Mathias Josef Payer

Mathias Payer is a security researcher and professor at the EPFL school of computer and communication sciences (IC), leading the HexHive group. His research focuses on protecting applications in the presence of vulnerabilities, with a focus on memory corruption and type violations. He is interested in software security, system security, binary exploitation, effective mitigations, fault isolation/privilege separation, strong sanitization, and software testing (fuzzing) using a combination of binary analysis and compiler-based techniques. More details are available in his CV.Curriculum vitae See: https://nebelwelt.net/cv-payerm.pdf Teaching & PhD PhD Students Eduard Vlad, Florian Hofhammer, Han Zheng, Zhiyao Feng, Philipp Yuxiang Mao, Rafaila Galanopoulou, Tao Lyu, Chibin Zhang, Claudio Migliorelli, Luca Di Bartolomeo Past EPFL PhD Students Atri Bhattacharyya, Ahmad Hazimeh, Nicolas Badoux Courses Information security and privacy COM-402 This course provides an overview of information security and privacy topics. It introduces students to the knowledge and tools they will need to deal with the security/privacy challenges they are likely to encounter in today's world. The tools are illustrated with relevant applications. Software security CS-412 This course focuses on software security fundamentals, secure coding guidelines and principles, and advanced softwaresecurity concepts. Students learn to assess and understand threats, learn how to design and implement secure softwaresystems, and get hands-on experience with security pitfalls. Awards Distinguished Member of ACM, the Association for Computing Machinery Association for Computing Machinery (ACM) 2024 Usenix Security '24 distinguished paper award for HyperPill Usenix Association 2024 Usenix WOOT '24 best paper award for "Exploiting Android's Hardened Memory Allocator" Usenix Association 2024 RAID '24 best paper award for "Tango: Extracting Higher-Order Feedback through State Inference" Association for Computing Machinery (ACM) 2024 BAR '24 best paper award for "SURGEON: Performant, Flexible and Accurate Re-Hosting via Transplantation" Internet Society (ISOC) 2024 NDSS '25 distinguished paper award for DUMPLING Internet Society (ISOC) 2025 NDSS '25 distinguished paper award for Type++ Internet Society (ISOC) 2025