Publications
PoCo: Agentic Proof-of-Concept Exploit Generation for Smart Contracts Vivi Andersson, Sofia Bobadilla, Harald Hobbelhagen, Martin Monperrus arXiv preprint arXiv:2511.02780, 2025 · Paper
GoSurf: Identifying Software Supply Chain Attack Vectors in Go Carmine Cesarano, Vivi Andersson, Roberto Natella, Martin Monperrus Proceedings of the 2024 Workshop on Software Supply Chain Offensive Research and Ecosystem Defenses, pp. 33-42, 2024 · Paper
Geth Rebuild: Verifiable Builds for Go Ethereum Vivi Andersson, MSc Thesis, 2024 · Paper
UPPERCASE IS ALL YOU NEED Vivi Andersson, Benoit Baudry, Sofia Bobadilla, Ludvig Christensen, et al. SIGBOVIK, pp. 24-35, 2025 · Paper
Talks
CDIS Fall Retreat. Agentic PoC Exploit Generation
Hesselby slott, Sweden, November 2025 · Slides
Demonstrating automated proof-of-concept exploit generation for smart contracts using agentic AI systems.
SEC-T 2025. Machine Learning for Offensive Cybersecurity
Münchenbryggeriet, Stockholm, September 2025 · Slides · Watch
How to weaponize AI and LLMs in real-world offensive security workflows, from adversarial use and agentic techniques to automated exploit generation for blockchain smart contracts (co-speaker: Sofia Bobadilla).
Vulnerability Detection with Machine Learning
KTH, Stockholm, January 2025 (Government agencies) · Slides
A talk about my PhD topic on applying machine learning to automated vulnerability detection in software systems.
Build Reproducibility for Software Integrity
Dataföreningen, Online. May 2024 · Slides
A tour of how reproducible builds can strengthen software supply chain integrity beyond source code logic, the practical challenges involved, and insights from making Go Ethereum reproducible.
Teaching
EP120U Computer Systems Teaching Assistant. Responsible for modules on high-level language, VM and assembly.
MSc Theses Supervision Supervisor. Topics on ML for vulnerability detection and open source analysis of malicious packages.