Security Analysis of BigBlueButton and eduMEET
N. Heitmann, H. Siewert, S. Moog, J. Somorovsky, in: Applied Cryptography and Network Security, Springer Nature Switzerland, Cham, 2024.
LibreCat: /record/54437
DOI: 10.1007/978-3-031-54776-8_8

We Really Need to Talk About Session Tickets: A Large-Scale Analysis of Cryptographic Dangers with TLS Session Tickets
S.N. Hebrok, S. Nachtigall, M. Maehren, N. Erinola, R. Merget, J. Somorovsky, J. Schwenk, in: 32nd USENIX Security Symposium, 2023.
LibreCat: /record/43060

Security Analysis of the 3MF Data Format
J. Rossel, V. Mladenov, J. Somorovsky, in: Proceedings of the 26th International Symposium on Research in Attacks, Intrusions and Defenses, ACM, 2023.
LibreCat: /record/48012
DOI: 10.1145/3607199.3607216

Re-Envisioning Industrial Control Systems Security by Considering Human Factors as a Core Element of Defense-in-Depth
J. Pottebaum, J. Rossel, J. Somorovsky, Y. Acar, R. Fahr, P. Arias Cabarcos, E. Bodden, I. Gräßler, in: 2023 IEEE European Symposium on Security and Privacy Workshops (EuroS&;PW), IEEE, 2023, pp. 379–385.
LibreCat: /record/46500
DOI: 10.1109/eurospw59978.2023.00048

Poster: Circumventing the GFW with TLS Record Fragmentation
N. Niere, S.N. Hebrok, J. Somorovsky, R. Merget, in: Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security, ACM, 2023.
LibreCat: /record/49654
DOI: 10.1145/3576915.3624372

"I don' know why I check this..." - Investigating Expert Users' Strategies to Detect Email Signature Spoofing Attacks
P. Mayer, D. Poddebniak, K. Fischer, M. Brinkmann, J. Somorovsky, A. Sasse, S. Schinzel, M. Volkamer, in: Eighteenth Symposium on Usable Privacy and Security (SOUPS 2022), USENIX Association, Boston, MA, 2022, pp. 77–96.
LibreCat: /record/32572

TLS-Anvil: Adapting Combinatorial Testing for TLS Libraries
M. Maehren, P. Nieting, S.N. Hebrok, R. Merget, J. Somorovsky, J. Schwenk, in: 31st USENIX Security Symposium (USENIX Security 22), USENIX Association, Boston, MA, 2022.
LibreCat: /record/32573

On the Security of Parsing Security-Relevant HTTP Headers in Modern Browsers
H. Siewert, M. Kretschmer, M. Niemietz, J. Somorovsky, in: 2022 IEEE Security and Privacy Workshops (SPW), IEEE, 2022.
LibreCat: /record/54435
DOI: 10.1109/spw54247.2022.9833880

ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication
M. Brinkmann, C. Dresen, R. Merget, D. Poddebniak, J. Müller, J. Somorovsky, J. Schwenk, S. Schinzel, in: 30th USENIX Security Symposium (USENIX Security 21), USENIX Association, 2021, pp. 4293–4310.
LibreCat: /record/25331

Raccoon Attack: Finding and Exploiting Most-Significant-Bit-Oracles in TLS-DH(E)
R. Merget, M. Brinkmann, N. Aviram, J. Somorovsky, J. Mittmann, J. Schwenk, in: 30th USENIX Security Symposium (USENIX Security 21), USENIX Association, 2021, pp. 213–230.
LibreCat: /record/25332

Automated Detection of Side Channels in Cryptographic Protocols: DROWN the ROBOTs!
J.P. Drees, P. Gupta, E. Hüllermeier, T. Jager, A. Konze, C. Priesterjahn, A. Ramaswamy, J. Somorovsky, 14th ACM Workshop on Artificial Intelligence and Security (2021).
LibreCat: /record/24143

Analysis of DTLS Implementations Using Protocol State Fuzzing
P. Fiterau-Brostean, B. Jonsson, R. Merget, J. de Ruiter, K. Sagonas, J. Somorovsky, in: 29th USENIX Security Symposium (USENIX Security 20), USENIX Association, 2020, pp. 2523–2540.
LibreCat: /record/25334

Mitigation of Attacks on Email End-to-End Encryption
J. Schwenk, M. Brinkmann, D. Poddebniak, J. Müller, J. Somorovsky, S. Schinzel, in: Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security, Association for Computing Machinery, New York, NY, USA, 2020, pp. 1647–1664.
LibreCat: /record/25336
DOI: 10.1145/3372297.3417878

"Johnny, you are fired!" -- Spoofing OpenPGP and S/MIME Signatures in Emails
J. Müller, M. Brinkmann, D. Poddebniak, H. Böck, S. Schinzel, J. Somorovsky, J. Schwenk, in: 28th USENIX Security Symposium (USENIX Security 19), USENIX Association, Santa Clara, CA, 2019, pp. 1011–1028.
LibreCat: /record/15908

Scalable Scanning and Automatic Classification of TLS Padding Oracle Vulnerabilities
R. Merget, J. Somorovsky, N. Aviram, C. Young, J. Fliegenschmidt, J. Schwenk, Y. Shavitt, in: 28th USENIX Security Symposium (USENIX Security 19), USENIX Association, Santa Clara, CA, 2019, pp. 1029–1046.
LibreCat: /record/15909

Security Analysis of XAdES Validation in the CEF Digital Signature Services (DSS)
N. Engelbertz, V. Mladenov, J. Somorovsky, D. Herring, N. Erinola, J. Schwenk, in: H. Roßnagel, S. Wagner, D. Hühnlein (Eds.), Open Identity Summit 2019, Gesellschaft für Informatik, Bonn, 2019, pp. 95–106.
LibreCat: /record/15910

Prime and Prejudice: Primality Testing Under Adversarial Conditions
M.R. Albrecht, J. Massimo, K.G. Paterson, J. Somorovsky, in: Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security, 2018.
LibreCat: /record/15892
DOI: 10.1145/3243734.3243787

Attacking Deterministic Signature Schemes Using Fault Attacks
D. Poddebniak, J. Somorovsky, S. Schinzel, M. Lochter, P. Rosler, in: 2018 IEEE European Symposium on Security and Privacy (EuroS&;P), 2018.
LibreCat: /record/15893
DOI: 10.1109/eurosp.2018.00031

On The (In-)Security Of JavaScript Object Signing And Encryption
D. Detering, J. Somorovsky, C. Mainka, V. Mladenov, J. Schwenk, in: Proceedings of the 1st Reversing and Offensive-Oriented Trends Symposium on - ROOTS, 2018.
LibreCat: /record/15894
DOI: 10.1145/3150376.3150379

Efail: Breaking S/MIME and OpenPGP Email Encryption using Exfiltration Channels
D. Poddebniak, C. Dresen, J. Müller, F. Ising, S. Schinzel, S. Friedberger, J. Somorovsky, J. Schwenk, in: 27th USENIX Security Symposium (USENIX Security 18), USENIX Association, Baltimore, MD, 2018, pp. 549–566.
LibreCat: /record/15905