Anil Kurmus  Anil Kurmus photo         

contact information

Systems Security Researcher
Zurich Research Laboratory, Zurich, Switzerland



From random block corruption to privilege escalation: A filesystem attack vector for rowhammer-like attacks
Anil Kurmus, Nikolas Ioannou, Matthias Neugschwandtner, Nikolaos Papandreou, Thomas Parnell
11th USENIX Workshop on Offensive Technologies (WOOT), 2017


A Transparent Defense Against USB Eavesdropping Attacks
Matthias Neugschwandtner, Anton Beitler, Anil Kurmus
Proceedings of the 9th European Workshop on System Security, pp. 6:1--6:6, ACM, 2016

AsyncShock: Exploiting synchronisation bugs in Intel SGX enclaves
Nico Weichbrodt, Anil Kurmus, Peter Pietzuch, Rudiger Kapitza
European Symposium on Research in Computer Security, pp. 440--457, 2016


A Tale of Two Kernels: Towards Ending Kernel Hardening Wars with Split Kernel
Anil Kurmus, Robby Zippel
Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security, pp. 1366--1377

Quantifiable Run-time Kernel Attack Surface Reduction
Anil Kurmus, Sergej Dechand, Rudiger Kapitza
DIMVA'14, LNCS, 2014


Secure Logical Isolation for Multi-tenancy in cloud storage
Michael Factor, David Hadas, Aner Hamama, Nadav Har'el, Elliot K Kolodner, Anil Kurmus, Alexandra Shulman-Peleg, Alessandro Sorniotti
Mass Storage Systems and Technologies (MSST), 2013 IEEE 29th Symposium on, pp. 1--5

Implementation and Implications of a Stealth Hard-Drive Backdoor
Jonas Zaddach, Anil Kurmus, Davide Balzarotti, Erik-Oliver Blass, Aurelien Francillon, Travis Goodspeed, Moitrayee Gupta, Ioannis Koltsidas
Proceedings of Annual Computer Security Applications Conference (ACSAC), pp. 279--288, 2013
Best student paper award

Attack Surface Metrics and Automated Compile-Time OS Kernel Tailoring
Anil Kurmus, Reinhard Tartler, Daniela Dorneanu, Bernhard Heinloth, Valentin Rothberg, Andreas Ruprecht, Wolfgang Schroder-Preikschat, Daniel Lohmann, Rudiger Kapitza
Proceedings of the 20th Network and Distributed System Security Symposium, 2013


Secure Cloud Maintenance -- Protecting workloads against insider attacks
Sören Bleikertz, Anil Kurmus, Zoltan A. Nagy, Matthias Schunter
ASIACCS ACM Symposium on Information, Computer and Communications Security, 2012

Automatic OS Kernel TCB Reduction by Leveraging Compile-Time Configurability
Reinhard Tartler, Anil Kurmus, Andreas Ruprecht, Bernhard Heinloth, Valentin Rothberg, Daniela Dorneanu, R\"udiger Kapitza, Wolfgang Schr\"oder-Preikschat, Daniel Lohmann
Proceedings of the 8th Workshop on Hot Topics in System Dependability (HotDep '12), 2012


The F_f-Family of Protocols for RFID-Privacy and Authentication
Erik-Oliver Blass, Anil Kurmus, Refik Molva, Guevara Noubir, Abdullatif Shikfa
RFIDSec, pp. 466-480, 2011

A Comparison of Secure Multi-Tenancy Architectures for Filesystem Storage Clouds
Anil Kurmus, Moitrayee Gupta, Roman Pletka, Christian Cachin, Robert Haas
Middleware, pp. 471-490, Springer, 2011

Attack surface reduction for commodity OS kernels: trimmed garden plants may attract less bugs
A. Kurmus, A. Sorniotti, R. Kapitza
Proceedings of the Fourth European Workshop on System Security, pp. 6, 2011

The $\{$Huge $ F\_f $$\}$-Family of Protocols for RFID-Privacy and Authentication
E O Blass, A Kurmus, R Molva, G Noubir, A Shikfa
Dependable and Secure Computing, IEEE Transactions on pp. 99, 1--1, IEEE, 2011


Design and implementation of a key-lifecycle management system
M Björkqvist, C Cachin, R Haas, X Y Hu, A Kurmus, R Pawlitzek, M Vukolic
Financial Cryptography and Data Security, 160--174, Springer, 2010


Strict Access Control in a Key-Management Server
C Cachin, A Kurmus, M Vukoli{'c}
2009 - Citeseer, Citeseer

PSP: private and secure payment with RFID
Erik-Oliver Blass, Anil Kurmus, Refik Molva, Thorsten Strufe
WPES, pp. 51-60, 2009

Studying and Experimenting with Threats Against Voice over IP Systems
A Kurmus, JF Garet
Technical Report, 2009

Projects and Groups