Publications

@inproceedings{ndss24poster-safeffi,
    author = {Oliver Braunsdorf and Konrad Hohentanner and Johannes Kinder},
    title = {Poster: Ensuring Memory Safety for the Transition from C/C++ to Rust},
    booktitle = {Network and Distributed System Security Symp. (NDSS)},
    year = {2024}
}

@inproceedings{scored23-diff-codeql,
    author = {Fabian Froh and Mat{\'{i}}as Gobbi and Johannes Kinder},
    title = {Differential Static Analysis for Detecting Malicious Updates to Open Source Packages},
    booktitle = {Proc. ACM Workshop on Software Supply Chain Offensive Research and Ecosystem Defenses (SCORED)},
    publisher = {ACM},
    year = {2023},
    doi = {10.1145/3605770.3625211}
}

@inproceedings{ccs23poster-contentproviders,
    author = {Christopher Lenk and Johannes Kinder},
    title = {Poster: Privacy Risks from Misconfigured Android Content Providers},
    booktitle = {Proc. 2023 ACM SIGSAC Conf. Computer and Communications Security (CCS)},
    year = {2023},
    doi = {10.1145/3576915.3624389}
}

@inproceedings{ccs23poster-codeql,
    author = {Mat{\'{i}}as Gobbi and Johannes Kinder},
    title = {Poster: Using CodeQL to Detect Malware in npm},
    booktitle = {Proc. 2023 ACM SIGSAC Conf. Computer and Communications Security (CCS)},
    year = {2023},
    doi = {10.1145/3576915.3624401}
}

@article{spmag23-mlmalware,
    author = {Lorenzo Cavallaro and Johannes Kinder and Feargus Pendlebury and Fabio Pierazzi},
    title = {Are Machine Learning Models for Malware Detection Ready for Prime Time?},
    journal = {IEEE Secur. Priv.},
    volume = {21},
    number = {2},
    pages = {53--56},
    year = {2023},
    doi = {10.1109/MSEC.2023.3236543},
    url = {https://doi.org/10.1109/MSEC.2023.3236543}
}

@inproceedings{oakland23-xfl,
    author = {James Patrick-Evans and Moritz Dannehl and Johannes Kinder},
    title = {XFL: Naming Functions in Binaries with Extreme Multi-label Learning},
    booktitle = {Proc. IEEE Symp. Security and Privacy (S\&P)},
    pages = {1677--1692},
    publisher = {IEEE},
    year = {2023},
    doi = {10.1109/SP46215.2023.00096}
}

@inproceedings{oakland22-cats-vs-spectre,
    author = {Hern{\'a}n Ponce-de-Le{\'o}n and Johannes Kinder},
    title = {Cats vs. Spectre: An Axiomatic Approach to Modeling Speculative Execution Attacks},
    booktitle = {Proc. IEEE Symp. Security and Privacy (S\&P)},
    pages = {1415--1428},
    publisher = {IEEE},
    year = {2022},
    doi = {10.1109/SP46214.2022.00082}
}

@techreport{cats-vs-spectre-arxiv,
    author = {Hern{\'a}n Ponce-de-Le{\'o}n and Johannes Kinder},
    title = {Cats vs. Spectre: An Axiomatic Approach to Modeling Speculative Execution Attacks},
    number = {arXiv:2108.13818},
    year = {2021},
    institution = {arXiv},
    url = {https://arxiv.org/abs/2108.13818}
}

@techreport{conformance-testing-arxiv,
    author = {Blake Loring and Johannes Kinder},
    title = {Systematic Generation of Conformance Tests for JavaScript},
    number = {arXiv:2108.07075},
    year = {2021},
    institution = {arXiv},
    url = {https://arxiv.org/abs/2108.07075}
}

@techreport{xfl-arxiv,
    author = {James Patrick-Evans and Moritz Dannehl and Johannes Kinder},
    title = {XFL: eXtreme Function Labeling},
    number = {arXiv:2107.13404},
    year = {2021},
    institution = {arXiv},
    url = {https://arxiv.org/abs/2107.13404}
}

@inproceedings{acsac20-punstrip,
    author = {James Patrick-Evans and Lorenzo Cavallaro and Johannes Kinder},
    title = {Probabilistic Naming of Functions in Stripped Binaries},
    booktitle = {Proc. 35th Annu. Computer Security Applications Conference (ACSAC)},
    pages = {373--385},
    publisher = {ACM},
    year = {2020},
    doi = {10.1145/3427228.3427265}
}

@inproceedings{usenixsecurity20-wasm,
    author = {Daniel Lehmann and Johannes Kinder and Michael Pradel},
    title = {Everything Old is New Again: Binary Security of WebAssembly},
    booktitle = {29th USENIX Security Symposium (USENIX Security)},
    pages = {217--234},
    publisher = {USENIX Association},
    year = {2020}
}

@proceedings{ccs2019,
    title = {Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security, CCS 2019, London, UK, November 11-15, 2019},
    editor = {Lorenzo Cavallaro and Johannes Kinder and XiaoFeng Wang and Jonathan Katz},
    publisher = {ACM},
    year = {2019},
    doi = {10.1145/3319535},
    isbn = {978-1-4503-6747-9},
    url = {https://dl.acm.org/doi/proceedings/10.1145/3319535}
}

@inproceedings{esorics19-secannjs,
    author = {Duncan Mitchell and Johannes Kinder},
    title = {A Formal Model for Checking Cryptographic API Usage in JavaScript},
    booktitle = {Proc. European Symposium on Research in Computer Security (ESORICS)},
    series = {LNCS},
    volume = {11735},
    pages = {341--360},
    publisher = {Springer},
    year = {2019},
    doi = {10.1007/978-3-030-29959-0\_17}
}

@inproceedings{usenixsecurity19-tesseract,
    author = {Feargus Pendlebury and Fabio Pierazzi and Roberto Jordaney and Johannes Kinder and Lorenzo Cavallaro},
    title = {TESSERACT: Eliminating Experimental Bias in Malware Classification across Space and Time},
    booktitle = {28th USENIX Security Symposium (USENIX Security)},
    pages = {729--746},
    publisher = {USENIX Association},
    year = {2019}
}

@inproceedings{pldi19-regex,
    author = {Blake Loring and Duncan Mitchell and Johannes Kinder},
    title = {Sound Regular Expression Semantics for Dynamic Symbolic Execution of JavaScript},
    booktitle = {Proc. ACM SIGPLAN Conf. Programming Language Design and Implementation (PLDI)},
    pages = {425--438},
    publisher = {ACM},
    year = {2019},
    doi = {10.1145/3314221.3314645}
}

@techreport{regex-arxiv,
    author = {Blake Loring and Duncan Mitchell and Johannes Kinder},
    title = {Sound Regular Expression Semantics for Dynamic Symbolic Execution of JavaScript},
    number = {CoRR:abs/1810.05661},
    year = {2018},
    institution = {arXiv},
    url = {https://arxiv.org/abs/1810.05661}
}

@techreport{tesseract-arxiv,
    author = {Feargus Pendlebury and Fabio Pierazzi and Roberto Jordaney and Johannes Kinder and Lorenzo Cavallaro},
    title = {TESSERACT: Eliminating Experimental Bias in Malware Classification across Space and Time},
    number = {CoRR:abs/1807.07838},
    year = {2018},
    institution = {arXiv},
    url = {https://arxiv.org/abs/1807.07838}
}

@inproceedings{ccs18poster,
    author = {Feargus Pendlebury and Fabio Pierazzi and Roberto Jordaney and Johannes Kinder and Lorenzo Cavallaro},
    title = {Enabling Fair ML Evaluations for Security},
    booktitle = {Proc. 2018 ACM SIGSAC Conf. Computer and Communications Security (CCS)},
    pages = {2264--2266},
    year = {2018},
    doi = {10.1145/3243734.3278505}
}

@inproceedings{raid18-babelview,
    author = {Claudio Rizzo and Lorenzo Cavallaro and Johannes Kinder},
    title = {BabelView: Evaluating the Impact of Code Injection Attacks in Mobile Webviews},
    booktitle = {Int. Symp. Research in Attacks, Intrusions, and Defenses (RAID)},
    year = {2018},
    doi = {10.1007/978-3-030-00470-5\_2}
}

@inproceedings{pepm18-security-annotations,
    author = {Duncan Mitchell and L. Thomas van Binsbergen and Blake Loring and Johannes Kinder},
    title = {Checking Cryptographic API Usage with Composable Annotations},
    booktitle = {ACM SIGPLAN Workshop on Partial Evaluation and Program Manipulation (PEPM)},
    year = {2018},
    doi = {10.1145/3162071}
}

@techreport{babelview-arxiv,
    author = {Claudio Rizzo and Lorenzo Cavallaro and Johannes Kinder},
    title = {BabelView: Evaluating the Impact of Code Injection Attacks in Mobile Webviews},
    number = {CoRR:abs/1709.05690},
    year = {2017},
    institution = {arXiv},
    url = {https://arxiv.org/abs/1709.05690}
}

@inproceedings{plas17-heapaeg,
    author = {Dusan Repel and Johannes Kinder and Lorenzo Cavallaro},
    title = {Modular Synthesis of Heap Exploits},
    booktitle = {Proc. ACM SIGSAC Workshop on Programming Languages and Analysis for Security (PLAS)},
    publisher = {ACM},
    year = {2017},
    doi = {10.1145/3139337.3139346}
}

@inproceedings{woot17-potus,
    author = {James Patrick-Evans and Lorenzo Cavallaro and Johannes Kinder},
    title = {POTUS: Probing Off-The-Shelf USB Drivers with Symbolic Fault Injection},
    booktitle = {11th USENIX Workshop on Offensive Technologies (WOOT)},
    year = {2017},
    note = {Best Paper Award}
}

@inproceedings{spin17-expose,
    author = {Blake Loring and Duncan Mitchell and Johannes Kinder},
    title = {ExpoSE: Practical Symbolic Execution of Standalone JavaScript},
    booktitle = {Proc. Int. SPIN Symp. Model Checking of Software (SPIN)},
    pages = {196--199},
    publisher = {ACM},
    year = {2017}
}

@inproceedings{codaspy17-droidsieve,
    author = {Guillermo Suarez-Tangil and Santanu Kumar Dash and Mansour Ahmadi and Johannes Kinder and Giorgio Giacinto and Lorenzo Cavallaro},
    title = {DroidSieve: Fast and Accurate Classification of Obfuscated Android Malware},
    booktitle = {Proc. 7th ACM Conf. Data and Application Security and Privacy (CODASPY)},
    pages = {309--320},
    publisher = {ACM},
    year = {2017},
    doi = {10.1145/3029806.3029825}
}

@conference{sp16poster,
    author = {Santanu Kumar Dash and Kimberly Tam and Johannes Kinder and Lorenzo Cavallaro},
    title = {Barometer: Sizing Up Android Applications Through Statistical Evaluation},
    booktitle = {37th IEEE Symp. Security and Privacy (S\&P)},
    year = {2016},
    note = {Poster}
}

@article{csur16-obfuscation,
    author = {Sebastian Schrittwieser and Stefan Katzenbeisser and Johannes Kinder and Georg Merzdovnik and Edgar Weippl},
    title = {Protecting Software through Obfuscation: Can It Keep Pace with Progress in Code Analysis?},
    journal = {ACM Computing Surveys},
    volume = {49},
    number = {1},
    year = {2016},
    month = {April}
}

@inproceedings{most16-droidscribe,
    author = {Santanu Kumar Dash and Guillermo Suarez-Tangil and Salahuddin Khan and Kimberly Tam and Mansour Ahmadi and Johannes Kinder and Lorenzo Cavallaro},
    title = {DroidScribe: Classifying Android Malware Based on Runtime Behavior},
    booktitle = {Proc. IEEE Symp. Security and Privacy Workshops (SPW), Mobile Security Technologies (MoST)},
    pages = {252--261},
    year = {2016}
}

@conference{usenix15poster,
    author = {Santanu Kumar Dash and Kimberly Tam and Johannes Kinder and Lorenzo Cavallaro},
    title = {Set-based Classification of Android Malware from Behavioral Abstractions},
    booktitle = {24th USENIX Security Symp. (USENIX Security)},
    year = {2015},
    month = {August},
    note = {Poster}
}

@inproceedings{oakland15-asap,
    author = {Jonas Wagner and Volodymyr Kuznetsov and George Candea and Johannes Kinder},
    title = {High System-Code Security with Low Overhead},
    booktitle = {Proc. IEEE Symp. Security and Privacy (S\&P)},
    pages = {866--879},
    publisher = {IEEE},
    year = {2015}
}

@inproceedings{hotspot15-hypertesting,
    author = {Johannes Kinder},
    title = {Hypertesting: The Case for Automated Testing of Hyperproperties},
    booktitle = {3rd Workshop on Hot Issues in Security Principles and Trust (HotSpot)},
    pages = {1--8},
    year = {2015}
}

@patent{statemerging-patent,
    author = {Volodymyr Kuznetsov and Johannes Kinder and Stefan Bucur and George Candea},
    title = {Advantageous State Merging During Symbolic Analysis},
    number = {US 9,141,354 B2},
    year = {2015},
    month = {September},
    pubstate = {Issued}
}

@conference{osdi14poster,
    author = {Jonas Wagner and Volodymyr Kuznetsov and Johannes Kinder and Azqa Nadeem and George Candea},
    title = {ASAP: High Security at Low Overhead},
    booktitle = {11th USENIX Symp. Operating Systems Design and Implementation (OSDI)},
    year = {2014},
    month = {October},
    note = {Poster}
}

@inproceedings{asplos14-chef,
    author = {Stefan Bucur and Johannes Kinder and George Candea},
    title = {Prototyping Symbolic Execution Engines for Interpreted Languages},
    booktitle = {Proc. 19th Int. Conf. Architectural Support for Programming Languages and Operating Systems (ASPLOS)},
    pages = {239--254},
    publisher = {ACM},
    year = {2014},
    doi = {10.1145/2541940.2541977}
}

@inproceedings{se14-statemerging,
    author = {Volodymyr Kuznetsov and Johannes Kinder and Stefan Bucur and George Candea},
    title = {Efficient State Merging in Symbolic Execution (Extended Abstract)},
    booktitle = {Software Engineering 2014, Fachtagung des GI-Fachbereichs Softwaretechnik (SE)},
    series = {LNI},
    volume = {227},
    pages = {45--46},
    publisher = {GI},
    year = {2014}
}

@patent{fpsafety-patent,
    author = {Patrice Godefroid and Johannes Kinder},
    title = {Memory Safety of Floating-Point Computations},
    number = {US 8,782,625 B2},
    year = {2014},
    month = {July},
    pubstate = {Issued}
}

@inproceedings{apsys13-cloud-testing,
    author = {Stefan Bucur and Johannes Kinder and George Candea},
    title = {Making Automated Testing of Cloud Applications an Integral Component of PaaS},
    booktitle = {Proc. 4th Asia-Pacific Workshop on Systems (APSYS)},
    pages = {18:1--18:7},
    publisher = {ACM},
    year = {2013},
    doi = {10.1145/2500727.2500730}
}

@inproceedings{hotos13-res,
    author = {Cristian Zamfir and Baris Kasikci and Johannes Kinder and Edouard Bugnion and George Candea},
    title = {Automated Debugging for Arbitrarily Long Executions},
    booktitle = {Proc. 14th Workshop on Hot Topics in Operating Systems (HotOS)},
    publisher = {USENIX},
    year = {2013},
    ee = {https://www.usenix.org/conference/hotos13/session/zamfir}
}

@conference{osdi12poster,
    author = {Stefan Bucur and Johannes Kinder and George Candea},
    title = {C3A: Client/Server Co-Verification for Cloud Applications},
    booktitle = {10th USENIX Symp. Operating Systems Design and Implementation (OSDI)},
    year = {2012},
    note = {Poster}
}

@inproceedings{pldi12-statemerging,
    author = {Volodymyr Kuznetsov and Johannes Kinder and Stefan Bucur and George Candea},
    title = {Efficient state merging in symbolic execution},
    booktitle = {Proc. ACM SIGPLAN Conf. Programming Language Design and Implementation (PLDI)},
    pages = {193--204},
    publisher = {ACM},
    year = {2012}
}

@inproceedings{wcre12-virtobf,
    author = {Johannes Kinder},
    title = {Towards Static Analysis of Virtualization-Obfuscated Binaries},
    booktitle = {Proc. 19th Working Conf. Reverse Engineering (WCRE)},
    pages = {61--70},
    publisher = {IEEE},
    year = {2012}
}

@inproceedings{vmcai12-acfr,
    author = {Johannes Kinder and Dmitry Kravchenko},
    title = {Alternating Control Flow Reconstruction},
    booktitle = {Proc. 13th Int. Conf. Verification, Model Checking, and Abstract Interpretation (VMCAI)},
    series = {LNCS},
    volume = {7148},
    pages = {267--282},
    publisher = {Springer},
    year = {2012}
}

@inproceedings{ase11-lpor,
    author = {P{\'e}ter Bokor and Johannes Kinder and Marco Serafini and Neeraj Suri},
    title = {Supporting domain-specific state space reductions through local partial-order reduction},
    booktitle = {26th IEEE/ACM Int. Conf. Automated Software Engineering (ASE)},
    pages = {113--122},
    publisher = {IEEE},
    year = {2011}
}

@inproceedings{dsn11-mpbasset,
    author = {P{\'e}ter Bokor and Johannes Kinder and Marco Serafini and Neeraj Suri},
    title = {Efficient model checking of fault-tolerant distributed protocols},
    booktitle = {Proc. 2011 IEEE/IFIP Int. Conf. Dependable Systems and Networks (DSN)},
    pages = {73--84},
    publisher = {IEEE},
    year = {2011}
}

@incollection{cryptosec11,
    author = {Stefan Katzenbeisser and Johannes Kinder and Helmut Veith},
    title = {Malware Detection},
    editor = {Henk C. A. van Tilborg and Sushil Jajodia},
    booktitle = {Encyclopedia of Cryptography and Security (2nd Ed.)},
    pages = {752--755},
    publisher = {Springer},
    year = {2011}
}

@techreport{lpor-tr,
    author = {P{\'e}ter Bokor and Johannes Kinder and Marco Serafini and Neeraj Suri},
    title = {Supporting domain-specific state space reductions through local partial-order reduction},
    number = {TR-TUD-DEEDS-07-01-2011},
    year = {2011},
    institution = {Technische Universit{\"a}t Darmstadt}
}

@techreport{mpbasset-tr,
    author = {P{\'e}ter Bokor and Johannes Kinder and Marco Serafini and Neeraj Suri},
    title = {Efficient model checking of fault-tolerant distributed protocols},
    number = {TR-TUD-DEEDS-01-01-2011},
    year = {2011},
    institution = {Technische Universit{\"a}t Darmstadt}
}

@phdthesis{phdthesis-kinder,
    author = {Johannes Kinder},
    title = {Static Analysis of x86 Executables},
    year = {2010},
    school = {Technische Universit{\"a}t Darmstadt}
}

@inproceedings{fmcad10-drivers-bat,
    author = {Johannes Kinder and Helmut Veith},
    title = {Precise Static Analysis of Untrusted Driver Binaries},
    booktitle = {Proc. 10th Int. Conf. Formal Methods in Computer-Aided Design (FMCAD)},
    pages = {43--50},
    year = {2010}
}

@inproceedings{issta10-fpsafety,
    author = {Patrice Godefroid and Johannes Kinder},
    title = {Proving memory safety of floating-point computations by combining static and dynamic program analysis},
    booktitle = {Proc. 19th Int. Symp. Software Testing and Analysis (ISSTA)},
    pages = {1--12},
    publisher = {ACM},
    year = {2010},
    doi = {10.1145/1831708.1831710}
}

@article{tdsc10-mocca,
    author = {Johannes Kinder and Stefan Katzenbeisser and Christian Schallhart and Helmut Veith},
    title = {Proactive Detection of Computer Worms Using Model Checking},
    journal = {IEEE Trans. Dependable Sec. Comput.},
    volume = {7},
    number = {4},
    pages = {424--438},
    year = {2010},
    month = {October}
}

@patent{malwarenorm-patent,
    author = {Mihai Christodorescu and Johannes Kinder and Somesh Jha and Stefan Katzenbeisser and Helmut Veith},
    title = {System for Malware Normalization and Detection},
    number = {US 2010/0011441 A1},
    year = {2010},
    month = {January},
    pubstate = {Published}
}

@techreport{fpsafety-tr,
    author = {Patrice Godefroid and Johannes Kinder},
    title = {Proving Memory Safety of Floating-Point Computations by Combining Static and Dynamic Program Analysis},
    number = {MSR-TR-2009-167},
    year = {2009},
    institution = {Microsoft Research},
    month = {November}
}

@inproceedings{vmcai09-cfr,
    author = {Johannes Kinder and Helmut Veith and Florian Zuleger},
    title = {An Abstract Interpretation-Based Framework for Control Flow Reconstruction from Binaries},
    booktitle = {Proc. 10th Int. Conf. Verification, Model Checking, and Abstract Interpretation (VMCAI)},
    series = {LNCS},
    volume = {5403},
    pages = {214--228},
    publisher = {Springer},
    year = {2009}
}

@inproceedings{cav08-jakstab,
    author = {Johannes Kinder and Helmut Veith},
    title = {Jakstab: A Static Analysis Platform for Binaries},
    booktitle = {Proc. 20th Int. Conf. Computer Aided Verification (CAV)},
    series = {LNCS},
    volume = {5123},
    pages = {423--427},
    publisher = {Springer},
    year = {2008},
    booktitleshort = {CAV}
}

@article{jicv07-malware-transform,
    author = {Mihai Christodorescu and Somesh Jha and Johannes Kinder and Stefan Katzenbeisser and Helmut Veith},
    title = {Software transformations to improve malware detection},
    journal = {J. Comput. Virol.},
    volume = {3},
    number = {4},
    pages = {253--265},
    year = {2007},
    doi = {10.1007/s11416-007-0059-8},
    month = {November}
}

@inproceedings{eurocast07-symac,
    author = {Andreas Holzer and Johannes Kinder and Helmut Veith},
    title = {Using Verification Technology to Specify and Detect Malware},
    booktitle = {Proc. 11th Int. Conf. Computer Aided Systems Theory (EUROCAST)},
    series = {LNCS},
    volume = {4739},
    pages = {497--504},
    publisher = {Springer},
    year = {2007}
}

@techreport{malwarenorm,
    author = {Mihai Christodorescu and Johannes Kinder and Somesh Jha and Stefan Katzenbeisser and Helmut Veith},
    title = {Malware Normalization},
    number = {1539},
    address = {Madison, WI, USA},
    year = {2005},
    institution = {University of Wisconsin},
    month = {November}
}

@inproceedings{dimva05-ctpl,
    author = {Johannes Kinder and Stefan Katzenbeisser and Christian Schallhart and Helmut Veith},
    title = {Detecting Malicious Code by Model Checking},
    booktitle = {Second Int. Conf. Detection of Intrusions and Malware \& Vulnerability Assessment (DIMVA)},
    series = {LNCS},
    volume = {3548},
    pages = {174--187},
    publisher = {Springer},
    year = {2005}
}

@thesis{da-kinder,
    author = {Johannes Kinder},
    title = {Model Checking Malicious Code},
    year = {2005},
    school = {Technische Universit{\"a}t M{\"u}nchen},
    type = {MSc thesis}
}