Faculty
U.S. FBI Honorable Mention for Zeus P2P Botnet Takedown
2018: Capital - Young Elite - 40 below 40
Technology Review - Top Innovators Below 35 in Germany
2017: Busy Beaver Award for "Cybersecurity I" and "Malware Analysis and Intrusion Detection"
Prof. Dr. Christian Rossow is tenured faculty at CISPA and full professor for Information Security at TU Dortmund. His research group on
System Security is located in Dortmund. Before, he was professor at Saarland University and a postdoctoral researcher at the VU Amsterdam (Herbert Bos) and the Ruhr University Bochum (Thorsten Holz). He obtained his PhD degree from the VU Amsterdam in 2013. His research group primarily centers on network and software security, including Denial-of-Service threats and program exploitation and defenses.
IEEE Symposium on Security and Privacy (S&P)
Crashing Through Defenses: Exploiting Segfaults and Chaining around Intel CET
IEEE Symposium on Security and Privacy (S&P)
PLaTypus: Restricting Cross-Module Transitions to Mitigate Code-Reuse Attacks
Annual Computer Security Applications Conference (ACSAC)
GET /large.file HTTP/1.1: Connection-Based TCP Amplification Attacks
ACM Conference on Computer and Communications Security (CCS)
Styled to Steal: The Overlooked Attack Surface in Email Clients
Usenix Security Symposium (USENIX-Security)
Await() a Second: Evading Control Flow Integrity by Hijacking C++ Coroutines
Cryptographic Hardware and Embedded Systems (CHES)
KeyVisor – A Lightweight ISA Extension for Protected Key Handles with CPU-enforced Usage Policies
The Web Conference (WWW)
Peripheral Instinct: How External Devices Breach Browser Sandboxes
Network and Distributed System Security Symposium (NDSS)
Cascading Spy Sheets: Exploiting the Complexity of Modern CSS for Email and Browser Fingerprinting
European Symposium on Research in Computer Security (ESORICS)
NICraft: Malicious NIC Firmware-Based Cache Side-Channel Attack
ACM Internet Measurement Conference (IMC)
The Age of DDoScovery: An Empirical Comparison of Industry and Academic DDoS Assessments