We have open positions in the area of IT security. For more information, see our job offers.

In our work, we analyze DTLS implementations using state learning methods and uncover several nice bugs in widely used libraries. For example, we found  a client-authentication bypass in JSSE (CVE-2020-2655), the default (D)TLS stack used in Java. You can read the preliminary paper version here: https://www.usenix.org/conference/usenixsecurity20/presentation/fiterau-brostean Or, you can already watch a talk presented by Robert Merget at…

Juraj Somorovsky explains his research area, talks about why he came to Paderborn, and which hobbies he is impressed by.