N. Heitmann, H. Siewert, S. Moog, and J. Somorovsky, “Security Analysis of BigBlueButton and eduMEET,”10.1007/978-3-031-54776-8_8__Abu Dhabi, 2024, doi:10.1007/978-3-031-54776-8_8 .
LibreCat: /record/54437
DOI: 10.1007/978-3-031-54776-8_8

S. N. Hebrok et al., “We Really Need to Talk About Session Tickets: A Large-Scale Analysis of Cryptographic Dangers with TLS Session Tickets,” 2023.
LibreCat: /record/43060

J. Rossel, V. Mladenov, and J. Somorovsky, “Security Analysis of the 3MF Data Format,”10.1145/3607199.3607216__presented at the 26th International Symposium on Research in Attacks, Intrusions and Defenses, Hongkong, 2023, doi:10.1145/3607199.3607216 .
LibreCat: /record/48012
DOI: 10.1145/3607199.3607216

N. Niere, S. N. Hebrok, J. Somorovsky, and R. Merget, “Poster: Circumventing the GFW with TLS Record Fragmentation,”10.1145/3576915.3624372__2023, doi:10.1145/3576915.3624372 .
LibreCat: /record/49654
DOI: 10.1145/3576915.3624372

J. Pottebaum et al., “Re-Envisioning Industrial Control Systems Security by Considering Human Factors as a Core Element of Defense-in-Depth,”10.1109/eurospw59978.2023.00048__in 2023 IEEE European Symposium on Security and Privacy Workshops (EuroS&;PW), Delft, Netherlands, 2023, pp. 379–385, doi:10.1109/eurospw59978.2023.00048 .
LibreCat: /record/46500
DOI: 10.1109/eurospw59978.2023.00048

P. Mayer et al., “‘I don’ know why I check this...’ - Investigating Expert Users’ Strategies to Detect Email Signature Spoofing Attacks,” in Eighteenth Symposium on Usable Privacy and Security (SOUPS 2022), 2022, pp. 77–96.
LibreCat: /record/32572

M. Maehren, P. Nieting, S. N. Hebrok, R. Merget, J. Somorovsky, and J. Schwenk, “TLS-Anvil: Adapting Combinatorial Testing for TLS Libraries,” 2022.
LibreCat: /record/32573

H. Siewert, M. Kretschmer, M. Niemietz, and J. Somorovsky, “On the Security of Parsing Security-Relevant HTTP Headers in Modern Browsers,”10.1109/spw54247.2022.9833880__2022, doi:10.1109/spw54247.2022.9833880 .
LibreCat: /record/54435
DOI: 10.1109/spw54247.2022.9833880

M. Brinkmann et al., “ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication,” in 30th USENIX Security Symposium (USENIX Security 21), 2021, pp. 4293–4310.
LibreCat: /record/25331

R. Merget, M. Brinkmann, N. Aviram, J. Somorovsky, J. Mittmann, and J. Schwenk, “Raccoon Attack: Finding and Exploiting Most-Significant-Bit-Oracles in TLS-DH(E),” in 30th USENIX Security Symposium (USENIX Security 21), 2021, pp. 213–230.
LibreCat: /record/25332

J. P. Drees et al., “Automated Detection of Side Channels in Cryptographic Protocols: DROWN the ROBOTs!,” 14th ACM Workshop on Artificial Intelligence and Security, 2021.
LibreCat: /record/24143

P. Fiterau-Brostean, B. Jonsson, R. Merget, J. de Ruiter, K. Sagonas, and J. Somorovsky, “Analysis of DTLS Implementations Using Protocol State Fuzzing,” in 29th USENIX Security Symposium (USENIX Security 20), 2020, pp. 2523–2540.
LibreCat: /record/25334

J. Schwenk, M. Brinkmann, D. Poddebniak, J. Müller, J. Somorovsky, and S. Schinzel, “Mitigation of Attacks on Email End-to-End Encryption,”10.1145/3372297.3417878__in Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security, 2020, pp. 1647–1664, doi:10.1145/3372297.3417878 .
LibreCat: /record/25336
DOI: 10.1145/3372297.3417878

J. Müller et al., “‘Johnny, you are fired!’ -- Spoofing OpenPGP and S/MIME Signatures in Emails,” in 28th USENIX Security Symposium (USENIX Security 19), 2019, pp. 1011–1028.
LibreCat: /record/15908

R. Merget et al., “Scalable Scanning and Automatic Classification of TLS Padding Oracle Vulnerabilities,” in 28th USENIX Security Symposium (USENIX Security 19), 2019, pp. 1029–1046.
LibreCat: /record/15909

N. Engelbertz, V. Mladenov, J. Somorovsky, D. Herring, N. Erinola, and J. Schwenk, “Security Analysis of XAdES Validation in the CEF Digital Signature Services (DSS),” in Open Identity Summit 2019, 2019, pp. 95–106.
LibreCat: /record/15910

M. R. Albrecht, J. Massimo, K. G. Paterson, and J. Somorovsky, “Prime and Prejudice: Primality Testing Under Adversarial Conditions,” in Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security, 2018.
LibreCat: /record/15892
DOI: 10.1145/3243734.3243787

D. Poddebniak, J. Somorovsky, S. Schinzel, M. Lochter, and P. Rosler, “Attacking Deterministic Signature Schemes Using Fault Attacks,” in 2018 IEEE European Symposium on Security and Privacy (EuroS&;P), 2018.
LibreCat: /record/15893
DOI: 10.1109/eurosp.2018.00031

D. Detering, J. Somorovsky, C. Mainka, V. Mladenov, and J. Schwenk, “On The (In-)Security Of JavaScript Object Signing And Encryption,” in Proceedings of the 1st Reversing and Offensive-oriented Trends Symposium on - ROOTS, 2018.
LibreCat: /record/15894
DOI: 10.1145/3150376.3150379

D. Poddebniak et al., “Efail: Breaking S/MIME and OpenPGP Email Encryption using Exfiltration Channels,” in 27th USENIX Security Symposium (USENIX Security 18), 2018, pp. 549–566.
LibreCat: /record/15905