Ben Stock

According to our database, Ben Stock authored at least 45 papers between 2011 and 2023.

Collaborative distances:

• Dijkstra number of four.
• Erdős number of three.

2023

Comparing Large-Scale Privacy and Security Notifications.

Christine Utz, Matthias Michels, Martin Degeling, Ninja Marnau, Ben Stock

Proc. Priv. Enhancing Technol., July, 2023

Pareto-optimal Defenses for the Web Infrastructure: Theory and Practice.

Giorgio Di Tizio, Patrick Speicher, Milivoj Simeonovski, Michael Backes, Ben Stock, Robert Künnemann

ACM Trans. Priv. Secur., May, 2023

Extended Hell(o): A Comprehensive Large-Scale Study on Email Confidentiality and Integrity Mechanisms in the Wild.

Birk Blechschmidt, Ben Stock

Proceedings of the 32nd USENIX Security Symposium, 2023

The Leaky Web: Automated Discovery of Cross-Site Information Leaks in Browsers and the Web.

Jannis Rautenstrauch, Giancarlo Pellegrino, Ben Stock

Proceedings of the 44th IEEE Symposium on Security and Privacy, 2023

Honey, I Cached our Security Tokens Re-usage of Security Tokens in the Wild.

Leon Trampert, Ben Stock, Sebastian Roth

Proceedings of the 26th International Symposium on Research in Attacks, 2023

DiffCSP: Finding Browser Bugs in Content Security Policy Enforcement through Differential Testing.

Seongil Wi, Trung Tin Nguyen, Jihwan Kim, Ben Stock, Sooel Son

Proceedings of the 30th Annual Network and Distributed System Security Symposium, 2023

You Call This Archaeology? Evaluating Web Archives for Reproducible Web Security Measurements.

Florian Hantke, Stefano Calzavara, Moritz Wilhelm, Alvise Rabitti, Ben Stock

Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security, 2023

2022

The Security Lottery: Measuring Client-Side Web Security Inconsistencies.

Sebastian Roth, Stefano Calzavara, Moritz Wilhelm, Alvise Rabitti, Ben Stock

Proceedings of the 31st USENIX Security Symposium, 2022

To hash or not to hash: A security assessment of CSP's unsafe-hashes expression.

Peter Stolz, Sebastian Roth, Ben Stock

Proceedings of the 43rd IEEE Security and Privacy, 2022

HTML violations and where to find them: a longitudinal analysis of specification violations in HTML.

Florian Hantke, Ben Stock

Proceedings of the 22nd ACM Internet Measurement Conference, 2022

Hand Sanitizers in the Wild: A Large-scale Study of Custom JavaScript Sanitizer Functions.

David Klein, Thomas Barber, Souphiane Bensalim, Ben Stock, Martin Johns

Proceedings of the 7th IEEE European Symposium on Security and Privacy, 2022

Freely Given Consent?: Studying Consent Notice of Third-Party Tracking and Its Violations of GDPR in Android Apps.

Trung Tin Nguyen, Michael Backes, Ben Stock

Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security, 2022

2021

Share First, Ask Later (or Never?) Studying Violations of GDPR's Explicit Consent in Android Apps.

Trung Tin Nguyen, Michael Backes, Ninja Marnau, Ben Stock

Proceedings of the 30th USENIX Security Symposium, 2021

Who's Hosting the Block Party? Studying Third-Party Blockage of CSP and SRI.

Marius Steffens, Marius Musch, Martin Johns, Ben Stock

Proceedings of the 28th Annual Network and Distributed System Security Symposium, 2021

Reining in the Web's Inconsistencies with Site Policy.

Stefano Calzavara, Tobias Urban, Dennis Tatang, Marius Steffens, Ben Stock

Proceedings of the 28th Annual Network and Distributed System Security Symposium, 2021

12 Angry Developers - A Qualitative Study on Developers' Struggles with CSP.

Sebastian Roth, Lea Gröber, Michael Backes, Katharina Krombholz, Ben Stock

Proceedings of the CCS '21: 2021 ACM SIGSAC Conference on Computer and Communications Security, Virtual Event, Republic of Korea, November 15, 2021

DoubleX: Statically Detecting Vulnerable Data Flows in Browser Extensions at Scale.

Aurore Fass, Dolière Francis Somé, Michael Backes, Ben Stock

Proceedings of the CCS '21: 2021 ACM SIGSAC Conference on Computer and Communications Security, Virtual Event, Republic of Korea, November 15, 2021

Careful Who You Trust: Studying the Pitfalls of Cross-Origin Communication.

Gordon Meiser, Pierre Laperdrix, Ben Stock

Proceedings of the ASIA CCS '21: ACM Asia Conference on Computer and Communications Security, 2021

2020

A Tale of Two Headers: A Formal Analysis of Inconsistent Click-Jacking Protection on the Web.

Stefano Calzavara, Sebastian Roth, Alvise Rabitti, Michael Backes, Ben Stock

Proceedings of the 29th USENIX Security Symposium, 2020

Complex Security Policy? A Longitudinal Analysis of Deployed Content Security Policies.

Sebastian Roth, Timothy Barron, Stefano Calzavara, Nick Nikiforakis, Ben Stock

Proceedings of the 27th Annual Network and Distributed System Security Symposium, 2020

SecWeb 2020 Preface.

Stefano Calzavara, Ben Stock

Proceedings of the IEEE European Symposium on Security and Privacy Workshops, 2020

PMForce: Systematically Analyzing postMessage Handlers at Scale.

Marius Steffens, Ben Stock

Proceedings of the CCS '20: 2020 ACM SIGSAC Conference on Computer and Communications Security, 2020

Assessing the Impact of Script Gadgets on CSP at Scale.

Sebastian Roth, Michael Backes, Ben Stock

Proceedings of the ASIA CCS '20: The 15th ACM Asia Conference on Computer and Communications Security, 2020

2019

Don't Trust The Locals: Investigating the Prevalence of Persistent Client-Side Cross-Site Scripting in the Wild.

Marius Steffens, Christian Rossow, Martin Johns, Ben Stock

Proceedings of the 26th Annual Network and Distributed System Security Symposium, 2019

ScriptProtect: Mitigating Unsafe Third-Party JavaScript Practices.

Marius Musch, Marius Steffens, Sebastian Roth, Ben Stock, Martin Johns

Proceedings of the 2019 ACM Asia Conference on Computer and Communications Security, 2019

HideNoSeek: Camouflaging Malicious JavaScript in Benign ASTs.

Aurore Fass, Michael Backes, Ben Stock

Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security, 2019

JStap: a static pre-filter for malicious JavaScript detection.

Aurore Fass, Michael Backes, Ben Stock

Proceedings of the 35th Annual Computer Security Applications Conference, 2019

2018

Didn't You Hear Me? - Towards More Successful Web Vulnerability Notifications.

Ben Stock, Giancarlo Pellegrino, Frank Li, Michael Backes, Christian Rossow

Proceedings of the 25th Annual Network and Distributed System Security Symposium, 2018

JaSt: Fully Syntactic Detection of Malicious (Obfuscated) JavaScript.

Aurore Fass, Robert P. Krawczyk, Michael Backes, Ben Stock

Proceedings of the Detection of Intrusions and Malware, and Vulnerability Assessment, 2018

2017

How the Web Tangled Itself: Uncovering the History of Client-Side Web (In)Security.

Ben Stock, Martin Johns, Marius Steffens, Michael Backes

Proceedings of the 26th USENIX Security Symposium, 2017

Efficient and Flexible Discovery of PHP Application Vulnerabilities.

Michael Backes, Konrad Rieck, Malte Skoruppa, Ben Stock, Fabian Yamaguchi

Proceedings of the 2017 IEEE European Symposium on Security and Privacy, 2017

2016

Client-Side XSS in Theorie und Praxis.

Ben Stock, Martin Johns

Datenschutz und Datensicherheit, 2016

Hey, You Have a Problem: On the Feasibility of Large-Scale Web Vulnerability Notification.

Ben Stock, Giancarlo Pellegrino, Christian Rossow, Martin Johns, Michael Backes

Proceedings of the 25th USENIX Security Symposium, 2016

On the Feasibility of TTL-Based Filtering for DRDoS Mitigation.

Michael Backes, Thorsten Holz, Christian Rossow, Teemu Rytilahti, Milivoj Simeonovski, Ben Stock

Proceedings of the Research in Attacks, Intrusions, and Defenses, 2016

Kizzle: A Signature Compiler for Detecting Exploit Kits.

Ben Stock, Benjamin Livshits, Benjamin G. Zorn

Proceedings of the 46th Annual IEEE/IFIP International Conference on Dependable Systems and Networks, 2016

POSTER: Mapping the Landscape of Large-Scale Vulnerability Notifications.

Ben Stock, Giancarlo Pellegrino, Christian Rossow, Martin Johns, Michael Backes

Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security, 2016

2015

Untangling the Web of Client-Side Cross-Site Scripting.

Benjamin Stock

PhD thesis, 2015

The Unexpected Dangers of Dynamic JavaScript.

Sebastian Lekies, Ben Stock, Martin Wentzel, Martin Johns

Proceedings of the 24th USENIX Security Symposium, 2015

From Facepalm to Brain Bender: Exploring Client-Side Cross-Site Scripting.

Ben Stock, Stephan Pfistner, Bernd Kaiser, Sebastian Lekies, Martin Johns

Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security, 2015

2014

Precise Client-side Protection against DOM-based Cross-Site Scripting.

Ben Stock, Sebastian Lekies, Tobias Mueller, Patrick Spiegel, Martin Johns

Proceedings of the 23rd USENIX Security Symposium, San Diego, CA, USA, August 20-22, 2014., 2014

DOM-basiertes Cross-Site Scripting im Web: Reise in ein unerforschtes Land.

Ben Stock, Sebastian Lekies, Martin Johns

Proceedings of the Sicherheit 2014: Sicherheit, 2014

Protecting users against XSS-based password manager abuse.

Ben Stock, Martin Johns

Proceedings of the 9th ACM Symposium on Information, Computer and Communications Security, 2014

2013

Eradicating DNS Rebinding with the Extended Same-origin Policy.

Martin Johns, Sebastian Lekies, Ben Stock

Proceedings of the 22th USENIX Security Symposium, Washington, DC, USA, August 14-16, 2013, 2013

25 million flows later: large-scale detection of DOM-based XSS.

Sebastian Lekies, Ben Stock, Martin Johns

Proceedings of the 2013 ACM SIGSAC Conference on Computer and Communications Security, 2013

2011

Exploring the Landscape of Cybercrime.

Zinaida Benenson, Andreas Dewald, Hans-Georg Eßer, Felix C. Freiling, Tilo Müller, Christian Moch, Stefan Vömel, Sebastian Schinzel, Michael Spreitzenbarth, Ben Stock, Johannes Stüttgen

Proceedings of the First SysSec Workshop 2011, 2011