Proceedings of the 20th ACM Asia Conference on Computer and Communications Security · 2024
Cited
10
Resume (English only)
Academic Achievements
Published 'URL Inspection Tasks: Helping Users Detect Phishing Links in Emails' at USENIX Security '25.
Published 'Phishing Attacks against Browser Extensions of Password Managers' at USENIX Security '25.
Published 'Breaking Bad: How Compilers Break Constant-Time Implementations' at ACM ASIACCS '25 (Best Paper Award).
Published 'Content, Nudges and Incentives: A Study on the Effectiveness and Perception of Embedded Phishing Training' at ACM CCS '24 (Distinguished Paper Award).
Published 'On (The Lack Of) Code Confidentiality in Trusted Execution Environments' at IEEE S&P '24.
Published 'Phishing in Organizations: Findings from a Large-Scale and Long-Term Study' at IEEE S&P '22.
Multiple publications in ACM WiSec, Journal of Computer Security, ACM TOPS, and arXiv.
Background
Postdoctoral researcher at the System Security group, ETH Zurich.
Research focuses on human-centered security, including novel attacks, countermeasures, and large-scale measurements.
Interests include usable system design, authentication techniques, security awareness and education, user interactions with security-sensitive elements, and the impact of modern hardware/software security on future system designs.
Research featured at Black Hat USA and covered by Forbes, BBC, and Tom's Hardware.
Findings on phishing awareness training showcased in Malwarebytes and First Watch podcasts, and at Security Awareness Day '23 hosted by the Swiss national CERT.