Automated Detection of Side Channels in Cryptographic Protocols: DROWN the ROBOTs!
J.P. Drees, P. Gupta, E. Hüllermeier, T. Jager, A. Konze, C. Priesterjahn, A. Ramaswamy, J. Somorovsky, 14th ACM Workshop on Artificial Intelligence and Security (2021).
LibreCat: /record/24143

Analysis of DTLS Implementations Using Protocol State Fuzzing
P. Fiterau-Brostean, B. Jonsson, R. Merget, J. de Ruiter, K. Sagonas, J. Somorovsky, in: 29th USENIX Security Symposium (USENIX Security 20), USENIX Association, 2020, pp. 2523–2540.
LibreCat: /record/25334

Mitigation of Attacks on Email End-to-End Encryption
J. Schwenk, M. Brinkmann, D. Poddebniak, J. Müller, J. Somorovsky, S. Schinzel, in: Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security, Association for Computing Machinery, New York, NY, USA, 2020, pp. 1647–1664.
LibreCat: /record/25336
DOI: 10.1145/3372297.3417878

"Johnny, you are fired!" -- Spoofing OpenPGP and S/MIME Signatures in Emails
J. Müller, M. Brinkmann, D. Poddebniak, H. Böck, S. Schinzel, J. Somorovsky, J. Schwenk, in: 28th USENIX Security Symposium (USENIX Security 19), USENIX Association, Santa Clara, CA, 2019, pp. 1011–1028.
LibreCat: /record/15908

Scalable Scanning and Automatic Classification of TLS Padding Oracle Vulnerabilities
R. Merget, J. Somorovsky, N. Aviram, C. Young, J. Fliegenschmidt, J. Schwenk, Y. Shavitt, in: 28th USENIX Security Symposium (USENIX Security 19), USENIX Association, Santa Clara, CA, 2019, pp. 1029–1046.
LibreCat: /record/15909

Security Analysis of XAdES Validation in the CEF Digital Signature Services (DSS)
N. Engelbertz, V. Mladenov, J. Somorovsky, D. Herring, N. Erinola, J. Schwenk, in: H. Roßnagel, S. Wagner, D. Hühnlein (Eds.), Open Identity Summit 2019, Gesellschaft für Informatik, Bonn, 2019, pp. 95–106.
LibreCat: /record/15910

Prime and Prejudice: Primality Testing Under Adversarial Conditions
M.R. Albrecht, J. Massimo, K.G. Paterson, J. Somorovsky, in: Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security, 2018.
LibreCat: /record/15892
DOI: 10.1145/3243734.3243787

Attacking Deterministic Signature Schemes Using Fault Attacks
D. Poddebniak, J. Somorovsky, S. Schinzel, M. Lochter, P. Rosler, in: 2018 IEEE European Symposium on Security and Privacy (EuroS&;P), 2018.
LibreCat: /record/15893
DOI: 10.1109/eurosp.2018.00031

On The (In-)Security Of JavaScript Object Signing And Encryption
D. Detering, J. Somorovsky, C. Mainka, V. Mladenov, J. Schwenk, in: Proceedings of the 1st Reversing and Offensive-Oriented Trends Symposium on - ROOTS, 2018.
LibreCat: /record/15894
DOI: 10.1145/3150376.3150379

Efail: Breaking S/MIME and OpenPGP Email Encryption using Exfiltration Channels
D. Poddebniak, C. Dresen, J. Müller, F. Ising, S. Schinzel, S. Friedberger, J. Somorovsky, J. Schwenk, in: 27th USENIX Security Symposium (USENIX Security 18), USENIX Association, Baltimore, MD, 2018, pp. 549–566.
LibreCat: /record/15905

Return Of Bleichenbacher\'74extquoterights Oracle Threat (ROBOT)
H. Böck, J. Somorovsky, C. Young, in: 27th USENIX Security Symposium (USENIX Security 18), USENIX Association, Baltimore, MD, 2018, pp. 817–849.
LibreCat: /record/15906

Security Analysis of eIDAS -- The Cross-Country Authentication Scheme in Europe
N. Engelbertz, N. Erinola, D. Herring, J. Somorovsky, V. Mladenov, J. Schwenk, in: 12th USENIX Workshop on Offensive Technologies (WOOT 18), USENIX Association, Baltimore, MD, 2018.
LibreCat: /record/15914

SoK: Exploiting Network Printers
J. Muller, V. Mladenov, J. Somorovsky, J. Schwenk, in: 2017 IEEE Symposium on Security and Privacy (SP), 2017.
LibreCat: /record/15895
DOI: 10.1109/sp.2017.47

Breaking and Fixing Gridcoin
M. Grothe, T. Niemann, J. Somorovsky, J. Schwenk, in: 11th USENIX Workshop on Offensive Technologies (WOOT 17), USENIX Association, Vancouver, BC, 2017.
LibreCat: /record/15912

Systematic Fuzzing and Testing of TLS Libraries
J. Somorovsky, in: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security - CCS’16, 2016.
LibreCat: /record/15896
DOI: 10.1145/2976749.2978411

DROWN: Breaking TLS Using SSL
N. Aviram, S. Schinzel, J. Somorovsky, N. Heninger, M. Dankel, J. Steube, L. Valenta, D. Adrian, J.A. Halderman, V. Dukhovni, E. Käsper, S. Cohney, S. Engels, C. Paar, Y. Shavitt, in: 25th USENIX Security Symposium (USENIX Security 16), USENIX Association, Austin, TX, 2016, pp. 689–706.
LibreCat: /record/15907

Nonce-Disrespecting Adversaries: Practical Forgery Attacks on GCM in TLS
H. Böck, A. Zauner, S. Devlin, J. Somorovsky, P. Jovanovic, in: 10th USENIX Workshop on Offensive Technologies (WOOT 16), USENIX Association, Austin, TX, 2016.
LibreCat: /record/15913

AdIDoS – Adaptive and Intelligent Fully-Automatic Detection of Denial-of-Service Weaknesses in Web Services
C. Altmeier, C. Mainka, J. Somorovsky, J. Schwenk, in: Data Privacy Management, and Security Assurance - 10th International Workshop, DPM 2015, and 4th International Workshop, QASA 2015, Cham, 2015.
LibreCat: /record/15897
DOI: 10.1007/978-3-319-29883-2_5

On the Security of TLS 1.3 and QUIC Against Weaknesses in PKCS .5 Encryption
T. Jager, J. Schwenk, J. Somorovsky, in: Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security - CCS ’15, 2015.
LibreCat: /record/15898
DOI: 10.1145/2810103.2813657

Practical Invalid Curve Attacks on TLS-ECDH
T. Jager, J. Schwenk, J. Somorovsky, in: Computer Security -- ESORICS 2015, Cham, 2015.
LibreCat: /record/15899
DOI: 10.1007/978-3-319-24174-6_21