Secure Web Applications Group• Assisted and conducted research on reproducible web crawling, resulting in a publication• Supported maintaining the CTF-like teaching infrastructure during the Web Security lecture

• Established a taxonomy of path traversal vulnerabilities by systematically analyzing external (CVE) and internal (VRP) vulnerability reports• Designed and documented a generic path traversal detector for Google’s internal web security scanners• Implemented (Java) and launched detector as a plugin of the (open-source) Tsunami network security scanner• Collaborated on an Orange Team exercise, hosted by Google's Red Team

Secure Web Applications Group• Reworked, modularized, and maintained CTF-like social network used for teaching purposes (Python)• Supported Web Security lecture as Teaching Assistant: held tutorial (~60 participants) & helped grading exam• Collaborated on and published research on inconsistencies in real-world web security header configurations

Information Security & Cryptography Group• Utilized AI Planning (PDDL) to find most efficient defenses against DDoS attacks on DNS name servers• Designed model of the Internet on AS-level using Neo4j & Python to approximate routing of DNS requests• Implemented Python toolchain to automatically synthesize AI Planning domain and problem description (PDDL)

• Supervised weekly classes in Big Data Engineering (ST20, online due to pandemic) lecture (~30 participants each)• Designed, planned, and graded exercise sheets and exams

• Supervised weekly classes in Foundations of Cybersecurity II (ST19, in presence) lecture (~30 participants each)• Designed, planned, and graded exercise sheets and exams