Streaming-Based Verification of XML Signatures in SOAP Messages. - Juraj Somorovsky; Meiko Jensen; Jörg Schwenk (SERVICES, 2010)

How to break XML encryption. - Tibor Jager; Juraj Somorovsky (CCS, 2011)

All your clouds are belong to us: security analysis of cloud management interfaces. - Juraj Somorovsky; Mario Heiderich; Meiko Jensen; Jörg Schwenk; Nils Gruschka; Luigi Lo Iacono (CCSW, 2011)

SeC2: Secure Mobile Solution for Distributed Public Cloud Storages. - Juraj Somorovsky; Christopher Meyer; Thang Tran; Mohamad Sbeiti; Jörg Schwenk; Christian Wietfeld (CLOSER, 2012)

Bleichenbacher's Attack Strikes again: Breaking PKCS#1 v1.5 in XML Encryption. - Tibor Jager; Sebastian Schinzel; Juraj Somorovsky (ESORICS, 2012)

Penetration Testing Tool for Web Services Security. - Christian Mainka; Juraj Somorovsky; Jörg Schwenk (SERVICES, 2012)

Technical Analysis of Countermeasures against Attack on XML Encryption - or - Just Another Motivation for Authenticated Encryption. - Juraj Somorovsky; Jörg Schwenk (SERVICES, 2012)

On Breaking SAML: Be Whoever You Want to Be. - Juraj Somorovsky; Andreas Mayer; Jörg Schwenk; Marco Kampmann; Meiko Jensen (USENIX Security Symposium, 2012)

A New Approach towards DoS Penetration Testing on Web Services. - Andreas Falkenberg; Christian Mainka; Juraj Somorovsky; Jörg Schwenk (ICWS, 2013)

One Bad Apple: Backwards Compatibility Attacks on State-of-the-Art Cryptography. - Tibor Jager; Kenneth G. Paterson; Juraj Somorovsky (NDSS, 2013)

On the insecurity of XML security - Juraj Somorovsky (2013)

Revisiting SSL/TLS Implementations: New Bleichenbacher Side Channels and Attacks. - Christopher Meyer; Juraj Somorovsky; Eugen Weiss; Jörg Schwenk; Sebastian Schinzel; Erik Tews (USENIX Security Symposium, 2014)

On the insecurity of XML Security. - Juraj Somorovsky (it Inf. Technol., 2014)

On the Security of TLS 1.3 and QUIC Against Weaknesses in PKCS#1 v1.5 Encryption. - Tibor Jager; Jörg Schwenk; Juraj Somorovsky (CCS, 2015)

AdIDoS - Adaptive and Intelligent Fully-Automatic Detection of Denial-of-Service Weaknesses in Web Services. - Christian Altmeier; Christian Mainka; Juraj Somorovsky; Jörg Schwenk (DPM/QASA@ESORICS, 2015)

Practical Invalid Curve Attacks on TLS-ECDH. - Tibor Jager; Jörg Schwenk; Juraj Somorovsky (ESORICS (1), 2015)

Not so Smart: On Smart TV Apps. - Marcus Niemietz; Juraj Somorovsky; Christian Mainka; Jörg Schwenk (SIoT, 2015)

How to Break XML Encryption - Automatically. - Dennis Kupser; Christian Mainka; Jörg Schwenk; Juraj Somorovsky (WOOT, 2015)

Systematic Fuzzing and Testing of TLS Libraries. - Juraj Somorovsky (CCS, 2016)

FutureTrust - Future Trust Services for Trustworthy Global Transactions. - Detlef Hühnlein; Tilman Frosch; Jörg Schwenk; Carl-Markus Piswanger; Marc Sel; Tina Hühnlein; Tobias Wich; Daniel Nemmert; René Lottes; Juraj Somorovsky; Vladislav Mladenov; Cristina Condovici; et al. (Open Identity Summit, 2016)

DROWN: Breaking TLS Using SSLv2. - Nimrod Aviram; Sebastian Schinzel; Juraj Somorovsky; Nadia Heninger; Maik Dankel; Jens Steube; Luke Valenta; David Adrian; J. Alex Halderman; Viktor Dukhovni; Emilia Käsper; Shaanan Cohney; et al. (USENIX Security Symposium, 2016)

Nonce-Disrespecting Adversaries: Practical Forgery Attacks on GCM in TLS. - Hanno Böck; Aaron Zauner; Sean Devlin; Juraj Somorovsky; Philipp Jovanovic (IACR Cryptol. ePrint Arch., 2016)

SoK: Exploiting Network Printers. - Jens Müller 007; Vladislav Mladenov; Juraj Somorovsky; Jörg Schwenk (IEEE Symposium on Security and Privacy, 2017)

Breaking and Fixing Gridcoin. - Martin Grothe; Tobias Niemann; Juraj Somorovsky; Jörg Schwenk (WOOT, 2017)

Return Of Bleichenbacher's Oracle Threat (ROBOT). - Hanno Böck; Juraj Somorovsky; Craig Young (IACR Cryptol. ePrint Arch., 2017)

Attacking Deterministic Signature Schemes using Fault Attacks. - Damian Poddebniak; Juraj Somorovsky; Sebastian Schinzel; Manfred Lochter; Paul Rösler (IACR Cryptol. ePrint Arch., 2017)

Efail: Breaking S/MIME and OpenPGP Email Encryption using Exfiltration Channels. - Damian Poddebniak; Christian Dresen; Jens Müller 007; Fabian Ising; Sebastian Schinzel; Simon Friedberger; Juraj Somorovsky; Jörg Schwenk (USENIX Security Symposium, 2018)

Security Analysis of eIDAS - The Cross-Country Authentication Scheme in Europe. - Nils Engelbertz; Nurullah Erinola; David Herring; Juraj Somorovsky; Vladislav Mladenov; Jörg Schwenk (WOOT @ USENIX Security Symposium, 2018)

Prime and Prejudice: Primality Testing Under Adversarial Conditions. - Martin R. Albrecht; Jake Massimo; Kenneth G. Paterson; Juraj Somorovsky (IACR Cryptol. ePrint Arch., 2018)

Security Analysis of XAdES Validation in the CEF Digital Signature Services (DSS). - Nils Engelbertz; Vladislav Mladenov; Juraj Somorovsky; David Herring; Nurullah Erinola; Jörg Schwenk (Open Identity Summit, 2019)

"Johnny, you are fired!" - Spoofing OpenPGP and S/MIME Signatures in Emails. - Jens Müller 007; Marcus Brinkmann; Damian Poddebniak; Hanno Böck; Sebastian Schinzel; Juraj Somorovsky; Jörg Schwenk (USENIX Security Symposium, 2019)

Scalable Scanning and Automatic Classification of TLS Padding Oracle Vulnerabilities. - Robert Merget; Juraj Somorovsky; Nimrod Aviram; Craig Young; Janis Fliegenschmidt; Jörg Schwenk; Yuval Shavitt (USENIX Security Symposium, 2019)

Mitigation of Attacks on Email End-to-End Encryption. - Jörg Schwenk; Marcus Brinkmann; Damian Poddebniak; Jens Müller 007; Juraj Somorovsky; Sebastian Schinzel (CCS, 2020)

Analysis of DTLS Implementations Using Protocol State Fuzzing. - Paul Fiterau-Brostean; Bengt Jonsson 001; Robert Merget; Joeri de Ruiter; Konstantinos Sagonas; Juraj Somorovsky (USENIX Security Symposium, 2020)

Raccoon Attack: Finding and Exploiting Most-Significant-Bit-Oracles in TLS-DH(E). - Robert Merget; Marcus Brinkmann; Nimrod Aviram; Juraj Somorovsky; Johannes Mittmann; Jörg Schwenk (IACR Cryptol. ePrint Arch., 2020)

ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication. - Marcus Brinkmann; Christian Dresen; Robert Merget; Damian Poddebniak; Jens Müller 007; Juraj Somorovsky; Jörg Schwenk; Sebastian Schinzel (USENIX Security Symposium, 2021)

Over 100 Bugs in a Row: Security Analysis of the Top-Rated Joomla Extensions. - Marcus Niemietz; Mario Korth; Christian Mainka; Juraj Somorovsky (CoRR, 2021)

Automated Detection of Side Channels in Cryptographic Protocols: DROWN the ROBOTs! - Jan Peter Drees; Pritha Gupta; Eyke Hüllermeier; Tibor Jager; Alexander Konze; Claudia Priesterjahn; Arunselvan Ramaswamy; Juraj Somorovsky (IACR Cryptol. ePrint Arch., 2021)

"I don't know why I check this..." - Investigating Expert Users' Strategies to Detect Email Signature Spoofing Attacks. - Peter Mayer 001; Damian Poddebniak; Konstantin Fischer; Marcus Brinkmann; Juraj Somorovsky; M. Angela Sasse; Sebastian Schinzel; Melanie Volkamer (SOUPS @ USENIX Security Symposium, 2022)

On the Security of Parsing Security-Relevant HTTP Headers in Modern Browsers. - Hendrik Siewert; Martin Kretschmer; Marcus Niemietz; Juraj Somorovsky (SP (Workshops), 2022)

TLS-Anvil: Adapting Combinatorial Testing for TLS Libraries. - Marcel Maehren; Philipp Nieting; Sven Hebrok; Robert Merget; Juraj Somorovsky; Jörg Schwenk (USENIX Security Symposium, 2022)

Poster: Circumventing the GFW with TLS Record Fragmentation. - Niklas Niere; Sven Hebrok; Juraj Somorovsky; Robert Merget (CCS, 2023)

Re-Envisioning Industrial Control Systems Security by Considering Human Factors as a Core Element of Defense-in-Depth. - Jens Pottebaum; Jost Rossel; Juraj Somorovsky; Yasemin Acar; René Fahr; Patricia Arias Cabarcos; Eric Bodden; Iris Gräßler (EuroS&P Workshops, 2023)

Security Analysis of the 3MF Data Format. - Jost Rossel; Vladislav Mladenov; Juraj Somorovsky (RAID, 2023)

Exploring the Unknown DTLS Universe: Analysis of the DTLS Server Ecosystem on the Internet. - Nurullah Erinola; Marcel Maehren; Robert Merget; Juraj Somorovsky; Jörg Schwenk (USENIX Security Symposium, 2023)

We Really Need to Talk About Session Tickets: A Large-Scale Analysis of Cryptographic Dangers with TLS Session Tickets. - Sven Hebrok; Simon Nachtigall; Marcel Maehren; Nurullah Erinola; Robert Merget; Juraj Somorovsky; Jörg Schwenk (USENIX Security Symposium, 2023)

Security Analysis of BigBlueButton and eduMEET. - Nico Heitmann; Hendrik Siewert; Sven Moog; Juraj Somorovsky (ACNS (3), 2024)

In Search of Partitioning Oracle Attacks Against TLS Session Tickets. - Maximilian Radoy; Sven Hebrok; Juraj Somorovsky (ESORICS (3), 2024)

With Great Power Come Great Side Channels: Statistical Timing Side-Channel Analyses with Bounded Type-1 Errors. - Martin Dunsche; Marcel Maehren; Nurullah Erinola; Robert Merget; Nicolai Bissantz; Juraj Somorovsky; Jörg Schwenk (USENIX Security Symposium, 2024)

USENIX'24 Artifact Datasets: With Great Power Come Great Side Channels: Statistical Timing Side-Channel Analyses with Bounded Type-1 Errors. - Martin Dunsche; Marcel Maehren; Nurullah Erinola; Robert Merget; Nicolai Bissantz; Juraj Somorovsky; Jörg Schwenk (Zenodo, 2024)

Transport Layer Obscurity: Circumventing SNI Censorship on the TLS-Layer. - Niklas Niere; Felix Lange; Robert Merget; Juraj Somorovsky (SP, 2025)

Opossum Attack: Application Layer Desynchronization using Opportunistic TLS. - Robert Merget; Nurullah Erinola; Marcel Maehren; Lukas Knittel; Sven Hebrok; Marcus Brinkmann; Juraj Somorovsky; Jörg Schwenk (IACR Cryptol. ePrint Arch., 2025)