David Schmidt

My name is David Schmidt. I am a postdoctoral researcher in the Security and Privacy Research Group at the University of Vienna, working in the CD-Lab AsTra on assurance and transparency in software protection. Formerly, at the Security and Privacy Research Unit at TU Wien.
My research interest is system security, particularly mobile security and privacy.

Contact

d.schmidt@univie.ac.at
LinkedIn
Google Scholar
Portrait of David Schmidt

Publications

  • Send and Pretend: Exploiting Transcript Consistency Issues in End-to-End Encrypted Group Chats

    Gabriel Karl Gegenhuber, Moritz Grefner, Maximilian Günther, Matthäus Wininger, David Schmidt, Aljosha Judmayer
    USENIX Security Symposium (USENIX Security), 2026
    Paper Link Artifact
    @inproceedings{gegenhuber:2026:sendpretend, title = {{Send and Pretend: Exploiting Transcript Consistency Issues in End-to-End Encrypted Group Chats}}, author = {Gabriel Karl Gegenhuber and Moritz Grefner and Maximilian Günther and Matthäus Wininger and David Schmidt and Aljosha Judmayer}, booktitle = {Proceedings of the 35th USENIX Security Symposium (USENIX Security)}, year = {2026}, }

  • Blue Bubbles, Red Flags: Investigating Privacy Leakage in Apple iMessage

    Viktor E. Garske, Swantje Lange, Gabriel K. Gegenhuber, David Schmidt, Andreas Noack, Jiska Classen
    ACM Conference on Computer and Communications Security (CCS), 2026
    @inproceedings{garske:2026:imessage, title = {{Blue Bubbles, Red Flags: Investigating Privacy Leakage in Apple iMessage}}, author = {Viktor E. Garske and Swantje Lange and Gabriel K. Gegenhuber and David Schmidt and Andreas Noack and Jiska Classen}, booktitle = {Proceedings of the ACM Conference on Computer and Communications Security (CCS)}, year = {2026}, }

  • ObfuscationGT: A Comprehensive Evaluation of Disassembler Accuracy and Coverage on Obfuscated Code

    Caroline König, Patrick Felbauer, Michael Pucher, David Schmidt, Patrick Kochberger, Pascal Lun, Sebastian Schrittwieser
    International Symposium on Research in Attacks, Intrusions and Defenses (RAID), 2026
    Paper Artifact
    @inproceedings{koenig:2026:obfuscationgt, title = {{ObfuscationGT: A Comprehensive Evaluation of Disassembler Accuracy and Coverage on Obfuscated Code}}, author = {Caroline König and Patrick Felbauer and Michael Pucher and David Schmidt and Patrick Kochberger and Pascal Lun and Sebastian Schrittwieser}, booktitle = {Proceedings of the International Symposium on Research in Attacks, Intrusions and Defenses (RAID)}, year = {2026}, }

  • Supply Chain Insecurity: Exposing Vulnerabilities in iOS Dependency Management Systems

    David Schmidt, Gabriel K. Gegenhuber, Edgar Weippl, Sebastian Schrittwieser
    International Symposium on Research in Attacks, Intrusions and Defenses (RAID), 2026
    Distinguished Practical Paper Award
    Paper Slides Artifact
    @inproceedings{schmidt:2026:supply_chain, title = {{Supply Chain Insecurity: Exposing Vulnerabilities in iOS Dependency Management Systems}}, author = {David Schmidt and Gabriel K. Gegenhuber and Edgar Weippl and Sebastian Schrittwieser}, booktitle = {Proceedings of the International Symposium on Research in Attacks, Intrusions and Defenses (RAID)}, year = {2026}, }

  • Context Matters: Repository-Aware Security Analysis of the Agent Skill Ecosystem

    Florian Holzbauer, David Schmidt, Gabriel K. Gegenhuber, Sebastian Schrittwieser, Johanna Ullrich
    ACM CAIS 2026 Workshop AgentSkills, 2026
    Best Paper Award
    Paper Link Slides Poster Artifact
    @inproceedings{holzbauer:2026:context, title = {{Context Matters: Repository-Aware Security Analysis of the Agent Skill Ecosystem}}, author = {Florian Holzbauer and David Schmidt and Gabriel K. Gegenhuber and Sebastian Schrittwieser and Johanna Ullrich}, booktitle = {ACM CAIS 2026 Workshop AgentSkills}, year = {2026}, }

  • SaMBA: Increasing Mixed Boolean-Arithmetic Complexity Through Equality Saturation

    Caroline König, David Schmidt, Philip König, Patrick Felbauer, Sebastian Schrittwieser
    ACM Asia Conference on Computer and Communications Security (ASIACCS), 2026
    Paper Slides Artifact
    @inproceedings{koenig:2026:samba, title = {{SaMBA: Increasing Mixed Boolean-Arithmetic Complexity Through Equality Saturation}}, author = {König, Caroline and Schmidt, David and König, Philip and Felbauer, Patrick and Schrittwieser, Sebastian}, booktitle = {Proceedings of the ACM Asia Conference on Computer and Communications Security (ASIACCS)}, year = {2026}, }

  • Replay - Automatic Uncovering of Hidden Behaviors From Input Validation in Mobile Apps

    David Schmidt, Sebastian Schrittwieser
    Workshop on Research on Offensive and Defensive Techniques in the Context of Man At The End (MATE) Attacks (CheckMATE), 2025
    Paper Slides Artifact
    @inproceedings{schmidt:2025:replay, title = {{Replay - Automatic Uncovering of Hidden Behaviors From Input Validation in Mobile Apps}}, author = {Schmidt, David and Schrittwieser, Sebastian}, booktitle = {Proceedings of the 2025 Workshop on Research on Offensive and Defensive Techniques in the Context of Man At The End (MATE) Attacks (CheckMATE)}, doi = {10.1145/3733817.3765609}, year = {2025}, }

  • Leaky Apps: Large-scale Analysis of Secrets Distributed in Android and iOS Apps

    David Schmidt, Sebastian Schrittwieser, Edgar Weippl
    ACM Conference on Computer and Communications Security (CCS), 2025
    Distinguished Paper Award
    Paper Slides Artifact
    @inproceedings{schmidt:2025:app_secrets, title = {{Leaky Apps: Large-scale Analysis of Secrets Distributed in Android and iOS Apps}}, author = {Schmidt, David and Schrittwieser, Sebastian and Weippl, Edgar}, booktitle = {Proceedings of the ACM Conference on Computer and Communications Security (CCS)}, doi = {10.1145/3719027.3765033}, year = {2025}, }

  • Analyzing the iOS Local Network Permission from a Technical and User Perspective

    David Schmidt, Alexander Ponticello, Magdalena Steinböck, Katharina Krombholz, Martina Lindorfer
    IEEE Symposium on Security and Privacy (S&P), 2025
    Paper Link Slides Poster Artifact
    @inproceedings{schmidt:2025:local_network, title = {{Analyzing the iOS Local Network Permission from a Technical and User Perspective}}, author = {Schmidt, David and Ponticello, Alexander and Steinböck, Magdalena and Krombholz, Katharina and Lindorfer, Martina}, booktitle = {Proceedings of the 46th IEEE Symposium on Security and Privacy (S&P)}, year = {2025}, doi = {10.1109/SP61157.2025.00045} }

  • IoTFlow: Inferring IoT Device Behavior at Scale through Static Mobile Companion App Analysis

    David Schmidt, Carlotta Tagliaro, Kevin Borgolte, Martina Lindorfer
    ACM Conference on Computer and Communications Security (CCS), 2023
    Paper Link Slides Artifact
    @inproceedings{schmidt:ccs2023:iotflow, title={{IoTFlow: Inferring IoT Device Behavior at Scalre through Static Mobile Companion App Analysis}}, author={Schmidt, David and Tagliaro, Carlotta and Borgolte, Kevind and Lindorfer, Martina}, year={2023}, booktitle={Proceedings of the ACM Conference on Computer and Communications Security (CCS)}, doi = {10.1145/3576915.3623211} }

Awards

  • Best Paper Award, 2026
    Context Matters: Repository-Aware Security Analysis of the Agent Skill Ecosystem
  • Distinguished Practical Paper Award, 2026
    Supply Chain Insecurity: Exposing Vulnerabilities in iOS Dependency Management Systems
  • netidee Stipendium, 2025
    For my dissertation: Hidden Dangers: Uncovering Security and Privacy Risks through Large-scale Mobile App Analysis
  • Distinguished Paper Award, 2025
    Leaky Apps: Large-scale Analysis of Secrets Distributed in Android and iOS Apps