Jörg Schwenk - RankMe

205 papers A* 35A 12B 17C 10Misc 6Journal 47Unranked 72

Year	Rank	Type	Title / Venue / Authors
2025	A*	`conf`	Finding SSH Strict Key Exchange Violations by State Learning. CCS Fabian Bäumer, Marcel Maehren, Marcus Brinkmann, Jörg Schwenk
2025	J	`jnl`	Finding SSH Strict Key Exchange Violations by State Learning. CoRR Fabian Bäumer, Marcel Maehren, Marcus Brinkmann, Jörg Schwenk
2025	A*	`conf`	On the Security of SSH Client Signatures. CCS Fabian Bäumer, Marcus Brinkmann, Maximilian Radoy, Jörg Schwenk, Juraj Somorovsky
2025	J	`jnl`	On the Security of SSH Client Signatures. CoRR Fabian Bäumer, Marcus Brinkmann, Maximilian Radoy, Jörg Schwenk, Juraj Somorovsky
2025	J	`jnl`	Opossum Attack: Application Layer Desynchronization using Opportunistic TLS. IACR Cryptol. ePrint Arch. Robert Merget, Nurullah Erinola, Marcel Maehren, Lukas Knittel, Sven Hebrok, Marcus Brinkmann, Juraj Somorovsky, Jörg Schwenk
2025	J	`jnl`	SILENT: A New Lens on Statistics in Software Timing Side Channels. CoRR Martin Dunsche, Patrick Bastian, Marcel Maehren, Nurullah Erinola, Robert Merget, Nicolai Bissantz, Holger Dette, Jörg Schwenk
2025	A*	`conf`	Towards Internet-Based State Learning of TLS State Machines. USENIX Security Symposium Marcel Maehren, Nurullah Erinola, Robert Merget, Jörg Schwenk, Juraj Somorovsky
2024	A*	`conf`	Terrapin Attack: Breaking SSH Channel Integrity By Sequence Number Manipulation. USENIX Security Symposium Fabian Bäumer, Marcus Brinkmann, Jörg Schwenk
2024	A*	`conf`	With Great Power Come Great Side Channels: Statistical Timing Side-Channel Analyses with Bounded Type-1 Errors. USENIX Security Symposium Martin Dunsche, Marcel Maehren, Nurullah Erinola, Robert Merget, Nicolai Bissantz, Juraj Somorovsky, Jörg Schwenk
2023	A*	`conf`	Every Signature is Broken: On the Insecurity of Microsoft Office's OOXML Signatures. USENIX Security Symposium Simon Rohlmann, Vladislav Mladenov, Christian Mainka, Daniel Hirschberger, Jörg Schwenk
2023	A*	`conf`	Exploring the Unknown DTLS Universe: Analysis of the DTLS Server Ecosystem on the Internet. USENIX Security Symposium Nurullah Erinola, Marcel Maehren, Robert Merget, Juraj Somorovsky, Jörg Schwenk
2023	A*	`conf`	Finding All Cross-Site Needles in the DOM Stack: A Comprehensive Methodology for the Automatic XS-Leak Detection in Web Browsers. CCS Dominik Trevor Noß, Lukas Knittel, Christian Mainka, Marcus Niemietz, Jörg Schwenk
2023	A*	`conf`	Isolated and Exhausted: Attacking Operating Systems via Site Isolation in the Browser. USENIX Security Symposium Matthias Gierlings, Marcus Brinkmann, Jörg Schwenk
2023	J	`jnl`	Terrapin Attack: Breaking SSH Channel Integrity By Sequence Number Manipulation. CoRR Fabian Bäumer, Marcus Brinkmann, Jörg Schwenk
2023	A*	`conf`	We Really Need to Talk About Session Tickets: A Large-Scale Analysis of Cryptographic Dangers with TLS Session Tickets. USENIX Security Symposium Sven Hebrok, Simon Nachtigall, Marcel Maehren, Nurullah Erinola, Robert Merget, Juraj Somorovsky, Jörg Schwenk
2022	J	`jnl`	A reduction-based proof for authentication and session key security in three-party Kerberos. Int. J. Appl. Cryptogr. Jörg Schwenk, Douglas Stebila
2022	A*	`conf`	DISTINCT: Identity Theft using In-Browser Communications in Dual-Window Single Sign-On. CCS Louis Jannett, Vladislav Mladenov, Christian Mainka, Jörg Schwenk
2022	—	`book`	Guide to Internet Cryptography - Security Protocols and Real-World Attack Implications Jörg Schwenk
2022	A*	`conf`	Oops... Code Execution and Content Spoofing: The First Comprehensive Analysis of OpenDocument Signatures. USENIX Security Symposium Simon Rohlmann, Christian Mainka, Vladislav Mladenov, Jörg Schwenk
2022	A*	`conf`	TLS-Anvil: Adapting Combinatorial Testing for TLS Libraries. USENIX Security Symposium Marcel Maehren, Philipp Nieting, Sven Hebrok, Robert Merget, Juraj Somorovsky, Jörg Schwenk
2021	A*	`conf`	ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication. USENIX Security Symposium Marcus Brinkmann, Christian Dresen, Robert Merget, Damian Poddebniak, Jens Müller, Juraj Somorovsky, Jörg Schwenk, Sebastian Schinzel
2021	A*	`conf`	Breaking the Specification: PDF Certification. SP Simon Rohlmann, Vladislav Mladenov, Christian Mainka, Jörg Schwenk
2021	A*	`conf`	Processing Dangerous Paths - On Security and Privacy of the Portable Document Format. NDSS Jens Müller, Dominik Noss, Christian Mainka, Vladislav Mladenov, Jörg Schwenk
2021	A*	`conf`	Raccoon Attack: Finding and Exploiting Most-Significant-Bit-Oracles in TLS-DH(E). USENIX Security Symposium Robert Merget, Marcus Brinkmann, Nimrod Aviram, Juraj Somorovsky, Johannes Mittmann, Jörg Schwenk
2021	B	`conf`	SoK: Game-Based Security Models for Group Key Exchange. CT-RSA Bertram Poettering, Paul Rösler, Jörg Schwenk, Douglas Stebila
2021	J	`jnl`	SoK: Game-based Security Models for Group Key Exchange. IACR Cryptol. ePrint Arch. Bertram Poettering, Paul Rösler, Jörg Schwenk, Douglas Stebila
2021	A*	`conf`	XSinator.com: From a Formal Model to the Automatic Evaluation of Cross-Site Leaks in Web Browsers. CCS Lukas Knittel, Christian Mainka, Marcus Niemietz, Dominik Trevor Noß, Jörg Schwenk
2020	—	`conf`	Flexible Authenticated and Confidential Channel Establishment (fACCE): Analyzing the Noise Protocol Framework. Public Key Cryptography (1) Benjamin Dowling, Paul Rösler, Jörg Schwenk
2020	—	`conf`	Mailto: Me Your Secrets. On Bugs and Features in Email End-to-End Encryption. CNS Jens Müller, Marcus Brinkmann, Damian Poddebniak, Sebastian Schinzel, Jörg Schwenk
2020	A*	`conf`	Mitigation of Attacks on Email End-to-End Encryption. CCS Jörg Schwenk, Marcus Brinkmann, Damian Poddebniak, Jens Müller, Juraj Somorovsky, Sebastian Schinzel
2020	—	`conf`	Office Document Security and Privacy. WOOT @ USENIX Security Symposium Jens Müller, Fabian Ising, Christian Mainka, Vladislav Mladenov, Sebastian Schinzel, Jörg Schwenk
2020	—	`conf`	Powerless Security. ACNS (2) Stefan Hoffmann, Jens Müller, Jörg Schwenk, Gerd Bumiller
2020	—	`conf`	Privacy-Preserving Authenticated Key Exchange and the Case of IKEv2. Public Key Cryptography (2) Sven Schäge, Jörg Schwenk, Sebastian Lauer
2020	J	`jnl`	Privacy-Preserving Authenticated Key Exchange and the Case of IKEv2. IACR Cryptol. ePrint Arch. Sven Schäge, Jörg Schwenk, Sebastian Lauer
2020	J	`jnl`	Raccoon Attack: Finding and Exploiting Most-Significant-Bit-Oracles in TLS-DH(E). IACR Cryptol. ePrint Arch. Robert Merget, Marcus Brinkmann, Nimrod Aviram, Juraj Somorovsky, Johannes Mittmann, Jörg Schwenk
2020	J	`jnl`	T0RTT: Non-Interactive Immediate Forward-Secret Single-Pass Circuit Construction. Proc. Priv. Enhancing Technol. Sebastian Lauer, Kai Gellert, Robert Merget, Tobias Handirk, Jörg Schwenk
2019	A*	`conf`	"Johnny, you are fired!" - Spoofing OpenPGP and S/MIME Signatures in Emails. USENIX Security Symposium Jens Müller, Marcus Brinkmann, Damian Poddebniak, Hanno Böck, Sebastian Schinzel, Juraj Somorovsky, Jörg Schwenk
2019	A*	`conf`	1 Trillion Dollar Refund: How To Spoof PDF Signatures. CCS Vladislav Mladenov, Christian Mainka, Karsten Meyer zu Selhausen, Martin Grothe, Jörg Schwenk
2019	J	`jnl`	A Reduction-Based Proof for Authentication and Session Key Security in 3-Party Kerberos. IACR Cryptol. ePrint Arch. Jörg Schwenk, Douglas Stebila
2019	J	`jnl`	Flexible Authenticated and Confidential Channel Establishment (fACCE): Analyzing the Noise Protocol Framework. IACR Cryptol. ePrint Arch. Benjamin Dowling, Paul Rösler, Jörg Schwenk
2019	J	`jnl`	Moderne Vertrauensdienste für vertrauenswürdige Transaktionen. Datenschutz und Datensicherheit Jörg Schwenk, Tobias Wich, Detlef Hühnlein
2019	A*	`conf`	Practical Decryption exFiltration: Breaking PDF Encryption. CCS Jens Müller, Fabian Ising, Vladislav Mladenov, Christian Mainka, Sebastian Schinzel, Jörg Schwenk
2019	B	`conf`	Re: What's Up Johnny? - Covert Content Attacks on Email End-to-End Encryption. ACNS Jens Müller, Marcus Brinkmann, Damian Poddebniak, Sebastian Schinzel, Jörg Schwenk
2019	J	`jnl`	Re: What's Up Johnny? - Covert Content Attacks on Email End-to-End Encryption. CoRR Jens Müller, Marcus Brinkmann, Damian Poddebniak, Sebastian Schinzel, Jörg Schwenk
2019	A*	`conf`	Scalable Scanning and Automatic Classification of TLS Padding Oracle Vulnerabilities. USENIX Security Symposium Robert Merget, Juraj Somorovsky, Nimrod Aviram, Craig Young, Janis Fliegenschmidt, Jörg Schwenk, Yuval Shavitt
2019	—	`conf`	Security Analysis of XAdES Validation in the CEF Digital Signature Services (DSS). Open Identity Summit Nils Engelbertz, Vladislav Mladenov, Juraj Somorovsky, David Herring, Nurullah Erinola, Jörg Schwenk
2019	J	`jnl`	T0RTT: Non-Interactive Immediate Forward-Secret Single-Pass Circuit Construction. IACR Cryptol. ePrint Arch. Sebastian Lauer, Kai Gellert, Robert Merget, Tobias Handirk, Jörg Schwenk
2018	A*	`conf`	Efail: Breaking S/MIME and OpenPGP Email Encryption using Exfiltration Channels. USENIX Security Symposium Damian Poddebniak, Christian Dresen, Jens Müller, Fabian Ising, Sebastian Schinzel, Simon Friedberger, Juraj Somorovsky, Jörg Schwenk
2018	A	`conf`	More is Less: On the End-to-End Security of Group Chats in Signal, WhatsApp, and Threema. EuroS&P Paul Rösler, Christian Mainka, Jörg Schwenk
2018	A	`conf`	PostScript Undead: Pwning the Web with a 35 Years Old Language. RAID Jens Müller, Vladislav Mladenov, Dennis Felsch, Jörg Schwenk
2018	—	`conf`	Security Analysis of eIDAS - The Cross-Country Authentication Scheme in Europe. WOOT @ USENIX Security Symposium Nils Engelbertz, Nurullah Erinola, David Herring, Juraj Somorovsky, Vladislav Mladenov, Jörg Schwenk
2018	A*	`conf`	The Dangers of Key Reuse: Practical Attacks on IPsec IKE. USENIX Security Symposium Dennis Felsch, Martin Grothe, Jörg Schwenk, Adam Czubak, Marcin Szymanek
2017	J	`jnl`	Authenticated Confidential Channel Establishment and the Security of TLS-DHE. J. Cryptol. Tibor Jager, Florian Kohlar, Sven Schäge, Jörg Schwenk
2017	—	`conf`	Breaking and Fixing Gridcoin. WOOT Martin Grothe, Tobias Niemann, Juraj Somorovsky, Jörg Schwenk
2017	—	`conf`	DOMPurify: Client-Side Protection Against XSS and Markup Injection. ESORICS (2) Mario Heiderich, Christopher Späth, Jörg Schwenk
2017	J	`jnl`	More is Less: How Group Chats Weaken the Security of Instant Messengers Signal, WhatsApp, and Threema. IACR Cryptol. ePrint Arch. Paul Rösler, Christian Mainka, Jörg Schwenk
2017	B	`conf`	Out of the Dark: UI Redressing and Trustworthy Events. CANS Marcus Niemietz, Jörg Schwenk
2017	A	`conf`	SECRET: On the Feasibility of a Secure, Efficient, and Collaborative Real-Time Web Editor. AsiaCCS Dennis Felsch, Christian Mainka, Vladislav Mladenov, Jörg Schwenk
2017	A*	`conf`	Same-Origin Policy: Evaluation in Modern Browsers. USENIX Security Symposium Jörg Schwenk, Marcus Niemietz, Christian Mainka
2017	B	`conf`	Simple Security Definitions for and Constructions of 0-RTT Key Exchange. ACNS Britta Hale, Tibor Jager, Sebastian Lauer, Jörg Schwenk
2017	A*	`conf`	SoK: Exploiting Network Printers. IEEE Symposium on Security and Privacy Jens Müller, Vladislav Mladenov, Juraj Somorovsky, Jörg Schwenk
2017	A	`conf`	SoK: Single Sign-On Security - An Evaluation of OpenID Connect. EuroS&P Christian Mainka, Vladislav Mladenov, Jörg Schwenk, Tobias Wich
2016	B	`conf`	Breaking PPTP VPNs via RADIUS Encryption. CANS Matthias Horst, Martin Grothe, Tibor Jager, Jörg Schwenk
2016	A	`conf`	Do Not Trust Me: Using Malicious IdPs for Analyzing and Attacking Single Sign-on. EuroS&P Christian Mainka, Vladislav Mladenov, Jörg Schwenk
2016	—	`conf`	Evaluating Two Methods for WS-(Security) Policy Negotiation and Decision Making. OTM Conferences Abeer Elsafie, Jörg Schwenk
2016	—	`conf`	FutureTrust - Future Trust Services for Trustworthy Global Transactions. Open Identity Summit Detlef Hühnlein, Tilman Frosch, Jörg Schwenk, Carl-Markus Piswanger, Marc Sel, Tina Hühnlein, Tobias Wich, Daniel Nemmert, René Lottes, Juraj Somorovsky, Vladislav Mladenov, Cristina Condovici, Herbert Leitold, Sophie Stalla-Bourdillon, Niko Tsakalakis, Jan Eichholz, Frank-Michael Kamm, Andreas Kühne, Damian Wabisch, Roger Dean, Jon Shamah, Mikheil Kapanadze, Nuno Ponte, Jose Martins, Renato Portela, Cagatay Karabat, Snezana Stojicic, Slobodan Nedeljkovic, Vincent Bouckaert, Alexandre Defays, Bruce Anderson, Michael Jonas, Christina Hermanns, Thomas Schubert, Dirk Wegener, Alexander Sazonov
2016	A	`conf`	How Secure is TextSecure? EuroS&P Tilman Frosch, Christian Mainka, Christoph Bader, Florian Bergsma, Jörg Schwenk, Thorsten Holz
2016	—	`conf`	How to Break Microsoft Rights Management Services. WOOT Martin Grothe, Christian Mainka, Paul Rösler, Jörg Schwenk
2016	J	`jnl`	Nonce-based Kerberos is a Secure Delegated AKE Protocol. IACR Cryptol. ePrint Arch. Jörg Schwenk
2016	—	`conf`	SoK: XML Parser Vulnerabilities. WOOT Christopher Späth, Christian Mainka, Vladislav Mladenov, Jörg Schwenk
2016	B	`conf`	Your Cloud in My Company: Modern Rights Management Services Revisited. ARES Martin Grothe, Christian Mainka, Paul Rösler, Johanna Jupke, Jan Kaiser, Jörg Schwenk
2015	—	`conf`	AdIDoS - Adaptive and Intelligent Fully-Automatic Detection of Denial-of-Service Weaknesses in Web Services. DPM/QASA@ESORICS Christian Altmeier, Christian Mainka, Juraj Somorovsky, Jörg Schwenk
2015	—	`conf`	Automatic recognition, processing and attacking of single sign-on protocols with burp suite. Open Identity Summit Christian Mainka, Vladislav Mladenov, Tim Guenther, Jörg Schwenk
2015	—	`conf`	How Private is Your Private Cloud?: Security Analysis of Cloud Control Interfaces. CCSW Dennis Felsch, Mario Heiderich, Frederic Schulz, Jörg Schwenk
2015	—	`conf`	How to Break XML Encryption - Automatically. WOOT Dennis Kupser, Christian Mainka, Jörg Schwenk, Juraj Somorovsky
2015	—	`conf`	Not so Smart: On Smart TV Apps. SIoT Marcus Niemietz, Juraj Somorovsky, Christian Mainka, Jörg Schwenk
2015	A*	`conf`	On the Security of TLS 1.3 and QUIC Against Weaknesses in PKCS#1 v1.5 Encryption. CCS Tibor Jager, Jörg Schwenk, Juraj Somorovsky
2015	J	`jnl`	On the security of modern Single Sign-On Protocols: OpenID Connect 1.0. CoRR Vladislav Mladenov, Christian Mainka, Julian Krautwald, Florian Feldmann, Jörg Schwenk
2015	—	`conf`	One-Round Key Exchange with Strong Security: An Efficient and Generic Construction in the Standard Model. Public Key Cryptography Florian Bergsma, Tibor Jager, Jörg Schwenk
2015	J	`jnl`	One-Round Key Exchange with Strong Security: An Efficient and Generic Construction in the Standard Model. IACR Cryptol. ePrint Arch. Florian Bergsma, Tibor Jager, Jörg Schwenk
2015	J	`jnl`	Owning Your Home Network: Router Security Revisited. CoRR Marcus Niemietz, Jörg Schwenk
2015	—	`conf`	Practical Invalid Curve Attacks on TLS-ECDH. ESORICS (1) Tibor Jager, Jörg Schwenk, Juraj Somorovsky
2015	B	`conf`	Semi-automated Fuzzy MCDM and Lattice Solutions for WS-Policy Intersection. SERVICES Abeer Elsafie, Jörg Schwenk
2015	J	`jnl`	Speeding: On Low-Latency Key Exchange. IACR Cryptol. ePrint Arch. Britta Hale, Tibor Jager, Sebastian Lauer, Jörg Schwenk
2015	—	`conf`	Waiting for CSP - Securing Legacy Web Applications with JSAgents. ESORICS (1) Mario Heiderich, Marcus Niemietz, Jörg Schwenk
2014	J	`jnl`	Do not trust me: Using malicious IdPs for analyzing and attacking Single Sign-On. CoRR Christian Mainka, Vladislav Mladenov, Jörg Schwenk
2014	—	`conf`	Guardians of the Clouds: When Identity Providers Fail. CCSW Andreas Mayer, Marcus Niemietz, Vladislav Mladenov, Jörg Schwenk
2014	J	`jnl`	How Secure is TextSecure? IACR Cryptol. ePrint Arch. Tilman Frosch, Christian Mainka, Christoph Bader, Florian Bergsma, Jörg Schwenk, Thorsten Holz
2014	—	`conf`	Modelling Time for Authenticated Key Exchange Protocols. ESORICS (2) Jörg Schwenk
2014	A*	`conf`	Multi-Ciphersuite Security of the Secure Shell (SSH) Protocol. CCS Florian Bergsma, Benjamin Dowling, Florian Kohlar, Jörg Schwenk, Douglas Stebila
2014	B	`conf`	New Modular Compilers for Authenticated Key Exchange. ACNS Yong Li, Sven Schäge, Zheng Yang, Christoph Bader, Jörg Schwenk
2014	—	`conf`	On the Security of Holder-of-Key Single Sign-On. Sicherheit Andreas Mayer, Vladislav Mladenov, Jörg Schwenk
2014	J	`jnl`	On the Security of the Pre-Shared Key Ciphersuites of TLS. IACR Cryptol. ePrint Arch. Yong Li, Sven Schäge, Zheng Yang, Florian Kohlar, Jörg Schwenk
2014	—	`conf`	On the Security of the Pre-shared Key Ciphersuites of TLS. Public Key Cryptography Yong Li, Sven Schäge, Zheng Yang, Florian Kohlar, Jörg Schwenk
2014	A*	`conf`	Revisiting SSL/TLS Implementations: New Bleichenbacher Side Channels and Attacks. USENIX Security Symposium Christopher Meyer, Juraj Somorovsky, Eugen Weiss, Jörg Schwenk, Sebastian Schinzel, Erik Tews
2014	C	`conf`	SIACHEN: A Fine-Grained Policy Language for the Mitigation of Cross-Site Scripting Attacks. ISC Ashar Javed, Jens Riemer, Jörg Schwenk
2014	J	`jnl`	Scriptless attacks: Stealing more pie without touching the sill. J. Comput. Secur. Mario Heiderich, Marcus Niemietz, Felix Schuster, Thorsten Holz, Jörg Schwenk
2014	—	`conf`	Secure Fallback Authentication and the Trusted Friend Attack. ICDCS Workshops Ashar Javed, David Bletgen, Florian Kohlar, Markus Dürmuth, Jörg Schwenk
2014	—	`conf`	Strengthening Web Authentication through TLS - Beyond TLS Client Certificates. Open Identity Summit Andreas Mayer, Vladislav Mladenov, Jörg Schwenk, Florian Feldmann, Christopher Meyer
2014	Misc	`conf`	Systematically Breaking Online WYSIWYG Editors. WISA Ashar Javed, Jörg Schwenk
2014	B	`conf`	TTPCookie: Flexible Third-Party Cookie Management for Increasing Online Privacy. TrustCom Ashar Javed, Christian Merz, Jörg Schwenk
2014	—	`conf`	Your Software at my Service: Security Analysis of SaaS Single Sign-On Solutions in the Cloud. CCSW Christian Mainka, Vladislav Mladenov, Florian Feldmann, Julian Krautwald, Jörg Schwenk
2013	A	`conf`	A New Approach towards DoS Penetration Testing on Web Services. ICWS Andreas Falkenberg, Christian Mainka, Juraj Somorovsky, Jörg Schwenk
2013	—	`conf`	A new approach for WS-Policy Intersection using Partial Ordered Sets. ZEUS Abeer Elsafie, Christian Mainka, Jörg Schwenk
2013	—	`conf`	How to authenticate mobile devices in a web environment - the SIM-ID approach. Open Identity Summit Florian Feldmann, Jörg Schwenk
2013	J	`jnl`	Lessons Learned From Previous SSL/TLS Attacks - A Brief Chronology Of Attacks And Weaknesses. IACR Cryptol. ePrint Arch. Christopher Meyer, Jörg Schwenk
2013	J	`jnl`	Modelling Time, or A Step Towards Reduction-based Security Proofs for OTP and Kerberos. IACR Cryptol. ePrint Arch. Jörg Schwenk
2013	J	`jnl`	Multi-ciphersuite security and the SSH protocol. IACR Cryptol. ePrint Arch. Benjamin Dowling, Florian Giesen, Florian Kohlar, Jörg Schwenk, Douglas Stebila
2013	J	`jnl`	On the Analysis of Cryptographic Assumptions in the Generic Ring Model. J. Cryptol. Tibor Jager, Jörg Schwenk
2013	J	`jnl`	On the Security of TLS-DH and TLS-RSA in the Standard Model. IACR Cryptol. ePrint Arch. Florian Kohlar, Sven Schäge, Jörg Schwenk
2013	—	`conf`	Options for integrating eID and SAML. Digital Identity Management Detlef Hühnlein, Jörg Schwenk, Tobias Wich, Vladislav Mladenov, Florian Feldmann, Andreas Mayer, Johannes Schmölz, Bud P. Bruegger, Moritz Horsch
2013	B	`conf`	Randomly Failed! The State of Randomness in Current Java Implementations. CT-RSA Kai Michaelis, Christopher Meyer, Jörg Schwenk
2013	Misc	`conf`	SoK: Lessons Learned from SSL/TLS Attacks. WISA Christopher Meyer, Jörg Schwenk
2013	Misc	`conf`	Towards Elimination of Cross-Site Scripting on Mobile Versions of Web Applications. WISA Ashar Javed, Jörg Schwenk
2013	A*	`conf`	mXSS attacks: attacking well-secured web-applications by using innerHTML mutations. CCS Mario Heiderich, Jörg Schwenk, Tilman Frosch, Jonas Magazinius, Edward Z. Yang
2012	—	`conf`	Making XML Signatures Immune to XML Signature Wrapping Attacks. CLOSER (Selected Papers) Christian Mainka, Meiko Jensen, Luigi Lo Iacono, Jörg Schwenk
2012	A*	`conf`	On Breaking SAML: Be Whoever You Want to Be. USENIX Security Symposium Juraj Somorovsky, Andreas Mayer, Jörg Schwenk, Marco Kampmann, Meiko Jensen
2012	A*	`conf`	On the Security of TLS-DHE in the Standard Model. CRYPTO Tibor Jager, Florian Kohlar, Sven Schäge, Jörg Schwenk
2012	—	`conf`	On the design and implementation of the Open eCard App. Sicherheit Detlef Hühnlein, Dirk Petrautzki, Johannes Schmölz, Tobias Wich, Moritz Horsch, Thomas Wieland, Jan Eichholz, Alexander Wiesmaier, Johannes Braun, Florian Feldmann, Simon Potzernheim, Jörg Schwenk, Christian Kahlo, Andreas Kühne, Heiko Veit
2012	B	`conf`	Penetration Testing Tool for Web Services Security. SERVICES Christian Mainka, Juraj Somorovsky, Jörg Schwenk
2012	A*	`conf`	Scriptless attacks: stealing the pie without touching the sill. CCS Mario Heiderich, Marcus Niemietz, Felix Schuster, Thorsten Holz, Jörg Schwenk
2012	C	`conf`	SeC2: Secure Mobile Solution for Distributed Public Cloud Storages. CLOSER Juraj Somorovsky, Christopher Meyer, Thang Tran, Mohamad Sbeiti, Jörg Schwenk, Christian Wietfeld
2012	Misc	`conf`	Sometimes It's Better to Be STUCK! SAML Transportation Unit for Cryptographic Keys. ICISC Christopher Meyer, Florian Feldmann, Jörg Schwenk
2012	C	`conf`	Strongly Authenticated Key Exchange Protocol from Bilinear Groups without Random Oracles. ProvSec Zheng Yang, Jörg Schwenk
2012	B	`conf`	Technical Analysis of Countermeasures against Attack on XML Encryption - or - Just Another Motivation for Authenticated Encryption. SERVICES Juraj Somorovsky, Jörg Schwenk
2012	J	`jnl`	XML Signature Wrapping Angriffe wirksam unterbinden. Datenschutz und Datensicherheit Meiko Jensen, Holger Junker, Luigi Lo Iacono, Christian Mainka, Jörg Schwenk
2012	C	`conf`	XSpRES - Robust and Effective XML Signatures for Web Services. CLOSER Christian Mainka, Meiko Jensen, Luigi Lo Iacono, Jörg Schwenk
2011	J	`jnl`	A Standard-Model Security Analysis of TLS-DHE. IACR Cryptol. ePrint Arch. Tibor Jager, Florian Kohlar, Sven Schäge, Jörg Schwenk
2011	—	`conf`	All your clouds are belong to us: security analysis of cloud management interfaces. CCSW Juraj Somorovsky, Mario Heiderich, Meiko Jensen, Jörg Schwenk, Nils Gruschka, Luigi Lo Iacono
2011	—	`ch.`	HTTP Authentication. Encyclopedia of Cryptography and Security (2nd Ed.) Jörg Schwenk
2011	J	`jnl`	On Cryptographically Strong Bindings of SAML Assertions to Transport Layer Security. Int. J. Mob. Comput. Multim. Commun. Florian Kohlar, Jörg Schwenk, Meiko Jensen, Sebastian Gajek
2011	—	`conf`	Security Prospects through Cloud Computing by Adopting Multiple Clouds. IEEE CLOUD Meiko Jensen, Jörg Schwenk, Jens-Matthias Bohli, Nils Gruschka, Luigi Lo Iacono
2011	—	`conf`	The Bug That Made Me President a Browser- and Web-Security Case Study on Helios Voting. VoteID Mario Heiderich, Tilman Frosch, Marcus Niemietz, Jörg Schwenk
2011	—	`conf`	The power of recognition: secure single sign-on using TLS channel bindings. Digital Identity Management Jörg Schwenk, Florian Kohlar, Marcus Amon
2010	—	`conf`	A CDH-Based Ring Signature Scheme with Short Signatures and Public Keys. Financial Cryptography Sven Schäge, Jörg Schwenk
2010	—	`conf`	A New RSA-Based Signature Scheme. AFRICACRYPT Sven Schäge, Jörg Schwenk
2010	—	`conf`	Attacking of SmartCard-Based Banking Applications with JavaScript-Based Rootkits. Financial Cryptography Daniel Bußmeyer, Felix Gröbert, Jörg Schwenk, Christoph Wegener
2010	J	`jnl`	Generic Compilers for Authenticated Key Exchange (Full Version). IACR Cryptol. ePrint Arch. Tibor Jager, Florian Kohlar, Sven Schäge, Jörg Schwenk
2010	A	`conf`	Generic Compilers for Authenticated Key Exchange. ASIACRYPT Tibor Jager, Florian Kohlar, Sven Schäge, Jörg Schwenk
2010	B	`conf`	Group key agreement performance in wireless mesh networks. LCN Andreas Noack, Jörg Schwenk
2010	B	`conf`	Secure Bindings of SAML Assertions to TLS Sessions. ARES Florian Kohlar, Jörg Schwenk, Meiko Jensen, Sebastian Gajek
2010	—	`conf`	Security Analysis of OpenID. Sicherheit Pavol Sovis, Florian Kohlar, Jörg Schwenk
2010	—	`book`	Sicherheit und Kryptographie im Internet - Von sicherer E-Mail bis zu IP-Verschlüsselung (3. Aufl.). Jörg Schwenk
2010	B	`conf`	Streaming-Based Verification of XML Signatures in SOAP Messages. SERVICES Juraj Somorovsky, Meiko Jensen, Jörg Schwenk
2010	—	`conf`	Towards an Anonymous Access Control and Accountability Scheme for Cloud Computing. IEEE CLOUD Meiko Jensen, Sven Schäge, Jörg Schwenk
2009	A	`conf`	Analysis of Signature Wrapping Attacks and Countermeasures. ICWS Sebastian Gajek, Meiko Jensen, Lijun Liao, Jörg Schwenk
2009	—	`conf`	Extending the similarity-based XML multicast approach with digital signatures. SWS Antonia Azzini, Stefania Marrara, Meiko Jensen, Jörg Schwenk
2009	B	`conf`	Group key agreement for wireless mesh networks. LCN Andreas Noack, Jörg Schwenk
2009	—	`conf`	On Technical Security Issues in Cloud Computing. IEEE CLOUD Meiko Jensen, Jörg Schwenk, Nils Gruschka, Luigi Lo Iacono
2009	A	`conf`	On the Analysis of Cryptographic Assumptions in the Generic Ring Model. ASIACRYPT Tibor Jager, Jörg Schwenk
2009	J	`jnl`	On the Analysis of Cryptographic Assumptions in the Generic Ring Model. IACR Cryptol. ePrint Arch. Tibor Jager, Jörg Schwenk
2009	C	`conf`	Risks of the CardSpace Protocol. ISC Sebastian Gajek, Jörg Schwenk, Michael Steiner, Chen Xuan
2009	—	`conf`	SAMLizing the European Citizen Card. BIOSIG Jan Eichholz, Detlef Hühnlein, Jörg Schwenk
2009	J	`jnl`	Security model and framework for information aggregation in sensor networks. ACM Trans. Sens. Networks Mark Manulis, Jörg Schwenk
2009	—	`conf`	Sicherheitsanalyse von Kreditkarten am Beispiel von EMV. GI Jahrestagung Christopher Wolf, Jörg Schwenk, Zidu Wang
2009	B	`conf`	The Accountability Problem of Flooding Attacks in Service-Oriented Architectures. ARES Meiko Jensen, Jörg Schwenk
2009	—	`conf`	The curse of namespaces in the domain of XML signature. SWS Meiko Jensen, Lijun Liao, Jörg Schwenk
2009	J	`jnl`	User-aware provably secure protocols for browser-based mutual authentication. Int. J. Appl. Cryptogr. Sebastian Gajek, Mark Manulis, Jörg Schwenk
2009	J	`jnl`	XML Signature Wrapping Angriffe - What you process is not always what you verify. Datenschutz und Datensicherheit Nils Gruschka, Meiko Jensen, Luigi Lo Iacono, Jörg Schwenk
2008	A	`conf`	A Browser-Based Kerberos Authentication Scheme. ESORICS Sebastian Gajek, Tibor Jager, Mark Manulis, Jörg Schwenk
2008	C	`conf`	A Novel Solution for End-to-End Integrity Protection in Signed PGP Mail. ICICS Lijun Liao, Jörg Schwenk
2008	—	`conf`	CAPTCHA-based Code Voting. Electronic Voting Rolf Oppliger, Jörg Schwenk, Christoph Löhr
2008	—	`conf`	Code Voting with Linkable Group Signatures. Electronic Voting Jörg Helbach, Jörg Schwenk, Sven Schäge
2008	Misc	`conf`	Enforcing User-Aware Browser-Based Mutual Authentication with Strong Locked Same Origin Policy. ACISP Sebastian Gajek, Mark Manulis, Jörg Schwenk
2008	—	`conf`	Nutzung von selbstsignierten Client-Zertifikaten zur Authentifikation bei SSL/TLS. Sicherheit Tibor Jager, Heiko Jäkel, Jörg Schwenk
2008	C	`conf`	On the Equivalence of Generic Group Models. ProvSec Tibor Jager, Jörg Schwenk
2008	—	`conf`	Protecting Code Voting Against Vote Selling. Sicherheit Rolf Oppliger, Jörg Schwenk, Jörg Helbach
2008	A	`conf`	Provably secure browser-based user-aware mutual authentication over TLS. AsiaCCS Sebastian Gajek, Mark Manulis, Ahmad-Reza Sadeghi, Jörg Schwenk
2008	—	`conf`	Stronger TLS bindings for SAML assertions and SAML artifacts. SWS Sebastian Gajek, Lijun Liao, Jörg Schwenk
2008	—	`conf`	TLS-Federation - a Secure and Relying-Party-Friendly Approach for Federated Identity Management. BIOSIG Bud P. Bruegger, Detlef Hühnlein, Jörg Schwenk
2008	J	`jnl`	The Generic Hardness of Subset Membership Problems under the Factoring Assumption. IACR Cryptol. ePrint Arch. Tibor Jager, Jörg Schwenk
2008	J	`jnl`	Universally Composable Security Analysis of TLS - Secure Sessions with Handshake and Record Layer Protocols. IACR Cryptol. ePrint Arch. Sebastian Gajek, Mark Manulis, Olivier Pereira, Ahmad-Reza Sadeghi, Jörg Schwenk
2008	C	`conf`	Universally Composable Security Analysis of TLS. ProvSec Sebastian Gajek, Mark Manulis, Olivier Pereira, Ahmad-Reza Sadeghi, Jörg Schwenk
2007	—	`conf`	Breaking and fixing the inline approach. SWS Sebastian Gajek, Lijun Liao, Jörg Schwenk
2007	—	`conf`	End-to-End Header Protection in Signed S/MIME. OTM Conferences (2) Lijun Liao, Jörg Schwenk
2007	Misc	`conf`	On Security Models and Compilers for Group Key Exchange Protocols. IWSEC Emmanuel Bresson, Mark Manulis, Jörg Schwenk
2007	—	`conf`	Provably Secure Framework for Information Aggregation in Sensor Networks. ICCSA (1) Mark Manulis, Jörg Schwenk
2007	J	`jnl`	Provably Secure Framework for Information Aggregation is Sensor Networks. IACR Cryptol. ePrint Arch. Mark Manulis, Jörg Schwenk
2007	—	`conf`	SSL-over-SOAP: Towards a Token-based Key Establishment Framework for Web Services. WEWST Sebastian Gajek, Lijun Liao, Bodo Möller, Jörg Schwenk
2007	—	`conf`	SSL-over-SOAP: Towards a Token-based Key Establishment framework for Web services. WEWST@ECOWS (Final Proceedings) Sebastian Gajek, Lijun Liao, Bodo Möller, Jörg Schwenk
2007	—	`conf`	Secure Emails in XML Format Using Web Services. ECOWS Lijun Liao, Jörg Schwenk
2007	—	`conf`	Secure Internet Voting with Code Sheets. VOTE-ID Jörg Helbach, Jörg Schwenk
2007	—	`conf`	Securing Email Communication with XML Technology. International Conference on Internet Computing Lijun Liao, Jörg Schwenk
2007	J	`jnl`	Signieren mit Chipkartensystemen in unsicheren Umgebungen - Homebanking mit Secure HBCI/FinTS. Datenschutz und Datensicherheit Sebastian Gajek, Lijun Liao, Jörg Schwenk
2007	J	`jnl`	Studieren mit Sicherheit in Bochum - Die Studiengänge zum Thema IT-Sicherheit. Datenschutz und Datensicherheit Christof Paar, Ahmad-Reza Sadeghi, Jörg Schwenk, Christoph Wegener
2006	C	`conf`	Linkable Democratic Group Signatures. ISPEC Mark Manulis, Ahmad-Reza Sadeghi, Jörg Schwenk
2006	J	`jnl`	Linkable Democratic Group Signatures. IACR Cryptol. ePrint Arch. Mark Manulis, Ahmad-Reza Sadeghi, Jörg Schwenk
2006	—	`book`	Moderne Verfahren der Krypotgraphie - von RSA zu Zero-Knowledge (6. Aufl.). Albrecht Beutelspacher, Jörg Schwenk, Klaus-Dieter Wolfenstetter
2006	J	`jnl`	On Security Models and Compilers for Group Key Exchange Protocols. IACR Cryptol. ePrint Arch. Emmanuel Bresson, Mark Manulis, Jörg Schwenk
2006	—	`conf`	SSL-VA-Authentifizierung als Schutz von Phishing und Pharming. Sicherheit Sebastian Gajek, Jörg Schwenk, Christoph Wegener
2005	—	`conf`	Secure XMaiL or How to Get Rid of Legacy Code in Secure E-Mail Applications. Communications and Multimedia Security Lars Ewers, Wolfgang Kubbilun, Lijun Liao, Jörg Schwenk
2005	—	`conf`	Trustworthy Verification and Visualisation of Multiple XML-Signatures. Communications and Multimedia Security Wolfgang Kubbilun, Sebastian Gajek, Michael Psarros, Jörg Schwenk
2005	C	`conf`	Visual Spoofing of SSL Protected Web Sites and Effective Countermeasures. ISPEC André Adelsbach, Sebastian Gajek, Jörg Schwenk
2004	—	`conf`	Key-assignment strategies for CPPM. MM&Sec André Adelsbach, Jörg Schwenk
2004	—	`book`	Moderne Verfahren der Kryptographie - von RSA zu Zero-Knowledge (5. Aufl.). Albrecht Beutelspacher, Jörg Schwenk, Klaus-Dieter Wolfenstetter
2004	—	`conf`	Pseudonym Generation Scheme for Ad-Hoc Group Communication Based on IDH. ESAS Mark Manulis, Jörg Schwenk
2001	—	`conf`	Customer Identification for MPEG Video Based on Digital Fingerprinting. IEEE Pacific Rim Conference on Multimedia Jana Dittmann, Enrico Hauer, Claus Vielhauer, Jörg Schwenk, Eva Saar
2001	—	`conf`	From pay-tv to pay-streaming: similarities and differences. MM&Sec Jörg Schwenk, Tobias Martin, Erik Neumann
2001	—	`conf`	Tree-based Key Agreement for Multicast. Communications and Multimedia Security Tobias Martin, R. Schaffelhofer, Jörg Schwenk
2000	J	`jnl`	Combining digital watermarks and collusion secure fingerprints for digital images. J. Electronic Imaging Jana Dittmann, Peter Schmitt, Eva Saar, Jörg Schwenk, Johannes Ueberberg
1999	—	`conf`	Combining digital watermarks and collusion-secure fingerprints for digital images. Security and Watermarking of Multimedia Contents Jana Dittmann, Alexander Behr, Mark Stabenau, Peter Schmitt, Jörg Schwenk, Johannes Ueberberg
1999	—	`conf`	How to Security Broadcast a Secret. Communications and Multimedia Security Jörg Schwenk
1996	—	`conf`	Establishing a Key Hierarchy for Conditional Access without Encryption. Communications and Multimedia Security Jörg Schwenk
1996	A*	`conf`	Public Key Encryption and Signature Schemes Based on Polynomials over Zn. EUROCRYPT Jörg Schwenk, Jörg Eisfeld
1995	—	`book`	Moderne Verfahren der Kryptographie - von RSA zu Zero-Knowledge. Albrecht Beutelspacher, Jörg Schwenk, Klaus-Dieter Wolfenstetter