Docs

Presentations

• Pwning Intel Pin: Reconsidering Intel Pin in Context of Security

  Julian Kirsch, Zhechko Zhechev

  REcon 2018, Montreal

  Slides Code
• Dynamic Loader Oriented Programming on Linux

  Julian Kirsch, Bruno Bierbaumer

  DeepSec 2017, Vienna

  Slides Code
• M/o/Vfuscator-Be-Gone: Recovering from soul-crushing RE nightmares

  Julian Kirsch, Clemens Jonischkeit

  REcon 2016, Montreal

  Slides Code
• Revealing the Machine: A Study of the Rich Header and Respective Malware Triage

  Julian Kirsch, George Webster

  Hacktivity 2016, Budapest

  Slides Code
• Towards Transparent Dynamic Binary Instrumentation using Virtual Machine Introspection

  Julian Kirsch

  REcon 2015, Montreal

  Slides Code
• Knock: Stealthy TCP Servers

  Julian Kirsch, Maurice Leclaire, Christian Grothoff

  30c3 2013, Hamburg

  Slides Code

Academic Publications

• Robust, Automated, Binary-Only Forensic Analysis of Linux Memory Snapshots

  Fabian Franzen, Tobias Holl, Manuel Andreas, Julian Kirsch, and Jens Grossklags

  RAID, Oct. 2022.

  PDF
• Kernel-Assisted Debugging of Linux Applications

  Tobias Holl, Philipp Klocke, Fabian Franzen, and Julian Kirsch

  ROOTS, Nov 2018

  PDF Code
• Pwning Intel piN – Why DBI is Unsuitable for Security Applications

  Julian Kirsch, Zhechko Zhechev, Bruno Bierbaumer, and Thomas Kittel

  ESORICS, Sep 2018

  PDF Code
• Smashing the Stack Protector for Fun and Profit

  Bruno Bierbaumer, Julian Kirsch, Thomas Kittel, Aurélien Francillon, and Apostolis Zarras

  IFIP SEC, Sep 2018

  PDF Slides Code
• Towards Consolidation of On-the-Fly Virtualization and Virtual Machine Introspection

  Sergej Proskurin, Julian Kirsch, and Apostolis Zarras

  IFIP SEC, Sep 2018

  PDF Code
• Honey, I Shrunk Your App Security: The State of Android App Hardening

  Vincent Haupert, Dominik Maier, Nicolas Schneider, Julian Kirsch, and Tilo Müller

  DIMVA, Jun 2018

  PDF
• Enhancing Control Flow Graph Based Binary Function Identification

  Clemens Jonischkeit and Julian Kirsch

  ROOTS, Nov 2017

  PDF Slides Code
• Dynamic Loader Oriented Programming on Linux

  Julian Kirsch, Bruno Bierbaumer, Thomas Kittel, and Claudia Eckert

  ROOTS, Nov 2017

  See the poster.

  PDF Slides Code
• A Study of the PE32 Rich Header and Respective Malware Triage

  George Webster, Bojan Kolosnjaji, Christian von Pentz, Zachary Hanif, Julian Kirsch, Apostolis Zarras, and Claudia Eckert.

  DIMVA, Jul 2017

  PDF Slides Code
• Combating Control Flow Linearization

  Julian Kirsch, Clemens Jonischkeit, Thomas Kittel, Apostolis Zarras, and Claudia Eckert

  IFIP SEC, May 2017

  PDF Slides Code
• Autocorrelation-Based Detection of Infinite Loops at Runtime

  Andreas Ibing, Julian Kirsch, and Lorenz Panny

  DASC, Aug 2016

  PDF
• Counteracting Data-Only Malware with Code Pointer Examination

  Thomas Kittel, Julian Kirsch, and Claudia Eckert

  RAID, Nov 2015

  PDF

Theses

• Malicious Bits and how to fight them

  Julian Kirsch

  PhD Thesis in Computer Science, Technische Universität München, Sep 2022

  PDF Slides
• Improved Kernel-Based Port-Knocking in Linux

  Julian Kirsch

  MSc Thesis in Computer Science, Technische Universität München, Aug 2014

  PDF Slides