b'Thorsten Holz'

research

∙ 04/13/2023

EF/CF: High Performance Smart Contract Fuzzing for Exploit Generation

Smart contracts are increasingly being used to manage large numbers of h...

0 Michael Rodler, et al. ∙

research

∙ 03/25/2023

No more Reviewer #2: Subverting Automatic Paper-Reviewer Assignment using Adversarial Learning

The number of papers submitted to academic conferences is steadily risin...

2 Thorsten Eisenhofer, et al. ∙

research

∙ 02/23/2023

More than you've asked for: A Comprehensive Analysis of Novel Prompt Injection Threats to Application-Integrated Large Language Models

We are currently witnessing dramatic advances in the capabilities of Lar...

0 Kai Greshake, et al. ∙

research

∙ 02/08/2023

Systematically Finding Security Vulnerabilities in Black-Box Code Generation Models

Recently, large language models for code generation have achieved breakt...

0 Hossein Hajipour, et al. ∙

research

∙ 12/06/2022

How to Compare Fuzzers

Fuzzing is a key method to discover vulnerabilities in programs. Despite...

0 Philipp Görz, et al. ∙

research

∙ 10/26/2022

Towards the Detection of Diffusion Model Deepfakes

Diffusion models (DMs) have recently emerged as a promising method in im...

0 Jonas Ricker, et al. ∙

research

∙ 03/21/2022

Privacy Rarely Considered: Exploring Considerations in the Adoption of Third-Party Services by Websites

Modern websites frequently use and embed third-party services to facilit...

0 Christine Utz, et al. ∙

research

∙ 03/08/2022

xTag: Mitigating Use-After-Free Vulnerabilities via Software-Based Pointer Tagging on Intel x86-64

Memory safety in complex applications implemented in unsafe programming ...

0 Lukas Bernhard, et al. ∙

research

∙ 11/04/2021

Nyx-Net: Network Fuzzing with Incremental Snapshots

Coverage-guided fuzz testing ("fuzzing") has become mainstream and we ha...

0 Sergej Schumilo, et al. ∙

research

∙ 06/16/2021

Loki: Hardening Code Obfuscation Against Automated Attacks

Software obfuscation is a crucial technology to protect intellectual pro...

0 Moritz Schloegel, et al. ∙

research

∙ 04/07/2021

[RE] CNN-generated images are surprisingly easy to spot...for now

This work evaluates the reproducibility of the paper "CNN-generated imag...

0 Joel Frank, et al. ∙

research

∙ 02/10/2021

Dompteur: Taming Audio Adversarial Examples

Adversarial examples seem to be inevitable. These specifically crafted i...

0 Thorsten Eisenhofer, et al. ∙

research

∙ 10/21/2020

VENOMAVE: Clean-Label Poisoning Against Speech Recognition

In the past few years, we observed a wide adoption of practical systems ...

0 Hojjat Aghakhani, et al. ∙

research

∙ 08/02/2020

Unacceptable, where is my privacy? Exploring Accidental Triggers of Smart Speakers

Voice assistants like Amazon's Alexa, Google's Assistant, or Apple's Sir...

0 Lea Schönherr, et al. ∙

research

∙ 07/07/2020

VPS: Excavating High-Level C++ Constructs from Low-Level Binaries to Protect Dynamic Dispatching

Polymorphism and inheritance make C++ suitable for writing complex softw...

0 Andre Pawlowski, et al. ∙

research

∙ 07/06/2020

Automated Multi-Architectural Discovery of CFI-Resistant Code Gadgets

Memory corruption vulnerabilities are still a severe threat for software...

0 Patrick Wollgast, et al. ∙

research

∙ 07/06/2020

Detile: Fine-Grained Information Leak Detection in Script Engines

Memory disclosure attacks play an important role in the exploitation of ...

0 Robert Gawlik, et al. ∙

research

∙ 07/06/2020

An Exploratory Analysis of Microcode as a Building Block for System Defenses

Microcode is an abstraction layer used by modern x86 processors that int...

0 Benjamin Kollenda, et al. ∙

research

∙ 07/05/2020

Breaking and Fixing Destructive Code Read Defenses

Just-in-time return-oriented programming (JIT-ROP) is a powerful memory ...

0 Jannik Pewny, et al. ∙

research

∙ 07/05/2020

EvilCoder: Automated Bug Insertion

The art of finding software vulnerabilities has been covered extensively...

0 Jannik Pewny, et al. ∙

research

∙ 07/05/2020

Static Detection of Uninitialized Stack Variables in Binary Code

More than two decades after the first stack smashing attacks, memory cor...

0 Behrad Garmany, et al. ∙

research

∙ 07/05/2020

Steroids for DOPed Applications: A Compiler for Automated Data-Oriented Programming

The wide-spread adoption of system defenses such as the randomization of...

0 Jannik Pewny, et al. ∙

research

∙ 07/05/2020

Challenges in Designing Exploit Mitigations for Deeply Embedded Systems

Memory corruption vulnerabilities have been around for decades and rank ...

0 Ali Abbasi, et al. ∙

research

∙ 04/02/2020

CORSICA: Cross-Origin Web Service Identification

Vulnerabilities in private networks are difficult to detect for attacker...

0 Christian Dresen, et al. ∙

research

∙ 03/19/2020

Leveraging Frequency Analysis for Deep Fake Image Recognition

Deep neural networks can generate images that are astonishingly realisti...

24 Joel Frank, et al. ∙

research

∙ 01/28/2020

Beyond the Front Page: Measuring Third Party Dynamics in the Field

In the modern Web, service providers often rely heavily on third parties...

0 Tobias Urban, et al. ∙

research

∙ 10/01/2019

Reverse Engineering x86 Processor Microcode

Microcode is an abstraction layer on top of the physical components of a...

0 Philipp Koppe, et al. ∙

research

∙ 09/05/2019

(Un)informed Consent: Studying GDPR Consent Notices in the Field

Since the adoption of the General Data Protection Regulation (GDPR) in M...

0 Christine Utz, et al. ∙

research

∙ 08/05/2019

Imperio: Robust Over-the-Air Adversarial Examples for Automatic Speech Recognition Systems

Automatic speech recognition (ASR) systems are possible to fool via targ...

0 Lea Schönherr, et al. ∙

research

∙ 08/05/2019

Robust Over-the-Air Adversarial Examples Against Automatic Speech Recognition Systems

Automatic speech recognition (ASR) systems are possible to fool via targ...

0 Lea Schönherr, et al. ∙

research

∙ 07/03/2019

Towards Automated Application-Specific Software Stacks

Software complexity has increased over the years. One common way to tack...

0 Nicolai Davidsson, et al. ∙

research

∙ 02/22/2019

A Study of Newly Observed Hostnames and DNS Tunneling in the Wild

The domain name system (DNS) is a crucial backbone of the Internet and m...

0 Dennis Tatang, et al. ∙

research

∙ 11/21/2018

The Unwanted Sharing Economy: An Analysis of Cookie Syncing and User Transparency under GDPR

The European General Data Protection Regulation (GDPR), which went into ...

0 Tobias Urban, et al. ∙

research

∙ 08/16/2018

Adversarial Attacks Against Automatic Speech Recognition Systems via Psychoacoustic Hiding

Voice interfaces are becoming accepted widely as input methods for a div...

0 Lea Schönherr, et al. ∙

research

∙ 08/15/2018

We Value Your Privacy ... Now Take Some Cookies: Measuring the GDPR's Impact on Web Privacy

The European Union's General Data Protection Regulation (GDPR) went into...

0 Martin Degeling, et al. ∙

research

∙ 03/05/2018

RAPTOR: Ransomware Attack PredicTOR

Ransomware, a type of malicious software that encrypts a victim's files ...

0 Florian Quinkert, et al. ∙

research

∙ 12/08/2017

An Empirical Study on Price Differentiation Based on System Fingerprints

Price differentiation describes a marketing strategy to determine the pr...

0 Thomas Hupperich, et al. ∙

Thorsten Holz

Featured Co-authors