default search action

combined dblp search
author search
venue search
publication search

ask others

Sascha Fahl

> Home > Persons

Person information

affiliation: Leibniz University Hannover, Germany
affiliation: CISPA Helmholtz Center for Information Security, Saarbrücken, Germany

Refine list

refinements active!

zoomed in on ?? of ?? records

view refined list in

export refined list as

showing all ?? records

2020 – today

see FAQ

What is the meaning of the colors in the publication lists?

2025
[j7]
- view
  - electronic edition via DOI (open access)
  - details & citations
  authority control:
- export record
  dblp key:
  - journals/popets/GaballahAZFMM25
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/journals/popets/GaballahAZFMM25
Sarah Abdelwahab Gaballah, Lamya Abdullah, Ephraim Zimmer, Sascha Fahl, Max Mühlhäuser, Karola Marky:
"It's Not My Data Anymore": Exploring Non-Users' Privacy Perceptions of Medical Data Donation Apps. Proc. Priv. Enhancing Technol. 2025(1): 654-670 (2025)
[c74]
- view
  - electronic edition @ ndss-symposium.org (open access)
  - details & citations
- export record
  dblp key:
  - conf/ndss/HoltgraveFFHBKF25
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/ndss/HoltgraveFFHBKF25
Jan-Ulrich Holtgrave, Kay Friedrich, Fabian Fischer, Nicolas Huaman, Niklas Busch, Jan H. Klemmer, Marcel Fourné, Oliver Wiese, Dominik Wermke, Sascha Fahl:
Attributing Open-Source Contributions is Critical but Difficult: A Systematic Analysis of GitHub Practices and Their Impact on Software Supply Chain Security. NDSS 2025
2024
[j6]
- view
  - electronic edition via DOI (open access)
  - details & citations
  authority control:
- export record
  dblp key:
  - journals/access/NetelerFI24
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/journals/access/NetelerFI24
Thomas Neteler, Sascha Fahl, Luigi Lo Iacono:
"You Received $100,000 From Johnny": A Mixed-Methods Study on Push Notification Security and Privacy in Android Apps. IEEE Access 12: 112499-112516 (2024)
[j5]
- view
  authority control:
- export record
  dblp key:
  - journals/ieeesp/FischerTGAFS24
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/journals/ieeesp/FischerTGAFS24
Konstantin Fischer, Ivana Trummová, Phillip Gajland, Yasemin Acar, Sascha Fahl, M. Angela Sasse:
Adoption Challenges for Cryptographic Protocols. IEEE Secur. Priv. 22(6): 19-29 (2024)
[c73]
- view
  authority control:
- export record
  dblp key:
  - conf/acsac/HuamanOKEF24
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/acsac/HuamanOKEF24
Nicolas Huaman, Marten Oltrogge, Sabrina Klivan, Yannick Evers, Sascha Fahl:
Passwords To-Go: Investigating Multifaceted Challenges for Password Managers in the Android Ecosystem. ACSAC 2024: 304-320
[c72]
- view
  authority control:
- export record
  dblp key:
  - conf/ccs/KlostermeyerAHK24
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/ccs/KlostermeyerAHK24
Philip Klostermeyer, Sabrina Amft, Sandra Höltervennhoff, Alexander Krause, Niklas Busch, Sascha Fahl:
Skipping the Security Side Quests: A Qualitative Study on Security Practices and Challenges in Game Development. CCS 2024: 2651-2665
[c71]
- view
  authority control:
- export record
  dblp key:
  - conf/ccs/KlemmerHPLBPMRV24
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/ccs/KlemmerHPLBPMRV24
Jan H. Klemmer, Stefan Albert Horstmann, Nikhil Patnaik, Cordelia Ludden, Cordell Burton Jr., Carson Powers, Fabio Massacci, Akond Rahman, Daniel Votipka, Heather Richter Lipford, Awais Rashid, Alena Naiakshina, Sascha Fahl:
Using AI Assistants in Software Development: A Qualitative Study on Security Practices and Concerns. CCS 2024: 2726-2740
[c70]
- view
  authority control:
- export record
  dblp key:
  - conf/chi/SchmuserRWSB0SW24
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/chi/SchmuserRWSB0SW24
Juliane Schmüser, Harshini Sri Ramulu, Noah Wöhler, Christian Stransky, Felix Bensmann, Dimitar Dimitrov, Sebastian Schellhammer, Dominik Wermke, Stefan Dietze, Yasemin Acar, Sascha Fahl:
Analyzing Security and Privacy Advice During the 2022 Russian Invasion of Ukraine on Twitter. CHI 2024: 574:1-574:16
[c69]
- view
  authority control:
- export record
  dblp key:
  - conf/chi/BhardwajGDFK24
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/chi/BhardwajGDFK24
Divyanshu Bhardwaj, Carolyn Guthoff, Adrian Dabrowski, Sascha Fahl, Katharina Krombholz:
Mental Models, Expectations and Implications of Client-Side Scanning: An Interview Study with Experts. CHI 2024: 833:1-833:24
[c68]
- view
  - electronic edition via DOI (open access)
  - details & citations
  authority control:
- export record
  dblp key:
  - conf/se/WermkeKWSRAF24
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/se/WermkeKWSRAF24
Dominik Wermke, Jan H. Klemmer, Noah Wöhler, Juliane Schmüser, Harshini Sri Ramulu, Yasemin Acar, Sascha Fahl:
Always Contribute Back: A Qualitative Study on Security Challenges of the Open Source Supply Chain. Software Engineering 2024: 139-140
[c67]
- view
  - electronic edition via DOI (open access)
  - details & citations
  authority control:
- export record
  dblp key:
  - conf/se/WermkeWKFAF24
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/se/WermkeWKFAF24
Dominik Wermke, Noah Wöhler, Jan H. Klemmer, Marcel Fourné, Yasemin Acar, Sascha Fahl:
Committed to Trust: A Qualitative Study on Security and Trust in Open Source Software Projects. Software Engineering 2024: 141-142
[c66]
- view
  authority control:
- export record
  dblp key:
  - conf/sp/AmftHPMF24
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/sp/AmftHPMF24
Sabrina Amft, Sandra Höltervennhoff, Rebecca Panskus, Karola Marky, Sascha Fahl:
Everyone for Themselves? A Qualitative Study about Individual Security Setups of Open Source Software Contributors. SP 2024: 1065-1082
[c65]
- view
  - electronic edition @ usenix.org (open access)
  - details & citations
- export record
  dblp key:
  - conf/uss/FischerTGAFS24
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/uss/FischerTGAFS24
Konstantin Fischer, Ivana Trummová, Phillip Gajland, Yasemin Acar, Sascha Fahl, M. Angela Sasse:
The Challenges of Bringing Cryptography from Research Papers to Products: Results from an Interview Study with Experts. USENIX Security Symposium 2024
[c64]
- view
  - electronic edition @ usenix.org (open access)
  - details & citations
- export record
  dblp key:
  - conf/uss/HoltervennhoffW24
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/uss/HoltervennhoffW24
Sandra Höltervennhoff, Noah Wöhler, Arne Möhle, Marten Oltrogge, Yasemin Acar, Oliver Wiese, Sascha Fahl:
A Mixed-Methods Study on User Experiences and Challenges of Recovery Codes for an End-to-End Encrypted Service. USENIX Security Symposium 2024
[c63]
- view
  - electronic edition @ usenix.org (open access)
  - details & citations
- export record
  dblp key:
  - conf/uss/HuamanSKFATAF24
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/uss/HuamanSKFATAF24
Nicolas Huaman, Jacques Suray, Jan H. Klemmer, Marcel Fourné, Sabrina Amft, Ivana Trummová, Yasemin Acar, Sascha Fahl:
"You have to read 50 different RFCs that contradict each other": An Interview Study on the Experiences of Implementing Cryptographic Standards. USENIX Security Symposium 2024
[i12]
- view
  - electronic edition via DOI (open access)
  - details & citations
  authority control:
- export record
  dblp key:
  - journals/corr/abs-2405-06371
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/journals/corr/abs-2405-06371
Jan H. Klemmer, Stefan Albert Horstmann, Nikhil Patnaik, Cordelia Ludden, Cordell Burton Jr., Carson Powers, Fabio Massacci, Akond Rahman, Daniel Votipka, Heather Richter Lipford, Awais Rashid, Alena Naiakshina, Sascha Fahl:
Using AI Assistants in Software Development: A Qualitative Study on Security Practices and Concerns. CoRR abs/2405.06371 (2024)
[i11]
- view
  - electronic edition via DOI (open access)
  - details & citations
  authority control:
- export record
  dblp key:
  - journals/corr/abs-2405-20785
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/journals/corr/abs-2405-20785
Jacques Suray, Jan H. Klemmer, Juliane Schmüser, Sascha Fahl:
How the Future Works at SOUPS: Analyzing Future Work Statements and Their Impact on Usable Security and Privacy Research. CoRR abs/2405.20785 (2024)
[i10]
- view
  - electronic edition via DOI (open access)
  - details & citations
  authority control:
- export record
  dblp key:
  - journals/corr/abs-2409-05014
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/journals/corr/abs-2409-05014
Mahzabin Tamanna, Sivana Hamer, Mindy Tran, Sascha Fahl, Yasemin Acar, Laurie A. Williams:
Unraveling Challenges with Supply-Chain Levels for Software Artifacts (SLSA) for Securing the Software Supply Chain. CoRR abs/2409.05014 (2024)
2023
[j4]
- view
  authority control:
- export record
  dblp key:
  - journals/ieeesp/FourneWFA23
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/journals/ieeesp/FourneWFA23
Marcel Fourné, Dominik Wermke, Sascha Fahl, Yasemin Acar:
A Viewpoint on Human Factors in Software Supply Chain Security: A Research Agenda. IEEE Secur. Priv. 21(6): 59-63 (2023)
[j3]
- view
  - electronic edition via DOI (open access)
  - details & citations
  authority control:
- export record
  dblp key:
  - journals/popets/UtzADHFS23
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/journals/popets/UtzADHFS23
Christine Utz, Sabrina Amft, Martin Degeling, Thorsten Holz, Sascha Fahl, Florian Schaub:
Privacy Rarely Considered: Exploring Considerations in the Adoption of Third-Party Services by Websites. Proc. Priv. Enhancing Technol. 2023(1): 5-28 (2023)
[c62]
- view
  authority control:
- export record
  dblp key:
  - conf/ccs/KlemmerGSASF23
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/ccs/KlemmerGSASF23
Jan H. Klemmer, Marco Gutfleisch, Christian Stransky, Yasemin Acar, M. Angela Sasse, Sascha Fahl:
"Make Them Change it Every Week!": A Qualitative Exploration of Online Developer Advice on Usable and Secure Authentication. CCS 2023: 2740-2754
[c61]
- view
  authority control:
- export record
  dblp key:
  - conf/ccs/AmftHHKSAF23
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/ccs/AmftHHKSAF23
Sabrina Amft, Sandra Höltervennhoff, Nicolas Huaman, Alexander Krause, Lucy Simko, Yasemin Acar, Sascha Fahl:
"We've Disabled MFA for You": An Evaluation of the Security and Usability of Multi-Factor Authentication Recovery Deployments. CCS 2023: 3138-3152
[c60]
- view
  authority control:
- export record
  dblp key:
  - conf/secdev/KrugerRWNABAMF23
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/secdev/KrugerRWNABAMF23
Stefan Krüger, Michael Reif, Anna-Katharina Wickert, Sarah Nadi, Karim Ali, Eric Bodden, Yasemin Acar, Mira Mezini, Sascha Fahl:
Securing Your Crypto-API Usage Through Tool Support - A Usability Study. SecDev 2023: 14-25
[c59]
- view
  - electronic edition @ usenix.org (open access)
  - details & citations
- export record
  dblp key:
  - conf/soups/AmftHHAF23
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/soups/AmftHHAF23
Sabrina Amft, Sandra Höltervennhoff, Nicolas Huaman, Yasemin Acar, Sascha Fahl:
"Would You Give the Same Priority to the Bank and a Game? I Do Not!" Exploring Credential Management Strategies and Obstacles during Password Manager Setup. SOUPS 2023: 171-190
[c58]
- view
  - electronic edition @ usenix.org (open access)
  - details & citations
- export record
  dblp key:
  - conf/soups/PanskusNFM23
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/soups/PanskusNFM23
Rebecca Panskus, Max Ninow, Sascha Fahl, Karola Marky:
Privacy Mental Models of Electronic Health Records: A German Case Study. SOUPS 2023: 525-542
[c57]
- view
  authority control:
- export record
  dblp key:
  - conf/sp/FourneWEFA23
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/sp/FourneWEFA23
Marcel Fourné, Dominik Wermke, William Enck, Sascha Fahl, Yasemin Acar:
It's like flossing your teeth: On the Importance and Challenges of Reproducible Builds for Software Supply Chain Security. SP 2023: 1527-1544
[c56]
- view
  authority control:
- export record
  dblp key:
  - conf/sp/WermkeKWSRAF23
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/sp/WermkeKWSRAF23
Dominik Wermke, Jan H. Klemmer, Noah Wöhler, Juliane Schmüser, Harshini Sri Ramulu, Yasemin Acar, Sascha Fahl:
"Always Contribute Back": A Qualitative Study on Security Challenges of the Open Source Supply Chain. SP 2023: 1545-1560
[c55]
- view
  - electronic edition @ usenix.org (open access)
  - details & citations
- export record
  dblp key:
  - conf/uss/HoltervennhoffK23
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/uss/HoltervennhoffK23
Sandra Höltervennhoff, Philip Klostermeyer, Noah Wöhler, Yasemin Acar, Sascha Fahl:
"I wouldn't want my unsafe code to run my pacemaker": An Interview Study on the Use, Comprehension, and Perceived Risks of Unsafe Rust. USENIX Security Symposium 2023: 2509-2525
[c54]
- view
  - electronic edition @ usenix.org (open access)
  - details & citations
- export record
  dblp key:
  - conf/uss/KrauseKHWAF23
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/uss/KrauseKHWAF23
Alexander Krause, Jan H. Klemmer, Nicolas Huaman, Dominik Wermke, Yasemin Acar, Sascha Fahl:
Pushed by Accident: A Mixed-Methods Study on Strategies of Handling Secret Information in Source Code Repositories. USENIX Security Symposium 2023: 2527-2544
[c53]
- view
  - electronic edition @ usenix.org (open access)
  - details & citations
- export record
  dblp key:
  - conf/uss/MinkKSFA23
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/uss/MinkKSFA23
Jaron Mink, Harjot Kaur, Juliane Schmüser, Sascha Fahl, Yasemin Acar:
"Security is not my field, I'm a stats guy": A Qualitative Root Cause Analysis of Barriers to Adversarial Machine Learning Defenses in Industry. USENIX Security Symposium 2023: 3763-3780
[d1]
- view
  - electronic edition via DOI (open access)
  - details & citations
  authority control:
- export record
  dblp key:
  - data/10/KrugerRWNABAF23
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/data/10/KrugerRWNABAF23
Stefan Krüger, Michael Reif, Anna-Katharina Wickert, Sarah Nadi, Karim Ali, Eric Bodden, Yasemin Acar, Sascha Fahl:
Securing Your Crypto-API Usage Through Tool Support - A Usability Study. Zenodo, 2023
[i9]
- view
  - electronic edition via DOI (open access)
  - details & citations
  authority control:
- export record
  dblp key:
  - journals/corr/abs-2306-09708
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/journals/corr/abs-2306-09708
Sabrina Amft, Sandra Höltervennhoff, Nicolas Huaman, Alexander Krause, Lucy Simko, Yasemin Acar, Sascha Fahl:
Lost and not Found: An Investigation of Recovery Methods for Multi-Factor Authentication. CoRR abs/2306.09708 (2023)
[i8]
- view
  - electronic edition via DOI (open access)
  - details & citations
  authority control:
- export record
  dblp key:
  - journals/corr/abs-2309-00744
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/journals/corr/abs-2309-00744
Jan H. Klemmer, Marco Gutfleisch, Christian Stransky, Yasemin Acar, M. Angela Sasse, Sascha Fahl:
"Make Them Change it Every Week!": A Qualitative Exploration of Online Developer Advice on Usable and Secure Authentication. CoRR abs/2309.00744 (2023)
2022
[j2]
- view
  authority control:
- export record
  dblp key:
  - journals/ieeesp/HuamanAOAF22
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/journals/ieeesp/HuamanAOAF22
Nicolas Huaman, Sabrina Amft, Marten Oltrogge, Yasemin Acar, Sascha Fahl:
They Would Do Better If They Worked Together: Interaction Problems Between Password Managers and the Web. IEEE Secur. Priv. 20(2): 49-60 (2022)
[c52]
- view
  - electronic edition @ usenix.org (open access)
  - details & citations
- export record
  dblp key:
  - conf/soups/HuamanKWKSAF22
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/soups/HuamanKWKSAF22
Nicolas Huaman, Alexander Krause, Dominik Wermke, Jan H. Klemmer, Christian Stransky, Yasemin Acar, Sascha Fahl:
If You Can't Get Them to the Lab: Evaluating a Virtual Study Environment with Security Information Workers. SOUPS @ USENIX Security Symposium 2022: 313-330
[c51]
- view
  authority control:
- export record
  dblp key:
  - conf/sp/StranskyW0AF22
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/sp/StranskyW0AF22
Christian Stransky, Oliver Wiese, Volker Roth, Yasemin Acar, Sascha Fahl:
27 Years and 81 Million Opportunities Later: Investigating the Use of Email Encryption for an Entire University. SP 2022: 860-875
[c50]
- view
  authority control:
- export record
  dblp key:
  - conf/sp/GutfleischKBASF22
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/sp/GutfleischKBASF22
Marco Gutfleisch, Jan H. Klemmer, Niklas Busch, Yasemin Acar, M. Angela Sasse, Sascha Fahl:
How Does Usable Security (Not) End Up in Software Products? Results From a Qualitative Interview Study. SP 2022: 893-910
[c49]
- view
  authority control:
- export record
  dblp key:
  - conf/sp/WermkeWKFAF22
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/sp/WermkeWKFAF22
Dominik Wermke, Noah Wöhler, Jan H. Klemmer, Marcel Fourné, Yasemin Acar, Sascha Fahl:
Committed to Trust: A Qualitative Study on Security & Trust in Open Source Software Projects. SP 2022: 1880-1896
[c48]
- view
  - electronic edition @ usenix.org (open access)
  - details & citations
- export record
  dblp key:
  - conf/uss/KaurAVAF22
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/uss/KaurAVAF22
Harjot Kaur, Sabrina Amft, Daniel Votipka, Yasemin Acar, Sascha Fahl:
Where to Recruit for Security Development Studies: Comparing Six Software Developer Samples. USENIX Security Symposium 2022: 4041-4058
[i7]
- view
  - electronic edition via DOI (open access)
  - details & citations
  authority control:
- export record
  dblp key:
  - journals/corr/abs-2203-11387
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/journals/corr/abs-2203-11387
Christine Utz, Sabrina Amft, Martin Degeling, Thorsten Holz, Sascha Fahl, Florian Schaub:
Privacy Rarely Considered: Exploring Considerations in the Adoption of Third-Party Services by Websites. CoRR abs/2203.11387 (2022)
[i6]
- view
  - electronic edition via DOI (open access)
  - details & citations
  authority control:
- export record
  dblp key:
  - journals/corr/abs-2208-11581
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/journals/corr/abs-2208-11581
Juliane Schmüser, Noah Wöhler, Harshini Sri Ramulu, Christian Stransky, Dominik Wermke, Sascha Fahl, Yasemin Acar:
"Please help share!": Security and Privacy Advice on Twitter during the 2022 Russian Invasion of Ukraine. CoRR abs/2208.11581 (2022)
[i5]
- view
  - electronic edition via DOI (open access)
  - details & citations
  authority control:
- export record
  dblp key:
  - journals/corr/abs-2211-06213
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/journals/corr/abs-2211-06213
Alexander Krause, Jan H. Klemmer, Nicolas Huaman, Dominik Wermke, Yasemin Acar, Sascha Fahl:
Committed by Accident: Studying Prevention and Remediation Strategies Against Secret Leakage in Source Code Repositories. CoRR abs/2211.06213 (2022)
2021
[c47]
- view
  - electronic edition @ usenix.org (open access)
  - details & citations
- export record
  dblp key:
  - conf/soups/HaringGT0WFA21
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/soups/HaringGT0WFA21
Maximilian Häring, Eva Gerlitz, Christian Tiefenau, Matthew Smith, Dominik Wermke, Sascha Fahl, Yasemin Acar:
Never ever or no matter what: Investigating Adoption Intentions and Misconceptions about the Corona-Warn-App in Germany. SOUPS @ USENIX Security Symposium 2021: 77-98
[c46]
- view
  - electronic edition @ usenix.org (open access)
  - details & citations
- export record
  dblp key:
  - conf/soups/StranskyWSHAFWU21
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/soups/StranskyWSHAFWU21
Christian Stransky, Dominik Wermke, Johanna Schrader, Nicolas Huaman, Yasemin Acar, Anna Lena Fehlhaber, Miranda Wei, Blase Ur, Sascha Fahl:
On the Limited Impact of Visualizing Encryption: Perceptions of E2E Messaging Security. SOUPS @ USENIX Security Symposium 2021: 437-454
[c45]
- view
  authority control:
- export record
  dblp key:
  - conf/sp/HuamanAOAF21
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/sp/HuamanAOAF21
Nicolas Huaman, Sabrina Amft, Marten Oltrogge, Yasemin Acar, Sascha Fahl:
They Would do Better if They Worked Together: The Case of Interaction Problems Between Password Managers and Websites. SP 2021: 1367-1381
[c44]
- view
  - electronic edition @ usenix.org (open access)
  - details & citations
- export record
  dblp key:
  - conf/uss/HuamanSSWADF21
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/uss/HuamanSSWADF21
Nicolas Huaman, Bennet von Skarczinski, Christian Stransky, Dominik Wermke, Yasemin Acar, Arne Dreißigacker, Sascha Fahl:
A Large-Scale Interview Study on Information Security in and Attacks against Small and Medium-sized Enterprises. USENIX Security Symposium 2021: 1235-1252
[c43]
- view
  - electronic edition @ usenix.org (open access)
  - details & citations
- export record
  dblp key:
  - conf/uss/OltroggeHAA0F21
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/uss/OltroggeHAA0F21
Marten Oltrogge, Nicolas Huaman, Sabrina Amft, Yasemin Acar, Michael Backes, Sascha Fahl:
Why Eve and Mallory Still Love Android: Revisiting TLS (In)Security in Android Applications. USENIX Security Symposium 2021: 4347-4364
2020
[c42]
- view
  authority control:
- export record
  dblp key:
  - conf/chi/GorskiAIF20
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/chi/GorskiAIF20
Peter Leo Gorski, Yasemin Acar, Luigi Lo Iacono, Sascha Fahl:
Listen to Developers! A Participatory Design Study on Security Warnings for Cryptographic APIs. CHI 2020: 1-13
[c41]
- view
  - electronic edition @ usenix.org (open access)
  - details & citations
- export record
  dblp key:
  - conf/soups/WermkeHSBAF20
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/soups/WermkeHSBAF20
Dominik Wermke, Nicolas Huaman, Christian Stransky, Niklas Busch, Yasemin Acar, Sascha Fahl:
Cloudy with a Chance of Misconceptions: Exploring Users' Perceptions and Expectations of Security and Privacy in Cloud Office Suites. SOUPS @ USENIX Security Symposium 2020: 359-377
[c40]
- view
  - electronic edition @ usenix.org (open access)
  - details & citations
- export record
  dblp key:
  - conf/uss/WeirHF20
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/uss/WeirHF20
Charles Weir, Ben Hermann, Sascha Fahl:
From Needs to Actions to Secure Apps? The Effect of Requirements and Developer Practices on App Security. USENIX Security Symposium 2020: 289-305

2010 – 2019

see FAQ

What is the meaning of the colors in the publication lists?

2019
[c39]
- view
  authority control:
- export record
  dblp key:
  - conf/ccs/UtzDFSH19
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/ccs/UtzDFSH19
Christine Utz, Martin Degeling, Sascha Fahl, Florian Schaub, Thorsten Holz:
(Un)informed Consent: Studying GDPR Consent Notices in the Field. CCS 2019: 973-990
[i4]
- view
  - electronic edition @ arxiv.org (open access)
  - details & citations
- export record
  dblp key:
  - journals/corr/abs-1909-02638
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/journals/corr/abs-1909-02638
Christine Utz, Martin Degeling, Sascha Fahl, Florian Schaub, Thorsten Holz:
(Un)informed Consent: Studying GDPR Consent Notices in the Field. CoRR abs/1909.02638 (2019)
2018
[c38]
- view
  authority control:
- export record
  dblp key:
  - conf/acsac/WermkeHARTF18
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/acsac/WermkeHARTF18
Dominik Wermke, Nicolas Huaman, Yasemin Acar, Bradley Reaves, Patrick Traynor, Sascha Fahl:
A Large Scale Investigation of Obfuscation Use in Google Play. ACSAC 2018: 222-235
[c37]
- view
  - electronic edition @ usenix.org (open access)
  - details & citations
- export record
  dblp key:
  - conf/soups/GorskiIWSMAF18
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/soups/GorskiIWSMAF18
Peter Leo Gorski, Luigi Lo Iacono, Dominik Wermke, Christian Stransky, Sebastian Möller, Yasemin Acar, Sascha Fahl:
Developers Deserve Security Warnings, Too: On the Effect of Integrated Security Advice on Cryptographic API Misuse. SOUPS @ USENIX Security Symposium 2018: 265-281
[c36]
- view
  authority control:
- export record
  dblp key:
  - conf/sp/OltroggeDSAFRPB18
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/sp/OltroggeDSAFRPB18
Marten Oltrogge, Erik Derr, Christian Stransky, Yasemin Acar, Sascha Fahl, Christian Rossow, Giancarlo Pellegrino, Sven Bugiel, Michael Backes:
The Rise of the Citizen Developer: Assessing the Security Impact of Online App Generators. IEEE Symposium on Security and Privacy 2018: 634-647
[c35]
- view
  - electronic edition @ usenix.org (open access)
  - details & citations
- export record
  dblp key:
  - conf/uss/LyastaniSF0B18
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/uss/LyastaniSF0B18
Sanam Ghorbani Lyastani, Michael Schilling, Sascha Fahl, Michael Backes, Sven Bugiel:
Better managed than memorized? Studying the Impact of Managers on Password Strength and Reuse. USENIX Security Symposium 2018: 203-220
[c34]
- view
  authority control:
- export record
  dblp key:
  - conf/www/WuGWAFU18
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/www/WuGWAFU18
Yuxi Wu, Panya Gupta, Miranda Wei, Yasemin Acar, Sascha Fahl, Blase Ur:
Your Secrets Are Safe: How Browsers' Explanations Impact Misconceptions About Private Browsing Mode. WWW 2018: 217-226
[i3]
- view
  - electronic edition @ arxiv.org (open access)
  - details & citations
- export record
  dblp key:
  - journals/corr/abs-1801-02742
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/journals/corr/abs-1801-02742
Dominik Wermke, Nicolas Huaman, Yasemin Acar, Bradley Reaves, Patrick Traynor, Sascha Fahl:
A Large Scale Investigation of Obfuscation Use in Google Play. CoRR abs/1801.02742 (2018)
2017
[j1]
- view
  authority control:
- export record
  dblp key:
  - journals/ieeesp/AcarBFKMS17
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/journals/ieeesp/AcarBFKMS17
Yasemin Acar, Michael Backes, Sascha Fahl, Doowon Kim, Michelle L. Mazurek, Christian Stransky:
How Internet Resources Might Be Helping You Develop Faster but Less Securely. IEEE Secur. Priv. 15(2): 50-60 (2017)
[c33]
- view
  authority control:
- export record
  dblp key:
  - conf/ccs/NguyenWA0WF17
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/ccs/NguyenWA0WF17
Duc Cuong Nguyen, Dominik Wermke, Yasemin Acar, Michael Backes, Charles Weir, Sascha Fahl:
A Stitch in Time: Supporting Android Developers in WritingSecure Code. CCS 2017: 1065-1077
[c32]
- view
  authority control:
- export record
  dblp key:
  - conf/ccs/AcerSFFBDBST17
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/ccs/AcerSFFBDBST17
Mustafa Emre Acer, Emily Stark, Adrienne Porter Felt, Sascha Fahl, Radhika Bhargava, Bhanu Dev, Matt Braithwaite, Ryan Sleevi, Parisa Tabriz:
Where the Wild Warnings Are: Root Causes of Chrome HTTPS Certificate Errors. CCS 2017: 1407-1420
[c31]
- view
  authority control:
- export record
  dblp key:
  - conf/ccs/DerrBFA017
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/ccs/DerrBFA017
Erik Derr, Sven Bugiel, Sascha Fahl, Yasemin Acar, Michael Backes:
Keep me Updated: An Empirical Study of Third-Party Library Updatability on Android. CCS 2017: 2187-2200
[c30]
- view
  authority control:
- export record
  dblp key:
  - conf/secdev/AcarSWWMF17
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/secdev/AcarSWWMF17
Yasemin Acar, Christian Stransky, Dominik Wermke, Charles Weir, Michelle L. Mazurek, Sascha Fahl:
Developers Need Support, Too: A Survey of Security Advice for Software Developers. SecDev 2017: 22-26
[c29]
- view
  - electronic edition @ usenix.org (open access)
  - details & citations
- export record
  dblp key:
  - conf/soups/AcarSWMF17
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/soups/AcarSWMF17
Yasemin Acar, Christian Stransky, Dominik Wermke, Michelle L. Mazurek, Sascha Fahl:
Security Developer Studies with GitHub Users: Exploring a Convenience Sample. SOUPS 2017: 81-95
[c28]
- view
  authority control:
- export record
  dblp key:
  - conf/sp/FischerBXSA0F17
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/sp/FischerBXSA0F17
Felix Fischer, Konstantin Böttinger, Huang Xiao, Christian Stransky, Yasemin Acar, Michael Backes, Sascha Fahl:
Stack Overflow Considered Harmful? The Impact of Copy&Paste on Android Application Security. IEEE Symposium on Security and Privacy 2017: 121-136
[c27]
- view
  authority control:
- export record
  dblp key:
  - conf/sp/Acar0FGKMS17
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/sp/Acar0FGKMS17
Yasemin Acar, Michael Backes, Sascha Fahl, Simson L. Garfinkel, Doowon Kim, Michelle L. Mazurek, Christian Stransky:
Comparing the Usability of Cryptographic APIs. IEEE Symposium on Security and Privacy 2017: 154-171
[c26]
- view
  - electronic edition @ usenix.org (open access)
  - details & citations
- export record
  dblp key:
  - conf/uss/StranskyANWKR0G17
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/uss/StranskyANWKR0G17
Christian Stransky, Yasemin Acar, Duc Cuong Nguyen, Dominik Wermke, Doowon Kim, Elissa M. Redmiles, Michael Backes, Simson L. Garfinkel, Michelle L. Mazurek, Sascha Fahl:
Lessons Learned from Using an Online Platform to Conduct Large-Scale, Online Controlled Security Experiments with Software Developers. CSET @ USENIX Security Symposium 2017
[i2]
- view
  - electronic edition @ arxiv.org (open access)
  - details & citations
- export record
  dblp key:
  - journals/corr/abs-1710-03135
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/journals/corr/abs-1710-03135
Felix Fischer, Konstantin Böttinger, Huang Xiao, Christian Stransky, Yasemin Acar, Michael Backes, Sascha Fahl:
Stack Overflow Considered Harmful? The Impact of Copy&Paste on Android Application Security. CoRR abs/1710.03135 (2017)
[i1]
- view
  - electronic edition @ arxiv.org (open access)
  - details & citations
- export record
  dblp key:
  - journals/corr/abs-1712-08940
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/journals/corr/abs-1712-08940
Sanam Ghorbani Lyastani, Michael Schilling, Sascha Fahl, Sven Bugiel, Michael Backes:
Studying the Impact of Managers on Password Strength and Reuse. CoRR abs/1712.08940 (2017)
2016
[b1]
- view
  authority control:
- export record
  dblp key:
  - phd/dnb/Fahl16
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/phd/dnb/Fahl16
Sascha Fahl:
On the importance of ecologically valid usable security research for end users and IT workers. University of Hanover, Hannover, Germany, 2016
[c25]
- view
  authority control:
- export record
  dblp key:
  - conf/secdev/AcarFM16
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/secdev/AcarFM16
Yasemin Acar, Sascha Fahl, Michelle L. Mazurek:
You are Not Your Developer, Either: A Research Agenda for Usable Security and Privacy Research Beyond End Users. SecDev 2016: 3-8
[c24]
- view
  authority control:
- export record
  dblp key:
  - conf/sp/AcarBFKMS16
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/sp/AcarBFKMS16
Yasemin Acar, Michael Backes, Sascha Fahl, Doowon Kim, Michelle L. Mazurek, Christian Stransky:
You Get Where You're Looking for: The Impact of Information Sources on Code Security. IEEE Symposium on Security and Privacy 2016: 289-305
[c23]
- view
  authority control:
- export record
  dblp key:
  - conf/sp/Acar0BFM016
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/sp/Acar0BFM016
Yasemin Acar, Michael Backes, Sven Bugiel, Sascha Fahl, Patrick D. McDaniel, Matthew Smith:
SoK: Lessons Learned from Android Security Research for Appified Software Platforms. IEEE Symposium on Security and Privacy 2016: 433-451
[c22]
- view
  - electronic edition @ usenix.org (open access)
  - details & citations
- export record
  dblp key:
  - conf/uss/DechandSBAF016
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/uss/DechandSBAF016
Sergej Dechand, Dominik Schürmann, Karoline Busse, Yasemin Acar, Sascha Fahl, Matthew Smith:
An Empirical Study of Textual Key-Fingerprint Representations. USENIX Security Symposium 2016: 193-208
2015
[c21]
- view
  authority control:
- export record
  dblp key:
  - conf/ccs/PerlD0AYRFA15
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/ccs/PerlD0AYRFA15
Henning Perl, Sergej Dechand, Matthew Smith, Daniel Arp, Fabian Yamaguchi, Konrad Rieck, Sascha Fahl, Yasemin Acar:
VCCFinder: Finding Potential Vulnerabilities in Open-Source Projects to Assist Code Audits. CCS 2015: 426-437
[c20]
- view
  authority control:
- export record
  dblp key:
  - conf/sp/UngerDBFPG015
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/sp/UngerDBFPG015
Nik Unger, Sergej Dechand, Joseph Bonneau, Sascha Fahl, Henning Perl, Ian Goldberg, Matthew Smith:
SoK: Secure Messaging. IEEE Symposium on Security and Privacy 2015: 232-249
[c19]
- view
  - electronic edition @ usenix.org (open access)
  - details & citations
- export record
  dblp key:
  - conf/uss/OltroggeAD0F15
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/uss/OltroggeAD0F15
Marten Oltrogge, Yasemin Acar, Sergej Dechand, Matthew Smith, Sascha Fahl:
To Pin or Not to Pin-Helping App Developers Bullet Proof Their TLS Connections. USENIX Security Symposium 2015: 239-254
2014
[c18]
- view
  authority control:
- export record
  dblp key:
  - conf/ccs/FahlAPS14
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/ccs/FahlAPS14
Sascha Fahl, Yasemin Acar, Henning Perl, Matthew Smith:
Why eve and mallory (also) love webmasters: a study on the root causes of SSL misconfigurations. AsiaCCS 2014: 507-512
[c17]
- view
  authority control:
- export record
  dblp key:
  - conf/ccs/FahlDPFSS14
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/ccs/FahlDPFSS14
Sascha Fahl, Sergej Dechand, Henning Perl, Felix Fischer, Jaromir Smrcek, Matthew Smith:
Hey, NSA: Stay Away from my Market! Future Proofing App Markets against Powerful Attackers. CCS 2014: 1143-1155
[c16]
- view
  authority control:
- export record
  dblp key:
  - conf/csfw/HarbachFS14
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/csfw/HarbachFS14
Marian Harbach, Sascha Fahl, Matthew Smith:
Who's Afraid of Which Bad Wolf? A Survey of IT Security Risk Awareness. CSF 2014: 97-110
[c15]
- view
  authority control:
- export record
  dblp key:
  - conf/fc/PerlFS14
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/fc/PerlFS14
Henning Perl, Sascha Fahl, Matthew Smith:
You Won't Be Needing These Any More: On Removing Unused Certificates from Trust Stores. Financial Cryptography 2014: 307-315
2013
[c14]
- view
  authority control:
- export record
  dblp key:
  - conf/ccs/FahlHPKS13
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/ccs/FahlHPKS13
Sascha Fahl, Marian Harbach, Henning Perl, Markus Koetter, Matthew Smith:
Rethinking SSL development in an appified world. CCS 2013: 49-60
[c13]
- view
  authority control:
- export record
  dblp key:
  - conf/fc/HarbachFYS13
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/fc/HarbachFYS13
Marian Harbach, Sascha Fahl, Polina Yakovleva, Matthew Smith:
Sorry, I Don't Get It: An Analysis of Warning Message Texts. Financial Cryptography Workshops 2013: 94-111
[c12]
- view
  authority control:
- export record
  dblp key:
  - conf/fc/FahlHOMS13
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/fc/FahlHOMS13
Sascha Fahl, Marian Harbach, Marten Oltrogge, Thomas Muders, Matthew Smith:
Hey, You, Get Off of My Clipboard - On How Usability Trumps Security in Android Password Managers. Financial Cryptography 2013: 144-161
[c11]
- view
  authority control:
- export record
  dblp key:
  - conf/pet/HarbachFRS13
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/pet/HarbachFRS13
Marian Harbach, Sascha Fahl, Matthias Rieger, Matthew Smith:
On the Acceptance of Privacy-Preserving Authentication Technology: The Curious Case of National Identity Cards. Privacy Enhancing Technologies 2013: 245-264
[c10]
- view
  authority control:
- export record
  dblp key:
  - conf/soups/FahlHAS13
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/soups/FahlHAS13
Sascha Fahl, Marian Harbach, Yasemin Acar, Matthew Smith:
On the ecological validity of a password study. SOUPS 2013: 13:1-13:13
2012
[c9]
- view
  authority control:
- export record
  dblp key:
  - conf/ccs/FahlHMSBF12
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/ccs/FahlHMSBF12
Sascha Fahl, Marian Harbach, Thomas Muders, Matthew Smith, Lars Baumgärtner, Bernd Freisleben:
Why eve and mallory love android: an analysis of android SSL (in)security. CCS 2012: 50-61
[c8]
- view
  authority control:
- export record
  dblp key:
  - conf/ccs/HarbachFMS12
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/ccs/HarbachFMS12
Marian Harbach, Sascha Fahl, Thomas Muders, Matthew Smith:
Towards measuring warning readability. CCS 2012: 989-991
[c7]
- view
  authority control:
- export record
  dblp key:
  - conf/dest/FahlH012
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/dest/FahlH012
Sascha Fahl, Marian Harbach, Matthew Smith:
Human-centric visual access control for clinical data management. DEST 2012: 1-8
[c6]
- view
  authority control:
- export record
  dblp key:
  - conf/ht/FahlHMS12
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/ht/FahlHMS12
Sascha Fahl, Marian Harbach, Thomas Muders, Matthew Smith:
TrustSplit: usable confidentiality for social network messaging. HT 2012: 145-154
[c5]
- view
  authority control:
- export record
  dblp key:
  - conf/pst/HarbachFBMS12
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/pst/HarbachFBMS12
Marian Harbach, Sascha Fahl, Michael Brenner, Thomas Muders, Matthew Smith:
Towards privacy-preserving access control with hidden policies, hidden credentials and hidden decisions. PST 2012: 17-24
[c4]
- view
  authority control:
- export record
  dblp key:
  - conf/soups/FahlHMSS12
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/soups/FahlHMSS12
Sascha Fahl, Marian Harbach, Thomas Muders, Matthew Smith, Uwe Sander:
Helping Johnny 2.0 to encrypt his Facebook conversations. SOUPS 2012: 11
[c3]
- view
  authority control:
- export record
  dblp key:
  - conf/trustcom/FahlHMS12
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/trustcom/FahlHMS12
Sascha Fahl, Marian Harbach, Thomas Muders, Matthew Smith:
Confidentiality as a Service - Usable Security for the Cloud. TrustCom 2012: 153-162
[c2]
- view
  authority control:
- export record
  dblp key:
  - conf/www/HarbachFMS12
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/www/HarbachFMS12
Marian Harbach, Sascha Fahl, Thomas Muders, Matthew Smith:
All our messages are belong to us: usable confidentiality in social networks. WWW (Companion Volume) 2012: 519-520
2011
[c1]
- view
  authority control:
- export record
  dblp key:
  - conf/pdp/SchmidtFSF11
- ask others
- share record
  persistent URL:
  - https://dblp.org/rec/conf/pdp/SchmidtFSF11
Matthias Schmidt, Sascha Fahl, Roland Schwarzkopf, Bernd Freisleben:
TrustBox: A Security Architecture for Preventing Data Breaches. PDP 2011: 635-639

Coauthor Index

see FAQ

manage site settings

To protect your privacy, all features that rely on external API calls from your browser are turned off by default. You need to opt-in for them to become active. All settings here will be stored as cookies with your web browser. For more information see our F.A.Q.