/research

• Schloegel, Moritz, Bars, Nils, Schiller, Nico, Bernhard, Lukas, Scharnowski, Tobias, Crump, Addison, Ale-Ebrahim, Arash, Bissantz, Nicolai, Muench, Marius, Holz, Thorsten

  SoK: Prudent Evaluation Practices for Fuzzing

  IEEE Symposium on Security and Privacy (S&P), May 2024

  pdf code bibtex

• Balgavy, Alexander, Muench, Marius

  FirmLine: a Generic Pipeline for Large-Scale Analysis of Non-Linux Firmware

  Workshop on Binary Analysis Research (BAR), March 2024

  pdf code bibtex

• Hertogh, Mathé, Wiesinger, Manuel, Österlund, Sebastian, Muench, Marius, Amit, Nadav, Bos, Herbert, Giuffrida, Cristiano

  Quarantine: Mitigating Transient Execution Attacks with Physical Domain Isolation

  International Symposium on Research in Attacks, Intrusions, and Defenses (RAID), October 2023

  pdf code bibtex

• Seidel, Lukas, Maier, Dominik, Muench, Marius

  Forming Faster Firmware Fuzzers

  USENIX Security, August 2023

  pdf code bibtex

• Duta, Victor, Freyer, Fabian, Pagani, Fabio, Muench, Marius, Giuffrida, Cristiano

  Let Me Unwind That For You: Exceptions to Backward-Edge Protection

  Network and Distributed System Security Symposium (NDSS), February 2023

  pdf code bibtex

• Tobias Scharnowski, Nils Bars, Moritz Schloegel, Eric Gustafson, Marius Muench, Giovanni Vigna, Christopher Kruegel, Thorsten Holz, Ali Abbasi

  Fuzzware: Using Precise MMIO Modeling for Effective Firmware Fuzzing

  USENIX Security, August 2022

  pdf code bibtex

• Barberis, Enrico, Frigo, Pietro, Muench, Marius, Bos, Herbert, Giuffrida, Cristiano

  Branch History Injection: On the Effectiveness of Hardware Mitigations Against Cross-Privilege Spectre-v2 Attacks

  USENIX Security, August 2022

  pdf code web bibtex

• Hernandez, Grant, Muench, Marius, Maier, Dominik, Milburn, Alyssa, Park, Shinjo, Scharnowski, Tobias, Tucker, Tyler, Traynor, Patrick, Butler, Kevin

  FirmWire: Transparent Dynamic Analysis for Cellular Baseband Firmware

  Network and Distributed Systems Security Symposium (NDSS), April 2022

  pdf code bibtex

• Fasano, Andrew, Ballo, Tiemoko, Muench, Marius, Leek, Tim, Bulekov, Alexander, Dolan-Gavitt, Brendan, Egele, Manuel, Francillon, Aurélien, Lu, Long, Gregory, Nick, Balzarotti, Davide, Robertson, William

  SoK: Enabling Security Analyses of Embedded Systems via Rehosting

  ACM ASIA Conference on Computer and Communications Security (ASIACCS), June 2021, doi: 10.1145/3433210.3453093

  pdf code web bibtex

• Corteggiani, Nassim, Camurati, Giovanni, Muench, Marius, Poeplau, Sebastian, Francillon, Aurelien

  SoC Security Evaluation: Reflections on Methodology and Tooling

  IEEE Design and Test, volume 38, August 2020, doi: 10.1109/MDAT.2020.3013827

  pdf bibtex

• Gustafson, Eric, Muench, Marius, Spensky, Chad, Redini, Nilo, Machiry, Aravind, Fratantonio, Yanick, Balzarotti, Davide, Francillon, Aurelien, Choe, Yung Ryn, Kruegel, Christopher, Vigna, Giovanni

  Toward the Analysis of Embedded Firmware through Automated Re-hosting

  International Symposium on Research in Attacks, Intrusions, and Defenses (RAID), September 2019

  pdf code bibtex

• Giovanni Camurati, Sebastian Poeplau, Marius Muench, Tom Hayes, Aurélien Francillon

  Screaming Channels: When Electromagnetic Side Channels Meet Radio Transceivers

  Proceedings of the 25th ACM conference on Computer and communications security (CCS), October 2018

  pdf code web bibtex

• Muench, Marius, Nisi, Dario, Francillon, Aurelien, Balzarotti, Davide

  Avatar²: A Multi-target Orchestration Platform

  Workshop on Binary Analysis Research (BAR), February 2018

  pdf code bibtex

• Muench, Marius, Stijohann, Jan, Kargl, Frank, Francillon, Aurelien, Balzarotti, Davide

  What You Corrupt Is Not What You Crash: Challenges in Fuzzing Embedded Devices

  Network and Distributed System Security Symposium (NDSS), February 2018

  pdf code bibtex

• Muench, Marius, Pagani, Fabio, Shoshitaishvili, Yan, Kruegel, Christopher, Vigna, Giovanni, Balzarotti, Davide

  Taming Transactions: Towards Hardware-Assisted Control Flow Integrity Using Transactional Memory

  International Symposium on Research in Attacks, Intrusions, and Defenses (RAID), September 2016

  pdf code bibtex

PC: ACSAC'24, RAID'24, WOOT'24, USENIX Security'24, EuroSec'24, EuroS&P'24, IEEE Security & Privacy’23, USENIX Security’23, DIMVA’22, USENIX Security’22, DIMVA’21, ROOTS’21, SECURECOMM’21, DIMVA’20, ROOTS’20, ROOTS’19, ROOTS’18

Reviewer: IEEE Transactions on Dependable and Secure Computing, IEEE Transactions on Computers, IEEE Access