Security and Privacy Software Creators’ Perspectives on Unintended Consequences
[Harshini Sri Ramulu Helen Schmitt Dominik Wermke Yasemin Acar]
2024-08-14
33rd USENIX Security Symposium
USENIX Sec '24
conference
USENIX Sec '24 , In Proceedings of the 33rd USENIX Security Symposium , August 14-16, 2024 .
Analyzing Security and Privacy Advice During the 2022 Russian Invasion of Ukraine on Twitter
[Juliane Schmüser Harshini Sri Ramulu Noah Wöhler Christian Stransky Felix Bensmann Dimitar Dimitrov Sebastian Schellhammer Dominik Wermke Stefan Dietze Yasemin Acar Sascha Fahl]
2024-05-11
ACM CHI Conference on Human Factors in Computing Systems
ACM CHI '24
conference
Juliane Schmüser ,
Harshini Sri Ramulu ,
Noah Wöhler ,
Christian Stransky ,
Felix Bensmann ,
Dimitar Dimitrov ,
Sebastian Schellhammer ,
Dominik Wermke ,
Stefan Dietze ,
Yasemin Acar , and
Sascha Fahl .
ACM CHI '24 , In Proceedings of the ACM CHI Conference on Human Factors in Computing Systems , May 11-16, 2024 .
Decomposing and Measuring Trust in Open-Source Software Supply Chains
[Linda Boughton Courtney Miller Yasemin Acar Dominik Wermke Christian Kästner]
2024-04-14
IEEE/ACM 46th International Conference on Software Engineering: New Ideas and Emerging Results
ICSE-NIER '24
workshop
ICSE-NIER '24 , In Proceedings of the IEEE/ACM 46th International Conference on Software Engineering: New Ideas and Emerging Results , April 14-20, 2024 .
Securing the Software Supply Chain: Research, Outreach, Education
[Laurie Williams Yasemin Acar Michel Cukier William Enck Alexandros Kapravelos Christian Kästner Dominik Wermke]
2023-11-14
Request for Information on Open-Source Software Security: Areas of Long-Term Focus and Prioritization
RFI
other
RFI , Request for Information on Open-Source Software Security: Areas of Long-Term Focus and Prioritization , November 14, 2023 .
A Viewpoint on Human Factors in Software Supply Chain Security: A Research Agenda
[Marcel Fourné Dominik Wermke Sascha Fahl Yasemin Acar]
2023-11-13
IEEE Security & Privacy (Journal), vol. 21, no. 06, pp. 59-63
IEEE Security & Privacy
other
Pushed by Accident: A Mixed-Methods Study on Strategies of Handling Secret Information in Source Code Repositories
[Alexander Krause Jan H. Klemmer Nicolas Huaman Dominik Wermke Yasemin Acar Sascha Fahl]
2023-08-09
32nd USENIX Security Symposium
USENIX Sec '23
conference
USENIX Sec '23 , In Proceedings of the 32nd USENIX Security Symposium , Anaheim, CA, USA , August 9-11, 2023 .
Pushed by Accident: A Mixed-Methods Study on Strategies of Handling Secret Information in Source Code Repositories
[Alexander Krause Jan H. Klemmer Nicolas Huaman Dominik Wermke Yasemin Acar Sascha Fahl]
2023-08-06
19th Symposium on Usable Privacy and Security
SOUPS '23
poster
SOUPS '23 , At 19th Symposium on Usable Privacy and Security , Anaheim, CA, USA , August 6-8, 2023 .
"Always Contribute Back": A Qualitative Study on Security Challenges of the Open Source Supply Chain
[Dominik Wermke Jan H. Klemmer Noah Wöhler Juliane Schmüser Harshini Sri Ramulu Yasemin Acar Sascha Fahl]
2023-05-24
44th IEEE Symposium on Security and Privacy
IEEE S&P '23
conference
IEEE S&P '23 , In Proceedings of the 44th IEEE Symposium on Security and Privacy , San Francisco, CA, USA , May 22-24, 2023 .
It's like flossing your teeth: On the Importance and Challenges of Reproducible Builds for Software Supply Chain Security
[Marcel Fourné Dominik Wermke William Enck Sascha Fahl Yasemin Acar]
2023-05-24
44th IEEE Symposium on Security and Privacy
IEEE S&P '23
conference
IEEE S&P '23 , In Proceedings of the 44th IEEE Symposium on Security and Privacy , San Francisco, CA, USA , May 22-24, 2023 .
If You Can’t Get Them to the Lab: Evaluating a Virtual Study Environment with Security Information Workers
[Nicolas Huaman Alexander Krause Dominik Wermke Christian Stransky Jan H. Klemmer Yasemin Acar Sascha Fahl]
2022-08-07
18th Symposium on Usable Privacy and Security
SOUPS '22
conference
SOUPS '22 , In Proceedings of the 18th Symposium on Usable Privacy and Security , Santa Clara, CA, USA , August 7-9, 2022 .
Committed to Trust: A Qualitative Study on Security & Trust in Open Source Software Projects
[Dominik Wermke Noah Wöhler Jan H. Klemmer Marcel Fourné Yasemin Acar Sascha Fahl]
2022-05-26
43rd IEEE Symposium on Security and Privacy
IEEE S&P '22
conference
IEEE S&P '22 , In Proceedings of the 43rd IEEE Symposium on Security and Privacy , San Francisco, CA, USA , May 23-26, 2022 .
Distinguished Paper Award (4 out of 147 papers)
Poster: User Awareness of Phishing and WebAuthn
[Mindy Tran Sabrina Amft Dominik Wermke]
2022-05-23
43rd IEEE Symposium on Security and Privacy
IEEE S&P '22
poster
IEEE S&P '22 , At 43rd IEEE Symposium on Security and Privacy , May 23-26, 2022 .
Poster: Committed by Accident - Prevention and Remediation Strategies Against Secret Leakage
[Alexander Krause Nicolas Huaman Dominik Wermke Yasemin Acar Sascha Fahl]
2022-05-23
43rd IEEE Symposium on Security and Privacy
IEEE S&P '22
poster
IEEE S&P '22 , At 43rd IEEE Symposium on Security and Privacy , May 23-26, 2022 .
A Large-Scale Interview Study on Information Security in and Attacks against Small and Medium-sized Enterprises
[Nicolas Huaman Bennet von Skarczinski Dominik Wermke Christian Stransky Yasemin Acar Arne Dreißigacker Sascha Fahl]
2021-08-11
30th USENIX Security Symposium
USENIX Sec '21
conference
USENIX Sec '21 , In Proceedings of the 30th USENIX Security Symposium , August 11-13, 2021 .
Never ever or no matter what: Investigating Adoption Intentions and Misconceptions about the Corona-Warn-App in Germany
[Maximilian Häring Eva Gerlitz Christian Tiefenau Matthew Smith Dominik Wermke Sascha Fahl Yasemin Acar]
2021-08-08
17th Symposium on Usable Privacy and Security
SOUPS '21
conference
SOUPS '21 , In Proceedings of the 17th Symposium on Usable Privacy and Security , August 8-10, 2021 .
On the Limited Impact of Visualizing Encryption: Perceptions of E2E Messaging Security
[Christian Stransky Dominik Wermke Johanna Schrader Nicolas Huaman Yasemin Acar Anna Lena Fehlhaber Miranda Wei Blase Ur Sascha Fahl]
2021-08-08
17th Symposium on Usable Privacy and Security
SOUPS '21
conference
SOUPS '21 , In Proceedings of the 17th Symposium on Usable Privacy and Security , August 8-10, 2021 .
Poster: Cybercrime in Small and Medium-sized Enterprises
[Nicolas Huaman Alexander Krause Bennet von Skarczinski Christian Stransky Dominik Wermke Yasemin Acar Arne Dreißigacker Sascha Fahl]
2021-08-08
17th Symposium on Usable Privacy and Security
SOUPS '21
poster
SOUPS '21 , At 17th Symposium on Usable Privacy and Security , August 8-10, 2021 .
Cloudy with a Chance of Misconceptions: Exploring Users' Perceptions and Expectations of Security and Privacy in Cloud Office Suites
[Dominik Wermke Christian Stransky Nicolas Huaman Niklas Busch Yasemin Acar Sascha Fahl]
2020-08-12
16th Symposium on Usable Privacy and Security
SOUPS '20
conference
SOUPS '20 , In Proceedings of the 16th Symposium on Usable Privacy and Security , August 12-14, 2020 .
Poster: Perceptions of Handling Sensitive Data in Cloud Office Applications
[Dominik Wermke Christian Stransky Nicolas Huaman Niklas Busch Alexander Krause Yasemin Acar Sascha Fahl]
2020-05-18
41st IEEE Symposium on Security and Privacy
IEEE S&P '20
poster
IEEE S&P '20 , At 41st IEEE Symposium on Security and Privacy , May 18-20, 2020 .
Towards Understanding the WhatsApp Dilemma
[Christian Stransky Dominik Wermke Johanna Schrader Nicolas Huaman Anna Lena Fehlhaber Yasemin Acar Sascha Fahl]
2019-08-14
28th USENIX Security Symposium
USENIX Sec '19
poster
USENIX Sec '19 , At 28th USENIX Security Symposium , Santa Clara, CA, USA , August 14-16, 2019 .
Project Leine - A Virtualized Study Infrastructure
[Dominik Wermke Nicolas Huaman Christian Stransky Yasemin Acar Sascha Fahl]
2019-02-24
26th Annual Network and Distributed System Security Symposium
NDSS '19
poster
NDSS '19 , At 26th Annual Network and Distributed System Security Symposium , San Diego, California, USA , February 24-27, 2019 .
A Large Scale Investigation of Obfuscation Use in Google Play
[Dominik Wermke Nicolas Huaman Yasemin Acar Bradley Reaves Patrick Traynor Sascha Fahl]
2019-02-24
26th Annual Network and Distributed System Security Symposium
NDSS '19
poster
NDSS '19 , At 26th Annual Network and Distributed System Security Symposium , San Diego, California, USA , February 24-27, 2019 .
Replication: Do We Snooze If We Can't Lose? Modelling Risk with Incentives in Habituation User Studies
[Karoline Busse Dominik Wermke Sabrina Amft Sascha Fahl Emanuel von Zezschwitz Matthew Smith]
2019-02-24
2019 Workshop on Usable Security
USEC '19
workshop
USEC '19 , In Proceedings of the 2019 Workshop on Usable Security , San Diego, CA, USA , February 24, 2019 .
Replication: Do We Snooze If We Can't Lose? Modelling Risk with Incentives in Habituation User Studies
[Karoline Busse Dominik Wermke Sabrina Amft Sascha Fahl Emanuel von Zezschwitz Matthew Smith]
2018-08-12
14th Symposium on Usable Privacy and Security
SOUPS '18
poster
SOUPS '18 , At 14th Symposium on Usable Privacy and Security , Baltimore, MD, USA , August 12-14, 2018 .
A Large Scale Investigation of Obfuscation Use in Google Play
[Dominik Wermke Nicolas Huaman Yasemin Acar Bradley Reaves Patrick Traynor Sascha Fahl]
2018-12-03
34th Annual Computer Security Applications Conference
ACSAC '18
conference
ACSAC '18 , In Proceedings of the 34th Annual Computer Security Applications Conference , San Juan, PR, USA , December 03-07, 2018 .
Developers Deserve Security Warnings, Too: On the Effect of Integrated Security Advice on Cryptographic API Misuse
[Peter Leo Gorski Luigi Lo Iacono Dominik Wermke Christian Stransky Sebastian Möller Yasemin Acar Sascha Fahl]
2018-08-12
14th Symposium on Usable Privacy and Security
SOUPS '18
conference
SOUPS '18 , In Proceedings of the 14th Symposium on Usable Privacy and Security , Baltimore, MD, USA , August 12-14, 2018 .
A Stitch in Time: Supporting Android Developers in Writing Secure Code
[Duc Cuong Nguyen Dominik Wermke Yasemin Acar Michael Backes Charles Weir Sascha Fahl]
2017-10-30
2017 ACM SIGSAC Conference on Computer and Communications Security
CCS '17
conference
CCS '17 , In Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security , Dallas, TX, USA , October 30 - November 03, 2017 .
Developers Need Support, Too: A Survey of Security Advice for Software Developers
[Yasemin Acar Christian Stransky Dominik Wermke Charles Weir Michelle L. Mazurek Sascha Fahl]
2017-09-24
IEEE Secure Development Conference
SecDev '17
conference
SecDev '17 , In Proceedings of the IEEE Secure Development Conference , Cambridge, MA, USA , September 24-26, 2017 .
Lessons Learned from Using an Online Platform to Conduct Large-Scale, Online Controlled Security Experiments with Software Developers
[Christian Stransky Yasemin Acar Duc Cuong Nguyen Dominik Wermke Doowon Kim Elissa M. Redmiles Michael Backes Simson L. Garfinkel Michelle L. Mazurek Sascha Fahl]
2017-08-14
10th USENIX Workshop on Cyber Security Experimentation and Test
CSET '17
workshop
CSET '17 , In Proceedings of the 10th USENIX Workshop on Cyber Security Experimentation and Test , Vancouver, BC, Canada , August 14, 2017 .
Security Developer Studies with GitHub Users: Exploring a Convenience Sample
[Yasemin Acar Christian Stransky Dominik Wermke Michelle L. Mazurek Sascha Fahl]
2017-07-12
13th Symposium on Usable Privacy and Security
SOUPS '17
conference
SOUPS '17 , In Proceedings of the 13th Symposium on Usable Privacy and Security , Santa Clara, CA, USA , July 12-14, 2017 .