Sebastian Lekies

17 papers A* 7A 4B 1Unranked 4
YearRankTypeTitle / Venue / Authors
2023 — —
Client-Side Cross-Site Scripting: Exploitation, Detection, Mitigation, and Prevention.
Sebastian Lekies
2022 A conf
No keys to the kingdom required: a comprehensive investigation of missing authentication vulnerabilities in the wild.
IMC
Manuel Karl, Marius Musch, Guoli Ma, Martin Johns, Sebastian Lekies
2021 — conf
JSONPS: Secure an inherently insecure practice with this one weird trick!
EuroS&P Workshops
Sebastian Lekies, Damien Engels, Metodi Mitkov
2017 A* conf
Code-Reuse Attacks for the Web: Breaking Cross-Site Scripting Mitigations via Script Gadgets.
CCS
Sebastian Lekies, Krzysztof Kotowicz, Samuel Groß, Eduardo A. Vela Nava, Martin Johns
2016 A* conf
CSP Is Dead, Long Live CSP! On the Insecurity of Whitelists and the Future of Content Security Policy.
CCS
Lukas Weichselbaum, Michele Spagnuolo, Sebastian Lekies, Artur Janc
2015 A* conf
From Facepalm to Brain Bender: Exploring Client-Side Cross-Site Scripting.
CCS
Ben Stock, Stephan Pfistner, Bernd Kaiser, Sebastian Lekies, Martin Johns
2015 A* conf
The Unexpected Dangers of Dynamic JavaScript.
USENIX Security Symposium
Sebastian Lekies, Ben Stock, Martin Wentzel, Martin Johns
2014 — conf
DOM-basiertes Cross-Site Scripting im Web: Reise in ein unerforschtes Land.
Sicherheit
Ben Stock, Sebastian Lekies, Martin Johns
2014 A* conf
Precise Client-side Protection against DOM-based Cross-Site Scripting.
USENIX Security Symposium
Ben Stock, Sebastian Lekies, Tobias Mueller, Patrick Spiegel, Martin Johns
2013 A* conf
25 million flows later: large-scale detection of DOM-based XSS.
CCS
Sebastian Lekies, Ben Stock, Martin Johns
2013 A* conf
Eradicating DNS Rebinding with the Extended Same-origin Policy.
USENIX Security Symposium
Martin Johns, Sebastian Lekies, Ben Stock
2013 A conf
Tamper-Resistant LikeJacking Protection.
RAID
Martin Johns, Sebastian Lekies
2012 A conf
BetterAuth: web authentication revisited.
ACSAC
Martin Johns, Sebastian Lekies, Bastian Braun, Benjamin Flesch
2012 A conf
DEMACRO: Defense against Malicious Cross-Domain Requests.
RAID
Sebastian Lekies, Nick Nikiforakis, Walter Tighzert, Frank Piessens, Martin Johns
2012 — conf
On the Fragility and Limitations of Current Browser-Provided Clickjacking Protection Schemes.
WOOT
Sebastian Lekies, Mario Heiderich
2012 — conf
Towards stateless, client-side driven Cross-Site Request Forgery protection for Web applications.
Sicherheit
Sebastian Lekies, Walter Tighzert, Martin Johns
2011 B conf
Biting the Hand That Serves You: A Closer Look at Client-Side Flash Proxies for Cross-Domain Requests.
DIMVA
Martin Johns, Sebastian Lekies