Trust in a small package: minimized MRTM software implementation for mobile secure environments. - Jan-Erik Ekberg; Sven Bugiel (STC, 2009)

Implementing an application-specific credential platform using late-launched mobile trusted module. - Sven Bugiel; Jan-Erik Ekberg (STC@CCS, 2010)

TruWalletM: Secure Web Authentication on Mobile Platforms. - Sven Bugiel; Alexandra Dmitrienko; Kari Kostiainen; Ahmad-Reza Sadeghi; Marcel Winandy (INTRUST, 2010)

Scalable trust establishment with software reputation. - Sven Bugiel; Lucas Vincenzo Davi; Steffen Schulz 001 (STC@CCS, 2011)

Poster: the quest for security against privilege escalation attacks on android. - Sven Bugiel; Lucas Davi; Alexandra Dmitrienko; Thomas Fischer 005; Ahmad-Reza Sadeghi; Bhargava Shastry (CCS, 2011)

Practical and lightweight domain isolation on Android. - Sven Bugiel; Lucas Davi; Alexandra Dmitrienko; Stephan Heuser; Ahmad-Reza Sadeghi; Bhargava Shastry (SPSM@CCS, 2011)

AmazonIA: when elasticity snaps back. - Sven Bugiel; Stefan Nürnberger; Thomas Pöppelmann; Ahmad-Reza Sadeghi; Thomas Schneider 003 (CCS, 2011)

Twin Clouds: Secure Cloud Computing with Low Latency - (Full Version). - Sven Bugiel; Stefan Nürnberger; Ahmad-Reza Sadeghi; Thomas Schneider 003 (Communications and Multimedia Security, 2011)

Softer Smartcards - Usable Cryptographic Tokens with Secure Execution. - Franz Ferdinand Peter Brasser; Sven Bugiel; Atanas Filyanov; Ahmad-Reza Sadeghi; Steffen Schulz 001 (Financial Cryptography, 2012)

Towards Taming Privilege-Escalation Attacks on Android. - Sven Bugiel; Lucas Davi; Alexandra Dmitrienko; Thomas Fischer 005; Ahmad-Reza Sadeghi; Bhargava Shastry (NDSS, 2012)

Client-Controlled Cryptography-as-a-Service in the Cloud. - Sören Bleikertz; Sven Bugiel; Hugo Ideler; Stefan Nürnberger; Ahmad-Reza Sadeghi (ACNS, 2013)

Flexible and Fine-grained Mandatory Access Control on Android for Diverse Security and Privacy Policies. - Sven Bugiel; Stephan Heuser; Ahmad-Reza Sadeghi (USENIX Security Symposium, 2013)

Scippa: system-centric IPC provenance on Android. - Michael Backes 001; Sven Bugiel; Sebastian Gerling (ACSAC, 2014)

Android security framework: extensible multi-layered access control on Android. - Michael Backes 001; Sven Bugiel; Sebastian Gerling; Philipp von Styp-Rekowsky (ACSAC, 2014)

Android Security Framework: Enabling Generic and Extensible Access Control on Android. - Michael Backes 001; Sven Bugiel; Sebastian Gerling; Philipp von Styp-Rekowsky (CoRR, 2014)

Boxify: Full-fledged App Sandboxing for Stock Android. - Michael Backes 001; Sven Bugiel; Christian Hammer 001; Oliver Schranz; Philipp von Styp-Rekowsky (USENIX Security Symposium, 2015)

Reliable Third-Party Library Detection in Android and its Security Applications. - Michael Backes 001; Sven Bugiel; Erik Derr (CCS, 2016)

R-Droid: Leveraging Android App Analysis with Static Slice Optimization. - Michael Backes 001; Sven Bugiel; Erik Derr; Sebastian Gerling; Christian Hammer 001 (AsiaCCS, 2016)

POSTER: The ART of App Compartmentalization. - Michael Backes 001; Sven Bugiel; Jie Huang 010; Oliver Schranz (CCS, 2016)

SoK: Lessons Learned from Android Security Research for Appified Software Platforms. - Yasemin Acar; Michael Backes 001; Sven Bugiel; Sascha Fahl; Patrick D. McDaniel; Matthew Smith 001 (IEEE Symposium on Security and Privacy, 2016)

On Demystifying the Android Application Framework: Re-Visiting Android Permission Specification Analysis. - Michael Backes 001; Sven Bugiel; Erik Derr; Patrick D. McDaniel; Damien Octeau; Sebastian Weisgerber (USENIX Security Symposium, 2016)

Autonome Systeme. - Stefan Nürnberger; Sven Bugiel (Datenschutz und Datensicherheit, 2016)

Boxify: Bringing Full-Fledged App Sandboxing to Stock Android. - Michael Backes 001; Sven Bugiel; Oliver Schranz; Philipp von Styp-Rekowsky (login Usenix Mag., 2016)

Establishing mandatory access control on Android OS. - Sven Bugiel (2016)

Keep me Updated: An Empirical Study of Third-Party Library Updatability on Android. - Erik Derr; Sven Bugiel; Sascha Fahl; Yasemin Acar; Michael Backes 001 (CCS, 2017)

The ART of App Compartmentalization: Compiler-based Library Privilege Separation on Stock Android. - Jie Huang 010; Oliver Schranz; Sven Bugiel; Michael Backes 001 (CCS, 2017)

ARTist: The Android Runtime Instrumentation and Security Toolkit. - Michael Backes 001; Sven Bugiel; Oliver Schranz; Philipp von Styp-Rekowsky; Sebastian Weisgerber (EuroS&P, 2017)

Seamless In-App Ad Blocking on Stock Android. - Michael Backes 001; Sven Bugiel; Philipp von Styp-Rekowsky; Marvin WiBfeld (IEEE Symposium on Security and Privacy Workshops, 2017)

Studying the Impact of Managers on Password Strength and Reuse. - Sanam Ghorbani Lyastani; Michael Schilling 001; Sascha Fahl; Sven Bugiel; Michael Backes 001 (CoRR, 2017)

The Rise of the Citizen Developer: Assessing the Security Impact of Online App Generators. - Marten Oltrogge; Erik Derr; Christian Stransky; Yasemin Acar; Sascha Fahl; Christian Rossow; Giancarlo Pellegrino; Sven Bugiel; Michael Backes 001 (IEEE Symposium on Security and Privacy, 2018)

Better managed than memorized? Studying the Impact of Managers on Password Strength and Reuse. - Sanam Ghorbani Lyastani; Michael Schilling 001; Sascha Fahl; Michael Backes 001; Sven Bugiel (USENIX Security Symposium, 2018)

Poster: Let History not Repeat Itself (this Time) - Tackling WebAuthn Developer Issues Early On. - Aftab Alam; Katharina Krombholz; Sven Bugiel (CCS, 2019)

simFIDO: FIDO2 User Authentication with simTPM. - Dhiman Chakraborty 001; Sven Bugiel (CCS, 2019)

Up-To-Crash: Evaluating Third-Party Library Updatability on Android. - Jie Huang 010; Nataniel P. Borges Jr.; Sven Bugiel; Michael Backes 001 (EuroS&P, 2019)

DroidCap: OS Support for Capability-based Permissions in Android. - Abdallah Dawoud; Sven Bugiel (NDSS, 2019)

Secure multi-execution in Android. - Dhiman Chakraborty 001; Christian Hammer 001; Sven Bugiel (SAC, 2019)

Short Text, Large Effect: Measuring the Impact of User Reviews on Android App Security & Privacy. - Duc Cuong Nguyen 001; Erik Derr; Michael Backes 001; Sven Bugiel (IEEE Symposium on Security and Privacy, 2019)

simTPM: User-centric TPM for Mobile Devices. - Dhiman Chakraborty 001; Lucjan Hanzlik; Sven Bugiel (USENIX Security Symposium, 2019)

simTPM: User-centric TPM for Mobile Devices (Technical Report). - Dhiman Chakraborty 001; Lucjan Hanzlik; Sven Bugiel (CoRR, 2019)

Up2Dep: Android Tool Support to Fix Insecure Code Dependencies. - Duc Cuong Nguyen 001; Erik Derr; Michael Backes 001; Sven Bugiel (ACSAC, 2020)

Is FIDO2 the Kingslayer of User Authentication? A Comparative Usability Study of FIDO2 Passwordless Authentication. - Sanam Ghorbani Lyastani; Michael Schilling 001; Michaela Neumayr; Michael Backes 001; Sven Bugiel (SP, 2020)

Bringing Balance to the Force: Dynamic Analysis of the Android Application Framework. - Abdallah Dawoud; Sven Bugiel (NDSS, 2021)

A11y and Privacy don't have to be mutually exclusive: Constraining Accessibility Service Misuse on Android. - Jie Huang 010; Michael Backes 001; Sven Bugiel (USENIX Security Symposium, 2021)

Explanation Beats Context: The Effect of Timing & Rationales on Users' Runtime Permission Decisions. - Yusra Elbitar; Michael Schilling 001; Trung Tin Nguyen; Michael Backes 001; Sven Bugiel (USENIX Security Symposium, 2021)

Towards a Principled Approach for Dynamic Analysis of Android's Middleware. - Oliver Schranz; Sebastian Weisgerber; Erik Derr; Michael Backes 001; Sven Bugiel (CoRR, 2021)

A Systematic Study of the Consistency of Two-Factor Authentication User Journeys on Top-Ranked Websites (Extended Version). - Sanam Ghorbani Lyastani; Michael Backes 001; Sven Bugiel (CoRR, 2022)

TALUS: Reinforcing TEE Confidentiality with Cryptographic Coprocessors. - Dhiman Chakraborty 001; Michael Schwarz 001; Sven Bugiel (FC (1), 2023)

A Systematic Study of the Consistency of Two-Factor Authentication User Journeys on Top-Ranked Websites. - Sanam Ghorbani Lyastani; Michael Backes 001; Sven Bugiel (NDSS, 2023)

TALUS: Reinforcing TEE Confidentiality with Cryptographic Coprocessors (Technical Report). - Dhiman Chakraborty 001; Michael Schwarz 001; Sven Bugiel (CoRR, 2023)

Work-in-Progress: Northcape: Embedded Real-Time Capability-Based Addressing. - Eric Ackermann; Noah Mauthe; Sven Bugiel (EuroS&P Workshops, 2024)

Measuring the Effects of Stack Overflow Code Snippet Evolution on Open-Source Software Security. - Alfusainey Jallow; Michael Schilling 001; Michael Backes 001; Sven Bugiel (SP, 2024)

Permission Rationales in the Web Ecosystem: An Exploration of Rationale Text and Design Patterns. - Yusra Elbitar; Soheil Khodayari; Marian Harbach; Gianluca De Stefano; Balazs Csaba Engedy; Giancarlo Pellegrino; Sven Bugiel (CHI, 2025)

The Power of Words: A Comprehensive Analysis of Rationales and Their Effects on Users' Permission Decisions. - Yusra Elbitar; Alexander Hart; Sven Bugiel (NDSS, 2025)

Stack Overflow Meets Replication: Security Research Amid Evolving Code Snippets (Extended Version). - Alfusainey Jallow; Sven Bugiel (CoRR, 2025)