ScriptProtect: Mitigating Unsafe Third-Party JavaScript Practices. - Marius Musch; Marius Steffens; Sebastian Roth; Ben Stock; Martin Johns (AsiaCCS, 2019)

Assessing the Impact of Script Gadgets on CSP at Scale. - Sebastian Roth; Michael Backes 001; Ben Stock (AsiaCCS, 2020)

Complex Security Policy? A Longitudinal Analysis of Deployed Content Security Policies. - Sebastian Roth; Timothy Barron; Stefano Calzavara; Nick Nikiforakis; Ben Stock (NDSS, 2020)

A Tale of Two Headers: A Formal Analysis of Inconsistent Click-Jacking Protection on the Web. - Stefano Calzavara; Sebastian Roth; Alvise Rabitti; Michael Backes 001; Ben Stock (USENIX Security Symposium, 2020)

12 Angry Developers - A Qualitative Study on Developers' Struggles with CSP. - Sebastian Roth; Lea Gröber; Michael Backes 001; Katharina Krombholz; Ben Stock (CCS, 2021)

To hash or not to hash: A security assessment of CSP's unsafe-hashes expression. - Peter Stolz; Sebastian Roth; Ben Stock (SP (Workshops), 2022)

The Security Lottery: Measuring Client-Side Web Security Inconsistencies. - Sebastian Roth; Stefano Calzavara; Moritz Wilhelm; Alvise Rabitti; Ben Stock (USENIX Security Symposium, 2022)

Honey, I Cached our Security Tokens Re-usage of Security Tokens in the Wild. - Leon Trampert; Ben Stock; Sebastian Roth (RAID, 2023)

How to deploy security mechanisms online (consistently). - Sebastian Roth (2023)

Where Are the Red Lines? Towards Ethical Server-Side Scans in Security and Privacy Research. - Florian Hantke; Sebastian Roth; Rafael Mrowczynski; Christine Utz; Ben Stock (SP, 2024)

Trust Me If You Can - How Usable Is Trusted Types In Practice? - Sebastian Roth; Lea Gröber; Philipp Baus; Katharina Krombholz; Ben Stock (USENIX Security Symposium, 2024)