Exploring the Landscape of Cybercrime. - Zinaida Benenson; Andreas Dewald; Hans-Georg Eßer; Felix C. Freiling; Tilo Müller; Christian Moch; Stefan Vömel; Sebastian Schinzel; Michael Spreitzenbarth; Ben Stock; Johannes Stüttgen (SysSec@DIMVA, 2011)

25 million flows later: large-scale detection of DOM-based XSS. - Sebastian Lekies; Ben Stock; Martin Johns (CCS, 2013)

Eradicating DNS Rebinding with the Extended Same-origin Policy. - Martin Johns; Sebastian Lekies; Ben Stock (USENIX Security Symposium, 2013)

Protecting users against XSS-based password manager abuse. - Ben Stock; Martin Johns (AsiaCCS, 2014)

DOM-basiertes Cross-Site Scripting im Web: Reise in ein unerforschtes Land. - Ben Stock; Sebastian Lekies; Martin Johns (Sicherheit, 2014)

Precise Client-side Protection against DOM-based Cross-Site Scripting. - Ben Stock; Sebastian Lekies; Tobias Mueller; Patrick Spiegel; Martin Johns (USENIX Security Symposium, 2014)

From Facepalm to Brain Bender: Exploring Client-Side Cross-Site Scripting. - Ben Stock; Stephan Pfistner; Bernd Kaiser; Sebastian Lekies; Martin Johns (CCS, 2015)

The Unexpected Dangers of Dynamic JavaScript. - Sebastian Lekies; Ben Stock; Martin Wentzel; Martin Johns (USENIX Security Symposium, 2015)

Untangling the Web of Client-Side Cross-Site Scripting. - Benjamin Stock (2015)

POSTER: Mapping the Landscape of Large-Scale Vulnerability Notifications. - Ben Stock; Giancarlo Pellegrino; Christian Rossow; Martin Johns; Michael Backes 001 (CCS, 2016)

Kizzle: A Signature Compiler for Detecting Exploit Kits. - Ben Stock; Benjamin Livshits; Benjamin G. Zorn (DSN, 2016)

On the Feasibility of TTL-Based Filtering for DRDoS Mitigation. - Michael Backes 001; Thorsten Holz; Christian Rossow; Teemu Rytilahti; Milivoj Simeonovski; Ben Stock (RAID, 2016)

Hey, You Have a Problem: On the Feasibility of Large-Scale Web Vulnerability Notification. - Ben Stock; Giancarlo Pellegrino; Christian Rossow; Martin Johns; Michael Backes 001 (USENIX Security Symposium, 2016)

Client-Side XSS in Theorie und Praxis. - Ben Stock; Martin Johns (Datenschutz und Datensicherheit, 2016)

Efficient and Flexible Discovery of PHP Application Vulnerabilities. - Michael Backes 001; Konrad Rieck; Malte Skoruppa; Ben Stock; Fabian Yamaguchi (EuroS&P, 2017)

How the Web Tangled Itself: Uncovering the History of Client-Side Web (In)Security. - Ben Stock; Martin Johns; Marius Steffens; Michael Backes 001 (USENIX Security Symposium, 2017)

JaSt: Fully Syntactic Detection of Malicious (Obfuscated) JavaScript. - Aurore Fass; Robert P. Krawczyk; Michael Backes 001; Ben Stock (DIMVA, 2018)

Didn't You Hear Me? - Towards More Successful Web Vulnerability Notifications. - Ben Stock; Giancarlo Pellegrino; Frank Li 001; Michael Backes 001; Christian Rossow (NDSS, 2018)

JStap: a static pre-filter for malicious JavaScript detection. - Aurore Fass; Michael Backes 001; Ben Stock (ACSAC, 2019)

HideNoSeek: Camouflaging Malicious JavaScript in Benign ASTs. - Aurore Fass; Michael Backes 001; Ben Stock (CCS, 2019)

ScriptProtect: Mitigating Unsafe Third-Party JavaScript Practices. - Marius Musch; Marius Steffens; Sebastian Roth; Ben Stock; Martin Johns (AsiaCCS, 2019)

Don't Trust The Locals: Investigating the Prevalence of Persistent Client-Side Cross-Site Scripting in the Wild. - Marius Steffens; Christian Rossow; Martin Johns; Ben Stock (NDSS, 2019)

Assessing the Impact of Script Gadgets on CSP at Scale. - Sebastian Roth; Michael Backes 001; Ben Stock (AsiaCCS, 2020)

PMForce: Systematically Analyzing postMessage Handlers at Scale. - Marius Steffens; Ben Stock (CCS, 2020)

SecWeb 2020 Preface. - Stefano Calzavara; Ben Stock (EuroS&P Workshops, 2020)

Complex Security Policy? A Longitudinal Analysis of Deployed Content Security Policies. - Sebastian Roth; Timothy Barron; Stefano Calzavara; Nick Nikiforakis; Ben Stock (NDSS, 2020)

A Tale of Two Headers: A Formal Analysis of Inconsistent Click-Jacking Protection on the Web. - Stefano Calzavara; Sebastian Roth; Alvise Rabitti; Michael Backes 001; Ben Stock (USENIX Security Symposium, 2020)

Careful Who You Trust: Studying the Pitfalls of Cross-Origin Communication. - Gordon Meiser; Pierre Laperdrix; Ben Stock (AsiaCCS, 2021)

DoubleX: Statically Detecting Vulnerable Data Flows in Browser Extensions at Scale. - Aurore Fass; Dolière Francis Somé; Michael Backes 001; Ben Stock (CCS, 2021)

12 Angry Developers - A Qualitative Study on Developers' Struggles with CSP. - Sebastian Roth; Lea Gröber; Michael Backes 001; Katharina Krombholz; Ben Stock (CCS, 2021)

Reining in the Web's Inconsistencies with Site Policy. - Stefano Calzavara; Tobias Urban; Dennis Tatang; Marius Steffens; Ben Stock (NDSS, 2021)

Who's Hosting the Block Party? Studying Third-Party Blockage of CSP and SRI. - Marius Steffens; Marius Musch; Martin Johns; Ben Stock (NDSS, 2021)

Share First, Ask Later (or Never?) Studying Violations of GDPR's Explicit Consent in Android Apps. - Trung Tin Nguyen; Michael Backes 001; Ninja Marnau; Ben Stock (USENIX Security Symposium, 2021)

Freely Given Consent?: Studying Consent Notice of Third-Party Tracking and Its Violations of GDPR in Android Apps. - Trung Tin Nguyen; Michael Backes 001; Ben Stock (CCS, 2022)

Hand Sanitizers in the Wild: A Large-scale Study of Custom JavaScript Sanitizer Functions. - David Klein 001; Thomas Barber; Souphiane Bensalim; Ben Stock; Martin Johns (EuroS&P, 2022)

HTML violations and where to find them: a longitudinal analysis of specification violations in HTML. - Florian Hantke; Ben Stock (IMC, 2022)

To hash or not to hash: A security assessment of CSP's unsafe-hashes expression. - Peter Stolz; Sebastian Roth; Ben Stock (SP (Workshops), 2022)

The Security Lottery: Measuring Client-Side Web Security Inconsistencies. - Sebastian Roth; Stefano Calzavara; Moritz Wilhelm; Alvise Rabitti; Ben Stock (USENIX Security Symposium, 2022)

You Call This Archaeology? Evaluating Web Archives for Reproducible Web Security Measurements. - Florian Hantke; Stefano Calzavara; Moritz Wilhelm; Alvise Rabitti; Ben Stock (CCS, 2023)

DiffCSP: Finding Browser Bugs in Content Security Policy Enforcement through Differential Testing. - Seongil Wi; Trung Tin Nguyen; Jihwan Kim; Ben Stock; Sooel Son (NDSS, 2023)

Honey, I Cached our Security Tokens Re-usage of Security Tokens in the Wild. - Leon Trampert; Ben Stock; Sebastian Roth (RAID, 2023)

The Leaky Web: Automated Discovery of Cross-Site Information Leaks in Browsers and the Web. - Jannis Rautenstrauch; Giancarlo Pellegrino; Ben Stock (SP, 2023)

Extended Hell(o): A Comprehensive Large-Scale Study on Email Confidentiality and Integrity Mechanisms in the Wild. - Birk Blechschmidt; Ben Stock (USENIX Security Symposium, 2023)

Pareto-optimal Defenses for the Web Infrastructure: Theory and Practice. - Giorgio Di Tizio; Patrick Speicher; Milivoj Simeonovski; Michael Backes 001; Ben Stock; Robert Künnemann (ACM Trans. Priv. Secur., 2023)

Comparing Large-Scale Privacy and Security Notifications. - Christine Utz; Matthias Michels; Martin Degeling; Ninja Marnau; Ben Stock (Proc. Priv. Enhancing Technol., 2023)

Who's Breaking the Rules? Studying Conformance to the HTTP Specifications and its Security Impact. - Jannis Rautenstrauch; Ben Stock (AsiaCCS, 2024)

Peeking through the window: Fingerprinting Browser Extensions through Page-Visible Execution Traces and Interactions. - Shubham Agarwal 006; Aurore Fass; Ben Stock (CCS, 2024)

Where Are the Red Lines? Towards Ethical Server-Side Scans in Security and Privacy Research. - Florian Hantke; Sebastian Roth; Rafael Mrowczynski; Christine Utz; Ben Stock (SP, 2024)

To Auth or Not To Auth? A Comparative Analysis of the Pre- and Post-Login Security Landscape. - Jannis Rautenstrauch; Metodi Mitkov; Thomas Helbrecht; Lorenz Hetterich; Ben Stock (SP, 2024)

Trust Me If You Can - How Usable Is Trusted Types In Practice? - Sebastian Roth; Lea Gröber; Philipp Baus; Katharina Krombholz; Ben Stock (USENIX Security Symposium, 2024)

From Blocking to Breaking: Evaluating the Impact of Adblockers on Web Usability. - Ritik Roongta; Mitchell Zhou; Ben Stock; Rachel Greenstadt (CoRR, 2024)

Information flow control for comparative privacy analyses. - Zubair Ahmad; Stefano Calzavara; Samuele Casarin; Ben Stock (Int. J. Inf. Sec., 2024)

The (Un)usual Suspects - Studying Reasons for Lacking Updates in WordPress. - Maria Hellenthal; Lena Gotsche; Rafael Mrowczynski; Sarah Kugel; Michael Schilling 001; Ben Stock (NDSS, 2025)

403 Forbidden? Ethically Evaluating Broken Access Control in the Wild. - Saiid El Hajj Chehade; Florian Hantke; Ben Stock (SP, 2025)

Web Execution Bundles: Reproducible, Accurate, and Archivable Web Measurements. - Florian Hantke; Peter Snyder; Hamed Haddadi; Ben Stock (CoRR, 2025)