A Stitch in Time: Supporting Android Developers in WritingSecure Code. - Duc Cuong Nguyen 001; Dominik Wermke; Yasemin Acar; Michael Backes 001; Charles Weir; Sascha Fahl (CCS, 2017)

Developers Need Support, Too: A Survey of Security Advice for Software Developers. - Yasemin Acar; Christian Stransky; Dominik Wermke; Charles Weir; Michelle L. Mazurek; Sascha Fahl (SecDev, 2017)

Security Developer Studies with GitHub Users: Exploring a Convenience Sample. - Yasemin Acar; Christian Stransky; Dominik Wermke; Michelle L. Mazurek; Sascha Fahl (SOUPS, 2017)

Lessons Learned from Using an Online Platform to Conduct Large-Scale, Online Controlled Security Experiments with Software Developers. - Christian Stransky; Yasemin Acar; Duc Cuong Nguyen 001; Dominik Wermke; Doowon Kim; Elissa M. Redmiles; Michael Backes 001; Simson L. Garfinkel; Michelle L. Mazurek; Sascha Fahl (CSET @ USENIX Security Symposium, 2017)

A Large Scale Investigation of Obfuscation Use in Google Play. - Dominik Wermke; Nicolas Huaman; Yasemin Acar; Bradley Reaves; Patrick Traynor; Sascha Fahl (ACSAC, 2018)

Developers Deserve Security Warnings, Too: On the Effect of Integrated Security Advice on Cryptographic API Misuse. - Peter Leo Gorski; Luigi Lo Iacono; Dominik Wermke; Christian Stransky; Sebastian Möller 001; Yasemin Acar; Sascha Fahl (SOUPS @ USENIX Security Symposium, 2018)

Cloudy with a Chance of Misconceptions: Exploring Users' Perceptions and Expectations of Security and Privacy in Cloud Office Suites. - Dominik Wermke; Nicolas Huaman; Christian Stransky; Niklas Busch; Yasemin Acar; Sascha Fahl (SOUPS @ USENIX Security Symposium, 2020)

Never ever or no matter what: Investigating Adoption Intentions and Misconceptions about the Corona-Warn-App in Germany. - Maximilian Häring; Eva Gerlitz; Christian Tiefenau; Matthew Smith 001; Dominik Wermke; Sascha Fahl; Yasemin Acar (SOUPS @ USENIX Security Symposium, 2021)

On the Limited Impact of Visualizing Encryption: Perceptions of E2E Messaging Security. - Christian Stransky; Dominik Wermke; Johanna Schrader; Nicolas Huaman; Yasemin Acar; Anna Lena Fehlhaber; Miranda Wei; Blase Ur; Sascha Fahl (SOUPS @ USENIX Security Symposium, 2021)

A Large-Scale Interview Study on Information Security in and Attacks against Small and Medium-sized Enterprises. - Nicolas Huaman; Bennet von Skarczinski; Christian Stransky; Dominik Wermke; Yasemin Acar; Arne Dreißigacker; Sascha Fahl (USENIX Security Symposium, 2021)

If You Can't Get Them to the Lab: Evaluating a Virtual Study Environment with Security Information Workers. - Nicolas Huaman; Alexander Krause; Dominik Wermke; Jan H. Klemmer; Christian Stransky; Yasemin Acar; Sascha Fahl (SOUPS @ USENIX Security Symposium, 2022)

Committed to Trust: A Qualitative Study on Security & Trust in Open Source Software Projects. - Dominik Wermke; Noah Wöhler; Jan H. Klemmer; Marcel Fourné; Yasemin Acar; Sascha Fahl (SP, 2022)

"Please help share!": Security and Privacy Advice on Twitter during the 2022 Russian Invasion of Ukraine. - Juliane Schmüser; Noah Wöhler; Harshini Sri Ramulu; Christian Stransky; Dominik Wermke; Sascha Fahl; Yasemin Acar (CoRR, 2022)

Committed by Accident: Studying Prevention and Remediation Strategies Against Secret Leakage in Source Code Repositories. - Alexander Krause; Jan H. Klemmer; Nicolas Huaman; Dominik Wermke; Yasemin Acar; Sascha Fahl (CoRR, 2022)

It's like flossing your teeth: On the Importance and Challenges of Reproducible Builds for Software Supply Chain Security. - Marcel Fourné; Dominik Wermke; William Enck; Sascha Fahl; Yasemin Acar (SP, 2023)

Pushed by Accident: A Mixed-Methods Study on Strategies of Handling Secret Information in Source Code Repositories. - Alexander Krause; Jan H. Klemmer; Nicolas Huaman; Dominik Wermke; Yasemin Acar; Sascha Fahl (USENIX Security Symposium, 2023)

A Viewpoint on Human Factors in Software Supply Chain Security: A Research Agenda. - Marcel Fourné; Dominik Wermke; Sascha Fahl; Yasemin Acar (IEEE Secur. Priv., 2023)

Security considerations in the open source software ecosystem. - Dominik Wermke (2023)

Analyzing Security and Privacy Advice During the 2022 Russian Invasion of Ukraine on Twitter. - Juliane Schmüser; Harshini Sri Ramulu; Noah Wöhler; Christian Stransky; Felix Bensmann; Dimitar Dimitrov 002; Sebastian Schellhammer; Dominik Wermke; Stefan Dietze; Yasemin Acar; Sascha Fahl (CHI, 2024)

Decomposing and Measuring Trust in Open-Source Software Supply Chains. - Lina Boughton; Courtney Miller; Yasemin Acar; Dominik Wermke; Christian Kästner (NIER@ICSE, 2024)

Developers' Approaches to Software Supply Chain Security: An Interview Study. - Rami Sammak; Anna Lena Rotthaler; Harshini Sri Ramulu; Dominik Wermke; Yasemin Acar (SCORED@CCS, 2024)

Always Contribute Back: A Qualitative Study on Security Challenges of the Open Source Supply Chain. - Dominik Wermke; Jan H. Klemmer; Noah Wöhler; Juliane Schmüser; Harshini Sri Ramulu; Yasemin Acar; Sascha Fahl (Software Engineering, 2024)

Committed to Trust: A Qualitative Study on Security and Trust in Open Source Software Projects. - Dominik Wermke; Noah Wöhler; Jan H. Klemmer; Marcel Fourné; Yasemin Acar; Sascha Fahl (Software Engineering, 2024)

Security and Privacy Software Creators' Perspectives on Unintended Consequences. - Harshini Sri Ramulu; Helen Schmitt; Dominik Wermke; Yasemin Acar (USENIX Security Symposium, 2024)

S3C2 Summit 2024-03: Industry Secure Supply Chain Summit. - Greg Tystahl; Yasemin Acar; Michel Cukier; William Enck; Christian Kästner; Alexandros Kapravelos; Dominik Wermke; Laurie A. Williams (CoRR, 2024)

Less Is More: A Mixed-Methods Study on Security-Sensitive API Calls in Java for Better Dependency Selection. - Imranur Rahman; Ranidya Paramitha; Henrik Plate; Dominik Wermke; Laurie A. Williams (CoRR, 2024)

S3C2 Summit 2023-11: Industry Secure Supply Chain Summit. - Nusrat Zahan; Yasemin Acar; Michel Cukier; William Enck; Christian Kästner; Alexandros Kapravelos; Dominik Wermke; Laurie A. Williams (CoRR, 2024)

Attributing Open-Source Contributions is Critical but Difficult: A Systematic Analysis of GitHub Practices and Their Impact on Software Supply Chain Security. - Jan-Ulrich Holtgrave; Kay Friedrich; Fabian Fischer 009; Nicolas Huaman; Niklas Busch; Jan H. Klemmer; Marcel Fourné; Oliver Wiese; Dominik Wermke; Sascha Fahl (NDSS, 2025)

S3C2 Summit 2024-08: Government Secure Supply Chain Summit. - Courtney Miller; William Enck; Yasemin Acar; Michel Cukier; Alexandros Kapravelos; Christian Kästner; Dominik Wermke; Laurie A. Williams (CoRR, 2025)

S3C2 Summit 2024-09: Industry Secure Software Supply Chain Summit. - Imranur Rahman; Yasemin Acar; Michel Cukier; William Enck; Christian Kästner; Alexandros Kapravelos; Dominik Wermke; Laurie A. Williams (CoRR, 2025)

Build It Clean: Large-Scale Detection of Code Smells in Build Scripts. - Mahzabin Tamanna; Yash Chandrani; Matthew Burrows; Brandon Wroblewski; Laurie A. Williams; Dominik Wermke (CoRR, 2025)

Research Directions in Software Supply Chain Security. - Laurie A. Williams; Giacomo Benedetti; Sivana Hamer; Ranindya Paramitha; Imranur Rahman; Mahzabin Tamanna; Greg Tystahl; Nusrat Zahan; Patrick Morrison; Yasemin Acar; Michel Cukier; Christian Kästner; et al. (ACM Trans. Softw. Eng. Methodol., 2025)