Martin Johns

ORCID

Publication Activity (10 Years)

Years Active: 2003-2024
Publications (10 Years): 38

Top Venues

USENIX Security Symposium

CCS

SAC

Proc. Priv. Enhancing Technol.

University of Passau (PHD)

Education History

University of Passau

PHD

Publications

Soumaya Boussaha, Lukas Hock, Miguel Bermejo, Rubén Cuevas Rumín, Ángel Cuevas Rumín, David Klein, Martin Johns, Luca Compagna, Daniele Antonioli, Thomas Barber
FP-tracer: Fine-grained Browser Fingerprinting Detection via Taint-tracking and Entropy-based Thresholds. Proc. Priv. Enhancing Technol. 2024 (3) (2024)
Robin Kirchner, Jonas Möller, Marius Musch, David Klein, Konrad Rieck, Martin Johns
Dancer in the Dark: Synthesizing and Evaluating Polyglots for Blind Cross-Site Scripting. USENIX Security Symposium (2024)
Malte Wessels, Simon Koch, Giancarlo Pellegrino, Martin Johns
SSRF vs. Developers: A Study of SSRF-Defenses in PHP Applications. USENIX Security Symposium (2024)
Robin Kirchner, Simon Koch, Noah Kamangar, David Klein, Martin Johns
A Black-Box Privacy Analysis of Messaging Service Providers' Chat Message Processing. Proc. Priv. Enhancing Technol. 2024 (3) (2024)
Joana M. Warnecke, Christian Baumgartner, Michael H. Breitner, Dominique F. Briechle, Thomas M. Deserno, Maximilian Heumann, Martin Johns, Alexander Picker, Andreas Rausch, Lars C. Wolf
Continuous Health Monitoring on Shared Mobility Devices: A Health-eScooter Prototype. HICSS (2024)
Samuel Groß, Simon Koch, Lukas Bernhard, Thorsten Holz, Martin Johns
FUZZILLI: Fuzzing for JavaScript JIT Compiler Vulnerabilities. NDSS (2023)
David Klein, Benny Rolle, Thomas Barber, Manuel Karl, Martin Johns
General Data Protection Runtime: Enforcing Transparent GDPR Compliance for Existing Applications. CCS (2023)
Simon Koch, Benjamin Altpeter, Martin Johns
The OK Is Not Enough: A Large Scale Study of Consent Dialogs in Smartphone Applications. USENIX Security Symposium (2023)
Simon Koch, Malte Wessels, David Klein, Martin Johns
Poster: The Risk of Insufficient Isolation of Database Transactions in Web Applications. CCS (2023)
Marius Musch, Robin Kirchner, Max Boll, Martin Johns
Server-Side Browsers: Exploring the Web's Hidden Attack Surface. AsiaCCS (2022)
David Klein, Thomas Barber, Souphiane Bensalim, Ben Stock, Martin Johns
Hand Sanitizers in the Wild: A Large-scale Study of Custom JavaScript Sanitizer Functions. EuroS&P (2022)
David Klein, Marius Musch, Thomas Barber, Moritz Kopmann, Martin Johns
Accept All Exploits: Exploring the Security Impact of Cookie Banners. ACSAC (2022)
Manuel Karl, Marius Musch, Guoli Ma, Martin Johns, Sebastian Lekies
No keys to the kingdom required: a comprehensive investigation of missing authentication vulnerabilities in the wild. IMC (2022)
Simon Koch, Malte Wessels, Benjamin Altpeter, Madita Olvermann, Martin Johns
Keeping Privacy Labels Honest. Proc. Priv. Enhancing Technol. 2022 (4) (2022)
Marius Musch, Martin Johns
U Can't Debug This: Detecting JavaScript Anti-Debugging Techniques in the Wild. USENIX Security Symposium (2021)
Marius Steffens, Marius Musch, Martin Johns, Ben Stock
Who's Hosting the Block Party? Studying Third-Party Blockage of CSP and SRI. NDSS (2021)
Souphiane Bensalim, David Klein, Thomas Barber, Martin Johns
Talking About My Generation: Targeted DOM-based XSS Exploit Generation using Dynamic Data Flow Analysis. EuroSec@EuroSys (2021)
Alexandra Dirksen, David Klein, Robert Michael, Tilman Stehr, Konrad Rieck, Martin Johns
LogPicker: Strengthening Certificate Transparency Against Covert Adversaries. Proc. Priv. Enhancing Technol. 2021 (4) (2021)
Florian D. Loch, Martin Johns, Martin Hecker, Martin Mohr, Gregor Snelting
Hybrid taint analysis for Java EE. SAC (2020)
Erwin Quiring, David Klein, Daniel Arp, Martin Johns, Konrad Rieck
Adversarial Preprocessing: Understanding and Preventing Image-Scaling Attacks in Machine Learning. USENIX Security Symposium (2020)
Simon Koch, Tim Sauer, Martin Johns, Giancarlo Pellegrino
Raccoon: automated verification of guarded race conditions in web applications. SAC (2020)
Martin Johns, Alexandra Dirksen
Towards Enabling Secure Web-Based Cloud Services using Client-Side Encryption. CCSW@CCS (2020)
Marius Musch, Marius Steffens, Sebastian Roth, Ben Stock, Martin Johns
ScriptProtect: Mitigating Unsafe Third-Party JavaScript Practices. AsiaCCS (2019)
Marius Steffens, Christian Rossow, Martin Johns, Ben Stock
Don't Trust The Locals: Investigating the Prevalence of Persistent Client-Side Cross-Site Scripting in the Wild. NDSS (2019)
Marius Musch, Christian Wressnegger, Martin Johns, Konrad Rieck
New Kid on the Web: A Study on the Prevalence of WebAssembly in the Wild. DIMVA (2019)
Marius Musch, Christian Wressnegger, Martin Johns, Konrad Rieck
Thieves in the Browser: Web-based Cryptojacking in the Wild. ARES (2019)
Marius Musch, Martin Härterich, Martin Johns
Towards an Automatic Generation of Low-Interaction Web Application Honeypots. ARES (2018)
Martin Johns, Nick Nikiforakis, Melanie Volkamer, John Wilander
Web Application Security (Dagstuhl Seminar 18321). Dagstuhl Reports 8 (8) (2018)
Marius Musch, Christian Wressnegger, Martin Johns, Konrad Rieck
Web-based Cryptojacking in the Wild. CoRR (2018)
Ben Stock, Martin Johns, Marius Steffens, Michael Backes
How the Web Tangled Itself: Uncovering the History of Client-Side Web (In)Security. USENIX Security Symposium (2017)
Giancarlo Pellegrino, Martin Johns, Simon Koch, Michael Backes, Christian Rossow
Deemon: Detecting CSRF with Dynamic Analysis and Property Graphs. CoRR (2017)
Sebastian Lekies, Krzysztof Kotowicz, Samuel Groß, Eduardo A. Vela Nava, Martin Johns
Code-Reuse Attacks for the Web: Breaking Cross-Site Scripting Mitigations via Script Gadgets. CCS (2017)
Giancarlo Pellegrino, Martin Johns, Simon Koch, Michael Backes, Christian Rossow
Deemon: Detecting CSRF with Dynamic Analysis and Property Graphs. CCS (2017)
Michael Felderer, Matthias Büchler, Martin Johns, Achim D. Brucker, Ruth Breu, Alexander Pretschner
Security Testing: A Survey. Adv. Comput. 101 (2016)
Ben Stock, Giancarlo Pellegrino, Christian Rossow, Martin Johns, Michael Backes
POSTER: Mapping the Landscape of Large-Scale Vulnerability Notifications. CCS (2016)
Ben Stock, Giancarlo Pellegrino, Christian Rossow, Martin Johns, Michael Backes
Hey, You Have a Problem: On the Feasibility of Large-Scale Web Vulnerability Notification. USENIX Security Symposium (2016)
Willem De Groef, Deepak Subramanian, Martin Johns, Frank Piessens, Lieven Desmet
Ensuring endpoint authenticity in WebRTC peer-to-peer communication. SAC (2016)
Ben Stock, Martin Johns
Client-Side XSS in Theorie und Praxis. Datenschutz und Datensicherheit 40 (11) (2016)
Bastian Braun, Korbinian Pauli, Joachim Posegga, Martin Johns
LogSec: adaptive protection for the wild wild web. SAC (2015)
Sebastian Lekies, Ben Stock, Martin Wentzel, Martin Johns
The Unexpected Dangers of Dynamic JavaScript. USENIX Security Symposium (2015)
Ben Stock, Stephan Pfistner, Bernd Kaiser, Sebastian Lekies, Martin Johns
From Facepalm to Brain Bender: Exploring Client-Side Cross-Site Scripting. CCS (2015)
Ben Stock, Sebastian Lekies, Martin Johns
DOM-basiertes Cross-Site Scripting im Web: Reise in ein unerforschtes Land. Sicherheit (2014)
Bastian Braun, Martin Johns, Johannes Köstler, Joachim Posegga
PhishSafe: leveraging modern JavaScript API's for transparent and robust protection. CODASPY (2014)
Martin Johns
Script-templates for the Content Security Policy. J. Inf. Secur. Appl. 19 (3) (2014)
Lieven Desmet, Martin Johns, Benjamin Livshits, Andrei Sabelfeld
Preface. J. Comput. Secur. 22 (4) (2014)
Bastian Braun, Johannes Köstler, Joachim Posegga, Martin Johns
A Trusted UI for the Mobile Web. SEC (2014)
Ben Stock, Sebastian Lekies, Tobias Mueller, Patrick Spiegel, Martin Johns
Precise Client-side Protection against DOM-based Cross-Site Scripting. USENIX Security Symposium (2014)
Lieven Desmet, Martin Johns
Real-Time Communications Security on the Web. IEEE Internet Comput. 18 (6) (2014)
Ben Stock, Martin Johns
Protecting users against XSS-based password manager abuse. AsiaCCS (2014)
Martin Johns, Sebastian Lekies
Tamper-Resistant LikeJacking Protection. RAID (2013)
Sebastian Lekies, Ben Stock, Martin Johns
25 million flows later: large-scale detection of DOM-based XSS. CCS (2013)
Martin Johns
PreparedJS: Secure Script-Templates for JavaScript. DIMVA (2013)
Martin Johns, Sebastian Lekies, Ben Stock
Eradicating DNS Rebinding with the Extended Same-origin Policy. USENIX Security Symposium (2013)
Sebastian Lekies, Walter Tighzert, Martin Johns
Towards stateless, client-side driven Cross-Site Request Forgery protection for Web applications. Sicherheit (2012)
Lieven Desmet, Martin Johns, Benjamin Livshits, Andrei Sabelfeld
Web Application Security (Dagstuhl Seminar 12401). Dagstuhl Reports 2 (10) (2012)
Martin Johns
HTML5-Security - Sicherer Umgang mit den neuen JavaScript APIs. Datenschutz und Datensicherheit 36 (4) (2012)
Bastian Braun, Stefan Kucher, Martin Johns, Joachim Posegga
A User-Level Authentication Scheme to Mitigate Web Session-Based Vulnerabilities. TrustBus (2012)
Martin Johns, Sebastian Lekies, Bastian Braun, Benjamin Flesch
BetterAuth: web authentication revisited. ACSAC (2012)
Sebastian Lekies, Nick Nikiforakis, Walter Tighzert, Frank Piessens, Martin Johns
DEMACRO: Defense against Malicious Cross-Domain Requests. RAID (2012)
Martin Johns, Joachim Posegga
WebSand: Server-Driven Outbound Web-Application Sandboxing. TrustBus (2012)
Marek Jawurek, Martin Johns, Florian Kerschbaum
Plug-In Privacy for Smart Metering Billing. PETS (2011)
Nick Nikiforakis, Wouter Joosen, Martin Johns
Abusing locality in shared web hosting. EUROSEC (2011)
Martin Johns, Bastian Braun, Michael Schrank, Joachim Posegga
Reliable protection against session fixation attacks. SAC (2011)
Martin Johns, Sebastian Lekies
Biting the Hand That Serves You: A Closer Look at Client-Side Flash Proxies for Cross-Domain Requests. DIMVA (2011)
Nick Nikiforakis, Wannes Meert, Yves Younan, Martin Johns, Wouter Joosen
SessionShield: Lightweight Protection against Session Hijacking. ESSoS (2011)
Marek Jawurek, Martin Johns, Konrad Rieck
Smart metering de-pseudonymization. ACSAC (2011)
Martin Johns, Moritz Jodeit
Scanstud: A Methodology for Systematic, Fine-Grained Evaluation of Static Analysis Tools. ICST Workshops (2011)
Martin Johns
Code-injection Vulnerabilities in Web Applications - Exemplified at Cross-site Scripting. it Inf. Technol. 53 (5) (2011)
Marek Jawurek, Martin Johns
Security Challenges of a Changing Energy Landscape. ISSE (2010)
Michael Schrank, Bastian Braun, Martin Johns, Joachim Posegga
Session Fixation - The Forgotten Vulnerability? Sicherheit (2010)
Marek Jawurek, Martin Johns, Florian Kerschbaum
Plug-in privacy for Smart Metering billing CoRR (2010)
Martin Johns, Christian Beyerlein, Rosemaria Giesecke, Joachim Posegga
Secure Code Generation for Web Applications. ESSoS (2010)
Dan Boneh, Úlfar Erlingsson, Martin Johns, Benjamin Livshits
09141 Abstracts Collection - Web Application Security. Web Application Security (2009)
Martin Johns
Code-injection Verwundbarkeit in Web Anwendungen am Beispiel von Cross-site Scripting. Ausgezeichnete Informatikdissertationen (2009)
Dan Boneh, Úlfar Erlingsson, Martin Johns, Benjamin Livshits
09141 Executive Summary - Web Application Security. Web Application Security (2009)
Martin Johns, Björn Engelmann, Joachim Posegga
XSSDS: Server-Side Detection of Cross-Site Scripting Attacks. ACSAC (2008)
Martin Johns
On JavaScript Malware and related threats. J. Comput. Virol. 4 (3) (2008)
Martin Johns, Justus Winter
Protecting the Intranet Against "JavaScript Malware" and Related Attacks. DIMVA (2007)
Martin Johns, Christian Beyerlein
SMask: preventing injection attacks in web applications by approximating automatic data/code separation. SAC (2007)
Martin Johns, Daniel Schreckling
Automatisierter Code-Audit - Sicherheitsanalyse von Source Code in Theorie und Praxis. Datenschutz und Datensicherheit 31 (12) (2007)
Martin Johns
SessionSafe: Implementing XSS Immune Session Handling. ESORICS (2006)
Martin Johns
Pseudonyme Biometrik: Ein signatur-basierter Ansatz. BIOSIG (2003)

Martin Johns.css-eqlu8i{font-size:small;padding-left:4px;}

Publication Activity (10 Years)

Top Topics

Top Venues

Martin Johns