Heitmann, N., Siewert, H., Moog, S., &; Somorovsky, J. (2024). Security Analysis of BigBlueButton and eduMEET. Applied Cryptography and Network Security.https://doi.org/10.1007/978-3-031-54776-8_8 
LibreCat: /record/54437
DOI: 10.1007/978-3-031-54776-8_8

Hebrok, S. N., Nachtigall, S., Maehren, M., Erinola, N., Merget, R., Somorovsky, J., &; Schwenk, J. (2023). We Really Need to Talk About Session Tickets: A Large-Scale Analysis of Cryptographic Dangers with TLS Session Tickets. 32nd USENIX Security Symposium.
LibreCat: /record/43060

Rossel, J., Mladenov, V., &; Somorovsky, J. (2023). Security Analysis of the 3MF Data Format. Proceedings of the 26th International Symposium on Research in Attacks, Intrusions and Defenses. 26th International Symposium on Research in Attacks, Intrusions and Defenses, Hongkong.https://doi.org/10.1145/3607199.3607216 
LibreCat: /record/48012
DOI: 10.1145/3607199.3607216

Pottebaum, J., Rossel, J., Somorovsky, J., Acar, Y., Fahr, R., Arias Cabarcos, P., Bodden, E., &; Gräßler, I. (2023). Re-Envisioning Industrial Control Systems Security by Considering Human Factors as a Core Element of Defense-in-Depth. 2023 IEEE European Symposium on Security and Privacy Workshops (EuroS&;PW), 379–385.https://doi.org/10.1109/eurospw59978.2023.00048 
LibreCat: /record/46500
DOI: 10.1109/eurospw59978.2023.00048

Niere, N., Hebrok, S. N., Somorovsky, J., &; Merget, R. (2023). Poster: Circumventing the GFW with TLS Record Fragmentation. Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security.https://doi.org/10.1145/3576915.3624372 
LibreCat: /record/49654
DOI: 10.1145/3576915.3624372

Mayer, P., Poddebniak, D., Fischer, K., Brinkmann, M., Somorovsky, J., Sasse, A., Schinzel, S., &; Volkamer, M. (2022). “I don’ know why I check this...” - Investigating Expert Users’ Strategies to Detect Email Signature Spoofing Attacks. Eighteenth Symposium on Usable Privacy and Security (SOUPS 2022), 77–96.
LibreCat: /record/32572

Maehren, M., Nieting, P., Hebrok, S. N., Merget, R., Somorovsky, J., &; Schwenk, J. (2022). TLS-Anvil: Adapting Combinatorial Testing for TLS Libraries. 31st USENIX Security Symposium (USENIX Security 22).
LibreCat: /record/32573

Siewert, H., Kretschmer, M., Niemietz, M., &; Somorovsky, J. (2022). On the Security of Parsing Security-Relevant HTTP Headers in Modern Browsers. 2022 IEEE Security and Privacy Workshops (SPW).https://doi.org/10.1109/spw54247.2022.9833880 
LibreCat: /record/54435
DOI: 10.1109/spw54247.2022.9833880

Brinkmann, M., Dresen, C., Merget, R., Poddebniak, D., Müller, J., Somorovsky, J., Schwenk, J., &; Schinzel, S. (2021). ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication. 30th USENIX Security Symposium (USENIX Security 21), 4293–4310.
LibreCat: /record/25331

Merget, R., Brinkmann, M., Aviram, N., Somorovsky, J., Mittmann, J., &; Schwenk, J. (2021). Raccoon Attack: Finding and Exploiting Most-Significant-Bit-Oracles in TLS-DH(E). 30th USENIX Security Symposium (USENIX Security 21), 213–230.
LibreCat: /record/25332

Fiterau-Brostean, P., Jonsson, B., Merget, R., de Ruiter, J., Sagonas, K., &; Somorovsky, J. (2020). Analysis of DTLS Implementations Using Protocol State Fuzzing. 29th USENIX Security Symposium (USENIX Security 20), 2523–2540.
LibreCat: /record/25334

Schwenk, J., Brinkmann, M., Poddebniak, D., Müller, J., Somorovsky, J., &; Schinzel, S. (2020). Mitigation of Attacks on Email End-to-End Encryption. Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security, 1647–1664.https://doi.org/10.1145/3372297.3417878 
LibreCat: /record/25336
DOI: 10.1145/3372297.3417878

Müller, J., Brinkmann, M., Poddebniak, D., Böck, H., Schinzel, S., Somorovsky, J., &; Schwenk, J. (2019). “Johnny, you are fired!” -- Spoofing OpenPGP and S/MIME Signatures in Emails. In 28th USENIX Security Symposium (USENIX Security 19) (pp. 1011–1028). Santa Clara, CA: USENIX Association.
LibreCat: /record/15908

Merget, R., Somorovsky, J., Aviram, N., Young, C., Fliegenschmidt, J., Schwenk, J., &; Shavitt, Y. (2019). Scalable Scanning and Automatic Classification of TLS Padding Oracle Vulnerabilities. In 28th USENIX Security Symposium (USENIX Security 19) (pp. 1029–1046). Santa Clara, CA: USENIX Association.
LibreCat: /record/15909

Engelbertz, N., Mladenov, V., Somorovsky, J., Herring, D., Erinola, N., &; Schwenk, J. (2019). Security Analysis of XAdES Validation in the CEF Digital Signature Services (DSS). In H. Roßnagel, S. Wagner, &; D. Hühnlein (Eds.), Open Identity Summit 2019 (pp. 95–106). Gesellschaft für Informatik, Bonn.
LibreCat: /record/15910

Albrecht, M. R., Massimo, J., Paterson, K. G., &; Somorovsky, J. (2018). Prime and Prejudice: Primality Testing Under Adversarial Conditions. In Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security.https://doi.org/10.1145/3243734.3243787 
LibreCat: /record/15892
DOI: 10.1145/3243734.3243787

Poddebniak, D., Somorovsky, J., Schinzel, S., Lochter, M., &; Rosler, P. (2018). Attacking Deterministic Signature Schemes Using Fault Attacks. In 2018 IEEE European Symposium on Security and Privacy (EuroS&;P).https://doi.org/10.1109/eurosp.2018.00031 
LibreCat: /record/15893
DOI: 10.1109/eurosp.2018.00031

Detering, D., Somorovsky, J., Mainka, C., Mladenov, V., &; Schwenk, J. (2018). On The (In-)Security Of JavaScript Object Signing And Encryption. In Proceedings of the 1st Reversing and Offensive-oriented Trends Symposium on - ROOTS.https://doi.org/10.1145/3150376.3150379 
LibreCat: /record/15894
DOI: 10.1145/3150376.3150379

Poddebniak, D., Dresen, C., Müller, J., Ising, F., Schinzel, S., Friedberger, S.,  Schwenk, J. (2018). Efail: Breaking S/MIME and OpenPGP Email Encryption using Exfiltration Channels. In 27th USENIX Security Symposium (USENIX Security 18) (pp. 549–566). Baltimore, MD: USENIX Association.
LibreCat: /record/15905

Böck, H., Somorovsky, J., &; Young, C. (2018). Return Of Bleichenbacherxtquoterights Oracle Threat (ROBOT). In 27th USENIX Security Symposium (USENIX Security 18) (pp. 817–849). Baltimore, MD: USENIX Association.
LibreCat: /record/15906