Sebastian Lekies

Publication Activity (10 Years)

Years Active: 2011-2022
Publications (10 Years): 4

Top Topics

Visual Programming

Document Object Model

Top Venues

USENIX Security Symposium

EuroS&P Workshops

Publications

Manuel Karl, Marius Musch, Guoli Ma, Martin Johns, Sebastian Lekies
No keys to the kingdom required: a comprehensive investigation of missing authentication vulnerabilities in the wild. IMC (2022)
Sebastian Lekies, Damien Engels, Metodi Mitkov
JSONPS: Secure an inherently insecure practice with this one weird trick! EuroS&P Workshops (2021)
Sebastian Lekies, Krzysztof Kotowicz, Samuel Groß, Eduardo A. Vela Nava, Martin Johns
Code-Reuse Attacks for the Web: Breaking Cross-Site Scripting Mitigations via Script Gadgets. CCS (2017)
Lukas Weichselbaum, Michele Spagnuolo, Sebastian Lekies, Artur Janc
CSP Is Dead, Long Live CSP! On the Insecurity of Whitelists and the Future of Content Security Policy. CCS (2016)
Sebastian Lekies, Ben Stock, Martin Wentzel, Martin Johns
The Unexpected Dangers of Dynamic JavaScript. USENIX Security Symposium (2015)
Ben Stock, Stephan Pfistner, Bernd Kaiser, Sebastian Lekies, Martin Johns
From Facepalm to Brain Bender: Exploring Client-Side Cross-Site Scripting. CCS (2015)
Ben Stock, Sebastian Lekies, Martin Johns
DOM-basiertes Cross-Site Scripting im Web: Reise in ein unerforschtes Land. Sicherheit (2014)
Ben Stock, Sebastian Lekies, Tobias Mueller, Patrick Spiegel, Martin Johns
Precise Client-side Protection against DOM-based Cross-Site Scripting. USENIX Security Symposium (2014)
Martin Johns, Sebastian Lekies
Tamper-Resistant LikeJacking Protection. RAID (2013)
Sebastian Lekies, Ben Stock, Martin Johns
25 million flows later: large-scale detection of DOM-based XSS. CCS (2013)
Martin Johns, Sebastian Lekies, Ben Stock
Eradicating DNS Rebinding with the Extended Same-origin Policy. USENIX Security Symposium (2013)
Sebastian Lekies, Walter Tighzert, Martin Johns
Towards stateless, client-side driven Cross-Site Request Forgery protection for Web applications. Sicherheit (2012)
Sebastian Lekies, Mario Heiderich
On the Fragility and Limitations of Current Browser-Provided Clickjacking Protection Schemes. WOOT (2012)
Martin Johns, Sebastian Lekies, Bastian Braun, Benjamin Flesch
BetterAuth: web authentication revisited. ACSAC (2012)
Sebastian Lekies, Nick Nikiforakis, Walter Tighzert, Frank Piessens, Martin Johns
DEMACRO: Defense against Malicious Cross-Domain Requests. RAID (2012)
Martin Johns, Sebastian Lekies
Biting the Hand That Serves You: A Closer Look at Client-Side Flash Proxies for Cross-Domain Requests. DIMVA (2011)