Projects
This section contains projects I worked on during my professional career.
Topics: Loki, Prometheus, Grafana, Promtail, Netdata, Rsyslogd, Docker, Nginx, Kubernetes, DevOps 2023
Kubernetes Individual Service Monitoring with the PLG stack
Setup of central monitoring and logging server with production-ready monitoring dashboards.
Promtail's syslog interface only accepts TCP, while nginx' syslog logger only sends UDP.
Topics: Docker, Kubernetes, DevOps, CI/CD, WebFlow, Automation, TechnicalExpertise 2023
Tamarin-TLS Research Demonstrator
A ScrollyTelling demonstrator which presents complex technical issues in an understandable and engaging way.
Preparing complex technical content (Formal verification) for non computer scientists is hard.
Topics: Kubernetes, DevOps, K3S, Gitlab, Helm 2023
Kubernetes Cluster Setup, Proxmox Management & Automated DevOps Deployment
Setup and integration of a k3s based kubernetes cluster into gitlab for AutoDevOps integration.
k3s' helm controller is a time-saver, especially for small teams.
Topics: Typescript, React, Parcel, HTML, CSS, Emotion, Storybook, Tamarin, DevOps, Docker, Kubernetes 2022
MisLi - A new GUI Frontend for Tamarin (MissingLink)
A React and TypeScript based dynamic graph render library and user interface for the Tamarin-Prover. During development there was a huge focus on rendering the SVG-based graph in a performant way, to keep the re-render count small.
There's a reason, why people write papers about graph layouting.
Topics: Docker, Python, DevOps, TechnicalExpertise 2021
Dr. Headerson Research Demonstrator - Automated checking of XFO/CSP headers
A small browser-based tool, which checks a website's vulnerability to clickjacking.
Many webmasters are not aware of clickjacking counter-measures.
Topics: JSON, Eprints, Metabase, SQL, Docker 2020
PubC - Publication Curation and Evaluation w/ ePrints and MetaBase
Publication evaluation & statistics WebApp.
Metabase is awesome, zero setup, multiple data-source, it just works.
Topics: Perl, Eprints, HTML, CSS 2019
ePrints extension for publications.cispa.saarland
Extending ePrints with a conference, journal and conf/journal-ranking system.
I think I don't like Perl
Topics: Memory-Driven-Computing, Application-Manipulation, Docker, LD_PRELOAD, Vagrant, Virtualbox, Singularity, QEMU 2019
Memory Management Library for MDC architecture and Memory Driven Computing Research Evaluation
The project implemented a prototypical memory-management library, that made applications benefit from MDC hardware without changing their source code.
LD_PRELOAD and modifying shared libraries is an awesome mechanism to modify and enhance applications without touching their source code.
Topics: Application-Management-System, Python, Odoo, Docker, CSS, HTML, JavaScript 2019
Custom Application Management System with odoo
Customized Application Management system, based on Odoo ERP/CRM
Odoo is great from a developer's perspective.
Topics: Public-Call-for-Bids, Public-Service 2019
Public Offering & Technical Consulting of a new website for cispa.de
Technical Expertise Lead in specifying the public offering yext for the current cispa.de.
Writing a Public Call for Bids is no fun.
Topics: Jekyll, Netlify, Gitlab, CI/CD 2019
Headless CMS extension for cispa.de with Jekyll and Netlify
Headless CMS for cispa.saarland with Jekyll and Netlify for th non-tech personnel.
A Static Website Generator can be a CMS, too!
Topics: Java, Python, Rust, C, C++, Android, Android-Middleware, Android-System, Android-Art, Android-Emulator, Compiler-Development, Android-Apps, AFL 2018
Monkey-Troop - Large Scale Automated Android Middleware Fuzzing
Large scale automated Android middleware fuzzing.
Fuzzing like a troop of monkeys
Topics: Python, Playstore, Android-Apk 2018
PlayGround - Automated Google Playstore Crawler and downloader (APK-Mirror)
Automated Google Playstore Crawler, Downloader and Sorter
Putting 100k+ files in a single folder is not a good idea
Topics: Docker, Gitlab, Latex, CI/CD 2017
DebLatex: Gitlab Pipelines for automated Researcher Paper Deployment
Automatic research paper building on CI/CD infrastructure with custom docker image.
Properly maintaining docker images is a time sink.
Topics: Gitlab, CI/CD, Docker 2017
Gitlab CI & CD Introduction and Implementation at CISPA
Introduced CI/CD mechanics at CISPA and was contact person for it.
Topics: Publication-Management, Eprints, Perl, SQL, JSON 2017
Publication Management System Implementation with ePrints
Evaluation, Setup, Migration and Extension of new Publication Management System
Old software has its Pros.
Topics: Java, Python, Rust, C, C++, Android, Android-Middleware, Android-System, Android-Art, Android-Emulator, Compiler-Development, Android-Apps, AFL 2017
Fuzzing the Android Middleware
An automated large-scale Android Middleware fuzzer
Instrumenting the Android middleware with ARTist to get feedback when fuzzing the Android-Middleware.
Topics: Static-Website-Generator, Jekyll, Liquid, Ruby, SCSS, HTML, Bootstrap, JavaScript, CI/CD, Gitlab, Automation 2017
New Website for cispa.de with Jekyll Static Website Generator
Static Website Generator with dynamic content generation for cispa.de with Jekyll, Bootstrap and automatic data aggregation on gitlab CI/CD
Dedicated system for specific tasks are great. CI/CD automatic is robust.
Topics: Java, Android, Android-Middleware, Android-System, Android-Art, Compiler-Development, Dex2oat, Android-Apps, Mobile-Development 2016
ARTist - the flexible Android Instrumentation Framework
ARTist is a flexible Android instrumentation framework for security researchers and developers based on the Android Runtime’s dex2oat on-device compiler.
Application instrumentation works and is useful.
Topics: LAMP, WordPress, PHP, HTML, CSS 2016
Wordpress-based Website for IT-Sicherheit Saarland Initiative
Wordpress based website for ITSS IT-Sicherheit Saarland.
WordPress is quite good when sticking close to the official API
Topics: Java, Android, Android-Middleware, Wala, Joana, Soot 2015
Axplorer - Static Software Analysis of the Android Middleware
Static Software Analysis of the Android Middleware with wala/joana (& soot exploration)
The Android middleware is not so hidden after all.
Topics: LLVM, Clang, Linker-Manipulation, C, C++ 2014
LLVM-Clang Compiler Optimizations & Linker Manipulations
Loading code in special permission memory regions, by redirecting function callsand utilizing the linker and custom clang optimization passes.
A research idea, that didn't come to fruition, but "Writing clang optimization passes is not that hard after all"
Topics: LAMP, WordPress, PHP, SQL, CSS, HTML 2014
Wordpress-based Website for CISPA (cispa-security.de) and the InfSec Research Group
Modernized amd maintainable website for CISPA and the research groups with Wordpress and developed plugin code.
Popular plugins are not always the best choice.
Topics: Android, Android-Apps, Android-NDK, Android-SDK, Audio-Low-Level, OpenSL-ES, C, C++, Java, Java-JNI, VoIP, RTP, SIP, TLS, SRTP, Key-Exchange, Smart-Cards, Stream-Encryption 2013
Vodafone Secure Voice for Android
Software Developer for Secure VoIP on Android OS with SIM-based certificates
You can store certificates on SIM cards and read them in Android apps.
Topics: Android, Android-Apps, Android-NDK, Android-SDK, Audio-Low-Level, OpenSL-ES, C, C++, Java, Java-JNI, VoIP, RTP, SIP, TLS, SRTP, Key-Exchange, Smart-Cards, Stream-Encryption 2011
SecuVoice - Android-based SmartCard Encrypted Secure Voice for Android
Software Developer for Secure VoIP on Android OS with SD smart-cards
Cutting an audio stream into small packets, encrypting them and sending them through the internet is fun.