POSTER: In the Net of the Spider: Measuring the Anonymity-Impact of Network-level Adversaries Against Tor. - Michael Backes 001; Simon Koch 001; Sebastian Meiser 001; Esfandiar Mohammadi; Christian Rossow (CCS, 2015)

Deemon: Detecting CSRF with Dynamic Analysis and Property Graphs. - Giancarlo Pellegrino; Martin Johns; Simon Koch 001; Michael Backes 001; Christian Rossow (CCS, 2017)

Raccoon: automated verification of guarded race conditions in web applications. - Simon Koch 001; Tim Sauer; Martin Johns; Giancarlo Pellegrino (SAC, 2020)

Keeping Privacy Labels Honest. - Simon Koch 001; Malte Wessels; Benjamin Altpeter; Madita Olvermann; Martin Johns (Proc. Priv. Enhancing Technol., 2022)

Poster: The Risk of Insufficient Isolation of Database Transactions in Web Applications. - Simon Koch 001; Malte Wessels; David Klein 001; Martin Johns (CCS, 2023)

FUZZILLI: Fuzzing for JavaScript JIT Compiler Vulnerabilities. - Samuel Groß; Simon Koch 001; Lukas Bernhard; Thorsten Holz; Martin Johns (NDSS, 2023)

The OK Is Not Enough: A Large Scale Study of Consent Dialogs in Smartphone Applications. - Simon Koch 001; Benjamin Altpeter; Martin Johns (USENIX Security Symposium, 2023)

SSRF vs. Developers: A Study of SSRF-Defenses in PHP Applications. - Malte Wessels; Simon Koch 001; Giancarlo Pellegrino; Martin Johns (USENIX Security Symposium, 2024)

A Black-Box Privacy Analysis of Messaging Service Providers' Chat Message Processing. - Robin Kirchner; Simon Koch 001; Noah Kamangar; David Klein 001; Martin Johns (Proc. Priv. Enhancing Technol., 2024)

Extract: A PHP Foot-Gun Case Study. - Jannik Hartung; Simon Koch 001; Martin Johns (WOOT, 2025)

The Impact of Default Mobile SDK Usage on Privacy and Data Protection. - Simon Koch 001; Manuel Karl; Robin Kirchner; Malte Wessels; Anne Paschke; Martin Johns (Proc. Priv. Enhancing Technol., 2025)