Martina Lindorfer

Contact

News

Open Positions

Marco Squarcina and me are looking for a Postdoc for our WWTF-funded project Fixing the Broken Bridge Between Mobile Apps and the Web, ideally with a background in static program analysis, but we are welcoming candidates in all areas related to web and mobile security. To get an idea about this project, take a look at our IEEE S&P'24 paper on CustomTabs and reach out to us if you have any questions!

Academic Service

• Program Co-Chair for the Annual Computer Security Applications Conference (ACSAC 2023 & 2024)
• Co-Chair of the Cybersecurity Artifacts Competition and Impact Award at ACSAC 2023 & 2024
• Program Co-Chair for the IEEE Workshop on Offensive Technologies (WOOT 2022)
• Program Co-Chair for the European Workshop on Systems Security (EuroSec 2021 & 2022)
• Artifact Evaluation Co-Chair for the Annual Computer Security Applications Conference (ACSAC 2021 & 2022)
• Artifact Evaluation Mentor for the Annual Computer Security Applications Conference (ACSAC 2019 & 2024)

Program Committee Member

• Conference on Detection of Intrusions and Malware & Vulnerability Assessment (DIMVA 2016, 2017, 2018, 2019, 2020, 2025)
• European Workshop on Systems Security (EuroSec 2018, 2019, 2020, 2024)
• Workshop on Robust Malware Analysis (WoRMA 2022, 2023, 2024)
• IEEE Symposium on Security and Privacy (S&P 2020, 2021, 2023)
• Workshop on DRAM Security (DRAMSec 2023)
• USENIX Security Symposium (USENIX Security 2019, 2020, 2022)
• Annual Computer Security Applications Conference (ACSAC 2019, 2022)
• ACM Conference on Computer and Communications Security (CCS 2020, 2021)
• International Symposium on Research in Attacks, Intrusions and Defenses (RAID 2021)
• The Web Conference (WebConf 2020, 2021, formerly known as WWW, Security, Privacy, and Trust track)
• USENIX Workshop on Offensive Technologies (WOOT 2015, 2018, 2021)
• Workshop on Binary Analysis Research (BAR 2021)
• Reversing and Offensive-oriented Trends Symposium (ROOTS 2020, 2021)
• ACM ASIA Conference on Computer and Communications Security (ASIACCS 2019)
• International Symposium on Engineering Secure Software and Systems (ESSoS 2018)
• International Workshop on Innovations in Mobile Privacy and Security (IMPS 2017, 2018)
• Workshop on Formal Methods for Security Engineering (ForSE 2017, 2018)
• International Workshop on Emerging Cyberthreats and Countermeasures (ECTCM 2013, 2014, 2015)

External Reviewer

• Privacy Enhancing Technologies Symposium (PETS 2017, 2018, 2020)
• IEEE European Symposium on Security and Privacy (EuroS&P 2019)
• International Conference on emerging Networking EXperiments and Technologies (CoNEXT 2016)

Journal Reviewer (excerpt)

• ACM Transactions on Privacy and Security
• IEEE Transactions on Computers
• IEEE Transactions on Dependable and Secure Computing
• IEEE Transactions on Information Forensics and Security
• IEEE Transactions on Mobile Computing
• International Journal of Information Security
• Journal of Computer Virology and Hacking Techniques
• Theoretical Computer Science

Guest Editor

• Special Issue on Deployable & Impactful Security Applications for ACM Digital Threats: Research and Practice
• Special Issue on Security on Mobile and IoT Devices for IET Information Security

Publications

• David Schmidt, Alexander Ponticello, Magdalena Steinböck, Katharina Krombholz, Martina Lindorfer
  Analyzing the iOS Local Network Permission from a Technical and User Perspective
  IEEE Symposium on Security and Privacy (S&P), May 2025
   
• Carlotta Tagliaro, Martina Komsic, Andrea Continella, Kevin Borgolte, Martina Lindorfer
  Large-Scale Security Analysis of Real-World Backend Deployments Speaking IoT-Focused Protocols
  International Symposium on Research in Attacks, Intrusions and Defenses (RAID), September 2024
       

  @inproceedings{backends:raid2024,
    title     = {{Large-Scale Security Analysis of Real-World Backend Deployments Speaking IoT-Focused Protocols}},
    author    = {Tagliaro, Carlotta and Komsic, Martina and Continella, Andrea and Borgolte, Kevin and Lindorfer, Martina},
    booktitle = {Proceedings of the 27th International Symposium on Research in Attacks, Intrusions and Defenses (RAID)},
    location  = {Padua, Italy},
    year      = {2024},
    doi       = {10.1145/3678890.3678899}
  }

   
  * Presented at the Qualcomm Product Security Summit 2024 *
  
• Aakanksha Saha, Jorge Blasco, Lorenzo Cavallaro, Martina Lindorfer
  ADAPT it! Automating APT Campaign and Group Attribution by Leveraging and Linking Heterogeneous Files
  International Symposium on Research in Attacks, Intrusions and Defenses (RAID), September 2024
       

  @inproceedings{adapt:raid2024,
    title     = {{ADAPT it! Automating APT Campaign and Group Attribution by Leveraging and Linking Heterogeneous Files}},
    author    = {Saha, Aakanksha and Blasco, Jorge and Cavallaro, Lorenzo and Lindorfer, Martina},
    booktitle = {Proceedings of the 27th International Symposium on Research in Attacks, Intrusions and Defenses (RAID)},
    location  = {Padua, Italy},
    year      = {2024},
    doi       = {10.1145/3678890.3678909}
  }

   
  * Early version of this work presented at Black Hat Europe 2023 *
  
• Aakanksha Saha, Jorge Blasco, Martina Lindorfer
  Exploring the Malicious Document Threat Landscape: Towards a Systematic Approach to Detection and Analysis
  Workshop on Rethinking Malware Analysis (WoRMA), July 2024
       

  @inproceedings{maldocs:worma2024,
    title     = {{Exploring the Malicious Document Threat Landscape: Towards a Systematic Approach to Detection and Analysis}},
    author    = {Saha, Aakanksha and Blasco, Jorge and Lindorfer, Martina},
    booktitle = {Proceedings of the 3rd Workshop on Rethinking Malware Analysis (WoRMA)},
    location  = {Vienna, Austria},
    year      = {2024},
    doi       = {10.1109/EuroSPW61312.2024.00065}
  }

• Ting-Han Chen, Carlotta Tagliaro, Martina Lindorfer, Kevin Borgolte, Jeroen van der Ham-de Vos
  Are You Sure You Want To Do Coordinated Vulnerability Disclosure?
  International Workshop on Traffic Measurements for Cybersecurity (WTMC), July 2024
   

  @inproceedings{disclosure:wtmc2024,
    title     = {{Are You Sure You Want To Do Coordinated Vulnerability Disclosure?}},
    author    = {Chen, Ting-Han and Tagliaro, Carlotta and Lindorfer, Martina and Borgolte, Kevin and van der Ham-de Vos, Jeroen},
    booktitle = {Proceedings of the 9th International Workshop on Traffic Measurements for Cybersecurity (WTMC)},
    location  = {Vienna, Austria},
    year      = {2024},
    doi       = {10.1109/EuroSPW61312.2024.00039}
  }

• Ali Davanian, Michalis Faloutsos, Martina Lindorfer
  C2Miner: Tricking IoT Malware into Revealing Live Command & Control Servers
  ACM ASIA Conference on Computer and Communications Security (ASIACCS), July 2024
       

  @inproceedings{c2miner:asiaccs2024,
    title     = {{C2Miner: Tricking IoT Malware into Revealing Live Command \& Control Servers}},
    author    = {Davanian, Ali and Faloutsos, Michalis and Lindorfer, Martina},
    booktitle = {Proceedings of the 19th ACM ASIA Conference on Computer and Communications Security (ASIACCS)},
    location  = {Singapore, Singapore},
    year      = {2024},
    doi       = {10.1145/3634737.3644992}
  }

   
  * Early version of this work presented at Black Hat USA 2021 *
  
• Philipp Beer, Marco Squarcina, Lorenzo Veronese, Martina Lindorfer
  Tabbed Out: Subverting the Android Custom Tab Security Model
  IEEE Symposium on Security and Privacy (S&P), May 2024
       

  @inproceedings{customtabs:oakland2024,
    title     = {{Tabbed Out: Subverting the Android Custom Tab Security Model}},
    author    = {Beer, Philipp and Squarcina, Marco and Veronese, Lorenzo and Lindorfer, Martina},
    booktitle = {Proceedings of the 45th IEEE Symposium on Security and Privacy (S\&P)},
    location  = {San Francisco, CA, USA},
    year      = {2024},
    doi       = {10.1109/SP54263.2024.00105}
  }

• Magdalena Steinböck, Jakob Bleier, Mikka Rainer, Tobias Urban, Christine Utz, Martina Lindorfer
  Comparing Apples to Androids: Discovery, Retrieval, and Matching of iOS and Android Apps for Cross-Platform Analyses
  International Conference on Mining Software Repositories (MSR), April 2024
         

  @inproceedings{xplatformapps:msr2024,
    title     = {{Comparing Apples to Androids: Discovery, Retrieval, and Matching of iOS and Android Apps for Cross-Platform Analyses}},
    author    = {Steinböck, Magdalena  and Bleier, Jakob and Rainer, Mikka and Urban, Tobias and Utz, Christine and Lindorfer, Martina},
    booktitle = {Proceedings of the 21st IEEE/ACM International Conference on Mining Software Repositories (MSR)},
    location  = {Lisbon, Portugal},
    year      = {2024},
    doi       = {10.1145/3643991.3644896}
  }

• Martina Lindorfer
  The Threat of Surveillance and the Need for Privacy Protections
  Introduction to Digital Humanism: A Textbook (Editors: Hannes Werthner, Carlo Ghezzi, Jeff Kramer, Julian Nida-Rümelin, Bashar Nuseibeh, Erich Prem, Allison Stanger), January 2024
   

  @inbook{privacy:digihumtextbook2024,
    title     = {{The Threat of Surveillance and the Need for Privacy Protections}},
    author    = {Lindorfer, Martina},
    booktitle = {Introduction to Digital Humanism: A Textbook},
    editor    = {Werthner, Hannes and Ghezzi, Carlo and Kramer, Jeff and Nida-Rümelin, Julian and Nuseibeh, Bashar and Prem, Erich and Stanger, Allison},
    publisher = {Springer Nature Switzerland},
    pages     = {593--609},
    year      = {2024},
    isbn      = {978-3-031-45304-5},
    doi       = {10.1007/978-3-031-45304-5_37}
  }
  

• David Schmidt, Carlotta Tagliaro, Kevin Borgolte, Martina Lindorfer
  IoTFlow: Inferring IoT Device Behavior at Scale through Static Mobile Companion App Analysis
  ACM SIGSAC Conference on Computer and Communications Security (CCS), November 2023
         

  @inproceedings{iotflow:ccs2023,
    title     = {{IoTFlow: Inferring IoT Device Behavior at Scale through Static Mobile Companion App Analysis}},
    author    = {Schmidt, David and Tagliaro, Carlotta and Borgolte, Kevin and Lindorfer, Martina},
    booktitle = {Proceedings of the 30th ACM SIGSAC Conference on Computer and Communications Security (CCS)},
    location  = {Copenhagen, Denmark},
    year      = {2023},
    doi       = {10.1145/3576915.3623211}  
  }

   
  MEDIA: Futurezone
• Tobias Fiebig, Seda Gürses, Carlos H. Gañán, Erna Kotkam, Fernando Kuipers, Martina Lindorfer, Menghua Prisse, Taritha Sari
  Heads in the Clouds? Measuring Universities' Migration to Public Clouds: Implications for Privacy & Academic Freedom
  Privacy Enhancing Technologies Symposium (PETS), July 2023
       

  @inproceedings{cloudheads:pets2023,
    title     = {{Heads in the Clouds? Measuring Universities' Migration to Public Clouds: Implications for Privacy \& Academic Freedom}},
    author    = {Fiebig, Tobias and Gürses, Seda and Gañán, Carlos H. and Kotkam, Erna and Kuipers, Fernando and Lindorfer, Martina and Prisse, Menghua and Sari, Taritha},
    booktitle = {Proceedings of the 23rd Privacy Enhancing Technologies Symposium (PETS)},
    location  = {Lausanne, Switzerland},
    year      = {2023},
    doi       = {10.56553/popets-2023-0044}
  }
  

   
  MEDIA: Het Financieele Dagblad NL
• Amogh Pradeep, Álvaro Feal, Julien Gamba, Ashwin Rao, Martina Lindorfer, Narseo Vallina-Rodriguez, David Choffnes
  Not Your Average App: A Large-scale Privacy Analysis of Android Browsers
  Privacy Enhancing Technologies Symposium (PETS), July 2023
       

  @inproceedings{mobrowseres:pets2023,
    title     = {{Not Your Average App: A Large-scale Privacy Analysis of Android Browsers}},
    author    = {Pradeep, Amogh and Feal, Álvaro and Gamba, Julien and Rao, Ashwin and Lindorfer, Martina and Vallina-Rodriguez, Narseo and Choffnes, David},
    booktitle = {Proceedings of the 23rd Privacy Enhancing Technologies Symposium (PETS)},
    location  = {Lausanne, Switzerland},
    year      = {2023},
    doi       = {10.56553/popets-2023-0003}
  }
  

   
  * Runner-up for the Andreas Pfitzmann Best Student Paper Award *
  
• Jakob Bleier, Martina Lindorfer
  Of Ahead Time: Evaluating Disassembly of Android Apps Compiled to Binary OATs Through the ART
  European Workshop on Systems Security (EuroSec), May 2023
     

  @inproceedings{oatmeal:eurosec2023,
    title     = {{Of Ahead Time: Evaluating Disassembly of Android Apps Compiled to Binary OATs Through the ART}},
    author    = {Bleier, Bleier and Lindorfer, Martina},
    booktitle = {Proceedings of the 16th European Workshop on Systems Security (EuroSec)},
    location  = {Rome, Italy},
    year      = {2023},
    doi       = {10.1145/3578357.3591219}
  }

• Gerhard Jungwirth, Aakanksha Saha, Michael Schröder, Tobias Fiebig, Martina Lindorfer, Jürgen Cito
  Connecting the .dotfiles: Checked-In Secret Exposure with Extra (Lateral Movement) Steps
  International Conference on Mining Software Repositories (MSR), May 2023
       

  @inproceedings{dotfiles:msr2023,
    title     = {{Connecting the .dotfiles: Checked-In Secret Exposure with Extra (Lateral Movement) Steps}},
    author    = {Jungwirth, Gerhard and Saha, Aakanksha and Schröder, Michael and Fiebig, Tobias and Lindorfer, Martina and Cito, Jürgen},
    booktitle = {Proceedings of the 20th IEEE/ACM International Conference on Mining Software Repositories (MSR)},
    location  = {Melbourne, Australia},
    year      = {2023},
    doi       = {10.1109/MSR59073.2023.00051}
  }

• Florian Streibelt, Martina Lindorfer, Seda Gürses, Carlos H. Gañán, Tobias Fiebig
  Back-to-the-Future Whois: An IP Address Attribution Service for Working with Historic Datasets
  Passive and Active Measurement Conference (PAM), March 2023
       

  @inproceedings{bttfwhois:pam2023,
    title     = {{Back-to-the-Future Whois: An IP Address Attribution Service for Working with Historic Datasets}},
    author    = {Streibelt, Florian and Lindorfer, Martina and Gürses, Seda and Gañán, Carlos H.. and Fiebig, Tobias},
    booktitle = {Proceedings of the 24th Passive and Active Measurement Conference (PAM)},
    year      = {2023},
    doi       = {10.1007/978-3-031-28486-1_10}
  }
  

• Carlotta Tagliaro, Florian Hahn, Riccardo Sepe, Alessio Aceti, Martina Lindorfer
  Investigating HbbTV Privacy Invasiveness Across European Countries
  Workshop on Learning from Authoritative Security Experiment Results (LASER), March 2023
         

  @inproceedings{hbbtv:laser2023,
    title     = {{Investigating HbbTV Privacy Invasiveness Across European Countries}},
    author    = {Tagliaro, Carlotta and Hahn, Florian and Sepe, Riccardo and Aceti, Alessio and Lindorfer, Martina},
    booktitle = {Proceedings of the Workshop on Learning from Authoritative Security Experiment Results (LASER)},
    location  = {San Diego, CA, USA},
    year      = {2023},
    doi       = {10.14722/laser-ndss.2023.24102}
  }
  

• Carlotta Tagliaro, Florian Hahn, Riccardo Sepe, Alessio Aceti, Martina Lindorfer
  I Still Know What You Watched Last Sunday: Security and Privacy of the HbbTV Protocol in the European Smart TV Landscape
  Network and Distributed System Security Symposium (NDSS), March 2023
         

  @inproceedings{hbbtv:ndss2023,
    title     = {{I Still Know What You Watched Last Sunday: Security and Privacy of the HbbTV Protocol in the European Smart TV Landscape}},
    author    = {Tagliaro, Carlotta and Hahn, Florian and Sepe, Riccardo and Aceti, Alessio and Lindorfer, Martina},
    booktitle = {Proceedings of the 30th Network and Distributed System Security Symposium (NDSS)},
    location  = {San Diego, CA, USA},
    year      = {2023},
    doi       = {10.14722/ndss.2023.24102}
  }
  

   
  MEDIA: Ö1 Digital.Leben, TU Wien Press Release
   
  * Best Dutch Cyber Security Research Paper Award (DCSRP 2024 Multidisciplinary Track) *
  * Runner-up for the Caspar Bowden Award for Outstanding Research in Privacy Enhancing Technologies *
  
• Kaspar Hageman, Álvaro Feal, Julien Gamba, Aniketh Girish, Jakob Bleier, Martina Lindorfer, Juan Tapiador, Narseo Vallina-Rodriguez
  Mixed Signals: Analyzing Software Attribution Challenges in the Android Ecosystem
  IEEE Transactions on Software Engineering (TSE), January 2023
   

  @article{signals:tse2023,
    title   = {{Mixed Signals: Analyzing Software Attribution Challenges in the Android Ecosystem}},
    author  = {Hageman, Kaspar and Feal, Álvaro and Gamba, Julien and Girish, Aniketh and Bleier, Jakob and Lindorfer, Martina and Tapiador, Juan and Vallina-Rodriguez, Narseo},
    journal = {IEEE Transactions on Software Engineering},
    volume  = {49},
    number  = {4},
    month   = {April},
    year    = {2023},
    doi     = {10.1109/TSE.2023.3236582}
  }

• Tobias Fiebig, Seda Gürses, Martina Lindorfer
  Position Paper: Escaping Academic Cloudification to Preserve Academic Freedom
  Privacy Studies Journal (PSJ), December 2022
   

  @article{cloudheads:psj2022,
    title   = {{Position Paper: Escaping Academic Cloudification to Preserve Academic Freedom}},
    author  = {Fiebig, Tobias and Gürses, Seda and Lindorfer, Martina},
    journal = {Privacy Studies Journal},
    volume  = {1},
    number  = {1},
    month   = {December},
    year    = {2022},
    doi     = {10.7146/psj.vi.132713}
  }

• Amogh Pradeep, Muhammad Talha Paracha, Protick Bhowmick, Ali Davanian, Abbas Razaghpanah, Taejoong Chung, Martina Lindorfer, Narseo Vallina-Rodriguez, Dave Levin, David Choffnes
  A Comparative Analysis of Certificate Pinning in Android & iOS
  ACM Internet Measurement Conference (IMC), October 2022
       

  @inproceedings{pinning:imc2022,
    title     = {{A Comparative Analysis of Certificate Pinning in Android \& iOS}},
    author    = {Pradeep, Amogh and Paracha, Muhammad Talha and Bhowmick, Protick and Davanian, Ali and Razaghpanah, Abbas and Chung, Taejoong and Lindorfer, Martina and Vallina-Rodriguez, Narseo and Levin, Dave and Choffnes, David},
    booktitle = {Proceedings of the 22nd ACM Internet Measurement Conference (IMC)},
    location  = {Nice, France},
    year      = {2022},
    doi       = {10.1145/3517745.3561439}
  }

• Matthias Fassl, Simon Anell, Sabine Houy, Martina Lindorfer, Katharina Krombholz
  Comparing User Perceptions of Anti-Stalkerware Apps with the Technical Reality
  USENIX Symposium on Usable Privacy and Security (SOUPS), August 2022
       

  @inproceedings{stalkerware:soups2022,
    title     = {{Comparing User Perceptions of Anti-Stalkerware Apps with the Technical Reality}},
    author    = {Fassl, Matthias and Anell, Simon and Houy, Sabine and Lindorfer, Martina and Krombholz, Katharina},
    booktitle = {Proceedings of the USENIX Symposium on Usable Privacy and Security (SOUPS)},
    location  = {Boston, MA, USA},
    year      = {2022},
    url       = {https://www.usenix.org/conference/soups2022/presentation/fassl}
  }
  

• Florian Holzbauer, Johanna Ullrich, Martina Lindorfer, Tobias Fiebig
  Not that Simple: Email Delivery in the 21st Century
  USENIX Annual Technical Conference (ATC), July 2022
           

  @inproceedings{email:atc2022,
    title     = {{Not that Simple: Email Delivery in the 21st Century}},
    author    = {Holzbauer, Florian and Ullrich, Johanna and Lindorfer, Martina and Fiebig, Tobias},
    booktitle = {Proceedings of the USENIX Annual Technical Conference (ATC)},
    location  = {Carlsbad, CA, USA},
    year      = {2022},
    url       = {https://www.usenix.org/conference/atc22/presentation/holzbauer}
  }
  

• Arwa Al Alsadi, Kaichi Sameshima, Jakob Bleier, Katsunari Yoshioka, Martina Lindorfer, Michel van Eeten, Carlos H. Gañán
  No Spring Chicken: Quantifying the Lifespan of Exploits in IoT Malware Using Static & Dynamic Analysis
  ACM ASIA Conference on Computer and Communications Security (ASIACCS), June 2022
       

  @inproceedings{iotmw:asiaccs2022,
    title     = {{No Spring Chicken: Quantifying the Lifespan of Exploits in IoT Malware Using Static \& Dynamic Analysis}},
    author    = {Al Alsadi, Arwa Abdulkarim and Sameshima, Kaichi and Bleier, Jakob and Yoshioka, Katsunari and Lindorfer, Martina and Van Eeten, Michel and Gañán, Carlos Hernandez},
    booktitle = {Proceedings of the 17th ACM ASIA Conference on Computer and Communications Security (ASIACCS)},
    location  = {Nagasaki, Japan},
    year      = {2022},
    doi       = {10.1145/3488932.3517408}
  }

• Philipp Beer, Lorenzo Veronese, Marco Squarcina, Martina Lindorfer
  The Bridge between Web Applications and Mobile Platforms is Still Broken
  IEEE Workshop on Designing Security for the Web (SecWeb), May 2022
     

  @misc{customtabs:secweb2022,
    title     = {{The Bridge between Web Applications and Mobile Platforms is Still Broken}},
    author    = {Beer, Philipp and Veronese, Lorenzo and Squarcina, Marco and Lindorfer, Martina},
    booktitle = {3rd IEEE Workshop on Designing Security for the Web (SecWeb)},
    location  = {San Francisco, CA, USA},
    year      = {2022}
  }

• Jakob Bleier, Martina Lindorfer
  POSTER: ART-assisted App Diffing
  IEEE Symposium on Security and Privacy (S&P), May 2022
     

  @misc{oatmeal:oakland2022:poster,
    title     = {{POSTER: ART-assisted Android App Diffing}},
    author    = {Bleier, Jakob and Lindorfer, Martina},
    booktitle = {43rd IEEE Symposium on Security and Privacy (S\&P)},
    location  = {San Francisco, CA, USA},
    year      = {2022}
  }

• Davide Quarta, Michele Ianni, Aravind Machiry, Yanick Fratantonio, Eric Gustafson, Davide Balzarotti, Martina Lindorfer, Giovanni Vigna, Christopher Kruegel
  Tarnhelm: Isolated, Transparent & Confidential Execution of Arbitrary Code in ARM’s TrustZone
  Workshop on Research on offensive and defensive techniques in the Context of Man At The End Attacks (CheckMATE), November 2021
       

  @inproceedings{tarnhelm:checkmate2021,
    title     = {{Tarnhelm: Isolated, Transparent & Confidential Execution of Arbitrary Code in ARM’s TrustZone}},
    author    = {Quarta, Davide and Ianni, Michele and Machiry, Aravind and Fratantonio, Yanick and Gustafson, Eric and Balzarotti, Davide and Lindorfer, Martina and Vigna, Giovanni and Kruegel, Christopher},
    booktitle = {Proceedings of the 1st Workshop on Research on offensive and defensive techniques in the Context of Man At The End Attacks (CheckMATE)},
    location  = {Seoul, South Korea},
    year      = {2021},
    doi       = {10.1145/3465413.348857}
  }

• Olivier van der Toorn, Roland van Rijswijk-Deij, Tobias Fiebig, Martina Lindorfer, Anna Sperotto
  TXTing 101: Finding Security Issues in the Long Tail of DNS TXT Records
  International Workshop on Traffic Measurements for Cybersecurity (WTMC), September 2020
           

  @inproceedings{txting:wtmc2020,
    title     = {{TXTing 101: Finding Security Issues in the Long Tail of DNS TXT Records}},
    author    = {van der Toorn, Olivier and van Rijswijk-Deij, Roland and Fiebig, Tobias and Lindorfer, Martina and Sperotto, Anna},
    booktitle = {Proceedings of the 5th International Workshop on Traffic Measurements for Cybersecurity (WTMC)},
    location  = {Genoa, Italy},
    year      = {2020},
    doi       = {10.1109/EuroSPW51379.2020.00080}
  }
  

• Thijs van Ede, Riccardo Bortolameotti, Andrea Continella, Jingjing Ren, Daniel J. Dubois, Martina Lindorfer, David Choffnes, Maarten van Steen, Andreas Peter
  FlowPrint: Semi-Supervised Mobile-App Fingerprinting on Encrypted Network Traffic
  Network and Distributed System Security Symposium (NDSS), February 2020
           

  @inproceedings{flowprint:ndss2020,
    title     = {{FlowPrint: Semi-Supervised Mobile-App Fingerprinting on Encrypted Network Traffic}},
    author    = {van Ede, Thijs and Bortolameotti, Riccardo and Continella, Andrea and Ren, Jingjing and Dubois, Daniel J. and Lindorfer, Martina and Choffnes, David and van Steen, Marten and Peter, Andreas},
    booktitle = {Proceedings of the 27th Network and Distributed System Security Symposium (NDSS)},
    location  = {San Diego, CA, USA},
    year      = {2020},
    doi       = {10.14722/ndss.2020.24412}
  }
  

• Hojjat Aghakhani, Fabio Gritti, Francesco Mecca, Martina Lindorfer, Stefano Ortolani, Davide Balzarotti, Giovanni Vigna, Christopher Kruegel
  When Malware is Packin' Heat; Limits of Machine Learning Classifiers Based on Static Analysis Features
  Network and Distributed System Security Symposium (NDSS), February 2020
           

  @inproceedings{packware:ndss2020,
    title     = {{When Malware is Packin' Heat; Limits of Machine Learning Classifiers Based on Static Analysis Features}},
    author    = {Aghakhani, Hojjat and Gritti, Fabio and Mecca, Francesco and Lindorfer, Martina and Ortolani, Stefano and Balzarotti, Davide and Vigna, Giovanni and Kruegel, Christopher},
    booktitle = {Proceedings of the 27th Network and Distributed System Security Symposium (NDSS)},
    location  = {San Diego, CA, USA},
    year      = {2020},
    doi       = {10.14722/ndss.2020.24310}
  }

• Radhesh Krishnan Konoth, Emanuele Vineti, Veelasha Moonsamy, Martina Lindorfer, Christopher Kruegel, Herbert Bos, Giovanni Vigna
  MineSweeper: An In-depth Look into Drive-by Cryptocurrency Mining and Its Defense
  ACM Conference on Computer and Communications Security (CCS), October 2018
           

  @inproceedings{minesweeper:ccs2018,
    title     = {{MineSweeper: An In-depth Look into Drive-by Cryptocurrency Mining and Its Defense}},
    author    = {Konoth, Radhesh Krishnan and Vineti, Emanuele and Moonsamy, Veelasha and Lindorfer, Martina and Kruegel, Christopher and Bos, Herbert and Vigna, Giovanni},
    booktitle = {Proceedings of the 25th ACM SIGSAC Conference on Computer and Communications Security (CCS)},
    location  = {Toronto, Canada},
    year      = {2018},
    doi       = {10.1145/3243734.3243858}
  }
  

• Elleen Pan, Jingjing Ren, Martina Lindorfer, Christo Wilson, David Choffnes
  Panoptispy: Characterizing Audio and Video Exfiltration from Android Applications
  Privacy Enhancing Technologies Symposium (PETS), July 2018
         

  @inproceedings{panoptispy:pets2018,
    title     = {{Panoptispy: Characterizing Audio and Video Exfiltration from Android Applications}},
    author    = {Pan, Elleen and Ren, Jingjing and Lindorfer, Martina and Wilson, Christo and Choffnes, David},
    booktitle = {Proceedings of the 18th Privacy Enhancing Technologies Symposium (PETS)},
    location  = {Barcelona, Spain},
    year      = {2018},
    doi       = {10.1515/popets-2018-0030}
  }
  

   
  MEDIA: Gizmodo, Fortune, Engadget, Heise, Stern, Futurezone, New York Times (Op-Ed), ABC ScreenTime w/ Diane Sawyer, New York Times (The Privacy Project), amongst many others.
   
  * Presented at FTC PrivacyCon 2019 *
  
• Victor van der Veen, Martina Lindorfer, Yanick Fratantonio, Harikrishnan Padmanabha Pillai, Giovanni Vigna, Christopher Kruegel, Herbert Bos, Kaveh Razavi
  GuardION: Practical Mitigation of DMA-based Rowhammer Attacks on ARM
  Conference on Detection of Intrusions and Malware & Vulnerability Assessment (DIMVA), June 2018
           

  @inproceedings{guardion:dimva2018,
    title     = {{GuardION: Practical Mitigation of DMA-based Rowhammer Attacks on ARM}},
    author    = {van der Veen, Victor and Lindorfer, Martina and Fratantonio, Yanick and Padmanabha Pillai, Harikrishnan and Vigna, Giovanni and Kruegel, Christopher and Bos, Herbert and Razavi, Kaveh},
    booktitle = {Proceedings of the 15th Conference on Detection of Intrusions and Malware \& Vulnerability Assessment (DIMVA)},
    location  = {Saclay, France},
    year      = {2018},
    doi       = {10.1007/978-3-319-93411-2_5}
  }

   
  MEDIA: Ars Technica, Slashdot, Heise, amongst others.
   
  * Pwnie nomination for Best Privilege Escalation Bug *
  * Best Research Award at the International Conference on Computing Systems (CompSys 2018) *
  
• Jingjing Ren, Martina Lindorfer, Daniel Dubois, Ashwin Rao, David Choffnes, Narseo Vallina-Rodriguez
  Bug Fixes, Improvements, ... and Privacy Leaks – A Longitudinal Study of PII Leaks Across Android App Versions
  Network and Distributed System Security Symposium (NDSS), February 2018
             

  @inproceedings{appversions:ndss2018, 
    title     = {{Bug Fixes, Improvements, ... and Privacy Leaks -- A Longitudinal Study of PII Leaks Across Android App Versions}}, 
    author    = {Ren, Jingjing and Lindorfer, Martina and Dubois, Daniel and Rao, Ashwin and Choffnes, David and Vallina-Rodriguez, Narseo},
    booktitle = {Proceedings of the 25th Network and Distributed System Security Symposium (NDSS)},
    location  = {San Diego, CA, USA},
    year      = {2018},
    doi       = {10.14722/ndss.2018.23143}
  }

   
  * Presented at FTC PrivacyCon 2018 *
  
• Andrea Continella, Yanick Fratantonio, Martina Lindorfer, Alessandro Puccetti, Ali Zand, Christopher Kruegel, Giovanni Vigna
  Obfuscation-Resilient Privacy Leak Detection for Mobile Apps Through Differential Analysis
  Network and Distributed System Security Symposium (NDSS), February 2017
           

  @inproceedings{agrigento:ndss2017,
    title     = {{Obfuscation-Resilient Privacy Leak Detection for Mobile Apps Through Differential Analysis}},
    author    = {Continella, Andrea and Fratantonio, Yanick and Lindorfer, Martina and Puccetti, Alessandro and Zand, Ali and Kruegel, Christopher and Vigna, Giovanni},
    booktitle = {Proceedings of the 24th Network and Distributed System Security Symposium (NDSS)},
    location  = {San Diego, CA, USA},
    year      = {2017},
    doi       = {10.14722/ndss.2017.23465}
  }

• Victor van der Veen, Yanick Fratantonio, Martina Lindorfer, Daniel Gruss, Clémentine Maurice, Giovanni Vigna, Herbert Bos, Kaveh Razavi, Cristiano Giuffrida
  Drammer: Deterministic Rowhammer Attacks on Mobile Platforms
  ACM Conference on Computer and Communications Security (CCS), October 2016
                 

  @inproceedings{drammer:ccs2016,
    title     = {{Drammer: Deterministic Rowhammer Attacks on Mobile Platforms}},
    author    = {van der Veen, Victor and Fratantonio, Yanick and Lindorfer, Martina and Gruss, Daniel and Maurice, Clémentine and Vigna, Giovanni and Bos, Herbert and Razavi, Kaveh and Giuffrida, Cristiano},
    booktitle = {Proceedings of the 23rd ACM SIGSAC Conference on Computer and Communications Security (CCS)},
    location  = {Vienna, Austria},
    year      = {2016},
    doi       = {10.1145/2976749.2978406}
  }
  

   
  MEDIA: WIRED, Ars Technica, Slashdot, amongst others.
   
  * Pwnie Award for Best Privilege Escalation Bug and nomination for Most Innovative Research *
  * Best Dutch Cyber Security Research Paper Award (DCSRP 2017) *
  * Best Paper Award at the CSAW'17 Applied Research Competition *
  
• Jingjing Ren, Ashwin Rao, Martina Lindorfer, Arnaud Legout, David Choffnes
  ReCon: Revealing and Controlling PII Leaks in Mobile Network Traffic
  International Conference on Mobile Systems, Applications and Services (MobiSys), June 2016
           

  @inproceedings{recon:mobisys2016,
    author    = {Ren, Jingjing and Rao, Ashwin and Lindorfer, Martina and Legout, Arnaud and Choffnes, David},
    title     = {{ReCon: Revealing and Controlling PII Leaks in Mobile Network Traffic}},
    booktitle = {Proceedings of the 14th Annual International Conference on Mobile Systems, Applications and Services (MobiSys)},
    location  = {Singapore, Singapore},
    year      = {2016},
    doi       = {10.1145/2906388.2906392}
  }
  

   
  MEDIA: Boston Globe, NBC News, MSN News, Christian Science Monitor, amongst others.
   
  * Presented at FTC PrivacyCon 2017 *
  
• Patrick Carter, Collin Mulliner, Martina Lindorfer, William Robertson, Engin Kirda
  CuriousDroid: Automated User Interface Interaction for Android Application Analysis Sandboxes
  International Conference on Financial Cryptography and Data Security (FC), February 2016
         

  @inproceedings{curiousdroid:fc2016,
    title     = {{CuriousDroid: Automated User Interface Interaction for Android Application Analysis Sandboxes}},
    author    = {Carter, Patrick and Mulliner, Collin and Lindorfer, Martina and Robertson, William and Kirda, Engin},
    booktitle = {Proceedings of the 20th International Conference on Financial Cryptography and Data Security (FC)},
    location  = {Christ Church, Barbados},
    year      = {2016},
    doi       = {10.1007/978-3-662-54970-4_13}
  }
  

• Martina Lindorfer, Matthias Neugschwandtner, Christian Platzer
  Marvin: Efficient and Comprehensive Mobile App Classification Through Static and Dynamic Analysis
  Annual International Computers, Software & Applications Conference (COMPSAC), July 2015
         

  @inproceedings{marvin:compsac2015,
    title     = {{Marvin: Efficient and Comprehensive Mobile App Classification Through Static and Dynamic Analysis}},
    author    = {Lindorfer, Martina and Neugschwandtner, Matthias and Platzer, Christian},
    booktitle = {Proceedings of the IEEE 39th Annual International Computers, Software \& Applications Conference (COMPSAC)},
    location  = {Taichung, Taiwan},
    year      = {2015},
    doi       = {10.1109/COMPSAC.2015.103}
  }

   
  MEDIA: Futurezone, ORF Newton, SRF Kassensturz
• Martina Lindorfer, Matthias Neugschwandtner, Lukas Weichselbaum, Yanick Fratantonio, Victor van der Veen, Christian Platzer
  Andrubis - 1,000,000 Apps Later: A View on Current Android Malware Behaviors
  International Workshop on Building Analysis Datasets and Gathering Experience Returns for Security (BADGERS), September 2014
         

  @inproceedings{andrubis:badgers2014,
    title     = {{Andrubis - 1,000,000 Apps Later: A View on Current Android Malware Behaviors}},
    author    = {Lindorfer, Martina and Neugschwandtner, Matthias and Weichselbaum, Lukas and Fratantonio, Yanick and van der Veen, Victor and Platzer, Christian},
    booktitle = {Proceedings of the 3rd International Workshop on Building Analysis Datasets and Gathering Experience Returns for Security (BADGERS)},
    location  = {Wroclaw, Poland},
    year      = {2014},
    doi       = {10.1109/BADGERS.2014.7}
  }
  

• Lukas Weichselbaum, Matthias Neugschwandtner, Martina Lindorfer, Yanick Fratantonio, Victor van der Veen, Christian Platzer
  Andrubis: Android Malware Under The Magnifying Glass
  Technical Report, TU Wien, TR-ISECLAB-0414-001, July 2014
     

  @techreport{andrubis:tr2014,
    title       = {{Andrubis: Android Malware Under The Magnifying Glass}},
    author      = {Weichselbaum, Lukas and Neugschwandtner, Matthias and Lindorfer, Martina and Fratantonio, Yanick and van der Veen, Victor and Platzer, Christian},
    institution = {Vienna University of Technology},
    number      = {TR-ISECLAB-0414-001},
    year        = {2014}
  }

• Martina Lindorfer, Stamatis Volanis, Alessandro Sisto, Matthias Neugschwandtner, Elias Athanasopoulos, Federico Maggi, Christian Platzer, Stefano Zanero, Sotiris Ioannidis
  AndRadar: Fast Discovery of Android Applications in Alternative Markets
  Conference on Detection of Intrusions and Malware & Vulnerability Assessment (DIMVA), July 2014
       

  @inproceedings{andradar:dimva2014,
    title     = {{AndRadar: Fast Discovery of Android Applications in Alternative Markets}},
    author    = {Lindorfer, Martina and Volanis, Stamatis and Sisto, Alessandro and Neugschwandtner, Matthias and Athanasopoulos, Elias and Maggi, Federico and Platzer, Christian and Zanero, Stefano and Ioannidis, Sotiris},
    booktitle = {Proceedings of the 11th Conference on Detection of Intrusions and Malware \& Vulnerability Assessment (DIMVA)},
    location  = {Egham, UK},
    year      = {2014},
    doi       = {10.1007/978-3-319-08509-8_4}
  }
  

• Christian Platzer, Martin Stuetz, Martina Lindorfer
  Skin Sheriff: A Machine Learning Solution for Detecting Explicit Images
  International Workshop on Security and Forensics in Communication Systems (ASIACCS-SFCS), June 2014
   

  @inproceedings{skinsheriff:sfcs2014,
    title     = {{Skin Sheriff: A Machine Learning Solution for Detecting Explicit Images}},
    author    = {Platzer, Christian and Stuetz, Martin and Lindorfer, Martina},
    booktitle = {Proceedings of the 2nd International Workshop on Security and Forensics in Communication Systems (ASIACCS-SFCS)},
    location  = {Kyoto, Japan},
    year      = {2014},
    doi       = {10.1145/2598918.2598920}
  }
  

• Sebastian Neuner, Victor van der Veen, Martina Lindorfer, Markus Huber, Georg Merzdovnik, Martin Mulazzani, Edgar Weippl
  Enter Sandbox: Android Sandbox Comparison
  Workshop on Mobile Security Technologies (MoST), May 2014
     

  @inproceedings{sandboxcomparison:most2014,
    title     = {{Enter Sandbox: Android Sandbox Comparison}},
    author    = {Neuner, Sebastian and van der Veen, Victor and Lindorfer, Martina and Huber, Markus and Merzdovnik, Georg and Mulazzani, Martin and Weippl, Edgar},
    booktitle = {Proceedings of the 3rd Workshop on Mobile Security Technologies (MoST)},
    location  = {San Jose, CA, USA},
    year      = {2014}
  }

• Martina Lindorfer, Bernhard Miller, Matthias Neugschwandtner, Christian Platzer
  Take a Bite - Finding the Worm in the Apple
  International Conference on Information, Communications and Signal Processing (ICICS), December 2013
     

  @inproceedings{macmal:icics2013,
    title     = {{Take a Bite - Finding the Worm in the Apple}},
    author    = {Lindorfer, Martina and Miller, Bernhard and Neugschwandtner, Matthias and Platzer, Christian},
    booktitle = {Proceedings of the 9th International Conference on Information, Communications and Signal Processing (ICICS)},
    location  = {Tainan, Taiwan},
    year      = {2013},
    doi       = {10.1109/ICICS.2013.6782846}
  }
  

• Martina Lindorfer, Matthias Neumayr, Juan Caballero, Christian Platzer
  POSTER: Cross-Platform Malware: Write Once, Infect Everywhere
  ACM Conference on Computer and Communications Security (CCS), November 2013
     

  @misc{xplatform:ccs2013:poster,
    title     = {{POSTER: Cross-Platform Malware: Write Once, Infect Everywhere}},
    author    = {Lindorfer, Martina and Neumayr, Matthias and Caballero, Juan and Platzer, Christian},
    booktitle = {20th ACM SIGSAC Conference on Computer \& Communications Security},
    location  = {Berlin, Germany},
    year      = {2013},
    doi       = {10.1145/2508859.2512517}
  }

• Matthias Neugschwandtner, Martina Lindorfer, Christian Platzer
  A View to a Kill: WebView Exploitation
  USENIX Workshop on Large-Scale Exploits and Emergent Threats (LEET), August 2013
     

  @inproceedings{webview:leet2013,
    title     = {{A View To A Kill: WebView Exploitation}},
    author    = {Neugschwandtner, Matthias and Lindorfer, Martina and Platzer, Christian},
    booktitle = {Proceedings of the 6th USENIX Workshop on Large-Scale Exploits and Emergent Threats (LEET)},
    location  = {Washington, D.C. USA},
    year      = {2013},
    url       = {https://www.usenix.org/conference/leet13/workshop-program/presentation/neugschwandtner}
  }

• Martina Lindorfer, Alessandro Di Federico, Federico Maggi, Paolo Milani Comparetti, Stefano Zanero
  Lines of Malicious Code: Insights Into the Malicious Software Industry
  Annual Computer Security Applications Conference (ACSAC), December 2012
     

  @inproceedings{beagle:acsac2012,
    title     = {{Lines of Malicious Code: Insights Into the Malicious Software Industry}},
    author    = {Lindorfer, Martina and Di Federico, Alessandro and Maggi, Federico and Milani Comparetti, Paolo and Zanero, Stefano},
    booktitle = {Proceedings of the 28th Annual Computer Security Applications Conference (ACSAC)},
    location  = {Orlando, FL, USA},
    year      = {2012},
    doi       = {10.1145/2420950.2421001}
  }
  

• Martina Lindorfer, Clemens Kolbitsch, Paolo Milani Comparetti
  Detecting Environment-Sensitive Malware
  International Symposium on Recent Advances in Intrusion Detection (RAID), September 2011
       

  @inproceedings{disarm:raid2011,
    title     = {{Detecting Environment-Sensitive Malware}},
    author    = {Lindorfer, Martina and Kolbitsch, Clemens and Milani Comparetti, Paolo},
    booktitle = {Proceedings of the 14th International Symposium on Recent Advances in Intrusion Detection (RAID)},
    location  = {Menlo Park, CA, USA},
    year      = {2011},
    doi       = {10.1007/978-3-642-23644-0_18}
  }
  

Theses

• Malware Through the Looking Glass: Malware Analysis in an Evolving Threat Landscape
  Dissertation, TU Wien, November 2015
   
• Detecting Environment-Sensitive Malware
  Master's thesis, TU Wien, April 2011