I'm a PhD student at TU-Berlin / T-Labs working on mobile device/phone security.
Weblog www.mulliner.org/blog.
Index
-
Contact
Projects
Publications
- Talks and Presentations
Services
Events
Advisories
Research Interests
-
Mobile and Smart Phone Security including infrastructure (my main focus and hopefully dissertation area)
Vulnerability Analysis
Mobile Malware
Privacy
Embedded Systems Security
Network and Wireless Security (GSM/3G/LTE,WLAN,Bluetooth,RFID/NFC,...)
Operating Systems Security (strong focus on mobile device OSes)
General interests: Mobile Services, Location Based Services, Embedded-Linux, Unified Messaging
Projects
-
SMS (Short Message Service) Security Research
-
My SMS Security Research page
iPhone Security
-
My iPhone Security Research page
SymbianOS Exploitation and Shellcode Development
-
See my talk on Symbian OS exploitation. My SymbianOS Security Research page
Near Field Communication (NFC) Security
-
Specific interested in the security of NFC mobile phones. My NFC security projects
Contact
-
EMail: collin [AT] sec.t-labs.tu-berlin.de
Phone: +49-30-8353-58585 (work phone)
Fax: +49-
Address: Ernst-Reuter-Platz 7, 10593, Berlin, Germany
Room: TEL4, 1115
Publications
Peer Reviewed Papers
- Injecting SMS Messages into Smart Phones for Security Analysis In the Proceedings of the 3rd USENIX Workshop on Offensive Technologies Montreal, Canada August 2009 PDF, BibTeX entry, Slides
- Vulnerability Analysis and Attacks on NFC-enabled Mobile Phones In the Proceedings of the 1st International Workshop on Sensor Security (IWSS) at ARES 2009 Fukuoka, Japan March 2009 PDF, BibTeX entry
- Vulnerability Analysis of MMS User Agents Proceedings of the Annual Computer Security Applications Conference (ACSAC) Miami, Florida December 2006 PDF, BibTeX entry
- Using Labeling to Prevent Cross-Service Attacks Against Smart Phones Proceedings of the Conference on Detection of Intrusions and Malware and Vulnerability Assessment (DIMVA) Berlin, Germany July 2006 PDF, BibTeX entry
Book Chapters
- Contribution to Chapter 7. Mobile Malware Attacks and Defense USA November 2008 Amazon
- Kapitel 7. Iomega ZIP-Drive Howto Linux HOWTOs: Die besten Loesungen der Linuxgemeinde. (Marco Budde Hrsg.) Germany 1999 Amazon
Tech Reports
- Blueprinting - Remote Device Identification based on Bluetooth Fingerprinting Techniques 21st Chaos Communication Congress (21C3) Berlin, Germany December 2004 PDF
Talks and Presentations
- Fuzzing the Phone in your Phone 26th Chaos Communication Congress (26C3) Berlin, Germany December 28th 2009 PDF
- Fuzzing the Phone in your Phone RSS (Recurity Labs Security Symposium) Berlin, Germany October 27th 2009 PDF
- Sicherheit von mobile Devices: Risiken von iPhone, Android & Co TelekomForum Mobilfunktrends 2010 Bonn, Germany September 2009 PDF
- Smart Phone Security from the Attacker's Perspective 5th Annual Mobile Device Management and Security Forum Berlin, Germany September 2009 PDF
- Fuzzing the Phone in your Phone SEC-T Stockholm, Sweden September 2009 PDF
- Fuzzing the Phone in your Phone Black Hat USA 2009 Las Vegas, Nevada, USA July 2009 PDF
- Exploiting Symbian 25th Chaos Communication Congress (25C3) Berlin, Germany December 2008 PDF
- Attacking NFC Mobile Phones 25th Chaos Communication Congress (25C3) Berlin, Germany December 2008 PDF
- Exploiting Symbian BlackHat Japan Tokyo, Japan October 9th 2008 PDF
- Mobile Sicherheit Intensivseminar Hacking - Angriffe und Abwehrstrategien (Fraunhofer SIT) Darmstadt, Germany September 18th 2008
- NFC-basierte Handy-Bezahlsysteme CAST Workshop - SmartCards und Bezahlsysteme Darmstadt, Germany July 24th 2008
- Attacking NFC Mobile Phones EUSecWest London, UK May 2008 PDF
- Advanced Attacks Against PocketPC Phones SyScan Singapore, Singapore July 2007 PDF(invited)
- Advanced Attacks Against PocketPC Phones 23rd Chaos Communication Congress Berlin, Germany December 2006 PDF
- Advanced Attacks Against PocketPC Phones DEFCON-14 Las Vegas N.V., U.S.A. August 2006 PDF
- Exploiting PocketPC WhatTheHack! The Netherlands July 2005 PDF
Master's Thesis
- Security of Smart Phones Master's Thesis University of California Santa Barbara, U.S.A. June 2006 PDF
Services
- Program Committee for 1st International Workshop on Sensor Security (IWSS) at ARES, 2009
- Reviewer for the Annual Computer Security Applications Conference (ACSAC), 2006
Events
- PET Convention 2008.2 Sep. 30th, Darmstadt
updated: Mon Jan 4 10:24:30 CET 2010