All Stories

  1. CrossFit: Demystifying VM Callback Bugs in Interpreters

    Article • Proceedings of the ACM on Software Engineering, June 2026, ACM (Association for Computing Machinery)

    Mathias Payer

  2. Subscription Bombing: Email under Attack

    Article • Communications of the ACM, April 2026, ACM (Association for Computing Machinery)

    Mathias Payer, candid wuest

  3. CLower: Detecting Compiler Pessimization Bugs through Redundant Memory Accesses

    Article • Proceedings of the ACM on Programming Languages, April 2026, ACM (Association for Computing Machinery)

    Mathias Payer

  4. eBPF Misbehavior Detection: Fuzzing with a Specification-Based Oracle

    Article • October 2025, ACM (Association for Computing Machinery)

    Mathias Payer

  5. Liberating Libraries through Automated Fuzz Driver Generation: Striking a Balance without Consumer Code

    Article • Proceedings of the ACM on Software Engineering, June 2025, ACM (Association for Computing Machinery)

    Mathias Payer

  6. MendelFuzz: The Return of the Deterministic Stage

    Article • Proceedings of the ACM on Software Engineering, June 2025, ACM (Association for Computing Machinery)

    Mathias Payer

  7. Top of the Heap: Efficient Memory Error Protection of Safe Heap Objects

    Article • December 2024, ACM (Association for Computing Machinery)

    Mathias Payer

  8. Fuzzing JavaScript Engines with a Graph-based IR

    Article • December 2024, ACM (Association for Computing Machinery)

    Mathias Payer

  9. Gradient: Gradual Compartmentalization via Object Capabilities Tracked in Types

    Article • Proceedings of the ACM on Programming Languages, October 2024, ACM (Association for Computing Machinery)

    Mathias Payer

  10. Tango: Extracting Higher-Order Feedback through State Inference

    Article • September 2024, ACM (Association for Computing Machinery)

    Ahmad Hazimeh, Mathias Payer, Duo Xu

  11. SyzRisk: A Change-Pattern-Based Continuous Kernel Regression Fuzzer

    Article • July 2024, ACM (Association for Computing Machinery)

    Mathias Payer

  12. TuneFuzz: Adaptively Exploring Target Programs

    Article • April 2024, ACM (Association for Computing Machinery)

    Mathias Payer

  13. Crystallizer: A Hybrid Path Analysis Framework to Aid in Uncovering Deserialization Vulnerabilities

    Article • November 2023, ACM (Association for Computing Machinery)

    Mathias Payer

  14. DatAFLow : Toward a Data-Flow-Guided Fuzzer

    Article • ACM Transactions on Software Engineering and Methodology, July 2023, ACM (Association for Computing Machinery)

    Antony Hosking, Mathias Payer

  15. DatAFLow : Toward a Data-flow-guided Fuzzer

    Article • ACM Transactions on Software Engineering and Methodology, July 2023, ACM (Association for Computing Machinery)

    Mathias Payer, Antony Hosking

  16. Fuzzing binaries using dynamic control flow analysis

    Article • July 2023, ACM (Association for Computing Machinery)

    Mathias Payer, Sirus Shahini

  17. Creating Trust by Abolishing Hierarchies

    Article • June 2023, ACM (Association for Computing Machinery)

    Mathias Payer

  18. Imprecise Store Exceptions

    Article • June 2023, ACM (Association for Computing Machinery)

    Mathias Payer

  19. One Fuzz Doesn’t Fit All: Optimizing Directed Fuzzing via Target-tailored Program State Restriction

    Article • December 2022, ACM (Association for Computing Machinery)

    Mathias Payer

  20. Designing a Provenance Analysis for SGX Enclaves

    Article • December 2022, ACM (Association for Computing Machinery)

    Mathias Payer

  21. PACMem

    Article • November 2022, ACM (Association for Computing Machinery)

    Mathias Payer, Professor Ying Liu

  22. Minerva: browser API fuzzing with dynamic mod-ref analysis

    Article • November 2022, ACM (Association for Computing Machinery)

    Mathias Payer

  23. Evocatio

    Article • November 2022, ACM (Association for Computing Machinery)

    Mathias Payer

  24. Automatically deduplicating program crashes by test case simplification and root-cause clustering

    Article • November 2021, ACM (Association for Computing Machinery)

    Ahmad Hazimeh, Mathias Payer

  25. μSCOPE: A Methodology for Analyzing Least-Privilege Compartmentalization in Large Software Artifacts

    Article • October 2021, ACM (Association for Computing Machinery)

    Mathias Payer

  26. Seed selection for successful fuzzing

    Article • July 2021, ACM (Association for Computing Machinery)

    Antony Hosking, Mathias Payer

  27. Gramatron: effective grammar-aware fuzzing

    Article • July 2021, ACM (Association for Computing Machinery)

    Mathias Payer

  28. Magma: A Ground-Truth Fuzzing Benchmark

    Article • ACM SIGMETRICS Performance Evaluation Review, June 2021, ACM (Association for Computing Machinery)

    Ahmad Hazimeh, Mathias Payer

  29. Rebooting Virtual Memory with Midgard

    Article • June 2021, Institute of Electrical & Electronics Engineers (IEEE)

    Mathias Payer

  30. Magma: A Ground-Truth Fuzzing Benchmark

    Article • May 2021, ACM (Association for Computing Machinery)

    Ahmad Hazimeh, Mathias Payer

  31. Too Quiet in the Library: An Empirical Study of Security Updates in Android Apps' Native Code

    Article • May 2021, Institute of Electrical & Electronics Engineers (IEEE)

    Mathias Payer

  32. Too Quiet in the Library: An Empirical Study of Security Updates in Android Apps’ Native Code

    Article • May 2021, Institute of Electrical & Electronics Engineers (IEEE)

    Mathias Payer

  33. Code Specialization through Dynamic Feature Observation

    Article • April 2021, ACM (Association for Computing Machinery)

    Mathias Payer

  34. Enclosure: language-based restriction of untrusted libraries

    Article • April 2021, ACM (Association for Computing Machinery)

    James Larus, Mathias Payer

  35. Magma

    Article • Proceedings of the ACM on Measurement and Analysis of Computing Systems, November 2020, ACM (Association for Computing Machinery)

    Ahmad Hazimeh, Mathias Payer

  36. SMoTherSpectre

    Article • November 2019, ACM (Association for Computing Machinery)

    Mathias Payer

  37. PoLPer

    Article • March 2019, ACM (Association for Computing Machinery)

    Mathias Payer

  38. Milkomeda

    Article • January 2018, ACM (Association for Computing Machinery)

    Mathias Payer

  39. Block Oriented Programming

    Article • January 2018, ACM (Association for Computing Machinery)

    Trent Jaeger, Mathias Payer

  40. HexType

    Article • October 2017, ACM (Association for Computing Machinery)

    Mathias Payer

  41. Enforcing Least Privilege Memory Views for Multithreaded Applications

    Article • October 2016, ACM (Association for Computing Machinery)

    Mathias Payer

  42. TypeSan

    Article • October 2016, ACM (Association for Computing Machinery)

    Mathias Payer