Dominik Wermke
Web Curriculum Vitae
Updated:
Mar 10, 2025
Web:
Email:
Table of Contents
About #
I am an Assistant Professor in the Department of Computer Science at the North Carolina State University with research areas of interest including usable security and privacy, security of and trust in the software supply chain and open source ecosystem, as well as supporting software experts in designing, developing, and deploying secure, privacy-respecting, and user-friendly systems.
Pronunciation: VERM-keh [/veeːm.ke/]
I actually love all the different pronunciations for my last name, so feel free to go with whatever feels right in your language / accent.
The German pronunciation sounds like “VERM-keh” (/veeːm.ke/ in IPA).
“Verm-” rhymes with “term” and “-ke” as in “kettle”.
Affiliations #
Current:
North Carolina State University
(Assistant Professor)
- Secure Computing Institute
(Member)
- WSPR Research Lab
(Member)
Past Affiliations
Past:
CISPA Helmholtz Center for Information Security
(Researcher)
TeamUSEC
(Member)
George Washington University (Visiting Researcher)
Leibniz University Hannover (PhD)
Saarland University (MSc, BSc)
Academic Bio #
Perspective:
Include:
✓ Copied to Clipboard
Peer-Reviewed Publications #
Detailed list and filters at publications. In computer security, conferences are the primary publication venue.
Conference #
[C17]
Attributing Open-Source Contributions is Critical but Difficult: A Systematic Analysis of GitHub Practices and Their Impact on Software Supply Chain Security.
In Proceedings of the Network and Distributed System Security Symposium (NDSS), February 24, 2025.
[C16]
Security and Privacy Software Creators’ Perspectives on Unintended Consequences.
In Proceedings of the 33rd USENIX Security Symposium (USENIX Sec), August 14-16, 2024.
[C15]
Analyzing Security and Privacy Advice During the 2022 Russian Invasion of Ukraine on Twitter.
In Proceedings of the ACM CHI Conference on Human Factors in Computing Systems (CHI), May 11-16, 2024.
[C14]
Pushed by Accident: A Mixed-Methods Study on Strategies of Handling Secret Information in Source Code Repositories.
In Proceedings of the 32nd USENIX Security Symposium (USENIX Sec), Anaheim, CA, USA, August 9-11, 2023.
[C13]
It's like flossing your teeth: On the Importance and Challenges of Reproducible Builds for Software Supply Chain Security.
In Proceedings of the 44th IEEE Symposium on Security and Privacy (IEEE S&P), San Francisco, CA, USA, May 22-24, 2023.
[C12]
"Always Contribute Back": A Qualitative Study on Security Challenges of the Open Source Supply Chain.
In Proceedings of the 44th IEEE Symposium on Security and Privacy (IEEE S&P), San Francisco, CA, USA, May 22-24, 2023.
[C11]
If You Can’t Get Them to the Lab: Evaluating a Virtual Study Environment with Security Information Workers.
In Proceedings of the 18th Symposium on Usable Privacy and Security (SOUPS), Santa Clara, CA, USA, August 7-9, 2022.
[C10]
Committed to Trust: A Qualitative Study on Security & Trust in Open Source Software Projects.
In Proceedings of the 43rd IEEE Symposium on Security and Privacy (IEEE S&P), San Francisco, CA, USA, May 23-26, 2022.
[C9]
A Large-Scale Interview Study on Information Security in and Attacks against Small and Medium-sized Enterprises.
In Proceedings of the 30th USENIX Security Symposium (USENIX Sec), August 11-13, 2021.
[C8]
On the Limited Impact of Visualizing Encryption: Perceptions of E2E Messaging Security.
In Proceedings of the 17th Symposium on Usable Privacy and Security (SOUPS), August 8-10, 2021.
[C7]
Never ever or no matter what: Investigating Adoption Intentions and Misconceptions about the Corona-Warn-App in Germany.
In Proceedings of the 17th Symposium on Usable Privacy and Security (SOUPS), August 8-10, 2021.
[C6]
Cloudy with a Chance of Misconceptions: Exploring Users' Perceptions and Expectations of Security and Privacy in Cloud Office Suites.
In Proceedings of the 16th Symposium on Usable Privacy and Security (SOUPS), August 12-14, 2020.
[C5]
A Large Scale Investigation of Obfuscation Use in Google Play.
In Proceedings of the 34th Annual Computer Security Applications Conference (ACSAC), San Juan, PR, USA, December 03-07, 2018.
[C4]
Developers Deserve Security Warnings, Too: On the Effect of Integrated Security Advice on Cryptographic API Misuse.
In Proceedings of the 14th Symposium on Usable Privacy and Security (SOUPS), Baltimore, MD, USA, August 12-14, 2018.
[C3]
A Stitch in Time: Supporting Android Developers in Writing Secure Code.
In Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security (CCS), Dallas, TX, USA, October 30 - November 03, 2017.
[C2]
Developers Need Support, Too: A Survey of Security Advice for Software Developers.
In Proceedings of the IEEE Secure Development Conference (SecDev), Cambridge, MA, USA, September 24-26, 2017.
[C1]
Security Developer Studies with GitHub Users: Exploring a Convenience Sample.
In Proceedings of the 13th Symposium on Usable Privacy and Security (SOUPS), Santa Clara, CA, USA, July 12-14, 2017.
Journal #
[J1]
Research Directions in Software Supply Chain Security.
ACM Transactions on Software Engineering and Methodology (TOSEM), January 27, 2025.
Workshop #
[W4]
Developers’ Approaches to Software Supply Chain Security: An Interview Study.
In Proceedings of the ACM Workshop on Software Supply Chain Offensive Research and Ecosystem Defenses (SCORED), October 18, 2024.
[W3]
Decomposing and Measuring Trust in Open-Source Software Supply Chains.
In Proceedings of the IEEE/ACM 46th International Conference on Software Engineering: New Ideas and Emerging Results (ICSE-NIER), April 14-20, 2024.
[W2]
Replication: Do We Snooze If We Can't Lose? Modelling Risk with Incentives in Habituation User Studies.
In Proceedings of the 2019 Workshop on Usable Security (USEC), San Diego, CA, USA, February 24, 2019.
[W1]
Lessons Learned from Using an Online Platform to Conduct Large-Scale, Online Controlled Security Experiments with Software Developers.
In Proceedings of the 10th USENIX Workshop on Cyber Security Experimentation and Test (CSET), Vancouver, BC, Canada, August 14, 2017.
Poster #
[P9]
Poster: Pushed by Accident: A Mixed-Methods Study on Strategies of Handling Secret Information in Source Code Repositories.
At 19th Symposium on Usable Privacy and Security (SOUPS), Anaheim, CA, USA, August 6-8, 2023.
[P8]
Poster: Committed by Accident - Prevention and Remediation Strategies Against Secret Leakage.
At 43rd IEEE Symposium on Security and Privacy (IEEE S&P), May 23-26, 2022.
[P7]
Poster: User Awareness of Phishing and WebAuthn.
At 43rd IEEE Symposium on Security and Privacy (IEEE S&P), May 23-26, 2022.
[P6]
Poster: Cybercrime in Small and Medium-sized Enterprises.
At 17th Symposium on Usable Privacy and Security (SOUPS), August 8-10, 2021.
[P5]
Poster: Perceptions of Handling Sensitive Data in Cloud Office Applications.
At 41st IEEE Symposium on Security and Privacy (IEEE S&P), May 18-20, 2020.
[P4]
Poster: Towards Understanding the WhatsApp Dilemma.
At 28th USENIX Security Symposium (USENIX Sec), Santa Clara, CA, USA, August 14-16, 2019.
[P3]
Poster: A Large Scale Investigation of Obfuscation Use in Google Play.
At 26th Annual Network and Distributed System Security Symposium (NDSS), San Diego, California, USA, February 24-27, 2019.
[P2]
Poster: Project Leine - A Virtualized Study Infrastructure.
At 26th Annual Network and Distributed System Security Symposium (NDSS), San Diego, California, USA, February 24-27, 2019.
[P1]
Poster: Replication: Do We Snooze If We Can't Lose? Modelling Risk with Incentives in Habituation User Studies.
At 14th Symposium on Usable Privacy and Security (SOUPS), Baltimore, MD, USA, August 12-14, 2018.
Academic Service #
2026
- IEEE S&P'26, Member of PC 🔗
2025
- IEEE S&P'25, Member of PC 🔗
- IEEE SecDev'25, Member of PC 🔗
- IEEE Secur. Priv. '25, Journal Reviewer
- USENIX Sec'25, Member of PC 🔗
2024
- IEEE S&P'24, Member of PC 🔗
- ACM SCORED'24, Member of PC 🔗
- IEEE SecDev'24, Member of PC 🔗
2023
- EuroUSEC'23, Member of PC 🔗
- IEEE SecDev'23, Member of PC 🔗
- IEEE Secur. Priv. SPI '23, Special Issue Reviewer
- ACM WiSec'23, Member of PC 🔗
2022
- EuroUSEC'22, Member of PC 🔗
- SOUPS'22, Member of poster jury 🔗
- WSIW'22, Member of PC 🔗
- WSIW'22, Web Chair 🔗
2021
2020
2019
2018
Students #
All at NC State unless noted otherwise. Names redacted in the web version for privacy.
PhD Students #
Ongoing
- ███████
PhD Committees #
Ongoing
- ███████
- ███████
- ███████
2024
- ███████
- ███████
- ███████, Leibniz University Hannover
- ███████, Leibniz University Hannover
Master Students #
2025
- ███████, Thesis
Master Committees #
2023
- ███████, Leibniz University Hannover
Independent Studies #
Ongoing
- ███████
2024
- ███████
- ███████
Teaching #
Detailed list at teaching.