Fabian Kilger

Fabian Kilger

Wimi

Address:
 

Technische Universität München
Chair for IT Security (I20)
Boltzmannstraße 3
85748 Garching (near Munich)
Germany

Phone: +49 (0)89 289-18587
Fax: +49 (0)89 289-18579
E-Mail:
Room: 01.08.053

   

 

Research Interests

 

My area of research covers a wide range of program analysis topics and their applications in security. On top of that
I'm actively interested in (Binary) Exploitation techniques and CTFs.

Program Testing

  • Fuzzing + Hybrid Fuzzing
  • Symbolic/Concolic Execution
  • Abstract Interpretation
  • Dynamic Bug Detectors (e.g. ASAN, MemCheck, ...)
  • Static Analysis

Program Hardening:

  • Anti-Exploitation Techniques
  • Control-Flow Integrity

Reverse Engineering:

  • Malware Analysis and Vetting
  • (De-)obfuscation techniques
  • Binary Analysis
  • Taint-Analysis + Information Flow Control
  • Binary to IR lifters
  • Efficient Instrumentation Techniques (e.g. DBI)

Program Languages:

  • Safe languages
  • Applying security analyses to higher-level (script) languages
  • LLVM-Analyses

Open Student Topics

Teaching

    • Summer Semester 2026
      • Practical Course: Advanced Binary Exploitation
      • Exercises for Lecture: IT-Security 2
    • Winter Semester 2025/2026
      • Practical Course: Binary Exploitation
    • Summer Semester 2025
      • Practical Course: Binary Exploitation
      • Exercises for Lecture: IT-Security 2
    • Winter Semester 2024/2025
      • Practical Course: Binary Exploitation
    • Summer Semester 2024
      • Practical Course: Binary Exploitation
    • Winter Semester 2023
      • Practical Course: Binary Exploitation
      • Practical Course: Advanced Binary Exploitation
    • Summer Semester 2023
      • Practical Course: Binary Exploitation
      • Seminar: Software Security Analysis
    • Winter Semester 2022/2023
      • Practical Course: Binary Exploitation
    • Summer Semester 2022
      • Practical Course: Binary Exploitation
      • Seminar: Software Security Analysis
    • Winter Semester 2021/2022
      • Practical Course: Binary Exploitation
      • Seminar: Software Security Analysis
    • Summer Semester 2021
      • Practical Course: Binary Exploitation
      • Practical Course: Webapplication Security
      • Seminar: (In)Security of Online Voting
      • Seminar: Software Security Analysis
    • Winter Semester 2020/2021
      • Practical Course: Binary Exploitation
      • Seminar: Software Security Analysis

     

    CTF-Team

    I am currently mainly responsible for organizing our CTF-Team h4tum. If you'd like to join or have any questions, send me a mail!

    PGP Key

    Fingerprint: 4CF4 62FA F44B 68DC A618 9BD8 AF69 6A46 9B21 7E69

    -----BEGIN PGP PUBLIC KEY BLOCK-----

    xjMEYHltfxYJKwYBBAHaRw8BAQdA7mzpLUfZIcIiMjdx+GBa8RuqZdMp/MUEpu4PDTb2YwXNJEZh
    YmlhbiBLaWxnZXIgPGtpbGdlckBzZWMuaW4udHVtLmRlPsKLBBMWCAAzFiEETPRi+vRLaNymGJvY
    r2lqRpshfmkFAmB5bX8CGwMFCwkIBwIGFQgJCgsCBRYCAwEAAAoJEK9pakabIX5pCzcA/ivCFRRb
    xJfpiwOzV5CvflcHPNN2LmCxSBlcrBpliBhWAP43PcAtWheftijoLpcwy3nD0TVTDRrJY/hRkKDb
    vmrWCM44BGB5bX8SCisGAQQBl1UBBQEBB0BtYlZed2qkwQWmV+MaUhC78XgZI0ezLuU2nr8bocqX
    CAMBCAfCeAQYFggAIBYhBEz0Yvr0S2jcphib2K9pakabIX5pBQJgeW1/AhsMAAoJEK9pakabIX5p
    UNQA/juajzwCYdtbo+sXQUlZufPiPwLiPr6LuJBNZwL6OlbmAQDvyu6h+X9K2gzgLviiNEmcCAdd
    wynvjXiLt3c+oir7AA==
    =VdeZ
    -----END PGP PUBLIC KEY BLOCK-----

    Publications

    2026   State of Browser Process-Isolation: The Same-Site Weakness

    2026 IEEE Symposium on Security and Privacy (SP)
    2024   ISLAB: Immutable Memory Management Metadata for Commodity Operating System Kernels

    ACM Asia Conference on Computer and Communications Security (AsiaCCS)
    2021   Detecting and Preventing Faked Mixed Reality

    2021 IEEE 4th International Conference on Multimedia Information Processing and Retrieval (MIPR)