Publications

Privacy at a Glance: A Process to Learn Modular Privacy Icons During Web Browsing
Replication: Measuring User Perceptions in Smartphone Security and Privacy in Germany
Replicating a Study of Ransomware in Germany
Behavioral responses to a cyber attack in a hospital environment
Do you Really Code? Designing and Evaluating Screening Questions for Online Surveys with Programmers
The Effect of Nudges and Boosts on Browsing Privacy in a Naturalistic Environment
Werkzeuge für Usable (Cyber-)Security
Please do not use !?_ or your License Plate Number: Analyzing Password Policies in German Companies
Never ever or no matter what: Investigating Adoption Intentions and Misconceptions about the Corona-Warn-App in Germany
Code Reviewing as Methodology for Online Security Studies with Developers - A Case Study with Freelancers on Password Storage
A Qualitative Usability Evaluation of the Clang Static Analyzer and libFuzzer with CS Students and CTF Players
Vision: I don’t want to use my Phone! A Cognitive Walkthrough for YubiKeys
Implementation and In Situ Assessment of Contextual Privacy Policies
On Conducting Security Developer Studies with CS Students: Examining a Password-Storage Study with CS Students, Freelancers, and Company Developers
Security, Availability, and Multiple Information Sources: Exploring Update Behavior of System Administrators
Replication: On the Ecological Validity of Online Security Developer Studies: Exploring Deception in a Password-Storage Study with Freelancers
Making Privacy Graspable: Can we Nudge Users to use Privacy Enhancing Techniques?
A Usability Evaluation of Let's Encrypt and Certbot: Usable Security Done Right
"Please enter your PIN" -- On the Risk of Bypass Attacks on Biometric Authentication on Mobile Devices
SentiBooks: Enhancing Audiobooks via Affective Computing and Smart Light Bulbs
In Encryption We Don’t Trust: The Effect of End-to-End Encryption to the Masses on User Perception
"If you want, I can store the encrypted password": A Password-Storage Field Study with Freelance Developers
"If HTTPS Were Secure, I Wouldn't Need 2FA" - End User and Administrator Mental Models of HTTPS
Towards a Graphical User Interface for Quantitative Analysis in Digital Musicology
Replication: No One Can Hack My Mind Revisiting a Study on Expert and Non-Expert Security Practices and Advice
Empirical Evaluation of Secure Development Processes (Dagstuhl Seminar 19231)
A Case Study on (Security) Update Processes in Working Environments: Understanding the Context
Evaluation kontextueller Datenschutzerklärungen
Deception Task Design in Developer Password Studies: Exploring a Student Sample
Why Do Developers Get Password Storage Wrong? A Qualitative Usability Study
Obstacles to the Adoption of Secure Communication Tools
Exploring Design Directions for Wearable Privacy
The Security-Usability Tradeoff Myth [Guest editors' introduction]
Developers are Not the Enemy!: The Need for Usable Security APIs
SoK: Lessons Learned from Android Security Research for Appified Software Platforms
Helping Johnny to Analyze Malware: A Usability-Optimized Decompiler and Malware Analysis User Study
Usable Security—The Source Awakens
VCCFinder: Finding Potential Vulnerabilities in Open-Source Projects to Assist Code Audits
SoK: Secure Messaging
Where Have You Been? Using Location-Based Security Questions for Fallback Authentication
To Pin or Not to Pin—Helping App Developers Bullet Proof Their TLS Connections
Participatory Design for Security-Related User Interfaces – NDSS Symposium
Ok Glass, Leave Me Alone: Towards a Systematization of Privacy Enhancing Technologies for Wearable Computing
No More Gotos: Decompilation Using Pattern-Independent Control-Flow Structuring and Semantics-Preserving Transformations – NDSS Symposium
Developers Are Users Too: Designing Crypto and Security APIs That Busy Engineers and Sysadmins Can Use Securely
Hey, NSA: Stay Away from my Market! Future Proofing App Markets against Powerful Attackers
Who's Afraid of Which Bad Wolf? A Survey of IT Security Risk Awareness
Privacy/performance trade-off in private search on bio-medical data
Why eve and mallory (also) love webmasters: a study on the root causes of SSL misconfigurations
Using personal examples to improve risk communication for security & privacy decisions
Now you see me, now you don't: protecting smartphone authentication from shoulder surfers
You Won’t Be Needing These Any More: On Removing Unused Certificates from Trust Stores
On the Awareness, Control and Privacy of Shared Photo Metadata
It’s a Hard Lock Life: A Field Study of Smartphone (Un)Locking Behavior and Risk Perception
Rethinking SSL development in an appified world
On the ecological validity of a password study
Sorry, I Don’t Get It: An Analysis of Warning Message Texts
On the Acceptance of Privacy-Preserving Authentication Technology: The Curious Case of National Identity Cards
Hey, You, Get Off of My Clipboard
Why eve and mallory love android: an analysis of android SSL (in)security
Helping Johnny 2.0 to encrypt his Facebook conversations
Big data privacy issues in public social media