Martin Johns - RankMe

104 papers A* 27A 14B 8C 1Misc 7Journal 24Unranked 18

Year	Rank	Type	Title / Venue / Authors
2026	J	`jnl`	The Impact of AI-Assisted Development on Software Security: A Study of Gemini and Developer Experience. CoRR Nadine Jost, Benjamin Berens, Manuel Karl, Stefan Albert Horstmann, Martin Johns, Alena Naiakshina
2025	A*	`conf`	"Sorry for Bugging you so much." Exploring Developers' Behavior Towards Privacy-Compliant Implementation. SP Stefan Albert Horstmann, Sandy Hong, David Klein, Raphael Serafini, Martin Degeling, Martin Johns, Veelasha Moonsamy, Alena Naiakshina
2025	J	`jnl`	"Sorry for bugging you so much." Exploring Developers' Behavior Towards Privacy-Compliant Implementation. CoRR Stefan Albert Horstmann, Sandy Hong, David Klein, Raphael Serafini, Martin Degeling, Martin Johns, Veelasha Moonsamy, Alena Naiakshina
2025	—	`conf`	Comma Separated Vulnerabilities: Detecting Formula Injection in the Wild. WOOT Manuel Karl, Louis Bettels, Martin Johns, David Klein
2025	A*	`conf`	Confusing Value with Enumeration: Studying the Use of CVEs in Academia. USENIX Security Symposium Moritz Schloegel, Daniel Klischies, Simon Koch, David Klein, Lukas Gerlach, Malte Wessels, Leon Trampert, Martin Johns, Mathy Vanhoef, Michael Schwarz, Thorsten Holz, Jo Van Bulck
2025	J	`jnl`	Dancer in the Dark: Synthesizing and Evaluating Polyglots for Blind Cross-Site Scripting. CoRR Robin Kirchner, Jonas Möller, Marius Musch, David Klein, Konrad Rieck, Martin Johns
2025	—	`conf`	Extract: A PHP Foot-Gun Case Study. WOOT Jannik Hartung, Simon Koch, Martin Johns
2025	A*	`conf`	HyTrack: Resurrectable and Persistent Tracking Across Android Apps and the Web. USENIX Security Symposium Malte Wessels, Simon Koch, Jan Drescher, Louis Bettels, David Klein, Martin Johns
2025	A*	`conf`	In the DOM We Trust: Exploring the Hidden Dangers of Reading from the DOM on the Web. CCS Jan Drescher, Sepehr Mirzaei, Soheil Khodayari, David Klein, Thomas Barber, Martin Johns, Giancarlo Pellegrino
2025	J	`jnl`	Making Web Applications GDPR Compliant: A Comparative Evaluation of GDPR-Enforcement Frameworks. Proc. Priv. Enhancing Technol. Felix Kalinowski, David Klein, Martin Johns, Veelasha Moonsamy
2025	—	`conf`	Privacy-Preserving Encoding and Scaling of Tabular Data in Horizontal Federated Learning Systems. ARES (1) Tim Piotrowski, Zoltán Nochta, Manuel Karl, Martin Johns
2025	J	`jnl`	The Impact of Default Mobile SDK Usage on Privacy and Data Protection. Proc. Priv. Enhancing Technol. Simon Koch, Manuel Karl, Robin Kirchner, Malte Wessels, Anne Paschke, Martin Johns
2025	A*	`conf`	The Importance of Being Earnest: Shedding Light on Johnny's (False) Sense of Privacy. SP Wirawan Agahari, Alexandra Dirksen, Martin Johns, Mark de Reuver, Tobias Fiebig
2025	A*	`conf`	The Power to Never Be Wrong: Evasions and Anachronistic Attacks Against Web Archives. CCS Robin Kirchner, Chris Tsoukaladelis, Martin Johns, Nick Nikiforakis
2025	A	`conf`	Uncovering Bigger Truths: Deobfuscating PHP with Phoebe. ACSAC Manuel Karl, Simon Koch, David Klein, Martin Johns
2025	J	`jnl`	Wemby's Web: Hunting for Memory Corruption in WebAssembly. Proc. ACM Softw. Eng. Oussama Draissi, Tobias Cloosters, David Klein, Michael Rodler, Marius Musch, Martin Johns, Lucas Davi
2024	J	`jnl`	A Black-Box Privacy Analysis of Messaging Service Providers' Chat Message Processing. Proc. Priv. Enhancing Technol. Robin Kirchner, Simon Koch, Noah Kamangar, David Klein, Martin Johns
2024	—	`conf`	Continuous Health Monitoring on Shared Mobility Devices: A Health-eScooter Prototype. HICSS Joana M. Warnecke, Christian Baumgartner, Michael H. Breitner, Dominique F. Briechle, Thomas M. Deserno, Maximilian Heumann, Martin Johns, Alexander Picker, Andreas Rausch, Lars C. Wolf
2024	A*	`conf`	Dancer in the Dark: Synthesizing and Evaluating Polyglots for Blind Cross-Site Scripting. USENIX Security Symposium Robin Kirchner, Jonas Möller, Marius Musch, David Klein, Konrad Rieck, Martin Johns
2024	C	`conf`	Don't Patch the Researcher, Patch the Game: A Systematic Approach for Responsible Research via Federated Ethics Boards. NSPW Alexandra Dirksen, Sebastian Giessler, Hendrik Erz, Martin Johns, Tobias Fiebig
2024	J	`jnl`	FP-tracer: Fine-grained Browser Fingerprinting Detection via Taint-tracking and Entropy-based Thresholds. Proc. Priv. Enhancing Technol. Soumaya Boussaha, Lukas Hock, Miguel Bermejo, Rubén Cuevas Rumín, Ángel Cuevas Rumín, David Klein, Martin Johns, Luca Compagna, Daniele Antonioli, Thomas Barber
2024	A*	`conf`	Parse Me, Baby, One More Time: Bypassing HTML Sanitizer via Parsing Differentials. SP David Klein, Martin Johns
2024	A*	`conf`	SSRF vs. Developers: A Study of SSRF-Defenses in PHP Applications. USENIX Security Symposium Malte Wessels, Simon Koch, Giancarlo Pellegrino, Martin Johns
2023	A*	`conf`	FUZZILLI: Fuzzing for JavaScript JIT Compiler Vulnerabilities. NDSS Samuel Groß, Simon Koch, Lukas Bernhard, Thorsten Holz, Martin Johns
2023	A*	`conf`	General Data Protection Runtime: Enforcing Transparent GDPR Compliance for Existing Applications. CCS David Klein, Benny Rolle, Thomas Barber, Manuel Karl, Martin Johns
2023	A*	`conf`	Poster: The Risk of Insufficient Isolation of Database Transactions in Web Applications. CCS Simon Koch, Malte Wessels, David Klein, Martin Johns
2023	A*	`conf`	The OK Is Not Enough: A Large Scale Study of Consent Dialogs in Smartphone Applications. USENIX Security Symposium Simon Koch, Benjamin Altpeter, Martin Johns
2022	A	`conf`	Accept All Exploits: Exploring the Security Impact of Cookie Banners. ACSAC David Klein, Marius Musch, Thomas Barber, Moritz Kopmann, Martin Johns
2022	A	`conf`	Hand Sanitizers in the Wild: A Large-scale Study of Custom JavaScript Sanitizer Functions. EuroS&P David Klein, Thomas Barber, Souphiane Bensalim, Ben Stock, Martin Johns
2022	J	`jnl`	Keeping Privacy Labels Honest. Proc. Priv. Enhancing Technol. Simon Koch, Malte Wessels, Benjamin Altpeter, Madita Olvermann, Martin Johns
2022	A	`conf`	No keys to the kingdom required: a comprehensive investigation of missing authentication vulnerabilities in the wild. IMC Manuel Karl, Marius Musch, Guoli Ma, Martin Johns, Sebastian Lekies
2022	A	`conf`	Server-Side Browsers: Exploring the Web's Hidden Attack Surface. AsiaCCS Marius Musch, Robin Kirchner, Max Boll, Martin Johns
2021	J	`jnl`	LogPicker: Strengthening Certificate Transparency Against Covert Adversaries. Proc. Priv. Enhancing Technol. Alexandra Dirksen, David Klein, Robert Michael, Tilman Stehr, Konrad Rieck, Martin Johns
2021	—	`conf`	Talking About My Generation: Targeted DOM-based XSS Exploit Generation using Dynamic Data Flow Analysis. EuroSec@EuroSys Souphiane Bensalim, David Klein, Thomas Barber, Martin Johns
2021	A*	`conf`	U Can't Debug This: Detecting JavaScript Anti-Debugging Techniques in the Wild. USENIX Security Symposium Marius Musch, Martin Johns
2021	A*	`conf`	Who's Hosting the Block Party? Studying Third-Party Blockage of CSP and SRI. NDSS Marius Steffens, Marius Musch, Martin Johns, Ben Stock
2020	A*	`conf`	Adversarial Preprocessing: Understanding and Preventing Image-Scaling Attacks in Machine Learning. USENIX Security Symposium Erwin Quiring, David Klein, Daniel Arp, Martin Johns, Konrad Rieck
2020	Misc	`conf`	Hybrid taint analysis for Java EE. SAC Florian D. Loch, Martin Johns, Martin Hecker, Martin Mohr, Gregor Snelting
2020	Misc	`conf`	Raccoon: automated verification of guarded race conditions in web applications. SAC Simon Koch, Tim Sauer, Martin Johns, Giancarlo Pellegrino
2020	—	`conf`	Towards Enabling Secure Web-Based Cloud Services using Client-Side Encryption. CCSW Martin Johns, Alexandra Dirksen
2019	A*	`conf`	Don't Trust The Locals: Investigating the Prevalence of Persistent Client-Side Cross-Site Scripting in the Wild. NDSS Marius Steffens, Christian Rossow, Martin Johns, Ben Stock
2019	B	`conf`	New Kid on the Web: A Study on the Prevalence of WebAssembly in the Wild. DIMVA Marius Musch, Christian Wressnegger, Martin Johns, Konrad Rieck
2019	A	`conf`	ScriptProtect: Mitigating Unsafe Third-Party JavaScript Practices. AsiaCCS Marius Musch, Marius Steffens, Sebastian Roth, Ben Stock, Martin Johns
2019	B	`conf`	Thieves in the Browser: Web-based Cryptojacking in the Wild. ARES Marius Musch, Christian Wressnegger, Martin Johns, Konrad Rieck
2018	B	`conf`	Towards an Automatic Generation of Low-Interaction Web Application Honeypots. ARES Marius Musch, Martin Härterich, Martin Johns
2018	J	`jnl`	Web Application Security (Dagstuhl Seminar 18321). Dagstuhl Reports Martin Johns, Nick Nikiforakis, Melanie Volkamer, John Wilander
2018	J	`jnl`	Web-based Cryptojacking in the Wild. CoRR Marius Musch, Christian Wressnegger, Martin Johns, Konrad Rieck
2017	A*	`conf`	Code-Reuse Attacks for the Web: Breaking Cross-Site Scripting Mitigations via Script Gadgets. CCS Sebastian Lekies, Krzysztof Kotowicz, Samuel Groß, Eduardo A. Vela Nava, Martin Johns
2017	A*	`conf`	Deemon: Detecting CSRF with Dynamic Analysis and Property Graphs. CCS Giancarlo Pellegrino, Martin Johns, Simon Koch, Michael Backes, Christian Rossow
2017	J	`jnl`	Deemon: Detecting CSRF with Dynamic Analysis and Property Graphs. CoRR Giancarlo Pellegrino, Martin Johns, Simon Koch, Michael Backes, Christian Rossow
2017	A*	`conf`	How the Web Tangled Itself: Uncovering the History of Client-Side Web (In)Security. USENIX Security Symposium Ben Stock, Martin Johns, Marius Steffens, Michael Backes
2016	J	`jnl`	Client-Side XSS in Theorie und Praxis. Datenschutz und Datensicherheit Ben Stock, Martin Johns
2016	Misc	`conf`	Ensuring endpoint authenticity in WebRTC peer-to-peer communication. SAC Willem De Groef, Deepak Subramanian, Martin Johns, Frank Piessens, Lieven Desmet
2016	A*	`conf`	Hey, You Have a Problem: On the Feasibility of Large-Scale Web Vulnerability Notification. USENIX Security Symposium Ben Stock, Giancarlo Pellegrino, Christian Rossow, Martin Johns, Michael Backes
2016	A*	`conf`	POSTER: Mapping the Landscape of Large-Scale Vulnerability Notifications. CCS Ben Stock, Giancarlo Pellegrino, Christian Rossow, Martin Johns, Michael Backes
2016	J	`jnl`	Security Testing: A Survey. Adv. Comput. Michael Felderer, Matthias Büchler, Martin Johns, Achim D. Brucker, Ruth Breu, Alexander Pretschner
2015	A*	`conf`	From Facepalm to Brain Bender: Exploring Client-Side Cross-Site Scripting. CCS Ben Stock, Stephan Pfistner, Bernd Kaiser, Sebastian Lekies, Martin Johns
2015	Misc	`conf`	LogSec: adaptive protection for the wild wild web. SAC Bastian Braun, Korbinian Pauli, Joachim Posegga, Martin Johns
2015	A*	`conf`	The Unexpected Dangers of Dynamic JavaScript. USENIX Security Symposium Sebastian Lekies, Ben Stock, Martin Wentzel, Martin Johns
2014	Misc	`conf`	A Trusted UI for the Mobile Web. SEC Bastian Braun, Johannes Köstler, Joachim Posegga, Martin Johns
2014	—	`conf`	DOM-basiertes Cross-Site Scripting im Web: Reise in ein unerforschtes Land. Sicherheit Ben Stock, Sebastian Lekies, Martin Johns
2014	—	`conf`	PhishSafe: leveraging modern JavaScript API's for transparent and robust protection. CODASPY Bastian Braun, Martin Johns, Johannes Köstler, Joachim Posegga
2014	A*	`conf`	Precise Client-side Protection against DOM-based Cross-Site Scripting. USENIX Security Symposium Ben Stock, Sebastian Lekies, Tobias Mueller, Patrick Spiegel, Martin Johns
2014	J	`jnl`	Preface. J. Comput. Secur. Lieven Desmet, Martin Johns, Benjamin Livshits, Andrei Sabelfeld
2014	—	`book`	Primer on Client-Side Web Security Philippe De Ryck, Lieven Desmet, Frank Piessens, Martin Johns
2014	A	`conf`	Protecting users against XSS-based password manager abuse. AsiaCCS Ben Stock, Martin Johns
2014	J	`jnl`	Real-Time Communications Security on the Web. IEEE Internet Comput. Lieven Desmet, Martin Johns
2014	J	`jnl`	Script-templates for the Content Security Policy. J. Inf. Secur. Appl. Martin Johns
2013	A*	`conf`	25 million flows later: large-scale detection of DOM-based XSS. CCS Sebastian Lekies, Ben Stock, Martin Johns
2013	A*	`conf`	Eradicating DNS Rebinding with the Extended Same-origin Policy. USENIX Security Symposium Martin Johns, Sebastian Lekies, Ben Stock
2013	B	`conf`	PreparedJS: Secure Script-Templates for JavaScript. DIMVA Martin Johns
2013	A	`conf`	Tamper-Resistant LikeJacking Protection. RAID Martin Johns, Sebastian Lekies
2012	B	`conf`	A User-Level Authentication Scheme to Mitigate Web Session-Based Vulnerabilities. TrustBus Bastian Braun, Stefan Kucher, Martin Johns, Joachim Posegga
2012	A	`conf`	BetterAuth: web authentication revisited. ACSAC Martin Johns, Sebastian Lekies, Bastian Braun, Benjamin Flesch
2012	A	`conf`	DEMACRO: Defense against Malicious Cross-Domain Requests. RAID Sebastian Lekies, Nick Nikiforakis, Walter Tighzert, Frank Piessens, Martin Johns
2012	J	`jnl`	HTML5-Security - Sicherer Umgang mit den neuen JavaScript APIs. Datenschutz und Datensicherheit Martin Johns
2012	—	`conf`	Towards stateless, client-side driven Cross-Site Request Forgery protection for Web applications. Sicherheit Sebastian Lekies, Walter Tighzert, Martin Johns
2012	J	`jnl`	Web Application Security (Dagstuhl Seminar 12401). Dagstuhl Reports Lieven Desmet, Martin Johns, Benjamin Livshits, Andrei Sabelfeld
2012	B	`conf`	WebSand: Server-Driven Outbound Web-Application Sandboxing. TrustBus Martin Johns, Joachim Posegga
2011	—	`conf`	Abusing locality in shared web hosting. EUROSEC Nick Nikiforakis, Wouter Joosen, Martin Johns
2011	B	`conf`	Biting the Hand That Serves You: A Closer Look at Client-Side Flash Proxies for Cross-Domain Requests. DIMVA Martin Johns, Sebastian Lekies
2011	—	`—`	Code Injection Vulnerabilities in Web Applications: Exemplified at Cross-site Scripting. Martin Johns
2011	J	`jnl`	Code-injection Vulnerabilities in Web Applications - Exemplified at Cross-site Scripting. it Inf. Technol. Martin Johns
2011	A	`conf`	Plug-In Privacy for Smart Metering Billing. PETS Marek Jawurek, Martin Johns, Florian Kerschbaum
2011	Misc	`conf`	Reliable protection against session fixation attacks. SAC Martin Johns, Bastian Braun, Michael Schrank, Joachim Posegga
2011	—	`conf`	Scanstud: A Methodology for Systematic, Fine-Grained Evaluation of Static Analysis Tools. ICST Workshops Martin Johns, Moritz Jodeit
2011	—	`ch.`	Session Hijacking Attacks. Encyclopedia of Cryptography and Security (2nd Ed.) Martin Johns
2011	—	`conf`	SessionShield: Lightweight Protection against Session Hijacking. ESSoS Nick Nikiforakis, Wannes Meert, Yves Younan, Martin Johns, Wouter Joosen
2011	A	`conf`	Smart metering de-pseudonymization. ACSAC Marek Jawurek, Martin Johns, Konrad Rieck
2010	J	`jnl`	Plug-in privacy for Smart Metering billing CoRR Marek Jawurek, Martin Johns, Florian Kerschbaum
2010	—	`conf`	Secure Code Generation for Web Applications. ESSoS Martin Johns, Christian Beyerlein, Rosemaria Giesecke, Joachim Posegga
2010	—	`conf`	Security Challenges of a Changing Energy Landscape. ISSE Marek Jawurek, Martin Johns
2010	—	`conf`	Session Fixation - The Forgotten Vulnerability? Sicherheit Michael Schrank, Bastian Braun, Martin Johns, Joachim Posegga
2009	—	`conf`	09141 Abstracts Collection - Web Application Security. Web Application Security Dan Boneh, Úlfar Erlingsson, Martin Johns, Benjamin Livshits
2009	—	`conf`	09141 Executive Summary - Web Application Security. Web Application Security Dan Boneh, Úlfar Erlingsson, Martin Johns, Benjamin Livshits
2009	—	`ch.`	Code-injection Verwundbarkeit in Web Anwendungen am Beispiel von Cross-site Scripting. Ausgezeichnete Informatikdissertationen Martin Johns
2009	—	`ed.`	Web Application Security, 29.03. - 03.04.2009 Web Application Security Dan Boneh, Úlfar Erlingsson, Martin Johns, Benjamin Livshits
2008	J	`jnl`	On JavaScript Malware and related threats. J. Comput. Virol. Martin Johns
2008	A	`conf`	XSSDS: Server-Side Detection of Cross-Site Scripting Attacks. ACSAC Martin Johns, Björn Engelmann, Joachim Posegga
2007	J	`jnl`	Automatisierter Code-Audit - Sicherheitsanalyse von Source Code in Theorie und Praxis. Datenschutz und Datensicherheit Martin Johns, Daniel Schreckling
2007	B	`conf`	Protecting the Intranet Against "JavaScript Malware" and Related Attacks. DIMVA Martin Johns, Justus Winter
2007	Misc	`conf`	SMask: preventing injection attacks in web applications by approximating automatic data/code separation. SAC Martin Johns, Christian Beyerlein
2006	A	`conf`	SessionSafe: Implementing XSS Immune Session Handling. ESORICS Martin Johns
2003	—	`conf`	Pseudonyme Biometrik: Ein signatur-basierter Ansatz. BIOSIG Martin Johns