012 A* conf
Don't Trust Satellite Phones: A Security Analysis of Two Satphone Standards.
IEEE Symposium on Security and Privacy
Benedikt Driessen, Ralf Hund, Carsten Willems, Christof Paar, Thorsten Holz
2012 A conf
Down to the bare metal: using processor features for binary analysis.
ACSAC
Carsten Willems, Ralf Hund, Andreas Fobian, Dennis Felsch, Thorsten Holz, Amit Vasudevan
2012 A* conf
MoCFI: A Framework to Mitigate Control-Flow Attacks on Smartphones.
NDSS
Lucas Davi, Alexandra Dmitrienko, Manuel Egele, Thomas Fischer, Thorsten Holz, Ralf Hund, Stefan Nürnberger, Ahmad-Reza Sadeghi
2012 A* conf
Scriptless attacks: stealing the pie without touching the sill.
CCS
Mario Heiderich, Marcus Niemietz, Felix Schuster, Thorsten Holz, Jörg Schwenk
2012 B conf
SmartProxy: Secure Smartphone-Assisted Login on Compromised Machines.
DIMVA
Johannes Hoffmann, Sebastian Uellenbeck, Thorsten Holz
2012 — conf
Tracking DDoS Attacks: Insights into the Business of Disrupting the Web.
LEET
Armin Büscher, Thorsten Holz
2012 A conf
Using memory management to detect and extract illegitimate code for malware analysis.
ACSAC
Carsten Willems, Felix C. Freiling, Thorsten Holz
2011 A conf
Automated Identification of Cryptographic Primitives in Binary Programs.
RAID
Felix Gröbert, Carsten Willems, Thorsten Holz
2011 J jnl
Automatic analysis of malware behavior using machine learning.
J. Comput. Secur.
Konrad Rieck, Philipp Trinius, Carsten Willems, Thorsten Holz
2011 A* conf
BOTMAGNIFIER: Locating Spambots on the Internet.
USENIX Security Symposium
Gianluca Stringhini, Thorsten Holz, Brett Stone-Gross, Christopher Kruegel, Giovanni Vigna
2011 A* conf
Crouching tiger - hidden payload: security risks of scalable vectors graphics.
CCS
Mario Heiderich, Tilman Frosch, Meiko Jensen, Thorsten Holz
2011 J jnl
Das Internet-Malware-Analyse-System (InMAS) - Ein System zur großflächigen Sammlung und Analyse von Schadsoftware im Internet.
Datenschutz und Datensicherheit
Markus Engelberth, Felix C. Freiling, Jan Göbel, Christian Gorecki, Thorsten Holz, Ralf Hund, Philipp Trinius, Carsten Willems
2011 B ed.
Detection of Intrusions and Malware, and Vulnerability Assessment - 8th International Conference; DIMVA 2011, Amsterdam, The Netherlands, July 7-8, 2011. Proceedings
DIMVA
Thorsten Holz, Herbert Bos
2011 A conf
IceShield: Detection and Mitigation of Malicious Websites with a Frozen DOM.
RAID
Mario Heiderich, Tilman Frosch, Thorsten Holz
2011 A* conf
JACKSTRAWS: Picking Command and Control Connections from Bot Traffic.
USENIX Security Symposium
Grégoire Jacob, Ralf Hund, Christopher Kruegel, Thorsten Holz
2011 A* conf
Mobile Security Catching Up? Revealing the Nuts and Bolts of the Security of Mobile Devices.
IEEE Symposium on Security and Privacy
Michael Becher, Felix C. Freiling, Johannes Hoffmann, Thorsten Holz, Sebastian Uellenbeck, Christopher Wolf
2011 A* conf
Poster: control-flow integrity for smartphones.
CCS
Lucas Davi, Alexandra Dmitrienko, Manuel Egele, Thomas Fischer, Thorsten Holz, Ralf Hund, Stefan Nürnberger, Ahmad-Reza Sadeghi
2011 — ed.
Proceedings of the First Workshop on Building Analysis Datasets and Gathering Experience Returns for Security, BADGERS@EuroSys 2011, Salzburg, Austria, April 10, 2011
BADGERS@EuroSys
Engin Kirda, Thorsten Holz
2011 — conf
Systems Security Research at Ruhr-University Bochum.
SysSec@DIMVA
Thorsten Holz
2011 — conf
The Underground Economy of Spam: A Botmaster's Perspective of Coordinating Large-Scale Spam Campaigns.
LEET
Brett Stone-Gross, Thorsten Holz, Gianluca Stringhini, Giovanni Vigna
2011 C conf
TrumanBox: Improving Dynamic Malware Analysis by Emulating the Internet.
SSS
Christian Gorecki, Felix C. Freiling, Marc Kührer, Thorsten Holz
2010 — conf
A Malware Instruction Set for Behavior-Based Analysis.
Sicherheit
Philipp Trinius, Carsten Willems, Thorsten Holz, Konrad Rieck
2010 A* conf
A Practical Attack to De-anonymize Social Network Users.
IEEE Symposium on Security and Privacy
Gilbert Wondracek, Thorsten Holz, Engin Kirda, Christopher Kruegel
2010 — conf
A Small Leak will Sink a Great Ship: An Empirical Study of DLP Solutions.
ISSE
Matthias Luft, Thorsten Holz
2010 Misc conf
ADSandbox: sandboxing JavaScript to fight malicious websites.
SAC
Andreas Dewald, Thorsten Holz, Felix C. Freiling
2010 A conf
Abusing Social Networks for Automated User Profiling.
RAID
Marco Balduzzi, Christian Platzer, Thorsten Holz, Engin Kirda, Davide Balzarotti, Christopher Kruegel
2010 Misc conf
Botzilla: detecting the "phoning home" of malicious software.
SAC
Konrad Rieck, Guido Schwenk, Tobias Limmer, Thorsten Holz, Pavel Laskov
2010 A* conf
Inspector Gadget: Automated Extraction of Proprietary Gadgets from Malware Binaries.
IEEE Symposium on Security and Privacy
Clemens Kolbitsch, Thorsten Holz, Christopher Kruegel, Engin Kirda
2010 — conf
Is the Internet for Porn? An Insight Into the Online Adult Industry.
WEIS
Gilbert Wondracek, Thorsten Holz, Christian Platzer, Engin Kirda, Christopher Kruegel
2010 — conf
Towards Secure Deletion on Smartphones.
Sicherheit
Michael Spreitzenbarth, Thorsten Holz
2009 A conf
Automatically Generating Models for Botnet Detection.
ESORICS
Peter Wurzinger, Leyla Bilge, Thorsten Holz, Jan Goebel, Christopher Kruegel, Engin Kirda
2009 — conf
Eine Analyse von 33 Gigabyte gestohlener Keylogger-Daten.
GI Jahrestagung
Thorsten Holz, Markus Engelberth, Felix C. Freiling
2009 A conf
Learning More about the Underground Economy: A Case-Study of Keyloggers and Dropzones.
ESORICS
Thorsten Holz, Markus Engelberth, Felix C. Freiling
2009 A* conf
Return-Oriented Rootkits: Bypassing Kernel Code Integrity Protection Mechanisms.
USENIX Security Symposium
Ralf Hund, Thorsten Holz, Felix C. Freiling
2009 — ch.
Studying Malicious Websites and the Underground Economy on the Chinese Web.
Managing Information Risk and the Economics of Security
Jianwei Zhuge, Thorsten Holz, Chengyu Song, Jinpeng Guo, Xinhui Han, Wei Zou
2009 B conf
Towards Proactive Spam Filtering (Extended Abstract).
DIMVA
Jan Göbel, Thorsten Holz, Philipp Trinius
2009 — —
Tracking and Mitigation of Malicious Remote Control Networks.
Thorsten Holz
2009 — ch.
Verfolgen und Abschwächen von Malicious Remote Control Networks.
Ausgezeichnete Informatikdissertationen
Thorsten Holz
2009 C conf
Visual analysis of malware behavior using treemaps and thread graphs.
VizSEC
Philipp Trinius, Thorsten Holz, Jan Göbel, Felix C. Freiling
2008 — conf
08102 Working Group -- Requirements for Network Monitoring from an IDS Perspective.
Network Attack Detection and Defense
Lothar Braun, Falko Dressler, Thorsten Holz, Engin Kirda, Jan Kohlrausch, Christopher Kruegel, Tobias Limmer, Konrad Rieck, James P. G. Sterbenz
2008 — conf
8102 Working Group -- Attack Taxonomy.
Network Attack Detection and Defense
Marc Dacier, Hervé Debar, Thorsten Holz, Engin Kirda, Jan Kohlrausch, Christopher Kruegel, Konrad Rieck, James P. G. Sterbenz
2008 — conf
As the net churns: Fast-flux botnet observations.
MALWARE
Jose Nazario, Thorsten Holz
2008 B conf
Learning and Classification of Malware Behavior.
DIMVA
Konrad Rieck, Thorsten Holz, Carsten Willems, Patrick Düssel, Pavel Laskov
2008 — conf
Measurements and Mitigation of Peer-to-Peer-based Botnets: A Case Study on Storm Worm.
LEET
Thorsten Holz, Moritz Steiner, Frederic Dahl, Ernst W. Biersack, Felix C. Freiling
2008 A* conf
Measuring and Detecting Fast-Flux Service Networks.
NDSS
Thorsten Holz, Christian Gorecki, Konrad Rieck, Felix C. Freiling
2008 — conf
Monkey-Spider: Detecting Malicious Websites with Low-Interaction Honeyclients.
Sicherheit
Ali Ikinci, Thorsten Holz, Felix C. Freiling
2008 — conf
Reconstructing People's Lives: A Case Study in Teaching Forensic Computing.
IMF
Felix C. Freiling, Thorsten Holz, Martin Mink
2008 — conf
Studying Malicious Websites and the Underground Economy on the Chinese Web.
WEIS
Jianwei Zhuge, Thorsten Holz, Chengyu Song, Jinpeng Guo, Xinhui Han, Wei Zou
2008 — book
Virtual Honeypots - From Botnet Tracking to Intrusion Detection.
Niels Provos, Thorsten Holz
2007 C conf
Collecting Autonomous Spreading Malware Using High-Interaction Honeypots.
ICICS
Jianwei Zhuge, Thorsten Holz, Xinhui Han, Chengyu Song, Wei Zou
2007 B conf
Measurement and Analysis of Autonomous Spreading Malware in a University Environment.
DIMVA
Jan Goebel, Thorsten Holz, Carsten Willems
2007 — conf
Rishi: Identify Bot Contaminated Hosts by IRC Nickname Evaluation.
HotBots
Jan Goebel, Thorsten Holz
2007 J jnl
Toward Automated Dynamic Malware Analysis Using CWSandbox.
IEEE Secur. Priv.
Carsten Willems, Thorsten Holz, Felix C. Freiling
2006 — conf
A Comparative Study of Teaching Forensics at a University Degree Level.
IMF
Philip Anderson, Maximillian Dornseif, Felix C. Freiling, Thorsten Holz, Alastair Irons, Christopher Laing, Martin Mink
2006 J jnl
Advanced Honeypot-Based Intrusion Detection.
login Usenix Mag.
Jan Göbel, Jens Hektor, Thorsten Holz
2006 — conf
Learning More About Attack Patterns With Honeypots.
Sicherheit
Thorsten Holz
2006 J jnl
New Threats and Attacks on the World Wide Web.
IEEE Secur. Priv.
Thorsten Holz, Simon Marechal, Frédéric Raynal
2006 — conf
Safety, Liveness, and Information Flow: Dependability Revisited.
ARCS Workshops
Zinaida Benenson, Felix C. Freiling, Thorsten Holz, Dogan Kesdogan, Lucia Draque Penso
2006 — conf
The Effect of Stock Spam on Financial Markets.
WEIS
Rainer Böhme, Thorsten Holz
2006 A conf
The Nepenthes Platform: An Efficient Approach to Collect Malware.
RAID
Paul Baecher, Markus Koetter, Thorsten Holz, Maximillian Dornseif, Felix C. Freiling
2005 B conf
A Pointillist Approach for Comparing Honeypots.
DIMVA
Fabien Pouget, Thorsten Holz
2005 J jnl
A Short Visit to the Bot Zoo.
IEEE Secur. Priv.
Thorsten Holz
2005 A conf
Botnet Tracking: Exploring a Root-Cause Methodology to Prevent Distributed Denial-of-Service Attacks.
ESORICS
Felix C. Freiling, Thorsten Holz, Georg Wicherski
2005 — conf
Honeypots and Limitations of Deception.
DFN-Arbeitstagung über Kommunikationsnetze
Maximillian Dornseif, Thorsten Holz, Sven Müller
2005 — conf
Security Measurements and Metrics for Networks.
Dependability Metrics
Thorsten Holz
2005 J jnl
Spying with Bots.
login Usenix Mag.
Thorsten Holz
2004 J jnl
Ermittlung von Verwundbarkeiten mit elektronischen Koedern
CoRR
Maximillian Dornseif, Felix C. Gärtner, Thorsten Holz
2004 B conf
Ermittlung von Verwundbarkeiten mit elektronischen Ködern.
DIMVA
Maximillian Dornseif, Felix C. Gärtner, Thorsten Holz
2004 J jnl
NoSEBrEaK - Attacking Honeynets
CoRR
Maximillian Dornseif, Thorsten Holz, Christian N. Klein
2004 J jnl
Vulnerability Assessment using Honeypots.
Prax. Inf.verarb. Kommun.
Maximillian Dornseif, Felix C. Gärtner, Thorsten Holz