Implementing Situation Awareness for Car-to-X Applications Using Domain Specific Languages. - Jörg Schäfer; David Klein 001 (VTC Spring, 2013)

Deploying Contextual Computing in a Campus Setting. - Fabio Aversente; David Klein 001; Schekeb Sultani; Dmitri Vronski; Jörg Schäfer (INC, 2016)

Adversarial Preprocessing: Understanding and Preventing Image-Scaling Attacks in Machine Learning. - Erwin Quiring; David Klein 001; Daniel Arp; Martin Johns; Konrad Rieck (USENIX Security Symposium, 2020)

Talking About My Generation: Targeted DOM-based XSS Exploit Generation using Dynamic Data Flow Analysis. - Souphiane Bensalim; David Klein 001; Thomas Barber; Martin Johns (EuroSec@EuroSys, 2021)

LogPicker: Strengthening Certificate Transparency Against Covert Adversaries. - Alexandra Dirksen; David Klein 001; Robert Michael; Tilman Stehr; Konrad Rieck; Martin Johns (Proc. Priv. Enhancing Technol., 2021)

Accept All Exploits: Exploring the Security Impact of Cookie Banners. - David Klein 001; Marius Musch; Thomas Barber; Moritz Kopmann; Martin Johns (ACSAC, 2022)

Hand Sanitizers in the Wild: A Large-scale Study of Custom JavaScript Sanitizer Functions. - David Klein 001; Thomas Barber; Souphiane Bensalim; Ben Stock; Martin Johns (EuroS&P, 2022)

General Data Protection Runtime: Enforcing Transparent GDPR Compliance for Existing Applications. - David Klein 001; Benny Rolle; Thomas Barber; Manuel Karl; Martin Johns (CCS, 2023)

Poster: The Risk of Insufficient Isolation of Database Transactions in Web Applications. - Simon Koch 001; Malte Wessels; David Klein 001; Martin Johns (CCS, 2023)

Parse Me, Baby, One More Time: Bypassing HTML Sanitizer via Parsing Differentials. - David Klein 001; Martin Johns (SP, 2024)

Dancer in the Dark: Synthesizing and Evaluating Polyglots for Blind Cross-Site Scripting. - Robin Kirchner; Jonas Möller; Marius Musch; David Klein 001; Konrad Rieck; Martin Johns (USENIX Security Symposium, 2024)

FP-tracer: Fine-grained Browser Fingerprinting Detection via Taint-tracking and Entropy-based Thresholds. - Soumaya Boussaha; Lukas Hock; Miguel Bermejo; Rubén Cuevas Rumín; Ángel Cuevas Rumín; David Klein 001; Martin Johns; Luca Compagna; Daniele Antonioli; Thomas Barber (Proc. Priv. Enhancing Technol., 2024)

A Black-Box Privacy Analysis of Messaging Service Providers' Chat Message Processing. - Robin Kirchner; Simon Koch 001; Noah Kamangar; David Klein 001; Martin Johns (Proc. Priv. Enhancing Technol., 2024)

"Sorry for Bugging you so much." Exploring Developers' Behavior Towards Privacy-Compliant Implementation. - Stefan Albert Horstmann; Sandy Hong; David Klein 001; Raphael Serafini; Martin Degeling; Martin Johns; Veelasha Moonsamy; Alena Naiakshina (SP, 2025)

Comma Separated Vulnerabilities: Detecting Formula Injection in the Wild. - Manuel Karl; Louis Bettels; Martin Johns; David Klein 001 (WOOT, 2025)

Wemby's Web: Hunting for Memory Corruption in WebAssembly. - Oussama Draissi; Tobias Cloosters; David Klein 001; Michael Rodler; Marius Musch; Martin Johns; Lucas Davi (Proc. ACM Softw. Eng., 2025)

Making Web Applications GDPR Compliant: A Comparative Evaluation of GDPR-Enforcement Frameworks. - Felix Kalinowski; David Klein 001; Martin Johns; Veelasha Moonsamy (Proc. Priv. Enhancing Technol., 2025)