Sebastian Lekies

According to our database, Sebastian Lekies authored at least 17 papers between 2011 and 2023.

Collaborative distances:

• Dijkstra number of four.
• Erdős number of four.

2023

Client-Side Cross-Site Scripting: Exploitation, Detection, Mitigation, and Prevention.

Sebastian Lekies

PhD thesis, 2023

2022

No keys to the kingdom required: a comprehensive investigation of missing authentication vulnerabilities in the wild.

Manuel Karl, Marius Musch, Guoli Ma, Martin Johns, Sebastian Lekies

Proceedings of the 22nd ACM Internet Measurement Conference, 2022

2021

JSONPS: Secure an inherently insecure practice with this one weird trick!

Sebastian Lekies, Damien Engels, Metodi Mitkov

Proceedings of the IEEE European Symposium on Security and Privacy Workshops, 2021

2017

Code-Reuse Attacks for the Web: Breaking Cross-Site Scripting Mitigations via Script Gadgets.

Sebastian Lekies, Krzysztof Kotowicz, Samuel Groß, Eduardo A. Vela Nava, Martin Johns

Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security, 2017

2016

CSP Is Dead, Long Live CSP! On the Insecurity of Whitelists and the Future of Content Security Policy.

Lukas Weichselbaum, Michele Spagnuolo, Sebastian Lekies, Artur Janc

Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security, 2016

2015

The Unexpected Dangers of Dynamic JavaScript.

Sebastian Lekies, Ben Stock, Martin Wentzel, Martin Johns

Proceedings of the 24th USENIX Security Symposium, 2015

From Facepalm to Brain Bender: Exploring Client-Side Cross-Site Scripting.

Ben Stock, Stephan Pfistner, Bernd Kaiser, Sebastian Lekies, Martin Johns

Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security, 2015

2014

Precise Client-side Protection against DOM-based Cross-Site Scripting.

Ben Stock, Sebastian Lekies, Tobias Mueller, Patrick Spiegel, Martin Johns

Proceedings of the 23rd USENIX Security Symposium, San Diego, CA, USA, August 20-22, 2014., 2014

DOM-basiertes Cross-Site Scripting im Web: Reise in ein unerforschtes Land.

Ben Stock, Sebastian Lekies, Martin Johns

Proceedings of the Sicherheit 2014: Sicherheit, 2014

2013

Eradicating DNS Rebinding with the Extended Same-origin Policy.

Martin Johns, Sebastian Lekies, Ben Stock

Proceedings of the 22th USENIX Security Symposium, Washington, DC, USA, August 14-16, 2013, 2013

Tamper-Resistant LikeJacking Protection.

Martin Johns, Sebastian Lekies

Proceedings of the Research in Attacks, Intrusions, and Defenses, 2013

25 million flows later: large-scale detection of DOM-based XSS.

Sebastian Lekies, Ben Stock, Martin Johns

Proceedings of the 2013 ACM SIGSAC Conference on Computer and Communications Security, 2013

2012

On the Fragility and Limitations of Current Browser-Provided Clickjacking Protection Schemes.

Sebastian Lekies, Mario Heiderich

Proceedings of the 6th USENIX Workshop on Offensive Technologies, 2012

Towards stateless, client-side driven Cross-Site Request Forgery protection for Web applications.

Sebastian Lekies, Walter Tighzert, Martin Johns

Proceedings of the Sicherheit 2012: Sicherheit, 2012

DEMACRO: Defense against Malicious Cross-Domain Requests.

Sebastian Lekies, Nick Nikiforakis, Walter Tighzert, Frank Piessens, Martin Johns

Proceedings of the Research in Attacks, Intrusions, and Defenses, 2012

BetterAuth: web authentication revisited.

Martin Johns, Sebastian Lekies, Bastian Braun, Benjamin Flesch

Proceedings of the 28th Annual Computer Security Applications Conference, 2012

2011

Biting the Hand That Serves You: A Closer Look at Client-Side Flash Proxies for Cross-Domain Requests.

Martin Johns, Sebastian Lekies

Proceedings of the Detection of Intrusions and Malware, and Vulnerability Assessment, 2011