In our work, we analyze DTLS implementations using state learning methods and uncover several nice bugs in widely used libraries. For example, we found  a client-authentication bypass in JSSE (CVE-2020-2655), the default (D)TLS stack used in Java. You can read the preliminary paper version here: https://www.usenix.org/conference/usenixsecurity20/presentation/fiterau-brostean Or, you can already watch a talk presented by Robert Merget at…

Juraj Somorovsky explains his research area, talks about why he came to Paderborn, and which hobbies he is impressed by.