Martin Johns

Google Scholar ORCID: 0000-0003-2574-5060
44 publications in security and cryptology related venues
Year
Venue
Title
2025
journals/popets
Making Web Applications GDPR Compliant: A Comparative Evaluation of GDPR-Enforcement Frameworks.
Felix Kalinowski David Klein Martin Johns Veelasha Moonsamy
2025
journals/popets
The Impact of Default Mobile SDK Usage on Privacy and Data Protection.
Simon Koch Manuel Karl Robin Kirchner Malte Wessels Anne Paschke Martin Johns
2025
conf/sp
"Sorry for Bugging you so much." Exploring Developers' Behavior Towards Privacy-Compliant Implementation.
Stefan Albert Horstmann Sandy Hong David Klein Raphael Serafini Martin Degeling Martin Johns Veelasha Moonsamy Alena Naiakshina
2025
conf/sp
The Importance of Being Earnest: Shedding Light on Johnny's (False) Sense of Privacy.
Wirawan Agahari Alexandra Dirksen Martin Johns Mark de Reuver Tobias Fiebig
2025
conf/uss
HyTrack: Resurrectable and Persistent Tracking Across Android Apps and the Web.
Malte Wessels Simon Koch Jan Drescher Louis Bettels David Klein Martin Johns
2025
conf/uss
Confusing Value with Enumeration: Studying the Use of CVEs in Academia.
Moritz Schloegel Daniel Klischies Simon Koch David Klein Lukas Gerlach Malte Wessels Leon Trampert Martin Johns Mathy Vanhoef Michael Schwarz Thorsten Holz Jo Van Bulck
2024
journals/popets
A Black-Box Privacy Analysis of Messaging Service Providers' Chat Message Processing.
Robin Kirchner Simon Koch Noah Kamangar David Klein Martin Johns
2024
journals/popets
FP-tracer: Fine-grained Browser Fingerprinting Detection via Taint-tracking and Entropy-based Thresholds.
Soumaya Boussaha Lukas Hock Miguel Bermejo Rubén Cuevas Rumín Ángel Cuevas Rumín David Klein Martin Johns Luca Compagna Daniele Antonioli Thomas Barber
2024
conf/uss
Dancer in the Dark: Synthesizing and Evaluating Polyglots for Blind Cross-Site Scripting.
Robin Kirchner Jonas Möller Marius Musch David Klein Konrad Rieck Martin Johns
2024
conf/uss
SSRF vs. Developers: A Study of SSRF-Defenses in PHP Applications.
Malte Wessels Simon Koch Giancarlo Pellegrino Martin Johns
2024
conf/nspw
Don't Patch the Researcher, Patch the Game: A Systematic Approach for Responsible Research via Federated Ethics Boards.
Alexandra Dirksen Sebastian Giessler Hendrik Erz Martin Johns Tobias Fiebig
2024
conf/sp
Parse Me, Baby, One More Time: Bypassing HTML Sanitizer via Parsing Differentials.
David Klein Martin Johns
2023
conf/ccs
General Data Protection Runtime: Enforcing Transparent GDPR Compliance for Existing Applications.
David Klein Benny Rolle Thomas Barber Manuel Karl Martin Johns
2023
conf/ccs
Poster: The Risk of Insufficient Isolation of Database Transactions in Web Applications.
Simon Koch Malte Wessels David Klein Martin Johns
2023
conf/uss
The OK Is Not Enough: A Large Scale Study of Consent Dialogs in Smartphone Applications.
Simon Koch Benjamin Altpeter Martin Johns
2023
conf/ndss
FUZZILLI: Fuzzing for JavaScript JIT Compiler Vulnerabilities.
Samuel Groß Simon Koch Lukas Bernhard Thorsten Holz Martin Johns
2022
journals/popets
Keeping Privacy Labels Honest.
Simon Koch Malte Wessels Benjamin Altpeter Madita Olvermann Martin Johns
2022
conf/eurosp
Hand Sanitizers in the Wild: A Large-scale Study of Custom JavaScript Sanitizer Functions.
David Klein Thomas Barber Souphiane Bensalim Ben Stock Martin Johns
2022
conf/asiaccs
Server-Side Browsers: Exploring the Web's Hidden Attack Surface.
Marius Musch Robin Kirchner Max Boll Martin Johns
2022
conf/acsac
Accept All Exploits: Exploring the Security Impact of Cookie Banners.
David Klein Marius Musch Thomas Barber Moritz Kopmann Martin Johns
2021
journals/popets
LogPicker: Strengthening Certificate Transparency Against Covert Adversaries.
Alexandra Dirksen David Klein Robert Michael Tilman Stehr Konrad Rieck Martin Johns
2021
conf/uss
U Can't Debug This: Detecting JavaScript Anti-Debugging Techniques in the Wild.
Marius Musch Martin Johns
2021
conf/ndss
Who's Hosting the Block Party? Studying Third-Party Blockage of CSP and SRI.
Marius Steffens Marius Musch Martin Johns Ben Stock
2020
conf/uss
Adversarial Preprocessing: Understanding and Preventing Image-Scaling Attacks in Machine Learning.
Erwin Quiring David Klein Daniel Arp Martin Johns Konrad Rieck
2020
conf/ccsw-ws
Towards Enabling Secure Web-Based Cloud Services using Client-Side Encryption.
Martin Johns Alexandra Dirksen
2019
conf/ccs
ScriptProtect: Mitigating Unsafe Third-Party JavaScript Practices.
Marius Musch Marius Steffens Sebastian Roth Ben Stock Martin Johns
2019
conf/ndss
Don't Trust The Locals: Investigating the Prevalence of Persistent Client-Side Cross-Site Scripting in the Wild.
Marius Steffens Christian Rossow Martin Johns Ben Stock
2017
conf/ccs
Deemon: Detecting CSRF with Dynamic Analysis and Property Graphs.
Giancarlo Pellegrino Martin Johns Simon Koch Michael Backes Christian Rossow
2017
conf/ccs
Code-Reuse Attacks for the Web: Breaking Cross-Site Scripting Mitigations via Script Gadgets.
Sebastian Lekies Krzysztof Kotowicz Samuel Groß Eduardo A. Vela Nava Martin Johns
2017
conf/uss
How the Web Tangled Itself: Uncovering the History of Client-Side Web (In)Security.
Ben Stock Martin Johns Marius Steffens Michael Backes
2016
conf/ccs
POSTER: Mapping the Landscape of Large-Scale Vulnerability Notifications.
Ben Stock Giancarlo Pellegrino Christian Rossow Martin Johns Michael Backes
2016
conf/uss
Hey, You Have a Problem: On the Feasibility of Large-Scale Web Vulnerability Notification.
Ben Stock Giancarlo Pellegrino Christian Rossow Martin Johns Michael Backes
2015
conf/ccs
From Facepalm to Brain Bender: Exploring Client-Side Cross-Site Scripting.
Ben Stock Stephan Pfistner Bernd Kaiser Sebastian Lekies Martin Johns
2015
conf/uss
The Unexpected Dangers of Dynamic JavaScript.
Sebastian Lekies Ben Stock Martin Wentzel Martin Johns
2014
journals/istr
Script-templates for the Content Security Policy.
Martin Johns
2014
conf/ccs
Protecting users against XSS-based password manager abuse.
Ben Stock Martin Johns
2014
conf/uss
Precise Client-side Protection against DOM-based Cross-Site Scripting.
Ben Stock Sebastian Lekies Tobias Mueller Patrick Spiegel Martin Johns
2014
conf/sec
A Trusted UI for the Mobile Web.
Bastian Braun Johannes Köstler Joachim Posegga Martin Johns
2013
conf/ccs
25 million flows later: large-scale detection of DOM-based XSS.
Sebastian Lekies Ben Stock Martin Johns
2013
conf/uss
Eradicating DNS Rebinding with the Extended Same-origin Policy.
Martin Johns Sebastian Lekies Ben Stock
2012
conf/acsac
BetterAuth: web authentication revisited.
Martin Johns Sebastian Lekies Bastian Braun Benjamin Flesch
2011
conf/acsac
Smart metering de-pseudonymization.
Marek Jawurek Martin Johns Konrad Rieck
2008
conf/acsac
XSSDS: Server-Side Detection of Cross-Site Scripting Attacks.
Martin Johns Björn Engelmann Joachim Posegga
2006
conf/esorics
SessionSafe: Implementing XSS Immune Session Handling.
Martin Johns

Coauthors

Alena Naiakshina (1)
Alexandra Dirksen (4)
Ángel Cuevas Rumín (1)
Anne Paschke (1)
Bastian Braun (2)
Ben Stock (13)
Benjamin Altpeter (2)
Benjamin Flesch (1)
Benny Rolle (1)
Bernd Kaiser (1)
Björn Engelmann (1)
Christian Rossow (4)
Daniel Arp (1)
Daniel Klischies (1)
Daniele Antonioli (1)
David Klein (14)
Eduardo A. Vela Nava (1)
Erwin Quiring (1)
Felix Kalinowski (1)
Giancarlo Pellegrino (4)
Hendrik Erz (1)
Jan Drescher (1)
Jo Van Bulck (1)
Joachim Posegga (2)
Johannes Köstler (1)
Jonas Möller (1)
Konrad Rieck (4)
Krzysztof Kotowicz (1)
Leon Trampert (1)
Louis Bettels (1)
Luca Compagna (1)
Lukas Bernhard (1)
Lukas Gerlach (1)
Lukas Hock (1)
Madita Olvermann (1)
Malte Wessels (6)
Manuel Karl (2)
Marek Jawurek (1)
Marius Musch (6)
Marius Steffens (4)
Mark de Reuver (1)
Martin Degeling (1)
Martin Johns (44)
Martin Wentzel (1)
Mathy Vanhoef (1)
Max Boll (1)
Michael Backes (4)
Michael Schwarz (1)
Miguel Bermejo (1)
Moritz Kopmann (1)
Moritz Schloegel (1)
Noah Kamangar (1)
Patrick Spiegel (1)
Raphael Serafini (1)
Robert Michael (1)
Robin Kirchner (4)
Rubén Cuevas Rumín (1)
Samuel Groß (2)
Sandy Hong (1)
Sebastian Giessler (1)
Sebastian Lekies (7)
Sebastian Roth (1)
Simon Koch (10)
Soumaya Boussaha (1)
Souphiane Bensalim (1)
Stefan Albert Horstmann (1)
Stephan Pfistner (1)
Thomas Barber (4)
Thorsten Holz (2)
Tilman Stehr (1)
Tobias Fiebig (2)
Tobias Mueller (1)
Veelasha Moonsamy (2)
Wirawan Agahari (1)
Filters
Select all Unselect all
Years:  to