Paper-Conference | Sven Bugiel

Trust Nothing: RTOS Security without Run-Time Software TCB

Eric Ackermann

• Aug 13, 2026 • 1 min read

SoK: Capability Operating Systems: Is the Future Finally Here?

Noah Mauthe

• Aug 13, 2026 • 1 min read

Poster: A Systematic Review of Migration-Relevant Software Idioms and Their Interactions with Capability Systems

Fatih Durmaz

• Jul 9, 2026 • 1 min read

High Impedance: Analysis of Publicly Disclosed Vulnerabilities in FPGA IP Cores

Imtiaj A. Chowdhury

• Jul 9, 2026 • 1 min read

From Discovery to Decisions: Archetypal Journeys of Mobile App Users and Their Implications on Privacy

HTMA Riyadh

• Jan 21, 2026 • 1 min read

Stack Overflow Meets Replication: Security Research Amid Evolving Code Snippets

Alfusainey Jallow

• Aug 13, 2025 • 1 min read

Permission Rationales in the Web Ecosystem: An Exploration of Rationale Text and Design Patterns

Yusra Elbitar

• Apr 28, 2025 • 1 min read

The Power of Words: A Comprehensive Analysis of Rationales and Their Effects on Users’ Permission Decisions

Yusra Elbitar

• Feb 24, 2025 • 1 min read

Work-in-Progress: Northcape: Embedded Real-Time Capability-Based Addressing

Eric Ackermann

• Jul 8, 2024 • 1 min read

Measuring the Effects of Stack Overflow Code Snippet Evolution on Open-Source Software Security

Alfusainey Jallow

• Jan 1, 2024 • 1 min read

TALUS: Reinforcing TEE Confidentiality with Cryptographic Coprocessors

Dhiman Chakraborty

• Jan 1, 2023 • 1 min read

A Systematic Study of the Consistency of Two-Factor Authentication User Journeys on Top-Ranked Websites

Sanam Ghorbani Lyastani

• Jan 1, 2023 • 1 min read

Explanation Beats Context: The Effect of Timing & Rationales on Users' Runtime Permission Decisions

Yusra Elbitar

• Jan 1, 2021 • 1 min read

Bringing Balance to the Force: Dynamic Analysis of the Android Application Framework

Abdallah Dawoud

• Jan 1, 2021 • 1 min read

A11y and Privacy don't have to be mutually exclusive: Constraining Accessibility Service Misuse on Android

Jie Huang

• Jan 1, 2021 • 1 min read

Up2Dep: Android Tool Support to Fix Insecure Code Dependencies

Duc Cuong Nguyen

• Jan 1, 2020 • 1 min read

Is FIDO2 the Kingslayer of User Authentication? A Comparative Usability Study of FIDO2 Passwordless Authentication

Sanam Ghorbani Lyastani

• Jan 1, 2020 • 1 min read

Up-To-Crash: Evaluating Third-Party Library Updatability on Android

Jie Huang

• Jan 1, 2019 • 1 min read

simTPM: User-centric TPM for Mobile Devices

Dhiman Chakraborty

• Jan 1, 2019 • 1 min read

Short Text, Large Effect: Measuring the Impact of User Reviews on Android App Security & Privacy

Duc Cuong Nguyen

• Jan 1, 2019 • 1 min read

Secure Multi-execution in Android

Dhiman Chakraborty

• Jan 1, 2019 • 1 min read

DroidCap: OS Support for Capability-based Permissions in Android

Abdallah Dawoud

• Jan 1, 2019 • 1 min read

The Rise of the Citizen Developer: Assessing the Security Impact of Online App Generators

Marten Oltrogge

• Jan 1, 2018 • 1 min read

Better managed than memorized? Studying the Impact of Managers on Password Strength and Reuse

Sanam Ghorbani Lyastani

• Jan 1, 2018 • 1 min read

The ART of App Compartmentalization: Compiler-based Library Privilege Separation on Stock Android

Jie Huang

• Jan 1, 2017 • 1 min read

Seamless In-App Ad Blocking on Stock Android

Michael Backes

• Jan 1, 2017 • 1 min read

Keep me Updated: An Empirical Study of Third-Party Library Updatability on Android

Erik Derr

• Jan 1, 2017 • 1 min read

ARTist: The Android Runtime Instrumentation and Security Toolkit

Michael Backes

• Jan 1, 2017 • 1 min read

SoK: Lessons Learned From Android Security Research For Appified Software Platforms

Yasemin Acar

• Jan 1, 2016 • 1 min read

Reliable Third-Party Library Detection in Android and its Security Applications

Michael Backes

• Jan 1, 2016 • 1 min read

R-Droid: Leveraging Android App Analysis with Static Slice Optimization

Michael Backes

• Jan 1, 2016 • 1 min read

On Demystifying the Android Application Framework: Re-Visiting Android Permission Specification Analysis

Michael Backes

• Jan 1, 2016 • 1 min read

Boxify: Full-fledged App Sandboxing for Stock Android

Michael Backes

• Jan 1, 2015 • 1 min read

Scippa: System-Centric IPC Provenance on Android

Michael Backes

• Jan 1, 2014 • 1 min read

Android Security Framework: Extensible Multi-Layered Access Control on Android

Michael Backes

• Jan 1, 2014 • 1 min read

Flexible and Fine-Grained Mandatory Access Control on Android for Diverse Security and Privacy Policies

Sven Bugiel

• Jan 1, 2013 • 1 min read

Client-controlled Cryptography-as-a-Service in the Cloud

Sören Bleikertz

• Jan 1, 2013 • 1 min read

Advances in Mobile Security

Sven Bugiel

• Jan 1, 2013 • 1 min read

Towards Taming Privilege-Escalation Attacks on Android

Sven Bugiel

• Jan 1, 2012 • 1 min read

Softer Smartcards: Usable Cryptographic Tokens with Secure Execution

Franz Ferdinand Brasser

• Jan 1, 2012 • 1 min read

Twin Clouds: Secure Cloud Computing with Low Latency

Sven Bugiel

• Jan 1, 2011 • 1 min read

Twin Clouds: An Architecture for Secure Cloud Computing (Extended Abstract)

Sven Bugiel

• Jan 1, 2011 • 1 min read

Scalable Trust Establishment with Software Reputation

Sven Bugiel

• Jan 1, 2011 • 1 min read

Practical and Lightweight Domain Isolation on Android

Sven Bugiel

• Jan 1, 2011 • 1 min read

AmazonIA: When Elasticity Snaps Back

Sven Bugiel

• Jan 1, 2011 • 1 min read

TruWalletM: Secure Web Authentication on Mobile Platforms

Sven Bugiel

• Jan 1, 2010 • 1 min read

Implementing an Application-Specific Credential Platform Using Late-Launched Mobile Trusted Module

Sven Bugiel

• Jan 1, 2010 • 1 min read

Trust in a Small Package: Minimized MRTM Software Implementation for Mobile Secure Environments

Jan-Erik Ekberg

• Jan 1, 2009 • 1 min read