Prof. Dr. Robin Müller-Bady

At Frankfurt University of Applied Sciences my field is object-oriented programming and distributed systems. As Chief Information Security Officer (CISO) I am also building the university's information security management system.

As an IT security consultant at Capgemini and then for several years as an independent consultant and security architect with my company Facets Security, I advised public sector clients, including ministries and institutions of the European Union, as well as large companies in telecommunications, energy, pharmaceuticals, finance and the automotive industry. In this work I designed security architectures for cloud and on-premises environments, assessed and extended management systems based on ISO/IEC 27001 and developed identity and access management concepts.

I am a Certified Information Systems Security Professional (CISSP).

I am interested in making security decisions trustworthy, explainable and resilient, especially in regulated environments with few staff and limited resources.

Automated, evidence-based compliance

Expressing requirements from ISO/IEC 27001 or the German IT-Grundschutz as machine-readable rules (policy as code, OSCAL, Open Policy Agent) and checking compliance continuously and verifiably.

Information security in municipalities and public administration

Decision support that helps small organisations assess risks and prioritise security measures sensibly.

Heuristic optimisation of networks and distributed systems

Evolutionary algorithms for optimisation problems such as monitor placement in highly dynamic communication networks, the topic of my PhD at the Universidad de Cádiz.

Data and information architectures in construction

Together with colleagues from civil engineering: processing BIM and IFC model data, for example for rule-based mappings or queries with language models.

International collaboration

I have worked with the Universidad de Cádiz in Spain since 2014. Since 2016 I have regularly taught and done research at the Vietnamese-German University in Ho Chi Minh City.

1. 2020

   Hybrid Bayesian evolutionary optimization for hyperparameter tuningLukas Atkinson, Robin Müller-Bady, Martin Kappes. GECCO ’20 Companion, ACM

2. 2019

   An evolutionary hybrid search heuristic for monitor placement in communication networksRobin Mueller-Bady, Martin Kappes, Inmaculada Medina-Bulo, Francisco Palomo-Lozano. Journal of Heuristics 25(6)

3. 2019

   On the automated and reactive optimization of highly-dynamic communication network infrastructuresRobin Mueller-Bady, Martin Kappes, Inmaculada Medina-Bulo, Francisco Palomo-Lozano. Journal of Universal Computer Science 25(7)

4. 2019

   On the heuristic network optimization of static, dynamic, and highly-dynamic communication network infrastructuresRobin Mueller-Bady. PhD thesis, Universidad de Cádiz

5. 2018

   On the feasibility of using hybrid evolutionary dynamic optimization for optimal monitor selection in dynamic communication networksRobin Mueller-Bady, Martin Kappes, Inmaculada Medina-Bulo, Francisco Palomo-Lozano. IEEE/IFIP NOMS 2018

6. 2018

   Using evolutionary dynamic optimization for monitor selection in highly dynamic communication infrastructuresRobin Mueller-Bady, Martin Kappes, Inmaculada Medina-Bulo, Francisco Palomo-Lozano. GECCO ’18 Companion, ACM

7. 2017

   Optimization of monitoring in dynamic communication networks using a hybrid evolutionary algorithmRobin Mueller-Bady, Martin Kappes, Inmaculada Medina-Bulo, Francisco Palomo-Lozano. GECCO ’17, ACM

8. 2017

   Multijob: a framework for efficient distribution of evolutionary algorithms for parameter tuningRobin Mueller-Bady, Martin Kappes, Lukas Atkinson, Inmaculada Medina-Bulo. GECCO ’17 Companion, ACM

9. 2016

   Maintaining genetic diversity in multimodal evolutionary algorithms using population injectionRobin Mueller-Bady, Martin Kappes, Inmaculada Medina-Bulo, Francisco Palomo-Lozano. GECCO ’16 Companion, ACM

10. 2015

    Using genetic algorithms for deadline-constrained monitor selection in dynamic computer networksRobin Mueller-Bady, Rüdiger Gad, Martin Kappes, Inmaculada Medina-Bulo. GECCO ’15 Companion, ACM

11. 2014

    Header field based partitioning of network traffic for distributed packet capturing and processingRüdiger Gad, Martin Kappes, Robin Mueller-Bady, Inmaculada Medina-Bulo. IEEE AINA 2014

12. 2012

    Performance evaluation of on-demand IP address assignment for layer-2 devicesRüdiger Gad, Daniel Baulig, Martin Kappes, Robin Mueller-Bady. INC 2012

13. 2011

    Network performance in virtualized environmentsRüdiger Gad, Martin Kappes, Robin Mueller-Bady, Ingo Ritter. IEEE ICON 2011

The list is also maintained at DBLP.

I have taught at universities since 2012: at Frankfurt University of Applied Sciences, at the Vietnamese-German University in Ho Chi Minh City and, from 2016 to 2017, at Provadis Hochschule.

At Frankfurt UAS I teach in the bachelor programmes in Computer Science and Business Informatics, mostly in English. My subjects:

• Object-oriented programming and advanced programming concepts
• Distributed systems
• IT security and information security

At the Vietnamese-German University I teach in the master programme in IT Security and the bachelor programme in Computer Science. In the university-wide change process “Hochschullehre 2030+” I represent my teaching unit as a change agent.

Theses

I have supervised or examined more than 60 bachelor and master theses, many of them in cooperation with companies. If you are looking for a topic in IT security, distributed systems or software development, or have one of your own, please write to me. How I supervise theses and what I need before registration is described in my notes on theses.

Examples of supervised theses

• Mitigating the Secret Zero Paradox: Evaluating Identity Centric Trust Anchors in Modern Privileged Access Management
• Automatisiertes Penetration Testing mit KI: Ein Vergleich klassischer Methoden und KI-basierter Tools in der Praxis
• Passkey Recovery: Analyse der FIDO2-Empfehlungen und prototypische Umsetzung mit Open-Source-Bibliotheken
• Bewertung und Evaluierung der Effektivität von Zero-Trust-Architektur im Vergleich zu klassischen VPN-Technologien
• Authentication and Authorization in Microservices Architecture: A Comparative Analysis of Approaches and Best Practices
• Evaluation moderner Open-Source-Tools für statische Codeanalyse: Ein Vergleich von SonarQube und Semgrep
• Kafka vs. Warpstream: Analyse und Vergleich moderner Streaming-Plattformen im Kontext datenintensiver Anwendungen
• Einfluss semantischer Chunking-Strategien auf die Qualität von RAG-Abfragen bei IFC-Daten
• Konzeption und prototypische Entwicklung eines Backend-Systems zur regelbasierten Zuordnung von BIM-Modelldaten mit Hilfe von Mapping-Tabellen
• Design and Implementation of a Scoring System for Vulnerability Assessment and Subsequent Security Patch Management Using a Prediction Model
• Using Machine Learning to Extract Information and Label Possible Fields from Digital Invoices

1. since 2024

   Chief Information Security Officer (CISO)Frankfurt University of Applied Sciences

2. since 2023

   Professor of Object-Oriented Programming and Distributed SystemsFrankfurt University of Applied Sciences

3. 2021 to 2026

   Independent consultant and security architectFacets Security

4. 2020 to 2022

   IT Security ConsultantCapgemini, Frankfurt am Main

5. 2019 to 2020

   Interim Professor of IT Security and ProgrammingFrankfurt University of Applied Sciences

6. 2019

   PhD, summa cum laudeUniversidad de Cádiz, Spain

7. 2013 to 2019

   Research associate and project lead in research projects on network security and network optimisationFrankfurt University of Applied Sciences and Vietnamese-German University

8. 2012 to 2013

   Technical Presales ConsultantOracle Germany, Düsseldorf

9. 2011

   Master of Science, High Integrity SystemsFrankfurt University of Applied Sciences

10. 2009

    Bachelor of Science, Computer ScienceFrankfurt University of Applied Sciences

As an expert in IT security I prepare expert opinions for courts and companies, for example on security incidents, on whether technical and organisational measures are adequate, or on security architectures.

Please send enquiries to gutachten@mueller-bady.com.

• DBLP
• ORCID