Tilo Müller

A systematic approach to understanding MACB timestamps on Unix-like systems

2022 · Forensic Science International Digital Investigation

File timestamps are used by forensics practitioners as a fundamental artifact. For example, the creation of user files can show traces of user activity, while system files, like configuration and log files, typically reveal when …

Profiling with trust: system monitoring from trusted execution environments

2024 · Design Automation for Embedded Systems

Abstract Large-scale attacks on IoT and edge computing devices pose a significant threat. As a prominent example, Mirai is an IoT botnet with 600,000 infected devices around the globe, capable of conducting effective and targeted …