Publications

Nyx: Greybox Hypervisor Fuzzing using Fast Snapshots and Affine Types

2021 - Sergej Schumilo, Cornelius Aschermann, Ali Abbasi, Simon Wör­ner, Thorsten Holz

USENIX Security Symposium, Vancouver, Canada, August 2021

Datenübertragbarkeit – Zwischen Abwarten und Umsetzen

2021 - Özlem Karasoy, Gülcan Turgut, Martin Degeling

In: Friedewald et. al, Selbstbestimmung, Privatheit und Datenschutz (Juli, 2021)

Spotlight on Phishing: A Longitudinal Study on Phishing Awareness Trainings

2021 - Florian Quinkert, Martin Degeling, Thorsten Holz

Quinkert, Florian, Martin Degeling, und Thorsten Holz. In Proc. DIMVA 2021. Lisboa, Portugal.

Apps Against the Spread: Privacy Implications and User Acceptance of COVID-19-Related Smartphone Apps on Three Continents

2021 - Christine Utz, Steffen Becker, Theodor Schnitzler, Florian Farke, Franziska Herbert, Leonie Schaewitz, Martin Degeling, Markus Dürmuth

ACM CHI Conference on Human Factors in Computing Systems 2021 [arXiv Preprint]

CollabFuzz: A Framework for Collaborative Fuzzing

2021 - Sebastian Österlund, Elia Geretto, Andrea Jemmett, Emre Güler, Philipp Görz, Thorsten Holz, Cristiano Giuffrida, Herbert Bos

European Workshop on Systems Security (EuroSec), Virtual, April 2021 [pdf]

We Built This Circuit: Exploring Threat Vectors in Circuit Establishment in Tor

2021 - Theodor Schnitzler, Christina Pöpper, Markus Dürmuth, Katharina Kohls

IEEE European Symposium on Security and Privacy (EuroS&P '21). Virtual Conference, September 6-10, 2021 [Paper]

Hey Alexa, is this Skill Safe?: Taking a Closer Look at the Alexa Skill Ecosystem

2021 - Christopher Lentzsch, Sheel Jayesh Shah, Benjamin Andow, Martin Degeling, Anupam Das, William Enck

Network and Distributed System Security Symposium (NDSS), San Diego, California, USA, February 2021 [Result Overvíew] [RUB News] [Media Report (Verge)] [pdf]

Reining in the Web's Inconsistencies with Site Policy

2021 - Stefano Calzavara, Tobias Urban, Dennis Tatang, Marius Steffens, Ben Stock

Network and Distributed System Security Symposium (NDSS), San Diego, California, USA, February 2021 [PDF]

Cupid: Automatic Fuzzer Selection for Collaborative Fuzzing

2020 - Emre Güler, Philipp Görz, Elia Geretto, Andrea Jemmett, Sebastian Österlund, Herbert Bos, Cristiano Giuffrida, Thorsten Holz

Annual Computer Security Applications Conference (ACSAC), Virtual, December 2020 [PDF]

Imperio: Robust Over-the-Air Adversarial Examples for Automatic Speech Recognition Systems

2020 - Lea Schönherr, Thorsten Eisenhofer, Steffen Zeiler, Thorsten Holz, Do­ro­thea Kolossa

Annual Computer Security Applications Conference (ACSAC), Virtual, December 2020 [arXiv Preprint] [PDF]

Effekte der DSGVO auf Webseiten und die Entwicklung der ePrivacy-Verordnung

2020 - Martin Degeling, Christine Utz, Tobias Urban

vorgänge. Zeitschrift für Bürgerrechte und Gesellschaftspolitik Nr. 231/232 [59(3-4)], S. 77-86. [pdf]

Plenty of Phish in the Sea: Analyzing Potential Pre-Attack Surfaces

2020 - Tobias Urban, Matteo Große-Kampmann, Dennis Tatang, Thorsten Holz, Norbert Pohlmann

European Symposium on Research in Computer Security (ESORICS), Guildford, UK, September 2020 [PDF]

Data Sharing in Mobile Apps — User Privacy Expectations in Europe

2020 - Nils Quermann, Martin Degeling

5th European Workshop on Usable Security (EuroUSEC 2020) [pdf]

Aurora: Statistical Crash Analysis for Automated Root Cause Explanation

2020 - Tim Blazytko, Moritz Schlögel, Cornelius Aschermann, Ali Abbasi, Joel Frank, Simon Wörner, Thorsten Holz

USENIX Security Symposium, Boston, MA, USA, August 2020 [PDF]

Call Me Maybe: Eavesdropping Encrypted LTE Calls With ReVoLTE

2020 - David Rupprecht, Katharina Kohls, Thorsten Holz, Christina Pöpper

USENIX Security Symposium, Boston, MA, USA, August 2020 [Website] [PDF]

EthBMC: A Bounded Model Checker for Smart Contracts

2020 - Joel Frank, Cornelius Aschermann, Thorsten Holz

USENIX Security Symposium, Boston, MA, USA, August 2020 [PDF]

HALucinator: Firmware Re-hosting Through Abstraction Layer Emulation

2020 - Abraham A. Clements, Eric Gustafson, Tobias Scharnowski, Paul Grosen, David Fritz, Christopher Kruegel, Giovanni Vigna, Saurabh Bagchi, Mathias Payer

USE­NIX Se­cu­ri­ty Sym­po­si­um, Bos­ton, MA, USA, Au­gust 2020 [PDF]

Leveraging Frequency Analysis for Deep Fake Image Recognition

2020 - Joel Frank, Thorsten Eisenhofer, Lea Schönherr, Asja Fischer , Do­ro­thea Kolossa, Thorsten Holz

International Conference on Machine Learning (ICML), July 2020 [arXiv Preprint] [PDF]

Akzeptanz von Corona-Apps in Deutschland vor der Einführung der Corona-Warn-App

2020 - Steffen Becker, Martin Degeling, Markus Dürmuth, Florian Farke, Leonie Schaewitz, Theodor Schnitzler, Christine Utz

Vorabveröffentlichung (Preprint), Juni 2020 [PDF (Deutsch)]

Be the Phisher - Understanding Users’ Perception of Malicious Domains

2020 - Florian Quinkert, Martin Degeling, Jim Blythe, Thorsten Holz

ACM Asia Conference on Computer & Communications Security (ASIACCS), Taipei, Taiwan, June 2020 [PDF]
Page: