Container and Mobile Application Security

avatar.jpg

I embarked on my career journey as a chemical technician at Roche Diagnostics GmbH in Penzberg, laying the foundation for my professional growth. Fueled by a curiosity, I pursued higher education, earning both a Bachelor’s and Master’s degree in Computer Sciences from the University of Applied Sciences Kempten. During my academic journey, I blended my technological aspirations with the serene landscapes of the Allgäu region, finding inspiration in the mountains and on the road bike.

My academic voyage reached its zenith with a thesis at Siemens AG in Munich, which provided a practical perspective on the tech world. Today, I proudly serve as a Research Scientist at Siemens AG. In this role, I research and consult on cybersecurity domains such as container security, mobile application security, and privacy, collaborating closely with my talented colleagues.

I’ve also had the privilege of being part of a dynamic team at Siemens, where we collectively developed and conducted container security training programs. As a trainer, I’ve been able to share my knowledge and practical insights, helping professionals stay at the forefront of container security best practices.

Notably, since 2024 my colleagues Patrick Stöckle and I conduct a practicum on container security at the Technical University of Munich.

news

Oct 15, 2026 Patrick Stoeckle and I presented our paper “Closing the Gap: Automated Discovery of Secure Dockerfile Reference Standards via Semantic Clustering in Enterprise Inner Source” at ASE 2026 in Munich. Jessica Hösl, our thesis student, was the main author of the paper. The paper presents an automated pipeline that analyzed 11,470 Dockerfiles from inners ource repositories at Siemens AG. It shows that adopting existing internal reference implementations could improve security posture by 60.4%.
Oct 09, 2026 I’ve achieved the GIAC Certified Machine Learning Engineer (GMLE) certification! This time I took the in-person exam at a testing center. Much better than the online proctored exams with webcams. 🤜 🤛
Apr 19, 2026 🇪🇺 Proudly using European Mistral now! Switched from Claude/Copilot → not disappointed! Vibe CLI is amazing, even if a bit rough without an extension. 🚀
Aug 28, 2025 Ditching Spotify - Using GDPR Data Export to Build Your Physical Music Collection. A Go script that analyzes your Spotify data to identify which albums to buy, complete with search links. Perfect timing with Spotify’s price hikes! 🎵💿
Aug 13, 2025 Just published a comprehensive deep dive into building murnau.audio-guide.cloud - a modern multilingual audio guide platform for museums. The technical write-up covers everything from Go/Templ architecture and HTMX frontend choices to CI/CD automation and why traditional servers often beat hyped FaaS solutions for simple persistent applications. 🏛️🎧

latest posts

selected publications

  1. Closing the Gap: Automated Discovery of Secure Dockerfile Reference Standards via Semantic Clustering in Enterprise Inner Source
    Jessica Hösl, Benedikt Hofmann, and Patrick Stöckle
    In Proceedings of the 41st IEEE/ACM International Conference on Automated Software Engineering, Oct 2026
  2. Towards achieving confidentiality in Hyperledger Fabric
    Benedikt Hofmann, Prabhakaran Kasinathan, and Martin Wimmer
    In IEEE International Conference on Blockchain, Blockchain 2022, Espoo, Finland, August 22-25, 2022, Oct 2022
  3. Secure Remote Maintenance via Workflow-Driven Security Framework
    Prabhakaran Kasinathan, Davide Martintoni, Benedikt Hofmann, and 2 more authors
    In 2021 IEEE International Conference on Blockchain, Blockchain 2021, Melbourne, Australia, December 6-8, 2021, Oct 2021