Profile

UPDATE: I graduated in July 2014, and now work as a Systems Security Researcher at IBM. This page is no longer updated. Please consult this page for up-to-date information and latest publications.

I am a security researcher in the Cloud and Storage Security group at IBM Research - Zurich. My interests are mainly on systems security, software security, storage systems, and applied cryptography. I am also an external PhD candidate at the distributed systems group in TU Braunschweig; the main focus of my thesis is on Linux kernel attack surface reduction.

Publications

2014

• Anil Kurmus, Sergej Dechand and Rüdiger Kapitza: Quantifiable Run-time Kernel Attack Surface Reduction, in Proceedings of the 10th International Conference on Detection of Intrusions and Malware, and Vulnerability Assessment (DIMVA'14), London/Egham, UK, 2014 (kurmus14dimva, BibTeX)

2013

• Erik-Oliver Blass, Anil Kurmus, Refik Molva and Thorsten Strufe: PSP: Private and secure payment with RFID, in Computer Communications, Vol. 36, No. 4, pages 468-480, 2013 (blass13comcom, BibTeX)
• Michael Factor, David Hadas, Aner Harnama, Nadav Har'el, Elliot K. Kolodner, Anil Kurmus, Alexandra Shulman-Peleg and Alessandro Sorniotti: Secure Logical Isolation for Multi-tenancy in cloud storage, in Mass Storage Systems and Technologies, IEEE Conference on, Los Alamitos, CA, USA, 2013 (factor13msst, BibTeX)
• Anil Kurmus, Reinhard Tartler, Daniela Dorneanu, Bernhard Heinloth, Valentin Rothberg, Andreas Ruprecht, Wolfgang Schröder-Preikschat, Daniel Lohmann and Rüdiger Kapitza: Attack Surface Metrics and Automated Compile-Time OS Kernel Tailoring, in Proceedings of the 20th Network and Distributed System Security Symposium (NDSS '13), Internet Society (ISOC), San Diego, CA United States, 2013 (kurmus13ndss, BibTeX)
• Jonas Zaddach, Anil Kurmus, Davide Balzarotti, Erik-Oliver Blass, Aurelien Francillon, Travis Goodspeed, Moitrayee Gupta and Ioannis Koltsidas: Implementation and Implications of a Stealth Hard-Drive Backdoor, in Proceedings of Annual Computer Security Applications Conference (ACSAC), 2013 (zaddach13acsac, BibTeX, Best Student Paper Award)

2012

• Sören Bleikertz, Anil Kurmus, Zoltan A. Nagy and Matthias Schunter: Secure Cloud Maintenance - Protecting workloads against insider attacks, in ASIACCS ACM Symposium on Information, Computer and Communications Security, 2012 (bleikertz12asiaccs, BibTeX)
• Reinhard Tartler, Anil Kurmus, Andreas Ruprecht, Bernhard Heinloth, Valentin Rothberg, Daniela Dorneanu, Rüdiger Kapitza, Wolfgang Schröder-Preikschat and Daniel Lohmann: Automatic OS Kernel TCB Reductionby Leveraging Compile-Time Configurability, in Proceedings of the 8th Workshop on Hot Topics in System Dependability (HotDep '12), USENIX, Hollywood, CA, USA, 2012 (tartler12hotdep, BibTeX)

2011

• Erik-Oliver Blass, Anil Kurmus, Refik Molva, Guevara Noubir and Abdullatif Shikfa: The F_f-Family of Protocols for RFID-Privacy and Authentication, in IEEE Trans. Dependable Sec. Comput., Vol. 8, No. 3, pages 466-480, 2011 (blass11tdsc, BibTeX)
• Anil Kurmus, Alessandro Sorniotti and Rüdiger Kapitza: Attack Surface Reduction For Commodity OS Kernels, in Proceedings of the Fourth European Workshop on System Security, Engin Kirda and Steven Hand, Salzburg,Austria, 2011 (kurmus11ktrim, BibTeX)
• Anil Kurmus, Moitrayee Gupta, Roman Pletka, Christian Cachin and Robert Haas: A Comparison of Secure Multi-Tenancy Architectures for Filesystem Storage Clouds, in Middleware, pages 471-490, 2011 (kurmus11mw, BibTeX)

2010

• Mathias Björkqvist, Christian Cachin, Robert Haas, Xiao-Yu Hu, Anil Kurmus, René Pawlitzek and Marko Vukolic: Design and Implementation of a Key-Lifecycle Management System, in Financial Cryptography, pages 160-174, 2010 (bjorkqvist10fc, BibTeX)
• Erik-Oliver Blass, Anil Kurmus, Refik Molva, Guevara Noubir and Abdullatif Shikfa: The F_f-Family of Protocols for RFID-Privacy and Authentication, in RFIDSec, 2010 (blass09rfidsec, BibTeX)

2009

• Erik-Oliver Blass, Anil Kurmus, Refik Molva and Thorsten Strufe: PSP: private and secure payment with RFID, in WPES, pages 51-60, 2009 (blass09wpes, BibTeX)
• Christian Cachin, Anil Kurmus and Marko Vukolic: Strict Access Control in a Key-Management Server, 2009 (cachin09asa, BibTeX)