Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page

Mathias Schwarz

dblp:61/1411 · DBLP profile ↗
← Back
11ranked-venue papers
2as first author
0since 2021 · last 2019
0000-0002-7983-3368ORCID · corroborated

Domains — the database's venue-derived domains; a paper can count in several

Applied, interdisciplinary, general and emerging computing · 6 · 2 first-authorSoftware engineering, systems software and programming languages · 5Theory of computation · 1

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Network and information security
2 papers
Systems and software security · 67% Web and mobile security · 33%
Software engineering, system software, and programming languages
1 paper
Program analysis · 100%

Topics — the 5 heaviest of 6, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Systems and software security
vulnerability discovery
0.212014
Automated Detection of Client-State Manipulation Vulnerabilities · ACM Trans. Softw. Eng. Methodol. 2014
Web and mobile security
web application security
0.212014
Automated Detection of Client-State Manipulation Vulnerabilities · ACM Trans. Softw. Eng. Methodol. 2014
Program analysis › static analysis
information flow analysis
0.112012
Automated detection of client-state manipulation vulnerabilities · ICSE 2012
Program analysis
static analysis
0.112012
Automated detection of client-state manipulation vulnerabilities · ICSE 2012
Systems and software security › information flow control
information flow analysis
0.112014
Automated Detection of Client-State Manipulation Vulnerabilities · ACM Trans. Softw. Eng. Methodol. 2014

Methods — techniques the papers use, named apart from their topics

static analysis · 0.5information flow analysis · 0.5
YearPublicationVenuePosition
2019 Motion Quantification and Automated Correction in Clinical RSOM
abstract
Raster-scan optoacoustic mesoscopy (RSOM) offers high-resolution non-invasive insights into skin pathophysiology, which holds promise for disease diagnosis and monitoring in dermatology and other fields. However, RSOM is quite vulnerable to vertical motion of the skin, which can depend on the part of the body being imaged. Motion correction algorithms have already been proposed, but they are not fully automated, they depend on anatomical segmentation pre-processing steps that might not be performed successfully, and they are not site- specific. Here, we determined for the first time the magnitude of the micrometric vertical skin displacements at different sites on the body that affect RSOM. The quantifi- cation of motion allowed us to develop a site-specific correction algorithm. The algorithm is fully automated and does not need prior anatomical information. We found that the magnitude of the vertical motion depends strongly on the site of imaging and is caused by breathing, heart beating, and arterial pulsation. The developed algorithm resulted in more than 2-fold improvement in the signal-to-noise ratio of the reconstructed images at every site tested. Proposing an effective automated motion correction algorithm paves the way for realizing the full clinical potential of RSOM.
Juan Aguirre, Andrei Berezhnoi, Hailong He, Mathias Schwarz, Benedikt Hindelang, Murad Omar, Vasilis Ntziachristos
IEEE Trans. Medical Imaging4
2017 Message safety in Dart
abstract
Unlike traditional static type checking, the type system in the Dart programming language is unsound by design, even for fully annotated programs. The rationale has been that this allows compile-time detection of likely errors and enables code completion in integrated development environments, without being restrictive on programmers. Despite unsoundness, judicious use of type annotations can ensure useful properties of the runtime behavior of Dart programs. We present a formal model of a core of Dart with a focus on its type system, which allows us to elucidate the causes of unsoundness. Our main contribution is a characterization of message-safe programs and a theorem stating that such programs will never encounter ‘message-not-understood’ errors at runtime. Message safety is less restrictive than traditional type soundness, and we argue that it forms a natural intermediate point between dynamically typed and statically typed Dart programs.
Erik Ernst, Anders Møller, Mathias Schwarz, Fabio Strocco
Sci. Comput. Program.3
2017 Optoacoustic Dermoscopy of the Human Skin: Tuning Excitation Energy for Optimal Detection Bandwidth With Fast and Deep Imaging in vivo
abstract
Optoacoustic (photoacoustic) dermoscopy offers two principal advantages over conventional optical imaging applied in dermatology. First, it yields high-resolution cross-sectional images of the skin at depths not accessible to other non-invasive optical imaging methods. Second, by resolving absorption spectra at multiple wavelengths, it enables label-free 3D visualization of morphological and functional features. However, the relation of pulse energy to generated bandwidth and imaging depth remains poorly defined. In this paper, we apply computer models to investigate the optoacoustic frequency response generated by simulated skin. We relate our simulation results to experimental measurements of the detection bandwidth as a function of optical excitation energy in phantoms and human skin. Using raster-scan optoacoustic mesoscopy, we further compare the performance of two broadband ultrasonic detectors (a bandwidth of 20-180 and 10-90MHz) in acquiring optoacoustic readouts. Based on the findings of this paper, we propose energy ranges required for skin imaging with considerations of laser safety standards.
Mathias Schwarz, Dominik Soliman, Murad Omar, Andreas Buehler, Saak V. Ovsepian, Juan Aguirre, Vasilis Ntziachristos
IEEE Trans. Medical Imaging1
2016 Hierarchical Post-transcriptional Regulation of Colicin E2 Expression in Escherichia coli
abstract
Post-transcriptional regulation of gene expression plays a crucial role in many bacterial pathways. In particular, the translation of mRNA can be regulated by trans-acting, small, non-coding RNAs (sRNAs) or mRNA-binding proteins, each of which has been successfully treated theoretically using two-component models. An important system that includes a combination of these modes of post-transcriptional regulation is the Colicin E2 system. DNA damage, by triggering the SOS response, leads to the heterogeneous expression of the Colicin E2 operon including the cea gene encoding the toxin colicin E2, and the cel gene that codes for the induction of cell lysis and release of colicin. Although previous studies have uncovered the system's basic regulatory interactions, its dynamical behavior is still unknown. Here, we develop a simple, yet comprehensive, mathematical model of the colicin E2 regulatory network, and study its dynamics. Its post-transcriptional regulation can be reduced to three hierarchically ordered components: the mRNA including the cel gene, the mRNA-binding protein CsrA, and an effective sRNA that regulates CsrA. We demonstrate that the stationary state of this system exhibits a pronounced threshold in the abundance of free mRNA. As post-transcriptional regulation is known to be noisy, we performed a detailed stochastic analysis, and found fluctuations to be largest at production rates close to the threshold. The magnitude of fluctuations can be tuned by the rate of production of the sRNA. To study the dynamics in response to an SOS signal, we incorporated the LexA-RecA SOS response network into our model. We found that CsrA regulation filtered out short-lived activation peaks and caused a delay in lysis gene expression for prolonged SOS signals, which is also seen in experiments. Moreover, we showed that a stochastic SOS signal creates a broad lysis time distribution. Our model thus theoretically describes Colicin E2 expression dynamics in detail and reveals the importance of the specific regulatory components for the timing of toxin release.
Matthias Lechner, Mathias Schwarz, Madeleine Opitz, Erwin Frey
PLoS Comput. Biol.2
2015 Message safety in Dart
abstract
Unlike traditional static type checking, the type system in the Dart programming language is unsound by design, even for fully annotated programs. The rationale has been that this allows compile-time detection of likely errors and enables code completion in integrated development environments, without being restrictive on programmers. Despite unsoundness, judicious use of type annotations can ensure useful properties of the runtime behavior of Dart programs. We present a formal model of a core of Dart with a focus on its type system, which allows us to elucidate the causes of unsoundness. Our main contribution is a characterization of message-safe programs and a theorem stating that such programs will never encounter 'message not understood' errors at runtime. Message safety is less restrictive than traditional type soundness, and we argue that it forms a natural intermediate point between dynamically typed and statically typed Dart programs.
Erik Ernst, Anders Møller, Mathias Schwarz, Fabio Strocco
DLS3
2015 Implications of Ultrasound Frequency in Optoacoustic Mesoscopy of the Skin
abstract
Raster-scan optoacoustic mesoscopy (RSOM) comes with high potential for in vivo diagnostic imaging in dermatology, since it allows for high resolution imaging of the natural chromophores melanin, and hemoglobin at depths of several millimeters. We have applied ultra-wideband RSOM, in the 10-160 MHz frequency band, to image healthy human skin at distinct locations. We analyzed the anatomical information contained at different frequency ranges of the optoacoustic (photoacoustic) signals in relation to resolving features of different skin layers in vivo. We further compared results obtained from glabrous and hairy skin and identify that frequencies above 60 MHz are necessary for revealing the epidermal thickness, a prerequisite for determining the invasion depth of melanoma in future studies. By imaging a benign nevus we show that the applied RSOM system provides strong contrast of melanin-rich structures. We further identify the spectral bands responsible for imaging the fine structures in the stratum corneum, assessing dermal papillae, and resolving microvascular structures in the horizontal plexus.
Mathias Schwarz, Murad Omar, Andreas Buehler, Juan Aguirre, Vasilis Ntziachristos
IEEE Trans. Medical Imaging1
2014 24-MHz Scanner for Optoacoustic Imaging of Skin and Burn
abstract
Optoacoustic (photoacoustic) imaging uniquely visualizes optical contrast in high resolution and comes with very attractive characteristics for clinical imaging applications. In this paper, we showcase the performance of a scanner based on a 24 MHz center-frequency 128 element array, developed for applications in dermatology. We perform system characterization to examine the imaging performance achieved. We then showcase its imaging ability on healthy tissue and cancer. Finally, we image burns and human lesions in vivo and gain insights on the benefits and challenges of this approach as it is considered for diagnostic and treatment follow-up applications in dermatology and beyond.
Laetitia Vionnet, Jérôme Gateau, Mathias Schwarz, Andreas Buehler, Volodymir Ermolayev, Vasilis Ntziachristos
IEEE Trans. Medical Imaging3
2014 Automated Detection of Client-State Manipulation Vulnerabilities
abstract
Web application programmers must be aware of a wide range of potential security risks. Although the most common pitfalls are well described and categorized in the literature, it remains a challenging task to ensure that all guidelines are followed. For this reason, it is desirable to construct automated tools that can assist the programmers in the application development process by detecting weaknesses. Many vulnerabilities are related to Web application code that stores references to application state in the generated HTML documents to work around the statelessness of the HTTP protocol. In this article, we show that such client-state manipulation vulnerabilities are amenable to tool-supported detection. We present a static analysis for the widely used frameworks Java Servlets, JSP, and Struts. Given a Web application archive as input, the analysis identifies occurrences of client state and infers the information flow between the client state and the shared application state on the server. This makes it possible to check how client-state manipulation performed by malicious users may affect the shared application state and cause leakage or modifications of sensitive information. The warnings produced by the tool help the application programmer identify vulnerabilities before deployment. The inferred information can also be applied to configure a security filter that automatically guards against attacks at runtime. Experiments on a collection of open-source Web applications indicate that the static analysis is able to effectively help the programmer prevent client-state manipulation vulnerabilities. The analysis detects a total of 4,802 client-state parameters in ten applications, whereof 4,437 are classified as safe and 241 reveal exploitable vulnerabilities.
Anders Møller, Mathias Schwarz
ACM Trans. Softw. Eng. Methodol.2
2012 Automated detection of client-state manipulation vulnerabilities
abstract
Web application programmers must be aware of a wide range of potential security risks. Although the most common pitfalls are well described and categorized in the literature, it remains a challenging task to ensure that all guidelines are followed. For this reason, it is desirable to construct automated tools that can assist the programmers in the application development process by detecting weaknesses. Many vulnerabilities are related to web application code that stores references to application state in the generated HTML documents to work around the statelessness of the HTTP protocol. In this paper, we show that such client-state manipulation vulnerabilities are amenable to tool supported detection. We present a static analysis for the widely used frameworks Java Servlets, JSP, and Struts. Given a web application archive as input, the analysis identifies occurrences of client state and infers the information flow between the client state and the shared application state on the server. This makes it possible to check how client-state manipulation performed by malicious users may affect the shared application state and cause leakage or modifications of sensitive information. The warnings produced by the tool help the application programmer identify vulnerabilities. Moreover, the inferred information can be applied to configure a security filter that automatically guards against attacks. Experiments on a collection of open source web applications indicate that the static analysis is able to effectively help the programmer prevent client-state manipulation vulnerabilities.
Anders Møller, Mathias Schwarz
ICSE2
2011 HTML Validation of Context-Free Languages
Anders Møller, Mathias Schwarz
FoSSaCS2
2009 JWIG: Yet Another Framework for Maintainable and Secure Web Applications
Anders Møller, Mathias Schwarz
WEBIST2