N. Heitmann, H. Siewert, S. Moog, and J. Somorovsky, “Security Analysis of BigBlueButton and eduMEET,”10.1007/978-3-031-54776-8_8__Abu Dhabi, 2024, doi:10.1007/978-3-031-54776-8_8 .

S. N. Hebrok et al., “We Really Need to Talk About Session Tickets: A Large-Scale Analysis of Cryptographic Dangers with TLS Session Tickets,” 2023.

J. Rossel, V. Mladenov, and J. Somorovsky, “Security Analysis of the 3MF Data Format,”10.1145/3607199.3607216__presented at the 26th International Symposium on Research in Attacks, Intrusions and Defenses, Hongkong, 2023, doi:10.1145/3607199.3607216 .

J. Pottebaum et al., “Re-Envisioning Industrial Control Systems Security by Considering Human Factors as a Core Element of Defense-in-Depth,”10.1109/eurospw59978.2023.00048__in 2023 IEEE European Symposium on Security and Privacy Workshops (EuroS&;PW), Delft, Netherlands, 2023, pp. 379–385, doi:10.1109/eurospw59978.2023.00048 .

N. Niere, S. N. Hebrok, J. Somorovsky, and R. Merget, “Poster: Circumventing the GFW with TLS Record Fragmentation,”10.1145/3576915.3624372__2023, doi:10.1145/3576915.3624372 .

P. Mayer et al., “‘I don’ know why I check this...’ - Investigating Expert Users’ Strategies to Detect Email Signature Spoofing Attacks,” in Eighteenth Symposium on Usable Privacy and Security (SOUPS 2022), 2022, pp. 77–96.

M. Maehren, P. Nieting, S. N. Hebrok, R. Merget, J. Somorovsky, and J. Schwenk, “TLS-Anvil: Adapting Combinatorial Testing for TLS Libraries,” 2022.

H. Siewert, M. Kretschmer, M. Niemietz, and J. Somorovsky, “On the Security of Parsing Security-Relevant HTTP Headers in Modern Browsers,”10.1109/spw54247.2022.9833880__2022, doi:10.1109/spw54247.2022.9833880 .

M. Brinkmann et al., “ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication,” in 30th USENIX Security Symposium (USENIX Security 21), 2021, pp. 4293–4310.

R. Merget, M. Brinkmann, N. Aviram, J. Somorovsky, J. Mittmann, and J. Schwenk, “Raccoon Attack: Finding and Exploiting Most-Significant-Bit-Oracles in TLS-DH(E),” in 30th USENIX Security Symposium (USENIX Security 21), 2021, pp. 213–230.

J. P. Drees et al., “Automated Detection of Side Channels in Cryptographic Protocols: DROWN the ROBOTs!,” 14th ACM Workshop on Artificial Intelligence and Security, 2021.

P. Fiterau-Brostean, B. Jonsson, R. Merget, J. de Ruiter, K. Sagonas, and J. Somorovsky, “Analysis of DTLS Implementations Using Protocol State Fuzzing,” in 29th USENIX Security Symposium (USENIX Security 20), 2020, pp. 2523–2540.

J. Schwenk, M. Brinkmann, D. Poddebniak, J. Müller, J. Somorovsky, and S. Schinzel, “Mitigation of Attacks on Email End-to-End Encryption,”10.1145/3372297.3417878__in Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security, 2020, pp. 1647–1664, doi:10.1145/3372297.3417878 .