Christian Mainka

41 papers A* 12A 7B 2C 1Journal 8Unranked 10

Year	Rank	Type	Title / Venue / Authors
2025	A*	`conf`	"Only as Strong as the Weakest Link": On the Security of Brokered Single Sign-On on the Web. SP Tommaso Innocenti, Louis Jannett, Christian Mainka, Vladislav Mladenov, Engin Kirda
2024	A	`conf`	SoK: SSO-MONITOR - The Current State and Future Research Directions in Single Sign-on Security Measurements. EuroS&P Louis Jannett, Christian Mainka, Maximilian Westers, Andreas Mayer, Tobias Wich, Vladislav Mladenov
2023	J	`jnl`	Die Financial-grade API (FAPI). Datenschutz und Datensicherheit (dud) Johanna Schenkel, Christian Mainka
2023	A*	`conf`	Every Signature is Broken: On the Insecurity of Microsoft Office's OOXML Signatures. USENIX Security Symposium Simon Rohlmann, Vladislav Mladenov, Christian Mainka, Daniel Hirschberger, Jörg Schwenk
2023	A*	`conf`	Finding All Cross-Site Needles in the DOM Stack: A Comprehensive Methodology for the Automatic XS-Leak Detection in Web Browsers. CCS Dominik Trevor Noß, Lukas Knittel, Christian Mainka, Marcus Niemietz, Jörg Schwenk
2023	J	`jnl`	SSO-Monitor: Fully-Automatic Large-Scale Landscape, Security, and Privacy Analyses of Single Sign-On in the Wild. CoRR Maximilian Westers, Tobias Wich, Louis Jannett, Vladislav Mladenov, Christian Mainka, Andreas Mayer
2022	A*	`conf`	DISTINCT: Identity Theft using In-Browser Communications in Dual-Window Single Sign-On. CCS Louis Jannett, Vladislav Mladenov, Christian Mainka, Jörg Schwenk
2022	A*	`conf`	Oops... Code Execution and Content Spoofing: The First Comprehensive Analysis of OpenDocument Signatures. USENIX Security Symposium Simon Rohlmann, Christian Mainka, Vladislav Mladenov, Jörg Schwenk
2021	A*	`conf`	Breaking the Specification: PDF Certification. SP Simon Rohlmann, Vladislav Mladenov, Christian Mainka, Jörg Schwenk
2021	J	`jnl`	Over 100 Bugs in a Row: Security Analysis of the Top-Rated Joomla Extensions. CoRR Marcus Niemietz, Mario Korth, Christian Mainka, Juraj Somorovsky
2021	A*	`conf`	Processing Dangerous Paths - On Security and Privacy of the Portable Document Format. NDSS Jens Müller, Dominik Noss, Christian Mainka, Vladislav Mladenov, Jörg Schwenk
2021	A*	`conf`	Shadow Attacks: Hiding and Replacing Content in Signed PDFs. NDSS Christian Mainka, Vladislav Mladenov, Simon Rohlmann
2021	A*	`conf`	XSinator.com: From a Formal Model to the Automatic Evaluation of Cross-Site Leaks in Web Browsers. CCS Lukas Knittel, Christian Mainka, Marcus Niemietz, Dominik Trevor Noß, Jörg Schwenk
2020	—	`conf`	Office Document Security and Privacy. WOOT @ USENIX Security Symposium Jens Müller, Fabian Ising, Christian Mainka, Vladislav Mladenov, Sebastian Schinzel, Jörg Schwenk
2019	A*	`conf`	1 Trillion Dollar Refund: How To Spoof PDF Signatures. CCS Vladislav Mladenov, Christian Mainka, Karsten Meyer zu Selhausen, Martin Grothe, Jörg Schwenk
2019	A*	`conf`	Practical Decryption exFiltration: Breaking PDF Encryption. CCS Jens Müller, Fabian Ising, Vladislav Mladenov, Christian Mainka, Sebastian Schinzel, Jörg Schwenk
2018	A	`conf`	More is Less: On the End-to-End Security of Group Chats in Signal, WhatsApp, and Threema. EuroS&P Paul Rösler, Christian Mainka, Jörg Schwenk
2017	J	`jnl`	More is Less: How Group Chats Weaken the Security of Instant Messengers Signal, WhatsApp, and Threema. IACR Cryptol. ePrint Arch. Paul Rösler, Christian Mainka, Jörg Schwenk
2017	—	`—`	On message-level security. Christian Mainka
2017	A	`conf`	SECRET: On the Feasibility of a Secure, Efficient, and Collaborative Real-Time Web Editor. AsiaCCS Dennis Felsch, Christian Mainka, Vladislav Mladenov, Jörg Schwenk
2017	A*	`conf`	Same-Origin Policy: Evaluation in Modern Browsers. USENIX Security Symposium Jörg Schwenk, Marcus Niemietz, Christian Mainka
2017	A	`conf`	SoK: Single Sign-On Security - An Evaluation of OpenID Connect. EuroS&P Christian Mainka, Vladislav Mladenov, Jörg Schwenk, Tobias Wich
2016	A	`conf`	Do Not Trust Me: Using Malicious IdPs for Analyzing and Attacking Single Sign-on. EuroS&P Christian Mainka, Vladislav Mladenov, Jörg Schwenk
2016	A	`conf`	How Secure is TextSecure? EuroS&P Tilman Frosch, Christian Mainka, Christoph Bader, Florian Bergsma, Jörg Schwenk, Thorsten Holz
2016	—	`conf`	How to Break Microsoft Rights Management Services. WOOT Martin Grothe, Christian Mainka, Paul Rösler, Jörg Schwenk
2016	—	`conf`	SoK: XML Parser Vulnerabilities. WOOT Christopher Späth, Christian Mainka, Vladislav Mladenov, Jörg Schwenk
2016	B	`conf`	Your Cloud in My Company: Modern Rights Management Services Revisited. ARES Martin Grothe, Christian Mainka, Paul Rösler, Johanna Jupke, Jan Kaiser, Jörg Schwenk
2015	—	`conf`	AdIDoS - Adaptive and Intelligent Fully-Automatic Detection of Denial-of-Service Weaknesses in Web Services. DPM/QASA@ESORICS Christian Altmeier, Christian Mainka, Juraj Somorovsky, Jörg Schwenk
2015	—	`conf`	Automatic recognition, processing and attacking of single sign-on protocols with burp suite. Open Identity Summit Christian Mainka, Vladislav Mladenov, Tim Guenther, Jörg Schwenk
2015	—	`conf`	How to Break XML Encryption - Automatically. WOOT Dennis Kupser, Christian Mainka, Jörg Schwenk, Juraj Somorovsky
2015	—	`conf`	Not so Smart: On Smart TV Apps. SIoT Marcus Niemietz, Juraj Somorovsky, Christian Mainka, Jörg Schwenk
2015	J	`jnl`	On the security of modern Single Sign-On Protocols: OpenID Connect 1.0. CoRR Vladislav Mladenov, Christian Mainka, Julian Krautwald, Florian Feldmann, Jörg Schwenk
2014	J	`jnl`	Do not trust me: Using malicious IdPs for analyzing and attacking Single Sign-On. CoRR Christian Mainka, Vladislav Mladenov, Jörg Schwenk
2014	J	`jnl`	How Secure is TextSecure? IACR Cryptol. ePrint Arch. Tilman Frosch, Christian Mainka, Christoph Bader, Florian Bergsma, Jörg Schwenk, Thorsten Holz
2014	—	`conf`	Your Software at my Service: Security Analysis of SaaS Single Sign-On Solutions in the Cloud. CCSW Christian Mainka, Vladislav Mladenov, Florian Feldmann, Julian Krautwald, Jörg Schwenk
2013	A	`conf`	A New Approach towards DoS Penetration Testing on Web Services. ICWS Andreas Falkenberg, Christian Mainka, Juraj Somorovsky, Jörg Schwenk
2013	—	`conf`	A new approach for WS-Policy Intersection using Partial Ordered Sets. ZEUS Abeer Elsafie, Christian Mainka, Jörg Schwenk
2012	—	`conf`	Making XML Signatures Immune to XML Signature Wrapping Attacks. CLOSER (Selected Papers) Christian Mainka, Meiko Jensen, Luigi Lo Iacono, Jörg Schwenk
2012	B	`conf`	Penetration Testing Tool for Web Services Security. SERVICES Christian Mainka, Juraj Somorovsky, Jörg Schwenk
2012	J	`jnl`	XML Signature Wrapping Angriffe wirksam unterbinden. Datenschutz und Datensicherheit Meiko Jensen, Holger Junker, Luigi Lo Iacono, Christian Mainka, Jörg Schwenk
2012	C	`conf`	XSpRES - Robust and Effective XML Signatures for Web Services. CLOSER Christian Mainka, Meiko Jensen, Luigi Lo Iacono, Jörg Schwenk