S. N. Hebrok et al., “We Really Need to Talk About Session Tickets: A Large-Scale Analysis of Cryptographic Dangers with TLS Session Tickets,” 2023.
LibreCat: /record/43060

J. Rossel, V. Mladenov, and J. Somorovsky, “Security Analysis of the 3MF Data Format,”10.1145/3607199.3607216__presented at the 26th International Symposium on Research in Attacks, Intrusions and Defenses, Hongkong, 2023, doi:10.1145/3607199.3607216 .
LibreCat: /record/48012
DOI: 10.1145/3607199.3607216

J. Pottebaum et al., “Re-Envisioning Industrial Control Systems Security by Considering Human Factors as a Core Element of Defense-in-Depth,”10.1109/eurospw59978.2023.00048__in 2023 IEEE European Symposium on Security and Privacy Workshops (EuroS&;PW), Delft, Netherlands, 2023, pp. 379–385, doi:10.1109/eurospw59978.2023.00048 .
LibreCat: /record/46500
DOI: 10.1109/eurospw59978.2023.00048

N. Niere, S. N. Hebrok, J. Somorovsky, and R. Merget, “Poster: Circumventing the GFW with TLS Record Fragmentation,”10.1145/3576915.3624372__2023, doi:10.1145/3576915.3624372 .
LibreCat: /record/49654
DOI: 10.1145/3576915.3624372

P. Mayer et al., “‘I don’ know why I check this...’ - Investigating Expert Users’ Strategies to Detect Email Signature Spoofing Attacks,” in Eighteenth Symposium on Usable Privacy and Security (SOUPS 2022), 2022, pp. 77–96.
LibreCat: /record/32572

M. Maehren, P. Nieting, S. N. Hebrok, R. Merget, J. Somorovsky, and J. Schwenk, “TLS-Anvil: Adapting Combinatorial Testing for TLS Libraries,” 2022.
LibreCat: /record/32573

M. Brinkmann et al., “ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication,” in 30th USENIX Security Symposium (USENIX Security 21), 2021, pp. 4293–4310.
LibreCat: /record/25331

R. Merget, M. Brinkmann, N. Aviram, J. Somorovsky, J. Mittmann, and J. Schwenk, “Raccoon Attack: Finding and Exploiting Most-Significant-Bit-Oracles in TLS-DH(E),” in 30th USENIX Security Symposium (USENIX Security 21), 2021, pp. 213–230.
LibreCat: /record/25332

P. Fiterau-Brostean, B. Jonsson, R. Merget, J. de Ruiter, K. Sagonas, and J. Somorovsky, “Analysis of DTLS Implementations Using Protocol State Fuzzing,” in 29th USENIX Security Symposium (USENIX Security 20), 2020, pp. 2523–2540.
LibreCat: /record/25334

J. Schwenk, M. Brinkmann, D. Poddebniak, J. Müller, J. Somorovsky, and S. Schinzel, “Mitigation of Attacks on Email End-to-End Encryption,”10.1145/3372297.3417878__in Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security, 2020, pp. 1647–1664, doi:10.1145/3372297.3417878 .
LibreCat: /record/25336
DOI: 10.1145/3372297.3417878

J. Müller et al., “‘Johnny, you are fired!’ -- Spoofing OpenPGP and S/MIME Signatures in Emails,” in 28th USENIX Security Symposium (USENIX Security 19), 2019, pp. 1011–1028.
LibreCat: /record/15908

R. Merget et al., “Scalable Scanning and Automatic Classification of TLS Padding Oracle Vulnerabilities,” in 28th USENIX Security Symposium (USENIX Security 19), 2019, pp. 1029–1046.
LibreCat: /record/15909

N. Engelbertz, V. Mladenov, J. Somorovsky, D. Herring, N. Erinola, and J. Schwenk, “Security Analysis of XAdES Validation in the CEF Digital Signature Services (DSS),” in Open Identity Summit 2019, 2019, pp. 95–106.
LibreCat: /record/15910

M. R. Albrecht, J. Massimo, K. G. Paterson, and J. Somorovsky, “Prime and Prejudice: Primality Testing Under Adversarial Conditions,” in Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security, 2018.
LibreCat: /record/15892
DOI: 10.1145/3243734.3243787

D. Poddebniak, J. Somorovsky, S. Schinzel, M. Lochter, and P. Rosler, “Attacking Deterministic Signature Schemes Using Fault Attacks,” in 2018 IEEE European Symposium on Security and Privacy (EuroS&;P), 2018.
LibreCat: /record/15893
DOI: 10.1109/eurosp.2018.00031

D. Detering, J. Somorovsky, C. Mainka, V. Mladenov, and J. Schwenk, “On The (In-)Security Of JavaScript Object Signing And Encryption,” in Proceedings of the 1st Reversing and Offensive-oriented Trends Symposium on - ROOTS, 2018.
LibreCat: /record/15894
DOI: 10.1145/3150376.3150379

D. Poddebniak et al., “Efail: Breaking S/MIME and OpenPGP Email Encryption using Exfiltration Channels,” in 27th USENIX Security Symposium (USENIX Security 18), 2018, pp. 549–566.
LibreCat: /record/15905

H. Böck, J. Somorovsky, and C. Young, “Return Of Bleichenbacherxtquoterights Oracle Threat (ROBOT),” in 27th USENIX Security Symposium (USENIX Security 18), 2018, pp. 817–849.
LibreCat: /record/15906

N. Engelbertz, N. Erinola, D. Herring, J. Somorovsky, V. Mladenov, and J. Schwenk, “Security Analysis of eIDAS -- The Cross-Country Authentication Scheme in Europe,” in 12th USENIX Workshop on Offensive Technologies (WOOT 18), 2018.
LibreCat: /record/15914

J. Muller, V. Mladenov, J. Somorovsky, and J. Schwenk, “SoK: Exploiting Network Printers,” in 2017 IEEE Symposium on Security and Privacy (SP), 2017.
LibreCat: /record/15895
DOI: 10.1109/sp.2017.47

M. Grothe, T. Niemann, J. Somorovsky, and J. Schwenk, “Breaking and Fixing Gridcoin,” in 11th USENIX Workshop on Offensive Technologies (WOOT 17), 2017.
LibreCat: /record/15912

J. Somorovsky, “Systematic Fuzzing and Testing of TLS Libraries,” in Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security - CCS’16, 2016.
LibreCat: /record/15896
DOI: 10.1145/2976749.2978411

N. Aviram et al., “DROWN: Breaking TLS Using SSL,” in 25th USENIX Security Symposium (USENIX Security 16), 2016, pp. 689–706.
LibreCat: /record/15907

H. Böck, A. Zauner, S. Devlin, J. Somorovsky, and P. Jovanovic, “Nonce-Disrespecting Adversaries: Practical Forgery Attacks on GCM in TLS,” in 10th USENIX Workshop on Offensive Technologies (WOOT 16), 2016.
LibreCat: /record/15913

T. Jager, J. Schwenk, and J. Somorovsky, “On the Security of TLS 1.3 and QUIC Against Weaknesses in PKCS .5 Encryption,” in Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security - CCS ’15, 2015.
LibreCat: /record/15898
DOI: 10.1145/2810103.2813657

M. Niemietz, J. Somorovsky, C. Mainka, and J. Schwenk, “Not so Smart: On Smart TV Apps,” in International Workshop on Secure Internet of Things (SIoT), 2015.
LibreCat: /record/15900
DOI: 10.1109/siot.2015.13

D. Kupser, C. Mainka, J. Schwenk, and J. Somorovsky, “How to Break XML Encryption -- Automatically,” in 9th USENIX Workshop on Offensive Technologies (WOOT 15), 2015.
LibreCat: /record/15911

C. Meyer, J. Somorovsky, E. Weiss, J. Schwenk, S. Schinzel, and E. Tews, “Revisiting SSL/TLS Implementations: New Bleichenbacher Side Channels and Attacks,” in 23rd USENIX Security Symposium (USENIX Security 14), 2014, pp. 733–748.
LibreCat: /record/15904

A. Falkenberg, C. Mainka, J. Somorovsky, and J. Schwenk, “A New Approach towards DoS Penetration Testing on Web Services,” in 2013 IEEE 20th International Conference on Web Services, 2013.
LibreCat: /record/15902
DOI: 10.1109/icws.2013.72

T. Jager, K. G. Paterson, and J. Somorovsky, “One Bad Apple: Backwards Compatibility Attacks on State-of-the-Art Cryptography,” in 20th Annual Network and Distributed System Security Symposium, NDSS 2013, San Diego, California, USA, February 24-27, 2013, 2013.
LibreCat: /record/15918

J. Somorovsky, A. Mayer, J. Schwenk, M. Kampmann, and M. Jensen, “On Breaking SAML: Be Whoever You Want to Be,” in Presented as part of the 21st USENIX Security Symposium (USENIX Security 12), 2012, pp. 397–412.
LibreCat: /record/15888

J. Somorovsky and J. Schwenk, “Technical Analysis of Countermeasures against Attack on XML Encryption -- or -- Just Another Motivation for Authenticated Encryption,” in 2012 IEEE Eighth World Congress on Services, 2012.
LibreCat: /record/15890
DOI: 10.1109/services.2012.6

J. Somorovsky, C. Meyer, T. Tran, M. Sbeiti, J. Schwenk, and C. Wietfeld, “Se: Secure Mobile Solution for Distributed Public Cloud Storages,” 2012.
LibreCat: /record/15917

J. Somorovsky, M. Heiderich, M. Jensen, J. Schwenk, N. Gruschka, and L. Lo Iacono, “All your clouds are belong to us: security analysis of cloud management interfaces,” in Proceedings of the 3rd ACM workshop on Cloud computing security workshop - CCSW ’11, 2011.
LibreCat: /record/15885
DOI: 10.1145/2046660.2046664

M. Jensen, C. Meyer, J. Somorovsky, and J. Schwenk, “On the effectiveness of XML Schema validation for countering XML Signature Wrapping attacks,” in 2011 1st International Workshop on Securing Services on the Cloud (IWSSC), 2011.
LibreCat: /record/15887
DOI: 10.1109/iwsscloud.2011.6049019

T. Jager and J. Somorovsky, “How to break XML encryption,” in Proceedings of the 18th ACM conference on Computer and communications security - CCS ’11, 2011.
LibreCat: /record/15915
DOI: 10.1145/2046707.2046756

C. Meyer, J. Somorovsky, B. Driessen, J. Schwenk, T. Tran, and C. Wietfeld, “Se: Ein mobiles Nutzer-kontrolliertes Sicherheitskonzept für Cloud-Storage,” 2011.
LibreCat: /record/15916

J. Somorovsky, M. Jensen, and J. Schwenk, “Streaming-Based Verification of XML Signatures in SOAP Messages,” in 2010 6th World Congress on Services, 2010.
LibreCat: /record/15889
DOI: 10.1109/services.2010.57