Mathy Vanhoef

Employment

• KU Leuven Assistant Professor
  2021 - Present
• New York University Abu Dhabi PostDoc
  2018 - 2021
• KU Leuven PostDoc
  2016 - 2018
• KU Leuven PhD Student
  2012 - 2016

Education

• Hasselt University Master Computer Science (Databases)
  2010 - 2012
• Hasselt University Bachelor Computer Science
  2007 - 2010

Projects & Funding

Projects & funding information is unavailable.

Publications (60)

• Time and Time Again: Leveraging TCP Timestamps to Improve Remote Timing Attacks
  Proceedings of the Network and Distributed System Security (NDSS) Symposium 2026 2026 DOI: 10.14722/ndss.2026.230893
  +Save
• Measuring and Preventing Certificate Misconfigurations in Enterprise WPA2/3 Networks
  Proceedings of the 9th Cyber Security in Networking Conference (CSNet 2025) 2025 DOI: 10.1109/CSNet67572.2025.11288146
  +Save
• LANShield: Analysing and Protecting Local Network Access on Mobile Devices
  Proceedings on Privacy Enhancing Technologies 2025 DOI: 10.56553/popets-2025-0116
  +Save
• Fragile Frames: Wi-Fi's Fraught Fight Against FragAttacks
  2025 DOI: 10.1145/3734477.3734717
  +Save
• SSID Confusion: Making Wi-Fi Clients Connect to the Wrong Network
  WiSec '24: Proceedings of the 17th ACM Conference on Security and Privacy in Wireless and Mobile Networks 2024 DOI: 10.1145/3643833.3656126
  +Save
• A Security Analysis of WPA3-PK: Implementation and Precomputation Attacks
  Lecture Notes in Artificial Intelligence 2024 DOI: 10.1007/978-3-031-54773-7_9
  +Save
• Netfuzzlib: Adding First-Class Fuzzing Support to Network Protocol Implementations
  2024 DOI: 10.1007/978-3-031-70890-9_4
  +Save
• Time Will Tell: Exploiting Timing Leaks Using HTTP Response Headers
  Lecture Notes in Computer Science 2023 DOI: 10.1007/978-3-031-51476-0_1
  +Save
• Framing Frames: Bypassing Wi-Fi Encryption by Manipulating Transmit Queues
  2023
  +Save
• Can You Tell Me the Time? Security Implications of the Server-Timing Header
  Proceedings of MADWeb 2023 – Workshop on Measurements, Attacks, and Defenses for the Web 2023 DOI: 10.14722/madweb.2023.23087
  +Save
• The Closer You Look, The More You Learn: A Grey-box Approach to Protocol State Machine Learning
  Proceedings of the ACM Conference on Computer and Communications Security 2022 DOI: 10.1145/3548606.3559365
  +Save
• Bypassing Internet and Rate Limits by Committing SYNs
  2022
  +Save
• Poster: Exploiting Timing Side-Channel Leaks in Web Applications that Tell on Themselves
  2022
  +Save
• A Time-Memory Trade-Off Attack on WPA3's SAE-PK
  Proceedings of the 9th ACM on ASIA Public-Key Cryptography Workshop 2022 DOI: 10.1145/3494105.3526235
  +Save
• On the Robustness of Wi-Fi Deauthentication Countermeasures
  WiSec '22: Proceedings of the 15th ACM Conference on Security and Privacy in Wireless and Mobile Networks 2022 DOI: 10.1145/3507657.3528548
  +Save
• Recent Flaws in WPA2/3 and New Defenses
  2022
  +Save
• Fragment and Forge: Breaking Wi-Fi Through Frame Aggregation and Fragmentation
  Proceedings of the 30th USENIX Security Symposium (USENIX Security 21) 2021
  +Save
• A framework to test and fuzz Wi-Fi devices
  WiSec ’21: 14th ACM Conference on Security and Privacy in Wireless and Mobile Networks 2021 DOI: 10.1145/3448300.3468261
  +Save
• Let numbers tell the tale: measuring security trends in Wi-Fi networks and best practices
  WiSec '21: Proceedings of the 14th ACM Conference on Security and Privacy in Wireless and Mobile Networks 2021 DOI: 10.1145/3448300.3468286
  +Save
• Timeless Timing Attacks: Exploiting Concurrency to Leak Secrets over Remote Connections
  Proceedings of the 29th USENIX Security Symposium 2020
  +Save