Publikationen
2024
Sebastian Roth, Lea Gröber, Philipp Baus, Katharina Krombholz, Ben Stock: Trust Me If You Can : How Usable Is Trusted Types In Practice?. - (Paper), Veranstaltung: 33rd USENIX Security Symposium, 14.-16.08.2024, Philadelphia, PA.
Florian Hantke, Sebastian Roth, Rafael Mrowczynski, Christine Utz, Ben Stock: Where Are the Red Lines? Towards Ethical Server-Side Scans in Security and Privacy Research. - (Paper), Veranstaltung: 45th IEEE Symposium on Security and Privacy (S&P), 20.-22.05.2024, San Francisco, CA.
doi:10.1109/SP54263.2024.00104
2023
Leon Trampert, Ben Stock, Sebastian Roth: Honey, I Cached our Security Tokens : Re-usage of Security Tokens in the Wild. - (Paper), Veranstaltung: 26th International Symposium on Research in Attacks, Intrusions and Defenses (RAID), 16.-18.10.2023, Hongkong.
doi:10.1145/3607199.3607223
2022
Sebastian Roth, Stefano Calzavara, Moritz Wilhelm, Alvise Rabitti, Ben Stock: The Security Lottery : Measuring Client-Side Web Security Inconsistencies. - (Paper), Veranstaltung: 31st USENIX Security Symposium, 10.-12.08.2022, Boston, MA.
Peter Stolz, Sebastian Roth, Ben Stock: To hash or not to hash : A security assessment of CSP's unsafe-hashes expression. - (Paper), Veranstaltung: 2022 SecWeb Workshop co-located with IEEE Security and Privacy workshops (SPW), 23.-26.05.2022, San Francisco, CA.
doi:10.1109/SPW54247.2022.9833888
2021
Sebastian Roth, Lea Gröber, Michael Backes, Katharina Krombholz, Ben Stock: 12 Angry Developers : A Qualitative Study on Developers' Struggles with CSP. - (Paper), Veranstaltung: ACM SIGSAC Conference on Computer and Communications Security (CCS '21), 15.-19.11.2021, .
doi:10.1145/3460120.3484780
2020
Sebastian Roth, Michael Backes, Ben Stock: Assessing the Impact of Script Gadgets on CSP at Scale. - (Paper), Veranstaltung: 15th ACM Asia Conference on Computer and Communications Security (Asia CCS '20), 05.-09.10.2020, Taipei, Taiwan.
doi:10.1145/3320269.3372201
Stefano Calzavara, Sebastian Roth, Alvise Rabitti, Michael Backes, Ben Stock: A Tale of Two Headers : A Formal Analysis of Inconsistent Click-Jacking Protection on the Web. - (Paper), Veranstaltung: 29th USENIX Security Symposium, 12.-14.08.2020, .
Sebastian Roth, Timothy Barron, Stefano Calzavara, Nick Nikiforakis, Ben Stock: Complex Security Policy? A Longitudinal Analysis of Deployed Content Security Policies. - (Paper), Veranstaltung: Network and Distributed System Security Symposium (NDSS), 23.-26.02.2020, San Diego, CA.
doi:10.14722/ndss.2020.23046
2019
Marius Musch, Marius Steffens, Sebastian Roth, Ben Stock, Martin Johns: ScriptProtect : Mitigating Unsafe Third-Party JavaScript Practices. - (Paper), Veranstaltung: ACM Asia Conference on Computer and Communications Security (AsiaCCS '19), 09.-12.07.2019, Auckland, New Zealand.
doi:10.1145/3321705.3329841