Biblio

Export 10 results:
Filters: Author is Martin Johns  [Clear All Filters]
2024
Kirchner R, Möller J, Musch M, Klein D, Rieck K, Johns M.  2024.  Dancer in the Dark: Synthesizing and Evaluating Polyglots for Blind Cross-Site Scripting. 33rd USENIX Security Symposium (USENIX Security 24). :6723--6740.
Wessels M, Koch S, Pellegrino G, Johns M.  2024.  SSRF vs. Developers: A Study of SSRF-Defenses in PHP Applications. 33rd USENIX Security Symposium (USENIX Security 24). :6777--6794.
2023
Koch S, Altpeter B, Johns M.  2023.  The OK Is Not Enough: A Large Scale Study of Consent Dialogs in Smartphone Applications. 32nd USENIX Security Symposium (USENIX Security 23). :5467--5484.
2021
Musch M, Johns M.  2021.  U Can't Debug This: Detecting JavaScript Anti-Debugging Techniques in the Wild. 30th USENIX Security Symposium (USENIX Security 21). :2935--2950.
2020
Quiring E, Klein D, Arp D, Johns M, Rieck K.  2020.  Adversarial Preprocessing: Understanding and Preventing Image-Scaling Attacks in Machine Learning. 29th USENIX Security Symposium (USENIX Security 20). :1363-1380.
2017
Stock B, Johns M, Steffens M, Backes M.  2017.  How the Web Tangled Itself: Uncovering the History of Client-Side Web (In)Security. 26th USENIX Security Symposium (USENIX Security 17). :971--987.
2016
Stock B, Pellegrino G, Rossow C, Johns M, Backes M.  2016.  Hey, You Have a Problem: On the Feasibility of Large-Scale Web Vulnerability Notification. 25th USENIX Security Symposium (USENIX Security 16). :1015--1032.
2015
Lekies S, Stock B, Wentzel M, Johns M.  2015.  The Unexpected Dangers of Dynamic JavaScript. 24th USENIX Security Symposium (USENIX Security 15). :723-735.
2014
Stock B, Lekies S, Mueller T, Spiegel P, Johns M.  2014.  Precise Client-side Protection against DOM-based Cross-Site Scripting. 23rd USENIX Security Symposium (USENIX Security 14). :655--670.
2013
Johns M, Lekies S, Stock B.  2013.  Eradicating DNS Rebinding with the Extended Same-origin Policy. 22nd USENIX Security Symposium (USENIX Security 13). :621--636.