XSpRES - Robust and Effective XML Signatures for Web Services. - Christian Mainka; Meiko Jensen; Luigi Lo Iacono; Jörg Schwenk (CLOSER, 2012)

Making XML Signatures Immune to XML Signature Wrapping Attacks. - Christian Mainka; Meiko Jensen; Luigi Lo Iacono; Jörg Schwenk (CLOSER (Selected Papers), 2012)

Penetration Testing Tool for Web Services Security. - Christian Mainka; Juraj Somorovsky; Jörg Schwenk (SERVICES, 2012)

XML Signature Wrapping Angriffe wirksam unterbinden. - Meiko Jensen; Holger Junker; Luigi Lo Iacono; Christian Mainka; Jörg Schwenk (Datenschutz und Datensicherheit, 2012)

A New Approach towards DoS Penetration Testing on Web Services. - Andreas Falkenberg; Christian Mainka; Juraj Somorovsky; Jörg Schwenk (ICWS, 2013)

A new approach for WS-Policy Intersection using Partial Ordered Sets. - Abeer Elsafie; Christian Mainka; Jörg Schwenk (ZEUS, 2013)

Your Software at my Service: Security Analysis of SaaS Single Sign-On Solutions in the Cloud. - Christian Mainka; Vladislav Mladenov; Florian Feldmann; Julian Krautwald; Jörg Schwenk (CCSW, 2014)

How Secure is TextSecure? - Tilman Frosch; Christian Mainka; Christoph Bader; Florian Bergsma; Jörg Schwenk; Thorsten Holz (IACR Cryptol. ePrint Arch., 2014)

AdIDoS - Adaptive and Intelligent Fully-Automatic Detection of Denial-of-Service Weaknesses in Web Services. - Christian Altmeier; Christian Mainka; Juraj Somorovsky; Jörg Schwenk (DPM/QASA@ESORICS, 2015)

Automatic recognition, processing and attacking of single sign-on protocols with burp suite. - Christian Mainka; Vladislav Mladenov; Tim Guenther; Jörg Schwenk (Open Identity Summit, 2015)

Not so Smart: On Smart TV Apps. - Marcus Niemietz; Juraj Somorovsky; Christian Mainka; Jörg Schwenk (SIoT, 2015)

How to Break XML Encryption - Automatically. - Dennis Kupser; Christian Mainka; Jörg Schwenk; Juraj Somorovsky (WOOT, 2015)

On the security of modern Single Sign-On Protocols: OpenID Connect 1.0. - Vladislav Mladenov; Christian Mainka; Julian Krautwald; Florian Feldmann; Jörg Schwenk (CoRR, 2015)

Your Cloud in My Company: Modern Rights Management Services Revisited. - Martin Grothe; Christian Mainka; Paul Rösler; Johanna Jupke; Jan Kaiser; Jörg Schwenk (ARES, 2016)

Do Not Trust Me: Using Malicious IdPs for Analyzing and Attacking Single Sign-on. - Christian Mainka; Vladislav Mladenov; Jörg Schwenk (EuroS&P, 2016)

How to Break Microsoft Rights Management Services. - Martin Grothe; Christian Mainka; Paul Rösler; Jörg Schwenk (WOOT, 2016)

SoK: XML Parser Vulnerabilities. - Christopher Späth; Christian Mainka; Vladislav Mladenov; Jörg Schwenk (WOOT, 2016)

SECRET: On the Feasibility of a Secure, Efficient, and Collaborative Real-Time Web Editor. - Dennis Felsch; Christian Mainka; Vladislav Mladenov; Jörg Schwenk (AsiaCCS, 2017)

SoK: Single Sign-On Security - An Evaluation of OpenID Connect. - Christian Mainka; Vladislav Mladenov; Jörg Schwenk; Tobias Wich (EuroS&P, 2017)

Same-Origin Policy: Evaluation in Modern Browsers. - Jörg Schwenk; Marcus Niemietz; Christian Mainka (USENIX Security Symposium, 2017)

More is Less: How Group Chats Weaken the Security of Instant Messengers Signal, WhatsApp, and Threema. - Paul Rösler; Christian Mainka; Jörg Schwenk (IACR Cryptol. ePrint Arch., 2017)

On message-level security. - Christian Mainka (2017)

More is Less: On the End-to-End Security of Group Chats in Signal, WhatsApp, and Threema. - Paul Rösler; Christian Mainka; Jörg Schwenk (EuroS&P, 2018)

Practical Decryption exFiltration: Breaking PDF Encryption. - Jens Müller 007; Fabian Ising; Vladislav Mladenov; Christian Mainka; Sebastian Schinzel; Jörg Schwenk (CCS, 2019)

1 Trillion Dollar Refund: How To Spoof PDF Signatures. - Vladislav Mladenov; Christian Mainka; Karsten Meyer zu Selhausen; Martin Grothe; Jörg Schwenk (CCS, 2019)

Office Document Security and Privacy. - Jens Müller 007; Fabian Ising; Christian Mainka; Vladislav Mladenov; Sebastian Schinzel; Jörg Schwenk (WOOT @ USENIX Security Symposium, 2020)

XSinator.com: From a Formal Model to the Automatic Evaluation of Cross-Site Leaks in Web Browsers. - Lukas Knittel; Christian Mainka; Marcus Niemietz; Dominik Trevor Noß; Jörg Schwenk (CCS, 2021)

Processing Dangerous Paths - On Security and Privacy of the Portable Document Format. - Jens Müller 007; Dominik Noss; Christian Mainka; Vladislav Mladenov; Jörg Schwenk (NDSS, 2021)

Shadow Attacks: Hiding and Replacing Content in Signed PDFs. - Christian Mainka; Vladislav Mladenov; Simon Rohlmann (NDSS, 2021)

Breaking the Specification: PDF Certification. - Simon Rohlmann; Vladislav Mladenov; Christian Mainka; Jörg Schwenk (SP, 2021)

Over 100 Bugs in a Row: Security Analysis of the Top-Rated Joomla Extensions. - Marcus Niemietz; Mario Korth; Christian Mainka; Juraj Somorovsky (CoRR, 2021)

DISTINCT: Identity Theft using In-Browser Communications in Dual-Window Single Sign-On. - Louis Jannett; Vladislav Mladenov; Christian Mainka; Jörg Schwenk (CCS, 2022)

Oops... Code Execution and Content Spoofing: The First Comprehensive Analysis of OpenDocument Signatures. - Simon Rohlmann; Christian Mainka; Vladislav Mladenov; Jörg Schwenk (USENIX Security Symposium, 2022)

Finding All Cross-Site Needles in the DOM Stack: A Comprehensive Methodology for the Automatic XS-Leak Detection in Web Browsers. - Dominik Trevor Noß; Lukas Knittel; Christian Mainka; Marcus Niemietz; Jörg Schwenk (CCS, 2023)

Every Signature is Broken: On the Insecurity of Microsoft Office's OOXML Signatures. - Simon Rohlmann; Vladislav Mladenov; Christian Mainka; Daniel Hirschberger; Jörg Schwenk (USENIX Security Symposium, 2023)

SSO-Monitor: Fully-Automatic Large-Scale Landscape, Security, and Privacy Analyses of Single Sign-On in the Wild. - Maximilian Westers; Tobias Wich; Louis Jannett; Vladislav Mladenov; Christian Mainka; Andreas Mayer (CoRR, 2023)

Die Financial-grade API (FAPI). - Johanna Schenkel; Christian Mainka (Datenschutz und Datensicherheit (dud), 2023)

SoK: SSO-MONITOR - The Current State and Future Research Directions in Single Sign-on Security Measurements. - Louis Jannett; Christian Mainka; Maximilian Westers; Andreas Mayer; Tobias Wich; Vladislav Mladenov (EuroS&P, 2024)

"Only as Strong as the Weakest Link": On the Security of Brokered Single Sign-On on the Web. - Tommaso Innocenti; Louis Jannett; Christian Mainka; Vladislav Mladenov; Engin Kirda (SP, 2025)