Ben Stock - RankMe

60 papers A* 35A 14B 1Journal 6Unranked 4

Year	Rank	Type	Title / Venue / Authors
2025	A*	`conf`	"I have no idea how to make it safer": Studying Security and Privacy Mindsets of Browser Extension Developers. USENIX Security Symposium Shubham Agarwal, Rafael Mrowczynski, Maria Hellenthal, Ben Stock
2025	A*	`conf`	403 Forbidden? Ethically Evaluating Broken Access Control in the Wild. SP Saiid El Hajj Chehade, Florian Hantke, Ben Stock
2025	A	`conf`	A Permissions Odyssey: A Systematic Study of Browser Permissions on Modern Websites. IMC Alberto Fernández de Retana, Jannis Rautenstrauch, Igor Santos-Grueiro, Ben Stock
2025	A*	`conf`	Double-Edged Shield: On the Fingerprintability of Customized Ad Blockers. USENIX Security Symposium Saiid El Hajj Chehade, Ben Stock, Carmela Troncoso
2025	A*	`conf`	Head(er)s Up! Detecting Security Header Inconsistencies in Browsers. CCS Jannis Rautenstrauch, Trung Tin Nguyen, Karthik Ramakrishnan, Ben Stock
2025	A	`conf`	Open Access Alert: Studying the Privacy Risks in Android WebView's Web Permission Enforcement. AsiaCCS Trung Tin Nguyen, Ben Stock
2025	A*	`conf`	The (Un)usual Suspects - Studying Reasons for Lacking Updates in WordPress. NDSS Maria Hellenthal, Lena Gotsche, Rafael Mrowczynski, Sarah Kugel, Michael Schilling, Ben Stock
2025	A*	`conf`	Web Execution Bundles: Reproducible, Accurate, and Archivable Web Measurements. USENIX Security Symposium Florian Hantke, Peter Snyder, Hamed Haddadi, Ben Stock
2025	J	`jnl`	Web Execution Bundles: Reproducible, Accurate, and Archivable Web Measurements. CoRR Florian Hantke, Peter Snyder, Hamed Haddadi, Ben Stock
2024	J	`jnl`	From Blocking to Breaking: Evaluating the Impact of Adblockers on Web Usability. CoRR Ritik Roongta, Mitchell Zhou, Ben Stock, Rachel Greenstadt
2024	J	`jnl`	Information flow control for comparative privacy analyses. Int. J. Inf. Sec. Zubair Ahmad, Stefano Calzavara, Samuele Casarin, Ben Stock
2024	A*	`conf`	Peeking through the window: Fingerprinting Browser Extensions through Page-Visible Execution Traces and Interactions. CCS Shubham Agarwal, Aurore Fass, Ben Stock
2024	A*	`conf`	To Auth or Not To Auth? A Comparative Analysis of the Pre- and Post-Login Security Landscape. SP Jannis Rautenstrauch, Metodi Mitkov, Thomas Helbrecht, Lorenz Hetterich, Ben Stock
2024	A*	`conf`	Trust Me If You Can - How Usable Is Trusted Types In Practice? USENIX Security Symposium Sebastian Roth, Lea Gröber, Philipp Baus, Katharina Krombholz, Ben Stock
2024	A*	`conf`	Where Are the Red Lines? Towards Ethical Server-Side Scans in Security and Privacy Research. SP Florian Hantke, Sebastian Roth, Rafael Mrowczynski, Christine Utz, Ben Stock
2024	A	`conf`	Who's Breaking the Rules? Studying Conformance to the HTTP Specifications and its Security Impact. AsiaCCS Jannis Rautenstrauch, Ben Stock
2023	J	`jnl`	Comparing Large-Scale Privacy and Security Notifications. Proc. Priv. Enhancing Technol. Christine Utz, Matthias Michels, Martin Degeling, Ninja Marnau, Ben Stock
2023	A*	`conf`	DiffCSP: Finding Browser Bugs in Content Security Policy Enforcement through Differential Testing. NDSS Seongil Wi, Trung Tin Nguyen, Jihwan Kim, Ben Stock, Sooel Son
2023	A*	`conf`	Extended Hell(o): A Comprehensive Large-Scale Study on Email Confidentiality and Integrity Mechanisms in the Wild. USENIX Security Symposium Birk Blechschmidt, Ben Stock
2023	A	`conf`	Honey, I Cached our Security Tokens Re-usage of Security Tokens in the Wild. RAID Leon Trampert, Ben Stock, Sebastian Roth
2023	J	`jnl`	Pareto-optimal Defenses for the Web Infrastructure: Theory and Practice. ACM Trans. Priv. Secur. Giorgio Di Tizio, Patrick Speicher, Milivoj Simeonovski, Michael Backes, Ben Stock, Robert Künnemann
2023	A*	`conf`	The Leaky Web: Automated Discovery of Cross-Site Information Leaks in Browsers and the Web. SP Jannis Rautenstrauch, Giancarlo Pellegrino, Ben Stock
2023	A*	`conf`	You Call This Archaeology? Evaluating Web Archives for Reproducible Web Security Measurements. CCS Florian Hantke, Stefano Calzavara, Moritz Wilhelm, Alvise Rabitti, Ben Stock
2022	A*	`conf`	Freely Given Consent?: Studying Consent Notice of Third-Party Tracking and Its Violations of GDPR in Android Apps. CCS Trung Tin Nguyen, Michael Backes, Ben Stock
2022	A	`conf`	HTML violations and where to find them: a longitudinal analysis of specification violations in HTML. IMC Florian Hantke, Ben Stock
2022	A	`conf`	Hand Sanitizers in the Wild: A Large-scale Study of Custom JavaScript Sanitizer Functions. EuroS&P David Klein, Thomas Barber, Souphiane Bensalim, Ben Stock, Martin Johns
2022	A*	`conf`	The Security Lottery: Measuring Client-Side Web Security Inconsistencies. USENIX Security Symposium Sebastian Roth, Stefano Calzavara, Moritz Wilhelm, Alvise Rabitti, Ben Stock
2022	—	`conf`	To hash or not to hash: A security assessment of CSP's unsafe-hashes expression. SP (Workshops) Peter Stolz, Sebastian Roth, Ben Stock
2021	A*	`conf`	12 Angry Developers - A Qualitative Study on Developers' Struggles with CSP. CCS Sebastian Roth, Lea Gröber, Michael Backes, Katharina Krombholz, Ben Stock
2021	A	`conf`	Careful Who You Trust: Studying the Pitfalls of Cross-Origin Communication. AsiaCCS Gordon Meiser, Pierre Laperdrix, Ben Stock
2021	A*	`conf`	DoubleX: Statically Detecting Vulnerable Data Flows in Browser Extensions at Scale. CCS Aurore Fass, Dolière Francis Somé, Michael Backes, Ben Stock
2021	A*	`conf`	Reining in the Web's Inconsistencies with Site Policy. NDSS Stefano Calzavara, Tobias Urban, Dennis Tatang, Marius Steffens, Ben Stock
2021	A*	`conf`	Share First, Ask Later (or Never?) Studying Violations of GDPR's Explicit Consent in Android Apps. USENIX Security Symposium Trung Tin Nguyen, Michael Backes, Ninja Marnau, Ben Stock
2021	A*	`conf`	Who's Hosting the Block Party? Studying Third-Party Blockage of CSP and SRI. NDSS Marius Steffens, Marius Musch, Martin Johns, Ben Stock
2020	A*	`conf`	A Tale of Two Headers: A Formal Analysis of Inconsistent Click-Jacking Protection on the Web. USENIX Security Symposium Stefano Calzavara, Sebastian Roth, Alvise Rabitti, Michael Backes, Ben Stock
2020	A	`conf`	Assessing the Impact of Script Gadgets on CSP at Scale. AsiaCCS Sebastian Roth, Michael Backes, Ben Stock
2020	A*	`conf`	Complex Security Policy? A Longitudinal Analysis of Deployed Content Security Policies. NDSS Sebastian Roth, Timothy Barron, Stefano Calzavara, Nick Nikiforakis, Ben Stock
2020	A*	`conf`	PMForce: Systematically Analyzing postMessage Handlers at Scale. CCS Marius Steffens, Ben Stock
2020	—	`conf`	SecWeb 2020 Preface. EuroS&P Workshops Stefano Calzavara, Ben Stock
2019	A*	`conf`	Don't Trust The Locals: Investigating the Prevalence of Persistent Client-Side Cross-Site Scripting in the Wild. NDSS Marius Steffens, Christian Rossow, Martin Johns, Ben Stock
2019	A*	`conf`	HideNoSeek: Camouflaging Malicious JavaScript in Benign ASTs. CCS Aurore Fass, Michael Backes, Ben Stock
2019	A	`conf`	JStap: a static pre-filter for malicious JavaScript detection. ACSAC Aurore Fass, Michael Backes, Ben Stock
2019	A	`conf`	ScriptProtect: Mitigating Unsafe Third-Party JavaScript Practices. AsiaCCS Marius Musch, Marius Steffens, Sebastian Roth, Ben Stock, Martin Johns
2018	A*	`conf`	Didn't You Hear Me? - Towards More Successful Web Vulnerability Notifications. NDSS Ben Stock, Giancarlo Pellegrino, Frank Li, Michael Backes, Christian Rossow
2018	B	`conf`	JaSt: Fully Syntactic Detection of Malicious (Obfuscated) JavaScript. DIMVA Aurore Fass, Robert P. Krawczyk, Michael Backes, Ben Stock
2017	A	`conf`	Efficient and Flexible Discovery of PHP Application Vulnerabilities. EuroS&P Michael Backes, Konrad Rieck, Malte Skoruppa, Ben Stock, Fabian Yamaguchi
2017	A*	`conf`	How the Web Tangled Itself: Uncovering the History of Client-Side Web (In)Security. USENIX Security Symposium Ben Stock, Martin Johns, Marius Steffens, Michael Backes
2016	J	`jnl`	Client-Side XSS in Theorie und Praxis. Datenschutz und Datensicherheit Ben Stock, Martin Johns
2016	A*	`conf`	Hey, You Have a Problem: On the Feasibility of Large-Scale Web Vulnerability Notification. USENIX Security Symposium Ben Stock, Giancarlo Pellegrino, Christian Rossow, Martin Johns, Michael Backes
2016	A	`conf`	Kizzle: A Signature Compiler for Detecting Exploit Kits. DSN Ben Stock, Benjamin Livshits, Benjamin G. Zorn
2016	A	`conf`	On the Feasibility of TTL-Based Filtering for DRDoS Mitigation. RAID Michael Backes, Thorsten Holz, Christian Rossow, Teemu Rytilahti, Milivoj Simeonovski, Ben Stock
2016	A*	`conf`	POSTER: Mapping the Landscape of Large-Scale Vulnerability Notifications. CCS Ben Stock, Giancarlo Pellegrino, Christian Rossow, Martin Johns, Michael Backes
2015	A*	`conf`	From Facepalm to Brain Bender: Exploring Client-Side Cross-Site Scripting. CCS Ben Stock, Stephan Pfistner, Bernd Kaiser, Sebastian Lekies, Martin Johns
2015	A*	`conf`	The Unexpected Dangers of Dynamic JavaScript. USENIX Security Symposium Sebastian Lekies, Ben Stock, Martin Wentzel, Martin Johns
2014	—	`conf`	DOM-basiertes Cross-Site Scripting im Web: Reise in ein unerforschtes Land. Sicherheit Ben Stock, Sebastian Lekies, Martin Johns
2014	A*	`conf`	Precise Client-side Protection against DOM-based Cross-Site Scripting. USENIX Security Symposium Ben Stock, Sebastian Lekies, Tobias Mueller, Patrick Spiegel, Martin Johns
2014	A	`conf`	Protecting users against XSS-based password manager abuse. AsiaCCS Ben Stock, Martin Johns
2013	A*	`conf`	25 million flows later: large-scale detection of DOM-based XSS. CCS Sebastian Lekies, Ben Stock, Martin Johns
2013	A*	`conf`	Eradicating DNS Rebinding with the Extended Same-origin Policy. USENIX Security Symposium Martin Johns, Sebastian Lekies, Ben Stock
2011	—	`conf`	Exploring the Landscape of Cybercrime. SysSec@DIMVA Zinaida Benenson, Andreas Dewald, Hans-Georg Eßer, Felix C. Freiling, Tilo Müller, Christian Moch, Stefan Vömel, Sebastian Schinzel, Michael Spreitzenbarth, Ben Stock, Johannes Stüttgen