Juraj Somorovsky

Publication Activity (10 Years)

Years Active: 2010-2024
Publications (10 Years): 41

Top Topics

Automated Detection

Phishing Attacks

Signature Scheme

Security Analysis

Top Venues

USENIX Security Symposium

IACR Cryptol. ePrint Arch.

Publications

Martin Dunsche, Marcel Maehren, Nurullah Erinola, Robert Merget, Nicolai Bissantz, Juraj Somorovsky, Jörg Schwenk
With Great Power Come Great Side Channels: Statistical Timing Side-Channel Analyses with Bounded Type-1 Errors. USENIX Security Symposium (2024)
Nico Heitmann, Hendrik Siewert, Sven Moog, Juraj Somorovsky
Security Analysis of BigBlueButton and eduMEET. ACNS (3) (2024)
Jens Pottebaum, Jost Rossel, Juraj Somorovsky, Yasemin Acar, René Fahr, Patricia Arias Cabarcos, Eric Bodden, Iris Gräßler
Re-Envisioning Industrial Control Systems Security by Considering Human Factors as a Core Element of Defense-in-Depth. EuroS&P Workshops (2023)
Sven Hebrok, Simon Nachtigall, Marcel Maehren, Nurullah Erinola, Robert Merget, Juraj Somorovsky, Jörg Schwenk
We Really Need to Talk About Session Tickets: A Large-Scale Analysis of Cryptographic Dangers with TLS Session Tickets. USENIX Security Symposium (2023)
Niklas Niere, Sven Hebrok, Juraj Somorovsky, Robert Merget
Poster: Circumventing the GFW with TLS Record Fragmentation. CCS (2023)
Jost Rossel, Vladislav Mladenov, Juraj Somorovsky
Security Analysis of the 3MF Data Format. RAID (2023)
Nurullah Erinola, Marcel Maehren, Robert Merget, Juraj Somorovsky, Jörg Schwenk
Exploring the Unknown DTLS Universe: Analysis of the DTLS Server Ecosystem on the Internet. USENIX Security Symposium (2023)
Peter Mayer, Damian Poddebniak, Konstantin Fischer, Marcus Brinkmann, Juraj Somorovsky, M. Angela Sasse, Sebastian Schinzel, Melanie Volkamer
"I don't know why I check this..." - Investigating Expert Users' Strategies to Detect Email Signature Spoofing Attacks. SOUPS @ USENIX Security Symposium (2022)
Hendrik Siewert, Martin Kretschmer, Marcus Niemietz, Juraj Somorovsky
On the Security of Parsing Security-Relevant HTTP Headers in Modern Browsers. SP Workshops (2022)
Marcel Maehren, Philipp Nieting, Sven Hebrok, Robert Merget, Juraj Somorovsky, Jörg Schwenk
TLS-Anvil: Adapting Combinatorial Testing for TLS Libraries. USENIX Security Symposium (2022)
Jan Peter Drees, Pritha Gupta, Eyke Hüllermeier, Tibor Jager, Alexander Konze, Claudia Priesterjahn, Arunselvan Ramaswamy, Juraj Somorovsky
Automated Detection of Side Channels in Cryptographic Protocols: DROWN the ROBOTs! IACR Cryptol. ePrint Arch. 2021 (2021)
Jan Peter Drees, Pritha Gupta, Eyke Hüllermeier, Tibor Jager, Alexander Konze, Claudia Priesterjahn, Arunselvan Ramaswamy, Juraj Somorovsky
Automated Detection of Side Channels in Cryptographic Protocols: DROWN the ROBOTs! AISec@CCS (2021)
Robert Merget, Marcus Brinkmann, Nimrod Aviram, Juraj Somorovsky, Johannes Mittmann, Jörg Schwenk
Raccoon Attack: Finding and Exploiting Most-Significant-Bit-Oracles in TLS-DH(E). USENIX Security Symposium (2021)
Marcus Niemietz, Mario Korth, Christian Mainka, Juraj Somorovsky
Over 100 Bugs in a Row: Security Analysis of the Top-Rated Joomla Extensions. CoRR (2021)
Marcus Brinkmann, Christian Dresen, Robert Merget, Damian Poddebniak, Jens Müller, Juraj Somorovsky, Jörg Schwenk, Sebastian Schinzel
ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication. USENIX Security Symposium (2021)
Jörg Schwenk, Marcus Brinkmann, Damian Poddebniak, Jens Müller, Juraj Somorovsky, Sebastian Schinzel
Mitigation of Attacks on Email End-to-End Encryption. CCS (2020)
Robert Merget, Marcus Brinkmann, Nimrod Aviram, Juraj Somorovsky, Johannes Mittmann, Jörg Schwenk
Raccoon Attack: Finding and Exploiting Most-Significant-Bit-Oracles in TLS-DH(E). IACR Cryptol. ePrint Arch. 2020 (2020)
Paul Fiterau-Brostean, Bengt Jonsson, Robert Merget, Joeri de Ruiter, Konstantinos Sagonas, Juraj Somorovsky
Analysis of DTLS Implementations Using Protocol State Fuzzing. USENIX Security Symposium (2020)
Robert Merget, Juraj Somorovsky, Nimrod Aviram, Craig Young, Janis Fliegenschmidt, Jörg Schwenk, Yuval Shavitt
Scalable Scanning and Automatic Classification of TLS Padding Oracle Vulnerabilities. USENIX Security Symposium (2019)
Nils Engelbertz, Vladislav Mladenov, Juraj Somorovsky, David Herring, Nurullah Erinola, Jörg Schwenk
Security Analysis of XAdES Validation in the CEF Digital Signature Services (DSS). Open Identity Summit (2019)
Jens Müller, Marcus Brinkmann, Damian Poddebniak, Hanno Böck, Sebastian Schinzel, Juraj Somorovsky, Jörg Schwenk
"Johnny, you are fired!" - Spoofing OpenPGP and S/MIME Signatures in Emails. USENIX Security Symposium (2019)
Damian Poddebniak, Juraj Somorovsky, Sebastian Schinzel, Manfred Lochter, Paul Rösler
Attacking Deterministic Signature Schemes Using Fault Attacks. EuroS&P (2018)
Hanno Böck, Juraj Somorovsky, Craig Young
Return Of Bleichenbacher's Oracle Threat (ROBOT). USENIX Security Symposium (2018)
Damian Poddebniak, Christian Dresen, Jens Müller, Fabian Ising, Sebastian Schinzel, Simon Friedberger, Juraj Somorovsky, Jörg Schwenk
Efail: Breaking S/MIME and OpenPGP Email Encryption using Exfiltration Channels. USENIX Security Symposium (2018)
Martin R. Albrecht, Jake Massimo, Kenneth G. Paterson, Juraj Somorovsky
Prime and Prejudice: Primality Testing Under Adversarial Conditions. IACR Cryptol. ePrint Arch. 2018 (2018)
Nils Engelbertz, Nurullah Erinola, David Herring, Juraj Somorovsky, Vladislav Mladenov, Jörg Schwenk
Security Analysis of eIDAS - The Cross-Country Authentication Scheme in Europe. WOOT @ USENIX Security Symposium (2018)
Martin R. Albrecht, Jake Massimo, Kenneth G. Paterson, Juraj Somorovsky
Prime and Prejudice: Primality Testing Under Adversarial Conditions. CCS (2018)
Jens Müller, Vladislav Mladenov, Juraj Somorovsky, Jörg Schwenk
SoK: Exploiting Network Printers. IEEE Symposium on Security and Privacy (2017)
Martin Grothe, Tobias Niemann, Juraj Somorovsky, Jörg Schwenk
Breaking and Fixing Gridcoin. WOOT (2017)
Damian Poddebniak, Juraj Somorovsky, Sebastian Schinzel, Manfred Lochter, Paul Rösler
Attacking Deterministic Signature Schemes using Fault Attacks. IACR Cryptol. ePrint Arch. 2017 (2017)
Hanno Böck, Juraj Somorovsky, Craig Young
Return Of Bleichenbacher's Oracle Threat (ROBOT). IACR Cryptol. ePrint Arch. 2017 (2017)
Hanno Böck, Aaron Zauner, Sean Devlin, Juraj Somorovsky, Philipp Jovanovic
Nonce-Disrespecting Adversaries: Practical Forgery Attacks on GCM in TLS. IACR Cryptol. ePrint Arch. 2016 (2016)
Juraj Somorovsky
Systematic Fuzzing and Testing of TLS Libraries. CCS (2016)
Hanno Böck, Aaron Zauner, Sean Devlin, Juraj Somorovsky, Philipp Jovanovic
Nonce-Disrespecting Adversaries: Practical Forgery Attacks on GCM in TLS. WOOT (2016)
Nimrod Aviram, Sebastian Schinzel, Juraj Somorovsky, Nadia Heninger, Maik Dankel, Jens Steube, Luke Valenta, David Adrian, J. Alex Halderman, Viktor Dukhovni, Emilia Käsper, Shaanan Cohney, Susanne Engels, Christof Paar, Yuval Shavitt
DROWN: Breaking TLS Using SSLv2. USENIX Security Symposium (2016)
Detlef Hühnlein, Tilman Frosch, Jörg Schwenk, Carl-Markus Piswanger, Marc Sel, Tina Hühnlein, Tobias Wich, Daniel Nemmert, René Lottes, Juraj Somorovsky, Vladislav Mladenov, Cristina Condovici, Herbert Leitold, Sophie Stalla-Bourdillon, Niko Tsakalakis, Jan Eichholz, Frank-Michael Kamm, Andreas Kühne, Damian Wabisch, Roger Dean, Jon Shamah, Mikheil Kapanadze, Nuno Ponte, Jose Martins, Renato Portela, Cagatay Karabat, Snezana Stojicic, Slobodan Nedeljkovic, Vincent Bouckaert, Alexandre Defays, Bruce Anderson, Michael Jonas, Christina Hermanns, Thomas Schubert, Dirk Wegener, Alexander Sazonov
FutureTrust - Future Trust Services for Trustworthy Global Transactions. Open Identity Summit (2016)
Christian Altmeier, Christian Mainka, Juraj Somorovsky, Jörg Schwenk
AdIDoS - Adaptive and Intelligent Fully-Automatic Detection of Denial-of-Service Weaknesses in Web Services. DPM/QASA@ESORICS (2015)
Tibor Jager, Jörg Schwenk, Juraj Somorovsky
Practical Invalid Curve Attacks on TLS-ECDH. ESORICS (1) (2015)
Dennis Kupser, Christian Mainka, Jörg Schwenk, Juraj Somorovsky
How to Break XML Encryption - Automatically. WOOT (2015)
Tibor Jager, Jörg Schwenk, Juraj Somorovsky
On the Security of TLS 1.3 and QUIC Against Weaknesses in PKCS#1 v1.5 Encryption. CCS (2015)
Marcus Niemietz, Juraj Somorovsky, Christian Mainka, Jörg Schwenk
Not so Smart: On Smart TV Apps. SIoT (2015)
Juraj Somorovsky
On the insecurity of XML Security. it Inf. Technol. 56 (6) (2014)
Christopher Meyer, Juraj Somorovsky, Eugen Weiss, Jörg Schwenk, Sebastian Schinzel, Erik Tews
Revisiting SSL/TLS Implementations: New Bleichenbacher Side Channels and Attacks. USENIX Security Symposium (2014)
Andreas Falkenberg, Christian Mainka, Juraj Somorovsky, Jörg Schwenk
A New Approach towards DoS Penetration Testing on Web Services. ICWS (2013)
Tibor Jager, Kenneth G. Paterson, Juraj Somorovsky
One Bad Apple: Backwards Compatibility Attacks on State-of-the-Art Cryptography. NDSS (2013)
Tibor Jager, Sebastian Schinzel, Juraj Somorovsky
Bleichenbacher's Attack Strikes again: Breaking PKCS#1 v1.5 in XML Encryption. ESORICS (2012)
Juraj Somorovsky, Andreas Mayer, Jörg Schwenk, Marco Kampmann, Meiko Jensen
On Breaking SAML: Be Whoever You Want to Be. USENIX Security Symposium (2012)
Christian Mainka, Juraj Somorovsky, Jörg Schwenk
Penetration Testing Tool for Web Services Security. SERVICES (2012)
Juraj Somorovsky, Jörg Schwenk
Technical Analysis of Countermeasures against Attack on XML Encryption - or - Just Another Motivation for Authenticated Encryption. SERVICES (2012)
Juraj Somorovsky, Christopher Meyer, Thang Tran, Mohamad Sbeiti, Jörg Schwenk, Christian Wietfeld
SeC2: Secure Mobile Solution for Distributed Public Cloud Storages. CLOSER (2012)
Juraj Somorovsky, Mario Heiderich, Meiko Jensen, Jörg Schwenk, Nils Gruschka, Luigi Lo Iacono
All your clouds are belong to us: security analysis of cloud management interfaces. CCSW (2011)
Tibor Jager, Juraj Somorovsky
How to break XML encryption. CCS (2011)
Juraj Somorovsky, Meiko Jensen, Jörg Schwenk
Streaming-Based Verification of XML Signatures in SOAP Messages. SERVICES (2010)