Markus Toran ============ Security Researcher and Software Developer Security research in offensive and defensive techniques across AI and software. Member of KITCTF. Academic overengineer, constantly seeking innovation, anything goes. URL: https://toranm.me E-Mail: markus@toranm.me Welcome ------- Hello! I'm Markus Toran, a security researcher, one-boxer (https://en.wikipedia.org/wiki/Newcomb%27s_problem), travel enthusiast and chaos-adjacent. In my free time, I enjoy hiking, movies and music, board games, CTF, and organizing events. Feel free to connect with me! Where I come from I went to school in Karlsruhe (https://en.wikipedia.org/wiki/Karlsruhe), first to the Helmholtz-Gymnasium (https://de.wikipedia.org/wiki/Helmholtz-Gymnasium_Karlsruhe) and later to the Carl-Engler-Schule (http://carl-engler-schule-karlsruhe.de/), graduating there in 2018. After school, I studied computer science (https://en.wikipedia.org/wiki/Computer_science) at KIT (https://www.kit.edu/english/). I completed my bachelor's degree in November 2021 with a thesis about verification of fairness properties for seat apportionment methods (https://en.wikipedia.org/wiki/Apportionment_(politics)). During my master's, I focused on IT Security. I wrote my master's thesis about IT Security and UX in the for digital identities. After uni I worked as a security consultant at Secorvo (https://www.secorvo.de/) in Karlsruhe. Currently, I am working as a researcher at Fraunhofer SIT (https://www.sit.fraunhofer.de/) in Darmstadt. Where I'm going I hope my work will contribute to a more secure digital future. Published Papers ---------------- Selected peer-reviewed publications and other published work. This list is generated from a BibTeX file, which you can download directly (https://toranm.me/papers.bib). - Q&AEval: Benchmarking Secure Coding Ability of LLMs on Real-World Tasks Markus Toran, Bettina Ballin, Marc Miltenberger, Steven Arzt · SVM Workshop at ICSE 2026 · 2026 Links: DOI: https://doi.org/10.1145/3786165.3788437 · researchr: https://conf.researchr.org/details/icse-2026/svm-2026-papers/1/Q-AEval-Benchmarking-Secure-Coding-Ability-of-LLMs-on-Real-World-Tasks Featured Posts -------------- Check out these highlighted posts from the blog. 2026-09-17 Fraunhofer SIT Address / Adresse https://toranm.me/post/2026-09-17-fraunhofer-sit-address-and-tax/ Fraunhofer SIT Markus Toran Rheinstr. 75 64295 Darmstadt Germany USt-IdNr: DE 129515865 Keywords: FhG SIT, FhI SIT 2025-10-22 Why I Migrated from Jekyll to Astro — Introducing Website V6 https://toranm.me/post/2025-10-22-why-astro/ I did a major revamp of this website, rewriting it from scratch with Astro and Tailwind after outgrowing my old, dated Jekyll setup. 2025-09-12 DOI: Beyond the Basics https://toranm.me/post/2025-09-12-doi-beyond-the-basics/ I gave a talk on DOI (Digital Object Identifier) at MRMCD 25. If you want to know a thing or two about DOI, check it out! Recent Posts ------------ I blog about computer science and security, music, and random thoughts. You can vote on blog post proposals here: /vote-blog-post/ 2026-09-17 Fraunhofer SIT Address / Adresse https://toranm.me/post/2026-09-17-fraunhofer-sit-address-and-tax/ Fraunhofer SIT Markus Toran Rheinstr. 75 64295 Darmstadt Germany USt-IdNr: DE 129515865 Keywords: FhG SIT, FhI SIT 2026-09-05 Big Cyber https://toranm.me/post/2026-09-05-big-cyber/ Germany is a strong country for cybersecurity research. Overall and per capita, its output performs quite well on international benchmarks. Germany has a long tradition in this field, demonstrating both breadth and peak excellence. 2026-06-28 Banking — Part 2 https://toranm.me/post/2026-06-28-banking-part-2/ Since my last post on banking I got to try out new services and old ones changed a little. 2026-06-13 Die #GPN24 war anstrengender als erwartet. Am Ende hat… https://toranm.me/post/2026-06-13-gpn24/ Die #GPN24 war anstrengender als erwartet. Am Ende hat vieles geklappt, aber es hätte auch einfacher und besser sein können. Überanstrengung optimiert nur einen Zielparameter; man sollte das eigentlich Wichtige nicht vergessen und es nachhaltig erreichen. 2026-06-12 Some Songs https://toranm.me/post/2026-06-12-some-songs/ Here's a list of songs I like to listen to currently: 2026-06-01 Label Designer https://toranm.me/post/2026-06-01-label-designer/ After my own personal asset labels were made in Inkscape, I created a web-based label designer to make it easier to create and print labels. You can try it out here. 2026-05-30 Film Review: Backrooms (2026) https://toranm.me/post/2026-05-30-backrooms/ Short Backrooms review: I liked it overall, still a horror film. 2026-02-07 Updating Rayhunter https://toranm.me/post/2026-02-07-rayhunter-2/ Since my last post, the Rayhunter project has made significant progress. 2026-01-03 2025 Year Review https://toranm.me/post/2026-01-03-2025-year-review/ 2025 has been a mixed year for me. The Good times were pretty good, but the bad times were so bad. 2025-12-17 Cyber Resilience Act - Compliance Risk oder Consumer Respect Act? https://toranm.me/post/2025-12-17-cra/ I gave a talk on CRA (Cyber Resilience Act) at GPN 22 in German. It was a while ago, but if you want to know a thing or two about CRA, check it out! Showing the 10 most recent posts. See the full archive at https://toranm.me/blog/ Subscribe to Updates -------------------- Add the atom feed to your reader via SubscribeOpenly: https://subscribeopenly.net/subscribe/?url=https%3A%2F%2Ftoranm.me%2Ffeed%2Fatom.xml Feeds: - Atom: https://toranm.me/feed/atom.xml — Atom feed (XML) - RSS: https://toranm.me/feed/rss.xml — RSS 2.0 feed (XML) - JSON Feed: https://toranm.me/feed/json.json — JSON Feed (JSON) Follow in the Fediverse (posts are federated via Bridgy Fed https://fed.brid.gy/): - Fediverse (Mastodon & friends): @toranm.me@toranm.me — Open on chaos.social ↗: https://chaos.social/authorize_interaction?uri=@toranm.me@toranm.me · Open on infosec.exchange ↗: https://infosec.exchange/authorize_interaction?uri=@toranm.me@toranm.me - Bluesky: @toranm.me.web.brid.gy — Open profile ↗: https://bsky.app/profile/toranm.me.web.brid.gy Technical Information --------------------- This website is developed in Astro. This blog post (https://toranm.me/post/2025-10-22-why-astro/) explains the current implementation. This previous blog post (https://toranm.me/post/2019-07-25-why-jekyll/) explains the setup from 2019 - late 2025. The website is hosted on Netlify. Get in Touch ------------ Feel free to reach out to me for any inquiries, collaboration opportunities, or just to connect. Contact me about anything where you believe I can make a meaningful contribution, also I am always happy to meet new people. Send me an email with your personal blog and I will check it out. General: - E-Mail: public at nospam toranm dot me - DECT: 4499 - Feeds: RSS 2.0 / Atom / JSON (https://toranm.me/#subscribe) Science: - Google Scholar: Scholar Profile (https://scholar.google.com/citations?user=943uWxoAAAAJ&hl=en&oi=ao) - DBLP: 435/5193 (https://dblp.org/pid/435/5193.html) - ORCID: 0000-0002-0803-9458 (https://orcid.org/0000-0002-0803-9458) Socials: - Matrix: @m4s:t3n.tech (https://matrix.to/#/@m4s:t3n.tech) - Fediverse: @toranm.me@toranm.me (https://fed.brid.gy/web/toranm.me) - Telegram: @Benchmarkus (https://t.me/Benchmarkus) - LinkedIn: @Toran (https://linkedin.com/in/toran) - GitHub: @xXMarkuski (https://github.com/xXMarkuski) - Hacker News: xxmarkuski (https://news.ycombinator.com/user?id=xxmarkuski) Media: - Letterboxd: @markushollywood (https://letterboxd.com/markushollywood/)