Thomas Sutter

Work at ZHAW

Position

Research Associate Information Security

Focus

• Computer Science
• Information Security

Teaching

• SATW TecDays
• Nebenbetreuer Bachelorarbeiten

Education and Continuing education

Education

• Master of Science UAS in Engineering / Computer Sciences
  Zurich University of Applied Sciences
  02 / 2018 - 03 / 2021
• Bachelor of Science UAS in Engineering / Computer Sciences
  Zurich University of Applied Sciences
  08 / 2014 - 07 / 2017

Continuing Education

• OffSec Certified Professional (OSCP)
  OffSec
  11 / 2022
• OffSec Wireless Professional (OSWP)
  OffSec
  11 / 2022

Network

Membership of networks

CYREN - Cyber Resilience Network for the Canton of Zurich

ORCID digital identifier

ORCID ID: 0000-0003-2649-3299

Social media

• Linkedin
• Twitter

Media presence

BlackHat Europe 2019: Simple Spyware: Androids Invisible Foreground Services and How to (Ab)use Them

Projects

• Dynamic Security Analysis of Android Pre-installed Apps / Team member / laufend
• Dynamic Analysis of Internal Android Systems / Team member / abgeschlossen
• OptiPhish – Effective and Measurable Phishing Awareness Training / Project leader / abgeschlossen
• HostDetective – Next Generation Active and Passive Web Server Rating System / Team member / abgeschlossen
• SeCoSS: Secure Collaboration with SecureSafe / Team member / abgeschlossen

Publications

• Sutter, Thomas; Kehrer, Timo; Rennhard, Marc; Tellenbach, Bernhard; Klein, Jacques,

  2024.

  Dynamic security analysis on Android : a systematic literature review.

  IEEE Access.

  12, pp. 57261-57287.

  Available from: https://doi.org/10.1109/ACCESS.2024.3390612

• Sutter, Thomas; Bozkir, Ahmet Selman; Gehring, Benjamin; Berlich, Peter,

  2022.

  Avoiding the hook : influential factors of phishing awareness training on click-rates and a data-driven approach to predict email difficulty perception.

  IEEE Access.

  10, pp. 100540-100565.

  Available from: https://doi.org/10.1109/ACCESS.2022.3207272

• Jampen, Daniel; Gür, Gürkan; Sutter, Thomas; Tellenbach, Bernhard,

  2020.

  Don’t click : towards an effective anti-phishing training. A comparative literature review.

  Human-centric Computing and Information Sciences.

  10(33).

  Available from: https://doi.org/10.1186/s13673-020-00237-7

• Sutter, Thomas; Tellenbach, Bernhard,

  2023.

  FirmwareDroid : towards automated static analysis of pre-installed android apps [paper].

  In:

  Klein, Jacques; Wei, Lili, eds.,

  2023 IEEE/ACM 10th International Conference on Mobile Software Engineering and Systems (MOBILESoft).

  10th International Conference on Mobile Software Engineering and Systems (MOBILESoft), Melbourne, Australia, 14-15 May 2023.

  IEEE.

  pp. 12-22.

  Available from: https://doi.org/10.1109/MOBILSoft59058.2023.00009

• Sutter, Thomas; Lapagna, Kevin; Berlich, Peter; Rennhard, Marc; Germann, Fabio; et al.,

  2021.

  Web content signing with service workers.

  ZHAW Zürcher Hochschule für Angewandte Wissenschaften.

  Available from: https://doi.org/10.21256/zhaw-22514

• Sutter, Thomas; Tellenbach, Bernhard,

  2019.

  Simple spyware : Androids invisible foreground services and how to (ab)use them.

  In:

  Black Hat Europe, London, 2.-5. Dezemeber 2019.

go back