Thorsten Holz

ORCID

Publication Activity (10 Years)

Years Active: 2004-2024
Publications (10 Years): 177

Top Venues

CoRR

USENIX Security Symposium

NDSS

ACSAC

University of Mannheim, Germany (PHD)

Education History

University of Mannheim, Germany

PHD

Publications

Bhupendra Acharya, Dario Lazzaro, Efrén López-Morales, Adam Oest, Muhammad Saad, Antonio Emanuele Cinà, Lea Schönherr, Thorsten Holz
The Imitation Game: Exploring Brand Impersonation Attacks on Social Media Platforms. USENIX Security Symposium (2024)
Hossein Hajipour, Keno Hassler, Thorsten Holz, Lea Schönherr, Mario Fritz
CodeLMSec Benchmark: Systematically Evaluating and Finding Security Vulnerabilities in Black-Box Code Language Models. SaTML (2024)
Joschua Schilling, Andreas Wendler, Philipp Görz, Nils Bars, Moritz Schloegel, Thorsten Holz
A Binary-level Thread Sanitizer or Why Sanitizing on the Binary Level is Hard. USENIX Security Symposium (2024)
Bhupendra Acharya, Muhammad Saad, Antonio Emanuele Cinà, Lea Schönherr, Hoang Dai Nguyen, Adam Oest, Phani Vadrevu, Thorsten Holz
Conning the Crypto Conman: End-to-End Analysis of Cryptocurrency-based Technical Support Scams. CoRR (2024)
Jonas Ricker, Dennis Assenmacher, Thorsten Holz, Asja Fischer, Erwin Quiring
AI-Generated Faces in the Real World: A Large-Scale Case Study of Twitter Profile Images. CoRR (2024)
Moritz Schloegel, Nils Bars, Nico Schiller, Lukas Bernhard, Tobias Scharnowski, Addison Crump, Arash Ale Ebrahim, Nicolai Bissantz, Marius Muench, Thorsten Holz
SoK: Prudent Evaluation Practices for Fuzzing. CoRR (2024)
Johannes Willbold, Moritz Schloegel, Robin Bisping, Martin Strohmeier, Thorsten Holz, Vincent Lenders
VSAsTer: Uncovering Inherent Security Issues in Current VSAT System Practices. WISEC (2024)
Tobias Cloosters, Oussama Draissi, Johannes Willbold, Thorsten Holz, Lucas Davi
Memory Corruption at the Border of Trusted Execution. IEEE Secur. Priv. 22 (4) (2024)
Emre Güler, Sergej Schumilo, Moritz Schloegel, Nils Bars, Philipp Görz, Xinyi Xu, Cemal Kaygusuz, Thorsten Holz
Atropos: Effective Fuzzing of Web Applications for Server-Side Vulnerabilities. USENIX Security Symposium (2024)
Jonas Ricker, Simon Damm, Thorsten Holz, Asja Fischer
Towards the Detection of Diffusion Model Deepfakes. VISIGRAPP (4): VISAPP (2024)
Michael Rodler, David Paaßen, Wenting Li, Lukas Bernhard, Thorsten Holz, Ghassan Karame, Lucas Davi
EF/CF: High Performance Smart Contract Fuzzing for Exploit Generation. CoRR (2023)
Tobias Scharnowski, Simon Wörner, Felix Buchmann, Nils Bars, Moritz Schloegel, Thorsten Holz
Hoedur: Embedded Firmware Fuzzing using Multi-Stream Inputs. USENIX Security Symposium (2023)
Joel Frank, Franziska Herbert, Jonas Ricker, Lea Schönherr, Thorsten Eisenhofer, Asja Fischer, Markus Dürmuth, Thorsten Holz
A Representative Study on Human Detection of Artificially Generated Media Across Countries. CoRR (2023)
Nico Schiller, Merlin Chlosta, Moritz Schloegel, Nils Bars, Thorsten Eisenhofer, Tobias Scharnowski, Felix Domke, Lea Schönherr, Thorsten Holz
Drone Security and the Mysterious Case of DJI's DroneID. NDSS (2023)
Samuel Groß, Simon Koch, Lukas Bernhard, Thorsten Holz, Martin Johns
FUZZILLI: Fuzzing for JavaScript JIT Compiler Vulnerabilities. NDSS (2023)
Nurullah Demir, Jan Hörnemann, Matteo Große-Kampmann, Tobias Urban, Norbert Pohlmann, Thorsten Holz, Christian Wressnegger
On the Similarity of Web Measurements Under Different Experimental Setups. IMC (2023)
Michael Rodler, David Paaßen, Wenting Li, Lukas Bernhard, Thorsten Holz, Ghassan Karame, Lucas Davi
EF↯CF: High Performance Smart Contract Fuzzing for Exploit Generation. EuroS&P (2023)
Noah Spahn, Nils Hanke, Thorsten Holz, Christopher Kruegel, Giovanni Vigna
Container Orchestration Honeypot: Observing Attacks in the Wild. RAID (2023)
Thorsten Eisenhofer, Erwin Quiring, Jonas Möller, Doreen Riepel, Thorsten Holz, Konrad Rieck
No more Reviewer #2: Subverting Automatic Paper-Reviewer Assignment using Adversarial Learning. CoRR (2023)
Nils Bars, Moritz Schloegel, Tobias Scharnowski, Nico Schiller, Thorsten Holz
Fuzztruction: Using Fault Injection-based Fuzzing to Leverage Implicit Domain Knowledge. USENIX Security Symposium (2023)
Johannes Willbold, Moritz Schloegel, Manuel Vögele, Maximilian Gerhardt, Thorsten Holz, Ali Abbasi
Space Odyssey: An Experimental Software Security Analysis of Satellites. SP (2023)
Addison Crump, Dongjia Zhang, Syeda Mahnur Asif, Dominik Christian Maier, Andrea Fioraldi, Thorsten Holz, Davide Balzarotti
CrabSandwich: Fuzzing Rust with Rust (Registered Report). FUZZING (2023)
Kai Greshake, Sahar Abdelnabi, Shailesh Mishra, Christoph Endres, Thorsten Holz, Mario Fritz
More than you've asked for: A Comprehensive Analysis of Novel Prompt Injection Threats to Application-Integrated Large Language Models. CoRR (2023)
Hojjat Aghakhani, Lea Schönherr, Thorsten Eisenhofer, Dorothea Kolossa, Thorsten Holz, Christopher Kruegel, Giovanni Vigna
Venomave: Targeted Poisoning Against Speech Recognition. SaTML (2023)
Sahar Abdelnabi, Kai Greshake, Shailesh Mishra, Christoph Endres, Thorsten Holz, Mario Fritz
Not What You've Signed Up For: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection. AISec@CCS (2023)
Tobias Scharnowski, Felix Buchmann, Simon Wörner, Thorsten Holz
A Case Study on Fuzzing Satellite Firmware. SpaceSec (2023)
Philipp Görz, Björn Mathis, Keno Hassler, Emre Güler, Thorsten Holz, Andreas Zeller, Rahul Gopinath
Systematic Assessment of Fuzzers using Mutation Analysis. USENIX Security Symposium (2023)
Thorsten Eisenhofer, Erwin Quiring, Jonas Möller, Doreen Riepel, Thorsten Holz, Konrad Rieck
No more Reviewer #2: Subverting Automatic Paper-Reviewer Assignment using Adversarial Learning. USENIX Security Symposium (2023)
Hossein Hajipour, Thorsten Holz, Lea Schönherr, Mario Fritz
Systematically Finding Security Vulnerabilities in Black-Box Code Generation Models. CoRR (2023)
Nico Schiller, Xinyi Xu, Lukas Bernhard, Nils Bars, Moritz Schloegel, Thorsten Holz
Novelty Not Found: Adaptive Fuzzer Restarts to Improve Input Space Coverage (Registered Report). FUZZING (2023)
Christine Utz, Sabrina Amft, Martin Degeling, Thorsten Holz, Sascha Fahl, Florian Schaub
Privacy Rarely Considered: Exploring Considerations in the Adoption of Third-Party Services by Websites. Proc. Priv. Enhancing Technol. 2023 (1) (2023)
Sergej Schumilo, Cornelius Aschermann, Andrea Jemmett, Ali Abbasi, Thorsten Holz
Nyx-net: network fuzzing with incremental snapshots. EuroSys (2022)
Lea Schönherr, Maximilian Golla, Thorsten Eisenhofer, Jan Wiele, Dorothea Kolossa, Thorsten Holz
Exploring accidental triggers of smart speakers. Comput. Speech Lang. 73 (2022)
Tobias Scharnowski, Nils Bars, Moritz Schlögel, Eric Gustafson, Marius Muench, Giovanni Vigna, Christopher Kruegel, Thorsten Holz, Ali Abbasi
Fuzzware: Using Precise MMIO Modeling for Effective Firmware Fuzzing. USENIX Security Symposium (2022)
Lukas Bernhard, Tobias Scharnowski, Moritz Schlögel, Tim Blazytko, Thorsten Holz
JIT-Picking: Differential Fuzzing of JavaScript Engines. CCS (2022)
Nurullah Demir, Matteo Große-Kampmann, Tobias Urban, Christian Wressnegger, Thorsten Holz, Norbert Pohlmann
Reproducibility and Replicability of Web Measurement Studies. WWW (2022)
Tobias Cloosters, Johannes Willbold, Thorsten Holz, Lucas Davi
SGXFuzz: Efficiently Synthesizing Nested Structures for SGX Enclave Fuzzing. USENIX Security Symposium (2022)
Terry Benzel, Thorsten Holz
Selected Papers From the 2021 IEEE Symposium on Security and Privacy. IEEE Secur. Priv. 20 (2) (2022)
Philipp Görz, Björn Mathis, Keno Hassler, Emre Güler, Thorsten Holz, Andreas Zeller, Rahul Gopinath
How to Compare Fuzzers. CoRR (2022)
Christine Utz, Sabrina Amft, Martin Degeling, Thorsten Holz, Sascha Fahl, Florian Schaub
Privacy Rarely Considered: Exploring Considerations in the Adoption of Third-Party Services by Websites. CoRR (2022)
Jonas Ricker, Simon Damm, Thorsten Holz, Asja Fischer
Towards the Detection of Diffusion Model Deepfakes. CoRR (2022)
Lukas Bernhard, Michael Rodler, Thorsten Holz, Lucas Davi
xTag: Mitigating Use-After-Free Vulnerabilities via Software-Based Pointer Tagging on Intel x86-64. CoRR (2022)
Lukas Bernhard, Michael Rodler, Thorsten Holz, Lucas Davi
xTag: Mitigating Use-After-Free Vulnerabilities via Software-Based Pointer Tagging on Intel x86-64. EuroS&P (2022)
Moritz Schlögel, Tim Blazytko, Moritz Contag, Cornelius Aschermann, Julius Basler, Thorsten Holz, Ali Abbasi
Loki: Hardening Code Obfuscation Against Automated Attacks. USENIX Security Symposium (2022)
Thorsten Eisenhofer, Lea Schönherr, Joel Frank, Lars Speckemeier, Dorothea Kolossa, Thorsten Holz
Dompteur: Taming Audio Adversarial Examples. USENIX Security Symposium (2021)
Moritz Schlögel, Tim Blazytko, Moritz Contag, Cornelius Aschermann, Julius Basler, Thorsten Holz, Ali Abbasi
Loki: Hardening Code Obfuscation Against Automated Attacks. CoRR (2021)
Dennis Tatang, Florian Zettl, Thorsten Holz
The Evolution of DNS-based Email Authentication: Measuring Adoption and Finding Flaws. RAID (2021)
Florian Quinkert, Martin Degeling, Thorsten Holz
Spotlight on Phishing: A Longitudinal Study on Phishing Awareness Trainings. DIMVA (2021)
Dennis Tatang, Philip Kreißel, Michael Sehring, Florian Quinkert, Martin Degeling, Thorsten Holz
Likes are not Likes A Crowdworking Platform Analysis. ICWSM Workshops (2021)
Dennis Tatang, Robin Flume, Thorsten Holz
Extended Abstract: A First Large-Scale Analysis on Usage of MTA-STS. DIMVA (2021)
Florian Quinkert, Dennis Tatang, Thorsten Holz
Digging Deeper: An Analysis of Domain Impersonation in the Lower DNS Hierarchy. DIMVA (2021)
Merlin Chlosta, David Rupprecht, Thorsten Holz
On the challenges of automata reconstruction in LTE networks. WISEC (2021)
Sergej Schumilo, Cornelius Aschermann, Andrea Jemmett, Ali Abbasi, Thorsten Holz
Nyx-Net: Network Fuzzing with Incremental Snapshots. CoRR (2021)
Merlin Chlosta, David Rupprecht, Christina Pöpper, Thorsten Holz
5G SUCI-catchers: still catching them all? WISEC (2021)
Thorsten Eisenhofer, Lea Schönherr, Joel Frank, Lars Speckemeier, Dorothea Kolossa, Thorsten Holz
Dompteur: Taming Audio Adversarial Examples. CoRR (2021)
Sergej Schumilo, Cornelius Aschermann, Ali Abbasi, Simon Wörner, Thorsten Holz
Nyx: Greybox Hypervisor Fuzzing using Fast Snapshots and Affine Types. USENIX Security Symposium (2021)
Moritz Schlögel, Tim Blazytko, Julius Basler, Fabian Hemmer, Thorsten Holz
Towards Automating Code-Reuse Attacks Using Synthesized Gadget Chains. ESORICS (1) (2021)
Joel Frank, Thorsten Holz
[RE] CNN-generated images are surprisingly easy to spot...for now. CoRR (2021)
Sebastian Österlund, Elia Geretto, Andrea Jemmett, Emre Güler, Philipp Görz, Thorsten Holz, Cristiano Giuffrida, Herbert Bos
CollabFuzz: A Framework for Collaborative Fuzzing. EuroSec@EuroSys (2021)
Tobias Urban, Matteo Große-Kampmann, Dennis Tatang, Thorsten Holz, Norbert Pohlmann
Plenty of Phish in the Sea: Analyzing Potential Pre-attack Surfaces. ESORICS (2) (2020)
Joel Frank, Cornelius Aschermann, Thorsten Holz
ETHBMC: A Bounded Model Checker for Smart Contracts. USENIX Security Symposium (2020)
Tobias Urban, Martin Degeling, Thorsten Holz, Norbert Pohlmann
Beyond the Front Page: Measuring Third Party Dynamics in the Field. CoRR (2020)
Joel Frank, Thorsten Eisenhofer, Lea Schönherr, Asja Fischer, Dorothea Kolossa, Thorsten Holz
Leveraging Frequency Analysis for Deep Fake Image Recognition. CoRR (2020)
Jannik Pewny, Philipp Koppe, Thorsten Holz
Steroids for DOPed Applications: A Compiler for Automated Data-Oriented Programming. CoRR (2020)
Teemu Rytilahti, Thorsten Holz
On Using Application-Layer Middlebox Protocols for Peeking Behind NAT Gateways. NDSS (2020)
Lea Schönherr, Maximilian Golla, Thorsten Eisenhofer, Jan Wiele, Dorothea Kolossa, Thorsten Holz
Unacceptable, where is my privacy? Exploring Accidental Triggers of Smart Speakers. CoRR (2020)
Benjamin Kollenda, Philipp Koppe, Marc Fyrbiak, Christian Kison, Christof Paar, Thorsten Holz
An Exploratory Analysis of Microcode as a Building Block for System Defenses. CoRR (2020)
David Rupprecht, Katharina Kohls, Thorsten Holz, Christina Pöpper
IMP4GT: IMPersonation Attacks in 4G NeTworks. NDSS (2020)
Tobias Urban, Dennis Tatang, Martin Degeling, Thorsten Holz, Norbert Pohlmann
Measuring the Impact of the GDPR on Data Sharing in Ad Networks. AsiaCCS (2020)
Hojjat Aghakhani, Thorsten Eisenhofer, Lea Schönherr, Dorothea Kolossa, Thorsten Holz, Christopher Kruegel, Giovanni Vigna
VENOMAVE: Clean-Label Poisoning Against Speech Recognition. CoRR (2020)
Tobias Urban, Martin Degeling, Thorsten Holz, Norbert Pohlmann
Beyond the Front Page: Measuring Third Party Dynamics in the Field. WWW (2020)
Sergej Schumilo, Cornelius Aschermann, Ali Abbasi, Simon Wörner, Thorsten Holz
HYPER-CUBE: High-Dimensional Hypervisor Fuzzing. NDSS (2020)
David Rupprecht, Katharina Kohls, Thorsten Holz, Christina Pöpper
Call Me Maybe: Eavesdropping Encrypted LTE Calls With ReVoLTE. USENIX Security Symposium (2020)
Christian Dresen, Fabian Ising, Damian Poddebniak, Tobias Kappert, Thorsten Holz, Sebastian Schinzel
CORSICA: Cross-Origin Web Service Identification. CoRR (2020)
Patrick Wollgast, Robert Gawlik, Behrad Garmany, Benjamin Kollenda, Thorsten Holz
Automated Multi-Architectural Discovery of CFI-Resistant Code Gadgets. CoRR (2020)
Robert Gawlik, Philipp Koppe, Benjamin Kollenda, Andre Pawlowski, Behrad Garmany, Thorsten Holz
Detile: Fine-Grained Information Leak Detection in Script Engines. CoRR (2020)
Behrad Garmany, Martin Stoffel, Robert Gawlik, Thorsten Holz
Static Detection of Uninitialized Stack Variables in Binary Code. CoRR (2020)
Cornelius Aschermann, Sergej Schumilo, Ali Abbasi, Thorsten Holz
Ijon: Exploring Deep State Spaces via Fuzzing. IEEE Symposium on Security and Privacy (2020)
Joel Frank, Thorsten Eisenhofer, Lea Schönherr, Asja Fischer, Dorothea Kolossa, Thorsten Holz
Leveraging Frequency Analysis for Deep Fake Image Recognition. ICML (2020)
Tim Blazytko, Moritz Schlögel, Cornelius Aschermann, Ali Abbasi, Joel Frank, Simon Wörner, Thorsten Holz
AURORA: Statistical Crash Analysis for Automated Root Cause Explanation. USENIX Security Symposium (2020)
Emre Güler, Philipp Görz, Elia Geretto, Andrea Jemmett, Sebastian Österlund, Herbert Bos, Cristiano Giuffrida, Thorsten Holz
Cupid : Automatic Fuzzer Selection for Collaborative Fuzzing. ACSAC (2020)
Lea Schönherr, Thorsten Eisenhofer, Steffen Zeiler, Thorsten Holz, Dorothea Kolossa
Imperio: Robust Over-the-Air Adversarial Examples for Automatic Speech Recognition Systems. ACSAC (2020)
Christian Dresen, Fabian Ising, Damian Poddebniak, Tobias Kappert, Thorsten Holz, Sebastian Schinzel
CORSICA: Cross-Origin Web Service Identification. AsiaCCS (2020)
Ali Abbasi, Jos Wetzels, Thorsten Holz, Sandro Etalle
Challenges in Designing Exploit Mitigations for Deeply Embedded Systems. CoRR (2020)
Jannik Pewny, Philipp Koppe, Lucas Davi, Thorsten Holz
Breaking and Fixing Destructive Code Read Defenses. CoRR (2020)
Jannik Pewny, Thorsten Holz
EvilCoder: Automated Bug Insertion. CoRR (2020)
Andre Pawlowski, Victor van der Veen, Dennis Andriesse, Erik van der Kouwe, Thorsten Holz, Cristiano Giuffrida, Herbert Bos
VPS: Excavating High-Level C++ Constructs from Low-Level Binaries to Protect Dynamic Dispatching. CoRR (2020)
Florian Quinkert, Martin Degeling, Jim Blythe, Thorsten Holz
Be the Phisher - Understanding Users' Perception of Malicious Domains. AsiaCCS (2020)
Dennis Tatang, Florian Quinkert, Nico Dolecki, Thorsten Holz
A Study of Newly Observed Hostnames and DNS Tunneling in the Wild. CoRR (2019)
Ali Abbasi, Jos Wetzels, Thorsten Holz, Sandro Etalle
Challenges in Designing Exploit Mitigations for Deeply Embedded Systems. EuroS&P (2019)
Merlin Chlosta, David Rupprecht, Thorsten Holz, Christina Pöpper
LTE security disabled: misconfiguration in commercial networks. WiSec (2019)
Tobias Urban, Dennis Tatang, Martin Degeling, Thorsten Holz, Norbert Pohlmann
A Study on Subject Data Access in Online Advertising After the GDPR. DPM/CBT@ESORICS (2019)
Andre Pawlowski, Victor van der Veen, Dennis Andriesse, Erik van der Kouwe, Thorsten Holz, Cristiano Giuffrida, Herbert Bos
VPS: excavating high-level C++ constructs from low-level binaries to protect dynamic dispatching. ACSAC (2019)
Matteo Cagnazzo, Thorsten Holz, Norbert Pohlmann
GDPiRated - Stealing Personal Information On- and Offline. ESORICS (2) (2019)
Jannik Pewny, Philipp Koppe, Thorsten Holz
STEROIDS for DOPed Applications: A Compiler for Automated Data-Oriented Programming. EuroS&P (2019)
Dennis Tatang, Florian Quinkert, Thorsten Holz
Below the Radar: Spotting DNS Tunnels in Newly Observed Hostnames in the Wild. eCrime (2019)
Behrad Garmany, Martin Stoffel, Robert Gawlik, Thorsten Holz
Static Detection of Uninitialized Stack Variables in Binary Code. ESORICS (2) (2019)
Christine Utz, Martin Degeling, Sascha Fahl, Florian Schaub, Thorsten Holz
(Un)informed Consent: Studying GDPR Consent Notices in the Field. CoRR (2019)
Martin Degeling, Christine Utz, Christopher Lentzsch, Henry Hosseini, Florian Schaub, Thorsten Holz
We Value Your Privacy ... Now Take Some Cookies: Measuring the GDPR's Impact on Web Privacy. NDSS (2019)
Lea Schönherr, Katharina Kohls, Steffen Zeiler, Thorsten Holz, Dorothea Kolossa
Adversarial Attacks Against Automatic Speech Recognition Systems via Psychoacoustic Hiding. NDSS (2019)

Thorsten Holz.css-eqlu8i{font-size:small;padding-left:4px;}

Publication Activity (10 Years)

Top Topics

Top Venues

Thorsten Holz