Mathias Payer

EPFL IC IINFCOM HEXHIVE
BC 160 (Bâtiment BC)
Station 14
1015 Lausanne

Mathias Payer is a security researcher and professor at the EPFL school of computer and communication sciences (IC), leading the HexHive group. His research focuses on protecting applications in the presence of vulnerabilities, with a focus on memory corruption and type violations. He is interested in software security, system security, binary exploitation, effective mitigations, fault isolation/privilege separation, strong sanitization, and software testing (fuzzing) using a combination of binary analysis and compiler-based techniques. More details are available in his CV.

Curriculum vitae

See: https://nebelwelt.net/cv-payerm.pdf

Awards

Distinguished Member of ACM, the Association for Computing Machinery

Association for Computing Machinery (ACM)

2024

Usenix Security '24 distinguished paper award for

Usenix Association

2024

Usenix WOOT '24 best paper award for

Usenix Association

2024

RAID '24 best paper award for

Association for Computing Machinery (ACM)

2024

BAR '24 best paper award for

Internet Society (ISOC)

2024

NDSS '25 distinguished paper award for

Internet Society (ISOC)

2025

NDSS '25 distinguished paper award for

Internet Society (ISOC)

2025

Teaching & PhD

PhD Students

Eduard Vlad, Florian Hofhammer, Han Zheng, Zhiyao Feng, Philipp Yuxiang Mao, Rafaila Galanopoulou, Tao Lyu, Chibin Zhang, Claudio Migliorelli, Luca Di Bartolomeo

Past EPFL PhD Students

Atri Bhattacharyya, Ahmad Hazimeh, Nicolas Badoux

Courses

Information security and privacy

COM-402

This course provides an overview of information security and privacy topics. It introduces students to the knowledge and tools they will need to deal with the security/privacy challenges they are likely to encounter in today's world. The tools are illustrated with relevant applications.

Software security

CS-412

This course focuses on software security fundamentals, secure coding guidelines and principles, and advanced software security concepts. Students learn to assess and understand threats, learn how to design and implement secure software systems, and get hands-on experience with security pitfalls.