Robust Combiners for Software Hardening. - Amir Herzberg; Haya Schulmann (IACR Cryptol. ePrint Arch., 2008)

Towards a Theory of White-Box Security. - Amir Herzberg; Haya Schulmann; Amitabh Saxena; Bruno Crispo (IACR Cryptol. ePrint Arch., 2008)

Stealth-MITM DoS Attacks on Secure Channels - Amir Herzberg; Haya Schulmann (CoRR, 2009)

Stealth DoS Attacks on Secure Channels. - Amir Herzberg; Haya Schulmann (NDSS, 2010)

Robust Combiner for Obfuscators. - Amir Herzberg; Haya Schulmann (IACR Cryptol. ePrint Arch., 2010)

Secure Guaranteed Computation. - Amir Herzberg; Haya Schulmann (IACR Cryptol. ePrint Arch., 2010)

Unilateral Antidotes to DNS Poisoning. - Amir Herzberg; Haya Schulmann (SecureComm, 2011)

Antidotes for DNS Poisoning by Off-Path Adversaries. - Amir Herzberg; Haya Schulmann (ARES, 2012)

Security of Patched DNS. - Amir Herzberg; Haya Schulmann (ESORICS, 2012)

Fragmentation Considered Poisonous - Amir Herzberg; Haya Schulmann (CoRR, 2012)

Unilateral Antidotes to DNS Cache Poisoning - Amir Herzberg; Haya Schulmann (CoRR, 2012)

Limiting MitM to MitE Covert-Channels. - Amir Herzberg; Haya Schulmann (ARES, 2013)

DNSSEC: Interoperability Challenges and Transition Mechanisms. - Amir Herzberg; Haya Schulmann (ARES, 2013)

Socket overloading for fun and cache-poisoning. - Amir Herzberg; Haya Schulmann (ACSAC, 2013)

Cloudoscopy: services discovery and topology mapping. - Amir Herzberg; Haya Schulmann; Johanna Ullrich; Edgar R. Weippl (CCSW, 2013)

Provenance of exposure: Identifying sources of leaked documents. - Christian S. Collberg; Aaron Gibson; Sam Martin; Nitin Shinde; Amir Herzberg; Haya Schulmann (CNS, 2013)

Fragmentation Considered Poisonous, or: One-domain-to-rule-them-all.org. - Amir Herzberg; Haya Schulmann (CNS, 2013)

DNSSEC: Security and availability challenges. - Amir Herzberg; Haya Schulmann (CNS, 2013)

Vulnerable Delegation of DNS Resolution. - Amir Herzberg; Haya Schulmann (ESORICS, 2013)

Ethical Considerations when Employing Fake Identities in OSN for Research. - Yuval Elovici; Michael Fire; Amir Herzberg; Haya Schulmann (CoRR, 2013)

Towards Adoption of DNSSEC: Availability and Security Challenges. - Amir Herzberg; Haya Schulmann (IACR Cryptol. ePrint Arch., 2013)

Oblivious and fair server-aided two-party computation. - Amir Herzberg; Haya Schulmann (Inf. Secur. Tech. Rep., 2013)

Fragmentation Considered Leaking: Port Inference for DNS Poisoning. - Haya Schulmann; Michael Waidner (ACNS, 2014)

DNS authentication as a service: preventing amplification attacks. - Amir Herzberg; Haya Schulmann (ACSAC, 2014)

Less is more: cipher-suite negotiation for DNSSEC. - Amir Herzberg; Haya Schulmann; Bruno Crispo (ACSAC, 2014)

Negotiating DNSSEC Algorithms over Legacy Proxies. - Amir Herzberg; Haya Schulmann (CANS, 2014)

POSTER: On the Resilience of DNS Infrastructure. - Haya Schulmann; Shiran Ezra (CCS, 2014)

Towards Forensic Analysis of Attacks with DNSSEC. - Haya Schulmann; Michael Waidner (IEEE Symposium on Security and Privacy Workshops, 2014)

Pretty Bad Privacy: Pitfalls of DNS Encryption. - Haya Schulmann (WPES, 2014)

DNSSEC for cyber forensics. - Haya Schulmann; Michael Waidner (EURASIP J. Inf. Secur., 2014)

Off-Path Hacking: The Illusion of Challenge-Response Authentication. - Yossi Gilad; Amir Herzberg; Haya Schulmann (IEEE Secur. Priv., 2014)

Retrofitting Security into Network Protocols: The Case of DNSSEC. - Amir Herzberg; Haya Schulmann (IEEE Internet Comput., 2014)

Ethical Considerations when Employing Fake Identities in Online Social Networks for Research. - Yuval Elovici; Michael Fire; Amir Herzberg; Haya Schulmann (Sci. Eng. Ethics, 2014)

Towards Security of Internet Naming Infrastructure. - Haya Schulmann; Michael Waidner (ESORICS (1), 2015)

Detection and Forensics of Domains Hijacking. - Andreas Borgwart; Spyros Boukoros; Haya Schulmann; Carel van Rooyen; Michael Waidner (GLOBECOM, 2015)

Cipher-Suite Negotiation for DNSSEC: Hop-by-Hop or End-to-End? - Amir Herzberg; Haya Schulmann (IEEE Internet Comput., 2015)

DNSSEC Misconfigurations in Popular Domains. - Tianxiang Dai; Haya Schulmann; Michael Waidner (CANS, 2016)

Stratum Filtering: Cloud-based Detection of Attack Sources. - Amir Herzberg; Haya Schulmann; Michael Waidner (CCSW, 2016)

NetCo: Reliable Routing With Unreliable Routers. - Anja Feldmann; Philipp Heyder; Michael Kreutzer 001; Stefan Schmid 001; Jean-Pierre Seifert; Haya Schulmann; Kashyap Thimmaraju; Michael Waidner; Jens Sieberg (DSN Workshops, 2016)

Towards Automated Measurements of Internet's Naming Infrastructure. - Andreas Borgwart; Haya Schulmann; Michael Waidner (SwSTE, 2016)

Is the Internet Ready for DNSSEC: Evaluating Pitfalls in the Naming Infrastructure. - Haya Schulmann; Michael Waidner (TMA, 2016)

Obfuscation Combiners. - Marc Fischlin; Amir Herzberg; Hod Bin Noon; Haya Schulmann (IACR Cryptol. ePrint Arch., 2016)

Are We There Yet? On RPKI's Deployment and Security. - Yossi Gilad; Avichai Cohen; Amir Herzberg; Michael Schapira; Haya Schulmann (IACR Cryptol. ePrint Arch., 2016)

POSTER: X-Ray Your DNS. - Amit Klein 001; Vladimir Kravtsov; Alon Perlmuter; Haya Schulmann; Michael Waidner (CCS, 2017)

Counting in the Dark: DNS Caches Discovery and Enumeration in the Internet. - Amit Klein 001; Haya Schulmann; Michael Waidner (DSN, 2017)

Towards Enhancing the Visual Analysis of Interdomain Routing. - Alex Ulmer; Jörn Kohlhammer; Haya Schulmann (VISIGRAPP (3: IVAPP), 2017)

Internet-wide study of DNS cache injections. - Amit Klein 001; Haya Schulmann; Michael Waidner (INFOCOM, 2017)

One Key to Sign Them All Considered Vulnerable: Evaluation of DNSSEC in the Internet. - Haya Schulmann; Michael Waidner (NSDI, 2017)

Authentication-Bypass Vulnerabilities in SOHO Routers. - Nadav Rotenberg; Haya Schulmann; Michael Waidner; Benjamin Zeltser (SIGCOMM Posters and Demos, 2017)

Domain Validation++ For MitM-Resilient PKI. - Markus Brandt; Tianxiang Dai; Amit Klein 001; Haya Schulmann; Michael Waidner (CCS, 2018)

Off-Path Attacks Against PKI. - Tianxiang Dai; Haya Schulmann; Michael Waidner (CCS, 2018)

Removing the Bottleneck for Practical 2PC. - Kris Shrishak; Haya Schulmann; Michael Waidner (CCS, 2018)

Practical Experience: Methodologies for Measuring Route Origin Validation. - Tomas Hlavacek; Amir Herzberg; Haya Schulmann; Michael Waidner (DSN, 2018)

Perfect is the Enemy of Good: Setting Realistic Goals for BGP Security. - Yossi Gilad; Tomas Hlavacek; Amir Herzberg; Michael Schapira; Haya Schulmann (HotNets, 2018)

Path MTU Discovery Considered Harmful. - Matthias Gohring; Haya Schulmann; Michael Waidner (ICDCS, 2018)

Transputation: Transport Framework for Secure Computation. - Markus Brandt; Claudio Orlandi; Kris Shrishak; Haya Schulmann (Krypto-Tag, 2019)

Internet As a Source of Randomness. - Markus Brandt; Haya Schulmann; Michael Waidner (Krypto-Tag, 2019)

Distributed Domain Validation (DDV). - Markus Brandt; Haya Schulmann; Michael Waidner (Krypto-Tag, 2019)

Optimizing Transport Layer for Secure Computation. - Markus Brandt; Claudio Orlandi; Kris Shrishak; Haya Schulmann (IACR Cryptol. ePrint Arch., 2019)

Securing DNSSEC Keys via Threshold ECDSA From Generic MPC. - Anders P. K. Dalskov; Marcel Keller; Claudio Orlandi; Kris Shrishak; Haya Schulmann (IACR Cryptol. ePrint Arch., 2019)

Limiting the Power of RPKI Authorities. - Kris Shrishak; Haya Schulmann (ANRW, 2020)

Black-box caches fingerprinting. - Amit Klein 001; Elias Heftrig; Haya Schulmann; Michael Waidner (CoNEXT, 2020)

Performance penalties of resilient SDN infrastructures. - Daniel Senf; Haya Schulmann; Michael Waidner (CoNEXT, 2020)

The Impact of DNS Insecurity on Time. - Philipp Jeitner; Haya Schulmann; Michael Waidner (DSN, 2020)

Secure Consensus Generation with Distributed DoH. - Philipp Jeitner; Haya Schulmann; Michael Waidner (DSN (Supplements), 2020)

Pitfalls of Provably Secure Systems in Internet the Case of Chronos-NTP. - Philipp Jeitner; Haya Schulmann; Michael Waidner (DSN (Supplements), 2020)

Diving into Email Bomb Attack. - Markus Schneider; Haya Schulmann; Adi Sidis; Ravid Sidis; Michael Waidner (DSN, 2020)

MPC for Securing Internet Infrastructure. - Kris Shrishak; Haya Schulmann (DSN (Supplements), 2020)

Cryptanalysis of FNV-Based Cookies. - Amit Klein 001; Haya Schulmann; Michael Waidner (GLOBECOM, 2020)

Blocking Email Bombs with EmailGlass. - Markus Schneider; Haya Schulmann; Michael Waidner (GLOBECOM, 2020)

Optimal Transport Layer for Secure Computation. - Markus Brandt; Claudio Orlandi; Kris Shrishak; Haya Schulmann (ICETE (2), 2020)

DISCO: Sidestepping RPKI's Deployment Barriers. - Tomas Hlavacek; Ítalo Cunha; Yossi Gilad; Amir Herzberg; Ethan Katz-Bassett; Michael Schapira; Haya Schulmann (NDSS, 2020)

SMap: Internet-wide Scanning for Spoofing. - Tianxiang Dai; Haya Schulmann (ACSAC, 2021)

DNS-over-TCP considered vulnerable. - Tianxiang Dai; Haya Schulmann; Michael Waidner (ANRW, 2021)

Evaluating Resilience of Domains in PKI. - Markus Brandt; Haya Schulmann; Michael Waidner (CCS, 2021)

Let's Downgrade Let's Encrypt. - Tianxiang Dai; Haya Schulmann; Michael Waidner (CCS, 2021)

Predictive Cipher-Suite Negotiation for Boosting Deployment of New Ciphers. - Elias Heftrig; Jean-Pierre Seifert; Haya Schulmann; Michael Waidner; Nils Wisiol (CCS, 2021)

The Master and Parasite Attack. - Lukas Baumann; Elias Heftrig; Haya Schulmann; Michael Waidner (DSN, 2021)

Negotiating PQC for DNSSEC. - Kris Shrishak; Haya Schulmann (DSN (Supplements), 2021)

Machine Learning Analysis of IP ID Applications. - Haya Schulmann; Shujie Zhao (DSN (Supplements), 2021)

Poster: Off-path VoIP Interception Attacks. - Tianxiang Dai; Haya Schulmann; Michael Waidner (ICDCS, 2021)

Poster: Fragmentation Attacks on DNS over TCP. - Tianxiang Dai; Haya Schulmann; Michael Waidner (ICDCS, 2021)

Poster: WallGuard - A Deep Learning Approach for Avoiding Regrettable Posts in Social Media. - Haya Schulmann; Hervais Simo (ICDCS, 2021)

Privacy Policies of Mobile Apps - A Usability Study. - Maxim Anikeev; Haya Schulmann; Hervais Simo (INFOCOM Workshops, 2021)

Optimized BGP Simulator for Evaluation of Internet Hijacks. - Markus Brandt; Haya Schulmann (INFOCOM Workshops, 2021)

Not All Conflicts Are Created Equal: Automated Error Resolution in RPKI Deployments. - Tomas Hlavacek; Haya Schulmann; Michael Waidner (INFOCOM Workshops, 2021)

SSLChecker. - Haya Schulmann; Michael Waidner (INFOCOM Workshops, 2021)

PrivInferVis: Towards Enhancing Transparency over Attribute Inference in Online Social Networks. - Hervais Simo; Haya Schulmann; Marija Schufrin; Steven Lamarr Reynolds; Jörn Kohlhammer (INFOCOM Workshops, 2021)

From IP to transport and beyond: cross-layer attacks against applications. - Tianxiang Dai; Philipp Jeitner; Haya Schulmann; Michael Waidner (SIGCOMM, 2021)

The Hijackers Guide To The Galaxy: Off-Path Taking Over Internet Resources. - Tianxiang Dai; Philipp Jeitner; Haya Schulmann; Michael Waidner (USENIX Security Symposium, 2021)

Injection Attacks Reloaded: Tunnelling Malicious Payloads over DNS. - Philipp Jeitner; Haya Schulmann (USENIX Security Symposium, 2021)

Privacy Preserving and Resilient RPKI. - Kris Shrishak; Haya Schulmann (IACR Cryptol. ePrint Arch., 2021)

Poster: The Unintended Consequences of Algorithm Agility in DNSSEC. - Elias Heftrig; Haya Schulmann; Michael Waidner (CCS, 2022)

Behind the Scenes of RPKI. - Tomas Hlavacek; Philipp Jeitner; Donika Mirdita; Haya Schulmann; Michael Waidner (CCS, 2022)

Poster: RPKI Kill Switch. - Donika Mirdita; Haya Schulmann; Michael Waidner (CCS, 2022)

Poster: Insights into Global Deployment of RPKI Validation. - Haya Schulmann; Niklas Vogel; Michael Waidner (CCS, 2022)

Poster: DNS in Routers Considered Harmful. - Haya Schulmann; Michael Waidner (CCS, 2022)

How (Not) to Deploy Cryptography on the Internet. - Haya Schulmann (CODASPY, 2022)

Smart RPKI Validation: Avoiding Errors and Preventing Hijacks. - Tomas Hlavacek; Haya Schulmann; Michael Waidner (ESORICS (1), 2022)

Stalloris: RPKI Downgrade Attack. - Tomas Hlavacek; Philipp Jeitner; Donika Mirdita; Haya Schulmann; Michael Waidner (USENIX Security Symposium, 2022)

XDRI Attacks - and - How to Enhance Resilience of Residential Routers. - Philipp Jeitner; Haya Schulmann; Lucas Teichmann; Michael Waidner (USENIX Security Symposium, 2022)

Special issue ESORICS 2021. - Elisa Bertino; Haya Schulmann; Michael Waidner (J. Comput. Secur., 2022)

Poster: Longitudinal Analysis of DoS Attacks. - Fabian Kaiser; Haya Schulmann; Michael Waidner (CCS, 2023)

Poster: Off-Path DNSSEC Downgrade Attacks. - Elias Heftrig; Haya Schulmann; Michael Waidner (SIGCOMM, 2023)

Beyond Limits: How to Disable Validators in Secure Networks. - Tomas Hlavacek; Philipp Jeitner; Donika Mirdita; Haya Schulmann; Michael Waidner (SIGCOMM, 2023)

Poster: LeMon: Global Route Leak Monitoring Service. - Haya Schulmann; Shujie Zhao (SIGCOMM, 2023)

Downgrading DNSSEC: How to Exploit Crypto Agility for Hijacking Signed Zones. - Elias Heftrig; Haya Schulmann; Michael Waidner (USENIX Security Symposium, 2023)

Keep Your Friends Close, but Your Routeservers Closer: Insights into RPKI Validation in the Internet. - Tomas Hlavacek; Haya Schulmann; Niklas Vogel; Michael Waidner (USENIX Security Symposium, 2023)

Aktive Cyberabwehr. - Haya Schulmann; Michael Waidner (Datenschutz und Datensicherheit, 2023)

Revocation Speedrun: How the WebPKI Copes with Fraudulent Certificates. - Jens Friess; Haya Schulmann; Michael Waidner (PACMNET, 2023)

Protocol Fixes for KeyTrap Vulnerabilities. - Elias Heftrig; Haya Schulmann; Niklas Vogel; Michael Waidner (ANRW, 2024)

External Attack-Surface of Modern Organizations. - Nethanel Gelernter; Haya Schulmann; Michael Waidner (AsiaCCS, 2024)

Poster: Kill Krill or Proxy RPKI. - Louis Cattepoel; Donika Mirdita; Haya Schulmann; Michael Waidner (CCS, 2024)

Byzantine-Secure Relying Party for Resilient RPKI. - Jens Frieß; Donika Mirdita; Haya Schulmann; Michael Waidner (CCS, 2024)

The Harder You Try, The Harder You Fail: The KeyTrap Denial-of-Service Algorithmic Complexity Attacks on DNSSEC. - Elias Heftrig; Haya Schulmann; Niklas Vogel; Michael Waidner (CCS, 2024)

Poster: Patching NSEC3-Encloser: The Good, the Bad, and the Ugly. - Oliver Jacobsen; Haya Schulmann (CCS, 2024)

Poster: From Fort to Foe: The Threat of RCE in RPKI. - Oliver Jacobsen; Haya Schulmann; Niklas Vogel; Michael Waidner (CCS, 2024)

Poster: Security of Login Interfaces in Modern Organizations. - Kevin Nsieyanji Tchokodeu; Haya Schulmann; Gil Sobol; Michael Waidner (CCS, 2024)

Crowdsourced Distributed Domain Validation. - Jens Frieß; Haya Schulmann; Michael Waidner (HotNets, 2024)

The CURE to Vulnerabilities in RPKI Validation. - Donika Mirdita; Haya Schulmann; Niklas Vogel; Michael Waidner (NDSS, 2024)

Cloudy with a Chance of Cyberattacks: Dangling Resources Abuse on Cloud Platforms. - Jens Frieß; Tobias Gattermayer; Nethanel Gelernter; Haya Schulmann; Michael Waidner (NSDI, 2024)

Insights into SAV Implementations in the Internet. - Haya Schulmann; Shujie Zhao (PAM (2), 2024)

Attacking with Something That Does Not Exist: 'Proof of Non-Existence' Can Exhaust DNS Resolver CPU. - Olivia Gruza; Elias Heftrig; Oliver Jacobsen; Haya Schulmann; Niklas Vogel; Michael Waidner (WOOT @ USENIX Security Symposium, 2024)

Attacking with Something That Does Not Exist: Low-Rate Flood with 'Proof of Non-Existence' Can Exhaust DNS Resolver CPU. - Olivia Gruza; Elias Heftrig; Oliver Jacobsen; Haya Schulmann; Niklas Vogel; Michael Waidner (CoRR, 2024)

SoK: An Introspective Analysis of RPKI Security. - Donika Mirdita; Haya Schulmann; Michael Waidner (CoRR, 2024)

RPKI: Not Perfect But Good Enough. - Haya Schulmann; Niklas Vogel; Michael Waidner (CoRR, 2024)

Wie Deutschland zur Cybernation wird. - Haya Schulmann; Michael Waidner (Datenschutz und Datensicherheit (dud), 2024)

ZPredict: ML-Based IPID Side-channel Measurements. - Haya Schulmann; Shujie Zhao (ACM Trans. Priv. Secur., 2024)

ValidaTor: Domain Validation over Tor. - Jens Frieß; Haya Schulmann; Michael Waidner (NSDI, 2025)

Stealth BGP Hijacks with uRPF Filtering. - Haya Schulmann; Shujie Zhao (WOOT, 2025)

Learning to Identify Conflicts in RPKI. - Haya Schulmann; Shujie Zhao (CoRR, 2025)

Pruning the Tree: Rethinking RPKI Architecture From The Ground Up. - Haya Schulmann; Niklas Vogel (CoRR, 2025)