Not so Smart: On Smart TV Apps
M. Niemietz, J. Somorovsky, C. Mainka, J. Schwenk, in: International Workshop on Secure Internet of Things (SIoT), 2015.
LibreCat: /record/15900
DOI: 10.1109/siot.2015.13

How to Break XML Encryption -- Automatically
D. Kupser, C. Mainka, J. Schwenk, J. Somorovsky, in: 9th USENIX Workshop on Offensive Technologies (WOOT 15), USENIX Association, Washington, D.C., 2015.
LibreCat: /record/15911

Revisiting SSL/TLS Implementations: New Bleichenbacher Side Channels and Attacks
C. Meyer, J. Somorovsky, E. Weiss, J. Schwenk, S. Schinzel, E. Tews, in: 23rd USENIX Security Symposium (USENIX Security 14), USENIX Association, San Diego, CA, 2014, pp. 733–748.
LibreCat: /record/15904

On the insecurity of XML Security
J. Somorovsky, On the Insecurity of XML Security, 2013.
LibreCat: /record/15901
DOI: 10.1515/itit-2014-1045

A New Approach towards DoS Penetration Testing on Web Services
A. Falkenberg, C. Mainka, J. Somorovsky, J. Schwenk, in: 2013 IEEE 20th International Conference on Web Services, 2013.
LibreCat: /record/15902
DOI: 10.1109/icws.2013.72

Penetration test tool for XML-based web services
C. Mainka, V. Mladenov, J. Somorovsky, J. Schwenk, CEUR Workshop Proceedings 965 (2013) 31–35.
LibreCat: /record/15903

One Bad Apple: Backwards Compatibility Attacks on State-of-the-Art Cryptography
T. Jager, K.G. Paterson, J. Somorovsky, in: 20th Annual Network and Distributed System Security Symposium, NDSS 2013, San Diego, California, USA, February 24-27, 2013, 2013.
LibreCat: /record/15918

On Breaking SAML: Be Whoever You Want to Be
J. Somorovsky, A. Mayer, J. Schwenk, M. Kampmann, M. Jensen, in: Presented as Part of the 21st USENIX Security Symposium (USENIX Security 12), USENIX, Bellevue, WA, 2012, pp. 397–412.
LibreCat: /record/15888

Technical Analysis of Countermeasures against Attack on XML Encryption -- or -- Just Another Motivation for Authenticated Encryption
J. Somorovsky, J. Schwenk, in: 2012 IEEE Eighth World Congress on Services, 2012.
LibreCat: /record/15890
DOI: 10.1109/services.2012.6

Bleichenbacher’s Attack Strikes again: Breaking PKCS .5 in XML Encryption
T. Jager, S. Schinzel, J. Somorovsky, in: Computer Security – ESORICS 2012, Berlin, Heidelberg, 2012.
LibreCat: /record/15891
DOI: 10.1007/978-3-642-33167-1_43

Se: Secure Mobile Solution for Distributed Public Cloud Storages
J. Somorovsky, C. Meyer, T. Tran, M. Sbeiti, J. Schwenk, C. Wietfeld, in: 2012.
LibreCat: /record/15917

All your clouds are belong to us: security analysis of cloud management interfaces
J. Somorovsky, M. Heiderich, M. Jensen, J. Schwenk, N. Gruschka, L. Lo Iacono, in: Proceedings of the 3rd ACM Workshop on Cloud Computing Security Workshop - CCSW ’11, 2011.
LibreCat: /record/15885
DOI: 10.1145/2046660.2046664

On the effectiveness of XML Schema validation for countering XML Signature Wrapping attacks
M. Jensen, C. Meyer, J. Somorovsky, J. Schwenk, in: 2011 1st International Workshop on Securing Services on the Cloud (IWSSC), 2011.
LibreCat: /record/15887
DOI: 10.1109/iwsscloud.2011.6049019

How to break XML encryption
T. Jager, J. Somorovsky, in: Proceedings of the 18th ACM Conference on Computer and Communications Security - CCS ’11, 2011.
LibreCat: /record/15915
DOI: 10.1145/2046707.2046756

Se: Ein mobiles Nutzer-kontrolliertes Sicherheitskonzept für Cloud-Storage
C. Meyer, J. Somorovsky, B. Driessen, J. Schwenk, T. Tran, C. Wietfeld, in: 2011.
LibreCat: /record/15916

Streaming-Based Verification of XML Signatures in SOAP Messages
J. Somorovsky, M. Jensen, J. Schwenk, in: 2010 6th World Congress on Services, 2010.
LibreCat: /record/15889
DOI: 10.1109/services.2010.57