Sascha Fahl

ORCID

Publication Activity (10 Years)

Years Active: 2011-2024
Publications (10 Years): 63

Top Venues

USENIX Security Symposium

CoRR

IEEE Symposium on Security and Privacy

CCS

University of Hanover, Hannover, Germany (PHD)

Education History

University of Hanover, Hannover, Germany

PHD

Publications

Juliane Schmüser, Harshini Sri Ramulu, Noah Wöhler, Christian Stransky, Felix Bensmann, Dimitar Dimitrov, Sebastian Schellhammer, Dominik Wermke, Stefan Dietze, Yasemin Acar, Sascha Fahl
Analyzing Security and Privacy Advice During the 2022 Russian Invasion of Ukraine on Twitter. CHI (2024)
Nicolas Huaman, Jacques Suray, Jan H. Klemmer, Marcel Fourné, Sabrina Amft, Ivana Trummová, Yasemin Acar, Sascha Fahl
"You have to read 50 different RFCs that contradict each other": An Interview Study on the Experiences of Implementing Cryptographic Standards. USENIX Security Symposium (2024)
Jacques Suray, Jan H. Klemmer, Juliane Schmüser, Sascha Fahl
How the Future Works at SOUPS: Analyzing Future Work Statements and Their Impact on Usable Security and Privacy Research. CoRR (2024)
Dominik Wermke, Noah Wöhler, Jan H. Klemmer, Marcel Fourné, Yasemin Acar, Sascha Fahl
Committed to Trust: A Qualitative Study on Security and Trust in Open Source Software Projects. Software Engineering (2024)
Divyanshu Bhardwaj, Carolyn Guthoff, Adrian Dabrowski, Sascha Fahl, Katharina Krombholz
Mental Models, Expectations and Implications of Client-Side Scanning: An Interview Study with Experts. CHI (2024)
Dominik Wermke, Jan H. Klemmer, Noah Wöhler, Juliane Schmüser, Harshini Sri Ramulu, Yasemin Acar, Sascha Fahl
Always Contribute Back: A Qualitative Study on Security Challenges of the Open Source Supply Chain. Software Engineering (2024)
Jan H. Klemmer, Stefan Albert Horstmann, Nikhil Patnaik, Cordelia Ludden, Cordell Burton Jr., Carson Powers, Fabio Massacci, Akond Rahman, Daniel Votipka, Heather Richter Lipford, Awais Rashid, Alena Naiakshina, Sascha Fahl
Using AI Assistants in Software Development: A Qualitative Study on Security Practices and Concerns. CoRR (2024)
Sandra Höltervennhoff, Noah Wöhler, Arne Möhle, Marten Oltrogge, Yasemin Acar, Oliver Wiese, Sascha Fahl
A Mixed-Methods Study on User Experiences and Challenges of Recovery Codes for an End-to-End Encrypted Service. USENIX Security Symposium (2024)
Konstantin Fischer, Ivana Trummová, Phillip Gajland, Yasemin Acar, Sascha Fahl, M. Angela Sasse
The Challenges of Bringing Cryptography from Research Papers to Products: Results from an Interview Study with Experts. USENIX Security Symposium (2024)
Dominik Wermke, Jan H. Klemmer, Noah Wöhler, Juliane Schmüser, Harshini Sri Ramulu, Yasemin Acar, Sascha Fahl
"Always Contribute Back": A Qualitative Study on Security Challenges of the Open Source Supply Chain. SP (2023)
Marcel Fourné, Dominik Wermke, William Enck, Sascha Fahl, Yasemin Acar
It's like flossing your teeth: On the Importance and Challenges of Reproducible Builds for Software Supply Chain Security. SP (2023)
Jan H. Klemmer, Marco Gutfleisch, Christian Stransky, Yasemin Acar, M. Angela Sasse, Sascha Fahl
"Make Them Change it Every Week!": A Qualitative Exploration of Online Developer Advice on Usable and Secure Authentication. CoRR (2023)
Marcel Fourné, Dominik Wermke, Sascha Fahl, Yasemin Acar
A Viewpoint on Human Factors in Software Supply Chain Security: A Research Agenda. IEEE Secur. Priv. 21 (6) (2023)
Jan H. Klemmer, Marco Gutfleisch, Christian Stransky, Yasemin Acar, M. Angela Sasse, Sascha Fahl
"Make Them Change it Every Week!": A Qualitative Exploration of Online Developer Advice on Usable and Secure Authentication. CCS (2023)
Sabrina Amft, Sandra Höltervennhoff, Nicolas Huaman, Alexander Krause, Lucy Simko, Yasemin Acar, Sascha Fahl
Lost and not Found: An Investigation of Recovery Methods for Multi-Factor Authentication. CoRR (2023)
Sabrina Amft, Sandra Höltervennhoff, Nicolas Huaman, Alexander Krause, Lucy Simko, Yasemin Acar, Sascha Fahl
"We've Disabled MFA for You": An Evaluation of the Security and Usability of Multi-Factor Authentication Recovery Deployments. CCS (2023)
Sabrina Amft, Sandra Höltervennhoff, Nicolas Huaman, Yasemin Acar, Sascha Fahl
"Would You Give the Same Priority to the Bank and a Game? I Do Not!" Exploring Credential Management Strategies and Obstacles during Password Manager Setup. SOUPS (2023)
Alexander Krause, Jan H. Klemmer, Nicolas Huaman, Dominik Wermke, Yasemin Acar, Sascha Fahl
Pushed by Accident: A Mixed-Methods Study on Strategies of Handling Secret Information in Source Code Repositories. USENIX Security Symposium (2023)
Jaron Mink, Harjot Kaur, Juliane Schmüser, Sascha Fahl, Yasemin Acar
"Security is not my field, I'm a stats guy": A Qualitative Root Cause Analysis of Barriers to Adversarial Machine Learning Defenses in Industry. USENIX Security Symposium (2023)
Sandra Höltervennhoff, Philip Klostermeyer, Noah Wöhler, Yasemin Acar, Sascha Fahl
"I wouldn't want my unsafe code to run my pacemaker": An Interview Study on the Use, Comprehension, and Perceived Risks of Unsafe Rust. USENIX Security Symposium (2023)
Rebecca Panskus, Max Ninow, Sascha Fahl, Karola Marky
Privacy Mental Models of Electronic Health Records: A German Case Study. SOUPS (2023)
Stefan Krüger, Michael Reif, Anna-Katharina Wickert, Sarah Nadi, Karim Ali, Eric Bodden, Yasemin Acar, Mira Mezini, Sascha Fahl
Securing Your Crypto-API Usage Through Tool Support - A Usability Study. SecDev (2023)
Christine Utz, Sabrina Amft, Martin Degeling, Thorsten Holz, Sascha Fahl, Florian Schaub
Privacy Rarely Considered: Exploring Considerations in the Adoption of Third-Party Services by Websites. Proc. Priv. Enhancing Technol. 2023 (1) (2023)
Nicolas Huaman, Sabrina Amft, Marten Oltrogge, Yasemin Acar, Sascha Fahl
They Would Do Better If They Worked Together: Interaction Problems Between Password Managers and the Web. IEEE Secur. Priv. 20 (2) (2022)
Alexander Krause, Jan H. Klemmer, Nicolas Huaman, Dominik Wermke, Yasemin Acar, Sascha Fahl
Committed by Accident: Studying Prevention and Remediation Strategies Against Secret Leakage in Source Code Repositories. CoRR (2022)
Marco Gutfleisch, Jan H. Klemmer, Niklas Busch, Yasemin Acar, M. Angela Sasse, Sascha Fahl
How Does Usable Security (Not) End Up in Software Products? Results From a Qualitative Interview Study. IEEE Symposium on Security and Privacy (2022)
Harjot Kaur, Sabrina Amft, Daniel Votipka, Yasemin Acar, Sascha Fahl
Where to Recruit for Security Development Studies: Comparing Six Software Developer Samples. USENIX Security Symposium (2022)
Juliane Schmüser, Noah Wöhler, Harshini Sri Ramulu, Christian Stransky, Dominik Wermke, Sascha Fahl, Yasemin Acar
"Please help share!": Security and Privacy Advice on Twitter during the 2022 Russian Invasion of Ukraine. CoRR (2022)
Nicolas Huaman, Alexander Krause, Dominik Wermke, Jan H. Klemmer, Christian Stransky, Yasemin Acar, Sascha Fahl
If You Can't Get Them to the Lab: Evaluating a Virtual Study Environment with Security Information Workers. SOUPS @ USENIX Security Symposium (2022)
Christine Utz, Sabrina Amft, Martin Degeling, Thorsten Holz, Sascha Fahl, Florian Schaub
Privacy Rarely Considered: Exploring Considerations in the Adoption of Third-Party Services by Websites. CoRR (2022)
Christian Stransky, Oliver Wiese, Volker Roth, Yasemin Acar, Sascha Fahl
27 Years and 81 Million Opportunities Later: Investigating the Use of Email Encryption for an Entire University. IEEE Symposium on Security and Privacy (2022)
Dominik Wermke, Noah Wöhler, Jan H. Klemmer, Marcel Fourné, Yasemin Acar, Sascha Fahl
Committed to Trust: A Qualitative Study on Security & Trust in Open Source Software Projects. IEEE Symposium on Security and Privacy (2022)
Maximilian Häring, Eva Gerlitz, Christian Tiefenau, Matthew Smith, Dominik Wermke, Sascha Fahl, Yasemin Acar
Never ever or no matter what: Investigating Adoption Intentions and Misconceptions about the Corona-Warn-App in Germany. SOUPS @ USENIX Security Symposium (2021)
Marten Oltrogge, Nicolas Huaman, Sabrina Amft, Yasemin Acar, Michael Backes, Sascha Fahl
Why Eve and Mallory Still Love Android: Revisiting TLS (In)Security in Android Applications. USENIX Security Symposium (2021)
Christian Stransky, Dominik Wermke, Johanna Schrader, Nicolas Huaman, Yasemin Acar, Anna Lena Fehlhaber, Miranda Wei, Blase Ur, Sascha Fahl
On the Limited Impact of Visualizing Encryption: Perceptions of E2E Messaging Security. SOUPS @ USENIX Security Symposium (2021)
Nicolas Huaman, Bennet von Skarczinski, Christian Stransky, Dominik Wermke, Yasemin Acar, Arne Dreißigacker, Sascha Fahl
A Large-Scale Interview Study on Information Security in and Attacks against Small and Medium-sized Enterprises. USENIX Security Symposium (2021)
Nicolas Huaman, Sabrina Amft, Marten Oltrogge, Yasemin Acar, Sascha Fahl
They Would do Better if They Worked Together: The Case of Interaction Problems Between Password Managers and Websites. IEEE Symposium on Security and Privacy (2021)
Charles Weir, Ben Hermann, Sascha Fahl
From Needs to Actions to Secure Apps? The Effect of Requirements and Developer Practices on App Security. USENIX Security Symposium (2020)
Dominik Wermke, Nicolas Huaman, Christian Stransky, Niklas Busch, Yasemin Acar, Sascha Fahl
Cloudy with a Chance of Misconceptions: Exploring Users' Perceptions and Expectations of Security and Privacy in Cloud Office Suites. SOUPS @ USENIX Security Symposium (2020)
Peter Leo Gorski, Yasemin Acar, Luigi Lo Iacono, Sascha Fahl
Listen to Developers! A Participatory Design Study on Security Warnings for Cryptographic APIs. CHI (2020)
Christine Utz, Martin Degeling, Sascha Fahl, Florian Schaub, Thorsten Holz
(Un)informed Consent: Studying GDPR Consent Notices in the Field. CoRR (2019)
Christine Utz, Martin Degeling, Sascha Fahl, Florian Schaub, Thorsten Holz
(Un)informed Consent: Studying GDPR Consent Notices in the Field. CCS (2019)
Dominik Wermke, Nicolas Huaman, Yasemin Acar, Bradley Reaves, Patrick Traynor, Sascha Fahl
A Large Scale Investigation of Obfuscation Use in Google Play. ACSAC (2018)
Marten Oltrogge, Erik Derr, Christian Stransky, Yasemin Acar, Sascha Fahl, Christian Rossow, Giancarlo Pellegrino, Sven Bugiel, Michael Backes
The Rise of the Citizen Developer: Assessing the Security Impact of Online App Generators. IEEE Symposium on Security and Privacy (2018)
Sanam Ghorbani Lyastani, Michael Schilling, Sascha Fahl, Michael Backes, Sven Bugiel
Better managed than memorized? Studying the Impact of Managers on Password Strength and Reuse. USENIX Security Symposium (2018)
Peter Leo Gorski, Luigi Lo Iacono, Dominik Wermke, Christian Stransky, Sebastian Möller, Yasemin Acar, Sascha Fahl
Developers Deserve Security Warnings, Too: On the Effect of Integrated Security Advice on Cryptographic API Misuse. SOUPS @ USENIX Security Symposium (2018)
Yuxi Wu, Panya Gupta, Miranda Wei, Yasemin Acar, Sascha Fahl, Blase Ur
Your Secrets Are Safe: How Browsers' Explanations Impact Misconceptions About Private Browsing Mode. WWW (2018)
Dominik Wermke, Nicolas Huaman, Yasemin Acar, Bradley Reaves, Patrick Traynor, Sascha Fahl
A Large Scale Investigation of Obfuscation Use in Google Play. CoRR (2018)
Sanam Ghorbani Lyastani, Michael Schilling, Sascha Fahl, Sven Bugiel, Michael Backes
Studying the Impact of Managers on Password Strength and Reuse. CoRR (2017)
Erik Derr, Sven Bugiel, Sascha Fahl, Yasemin Acar, Michael Backes
Keep me Updated: An Empirical Study of Third-Party Library Updatability on Android. CCS (2017)
Mustafa Emre Acer, Emily Stark, Adrienne Porter Felt, Sascha Fahl, Radhika Bhargava, Bhanu Dev, Matt Braithwaite, Ryan Sleevi, Parisa Tabriz
Where the Wild Warnings Are: Root Causes of Chrome HTTPS Certificate Errors. CCS (2017)
Yasemin Acar, Christian Stransky, Dominik Wermke, Michelle L. Mazurek, Sascha Fahl
Security Developer Studies with GitHub Users: Exploring a Convenience Sample. SOUPS (2017)
Yasemin Acar, Michael Backes, Sascha Fahl, Doowon Kim, Michelle L. Mazurek, Christian Stransky
How Internet Resources Might Be Helping You Develop Faster but Less Securely. IEEE Secur. Priv. 15 (2) (2017)
Duc Cuong Nguyen, Dominik Wermke, Yasemin Acar, Michael Backes, Charles Weir, Sascha Fahl
A Stitch in Time: Supporting Android Developers in WritingSecure Code. CCS (2017)
Felix Fischer, Konstantin Böttinger, Huang Xiao, Christian Stransky, Yasemin Acar, Michael Backes, Sascha Fahl
Stack Overflow Considered Harmful? The Impact of Copy&Paste on Android Application Security. CoRR (2017)
Christian Stransky, Yasemin Acar, Duc Cuong Nguyen, Dominik Wermke, Doowon Kim, Elissa M. Redmiles, Michael Backes, Simson L. Garfinkel, Michelle L. Mazurek, Sascha Fahl
Lessons Learned from Using an Online Platform to Conduct Large-Scale, Online Controlled Security Experiments with Software Developers. CSET @ USENIX Security Symposium (2017)
Yasemin Acar, Christian Stransky, Dominik Wermke, Charles Weir, Michelle L. Mazurek, Sascha Fahl
Developers Need Support, Too: A Survey of Security Advice for Software Developers. SecDev (2017)
Yasemin Acar, Michael Backes, Sascha Fahl, Simson L. Garfinkel, Doowon Kim, Michelle L. Mazurek, Christian Stransky
Comparing the Usability of Cryptographic APIs. IEEE Symposium on Security and Privacy (2017)
Felix Fischer, Konstantin Böttinger, Huang Xiao, Christian Stransky, Yasemin Acar, Michael Backes, Sascha Fahl
Stack Overflow Considered Harmful? The Impact of Copy&Paste on Android Application Security. IEEE Symposium on Security and Privacy (2017)
Sergej Dechand, Dominik Schürmann, Karoline Busse, Yasemin Acar, Sascha Fahl, Matthew Smith
An Empirical Study of Textual Key-Fingerprint Representations. USENIX Security Symposium (2016)
Yasemin Acar, Sascha Fahl, Michelle L. Mazurek
You are Not Your Developer, Either: A Research Agenda for Usable Security and Privacy Research Beyond End Users. SecDev (2016)
Yasemin Acar, Michael Backes, Sven Bugiel, Sascha Fahl, Patrick D. McDaniel, Matthew Smith
SoK: Lessons Learned from Android Security Research for Appified Software Platforms. IEEE Symposium on Security and Privacy (2016)
Yasemin Acar, Michael Backes, Sascha Fahl, Doowon Kim, Michelle L. Mazurek, Christian Stransky
You Get Where You're Looking for: The Impact of Information Sources on Code Security. IEEE Symposium on Security and Privacy (2016)
Nik Unger, Sergej Dechand, Joseph Bonneau, Sascha Fahl, Henning Perl, Ian Goldberg, Matthew Smith
SoK: Secure Messaging. IEEE Symposium on Security and Privacy (2015)
Marten Oltrogge, Yasemin Acar, Sergej Dechand, Matthew Smith, Sascha Fahl
To Pin or Not to Pin-Helping App Developers Bullet Proof Their TLS Connections. USENIX Security Symposium (2015)
Henning Perl, Sergej Dechand, Matthew Smith, Daniel Arp, Fabian Yamaguchi, Konrad Rieck, Sascha Fahl, Yasemin Acar
VCCFinder: Finding Potential Vulnerabilities in Open-Source Projects to Assist Code Audits. CCS (2015)
Henning Perl, Sascha Fahl, Matthew Smith
You Won't Be Needing These Any More: On Removing Unused Certificates from Trust Stores. Financial Cryptography (2014)
Sascha Fahl, Sergej Dechand, Henning Perl, Felix Fischer, Jaromir Smrcek, Matthew Smith
Hey, NSA: Stay Away from my Market! Future Proofing App Markets against Powerful Attackers. CCS (2014)
Sascha Fahl, Yasemin Acar, Henning Perl, Matthew Smith
Why eve and mallory (also) love webmasters: a study on the root causes of SSL misconfigurations. AsiaCCS (2014)
Marian Harbach, Sascha Fahl, Matthew Smith
Who's Afraid of Which Bad Wolf? A Survey of IT Security Risk Awareness. CSF (2014)
Sascha Fahl, Marian Harbach, Marten Oltrogge, Thomas Muders, Matthew Smith
Hey, You, Get Off of My Clipboard - On How Usability Trumps Security in Android Password Managers. Financial Cryptography (2013)
Marian Harbach, Sascha Fahl, Polina Yakovleva, Matthew Smith
Sorry, I Don't Get It: An Analysis of Warning Message Texts. Financial Cryptography Workshops (2013)
Marian Harbach, Sascha Fahl, Matthias Rieger, Matthew Smith
On the Acceptance of Privacy-Preserving Authentication Technology: The Curious Case of National Identity Cards. Privacy Enhancing Technologies (2013)
Sascha Fahl, Marian Harbach, Yasemin Acar, Matthew Smith
On the ecological validity of a password study. SOUPS (2013)
Sascha Fahl, Marian Harbach, Henning Perl, Markus Koetter, Matthew Smith
Rethinking SSL development in an appified world. CCS (2013)
Marian Harbach, Sascha Fahl, Thomas Muders, Matthew Smith
All our messages are belong to us: usable confidentiality in social networks. WWW (Companion Volume) (2012)
Sascha Fahl, Marian Harbach, Thomas Muders, Matthew Smith, Uwe Sander
Helping Johnny 2.0 to encrypt his Facebook conversations. SOUPS (2012)
Marian Harbach, Sascha Fahl, Thomas Muders, Matthew Smith
Towards measuring warning readability. CCS (2012)
Sascha Fahl, Marian Harbach, Matthew Smith
Human-centric visual access control for clinical data management. DEST (2012)
Marian Harbach, Sascha Fahl, Michael Brenner, Thomas Muders, Matthew Smith
Towards privacy-preserving access control with hidden policies, hidden credentials and hidden decisions. PST (2012)
Sascha Fahl, Marian Harbach, Thomas Muders, Matthew Smith, Lars Baumgärtner, Bernd Freisleben
Why eve and mallory love android: an analysis of android SSL (in)security. CCS (2012)
Sascha Fahl, Marian Harbach, Thomas Muders, Matthew Smith
Confidentiality as a Service - Usable Security for the Cloud. TrustCom (2012)
Sascha Fahl, Marian Harbach, Thomas Muders, Matthew Smith
TrustSplit: usable confidentiality for social network messaging. HT (2012)
Matthias Schmidt, Sascha Fahl, Roland Schwarzkopf, Bernd Freisleben
TrustBox: A Security Architecture for Preventing Data Breaches. PDP (2011)

Sascha Fahl.css-eqlu8i{font-size:small;padding-left:4px;}

Publication Activity (10 Years)

Top Topics

Top Venues

Sascha Fahl