Sascha Fahl, CISPA Helmholtz Center for Information Security and Leibniz University Hannover