On-Demand Path-Aware Backbone
Global SCION backbone, independent of public Internet routing, with on-demand access and Hummingbird bandwidth reservations. I am responsible for the deployment.
Research
Ongoing projects and four papers at USENIX Security, ACM CoNEXT, ACM AsiaCCS and Financial Cryptography.
Ongoing Projects
- Global Resilient State Replication
- Enhanced Federated Training
Unpublished. Details will follow after publication.
Authenticated Browsing
Reconciling Application-Layer Flooding Defense with Data Confidentiality
Per-packet authentication based on federated login. Validators verify the tags at line rate and give authenticated traffic a reserved share of capacity, without terminating TLS or learning the user's identity. Built for regulated services such as banks and hospitals.
70M+authenticated packets/s per validator
160 Gbpsline rate on commodity hardware
67–86%of measured paths in Europe keep the header intact
BGP Vortex
Three legitimate BGP UPDATE messages can cause persistent route oscillation among large transit networks. All tested router implementations were affected, and RPKI and BGPsec do not prevent it.
PDFSA4P: Sensing & Actuation as a Privilege
A formally verified Peripheral Guard on the device authorizes each access to its sensors and actuators, so a compromised device cannot sense or actuate without permission.
PDFOff-Chain NFT Hijacking
Most interactions between NFT users and centralized services can be exploited with BGP or DNS hijacking to steal NFTs or cryptocurrency, without attacking the blockchain.
PDFTeaching & mentoring
Courses and MSc supervision at ETH Zürich.
Teaching
-
Network Security
350+ students
Oversaw the course update and the new graded projects.
-
Computer Networks
MSc supervision
- Fast client-side packet processing Led to Authenticated Browsing (CoNEXT 2026)
- Cloud routing security Student now at Harvard
- Secure overlay networking Student now a network engineer at Swisscom
- Network emulation with Kathará Basis of Computer Networks projects and ongoing research
Activities
Projects outside research.
Major League Security
A Swiss competition in constructive security.
Students identify a security problem in one of three tracks and propose a solution. Organized with ETH Zürich's Network Security Group, sponsored by Zürcher Kantonalbank.
- Networking & SCION
- Identity & E-ID
- Fintech Security
- 01Identify a problem
- 02Propose a solution
- 03Implement it (finalists)
- 04Pitch to the jury at ZKB
CHF 7,000in prizes
EmbossStudio
A web app that generates matching embossing dies and counter-dies from text or artwork. It checks manufacturability for the chosen paper and depths and outputs a 3D-printable pair for hobby roller presses.
- Compose
- Depth
- Paper
- Check
Reduces the cost of a custom die from hundreds of dollars to tens.
embossstudio.com →
Klub der Österreichischen Studierenden Zürich
430members
Association of Austrian students in Zurich, founded in 2020. It organizes events and helps new members settle in Switzerland.
koes.ch →