Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page

Marco Herzog

dblp:205/2502 · DBLP profile ↗
← Back
2ranked-venue papers
0as first author
1since 2021 · last 2024
—ORCID · none

Domains — the database's venue-derived domains; a paper can count in several

Security and privacy · 2 · 1 since 2021

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Network and information security
2 papers
Network security · 47% Authentication and access control · 36% Cryptographic primitives and cryptanalysis · 18%
Computer networks
1 paper
Network management and operations · 100%

Topics — the 5 heaviest of 6, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Network security › intrusion detection and prevention
intrusion detection
0.812024
You Cannot Escape Me: Detecting Evasions of SIEM Rules in Enterprise Networks · USENIX Security Symposium 2024
Authentication and access control
password authentication
0.312017
Why Do Developers Get Password Storage Wrong?: A Qualitative Usability Study · CCS 2017
Cryptographic primitives and cryptanalysis › hash functions
password hashing
0.312017
Why Do Developers Get Password Storage Wrong?: A Qualitative Usability Study · CCS 2017
Authentication and access control › password security
secure password storage
0.312017
Why Do Developers Get Password Storage Wrong?: A Qualitative Usability Study · CCS 2017
Network management and operations › network security management
security monitoring
0.212024
You Cannot Escape Me: Detecting Evasions of SIEM Rules in Enterprise Networks · USENIX Security Symposium 2024

Methods — techniques the papers use, named apart from their topics

evasion detection · 1.5qualitative usability study · 0.3
YearPublicationVenuePosition
2024 You Cannot Escape Me: Detecting Evasions of SIEM Rules in Enterprise Networks
Rafael Uetz, Marco Herzog, Louis Hackländer, Simon Schwarz 0002, Martin Henze
USENIX Security Symposium2
2017 Why Do Developers Get Password Storage Wrong?: A Qualitative Usability Study
abstract
Passwords are still a mainstay of various security systems, as well as the cause of many usability issues. For end-users, many of these issues have been studied extensively, highlighting problems and informing design decisions for better policies and motivating research into alternatives. However, end-users are not the only ones who have usability problems with passwords! Developers who are tasked with writing the code by which passwords are stored must do so securely. Yet history has shown that this complex task often fails due to human error with catastrophic results. While an end-user who selects a bad password can have dire consequences, the consequences of a developer who forgets to hash and salt a password database can lead to far larger problems. In this paper we present a first qualitative usability study with 20 computer science students to discover how developers deal with password storage and to inform research into aiding developers in the creation of secure password systems.
Alena Naiakshina, Anastasia Danilova, Christian Tiefenau, Marco Herzog, Sergej Dechand, Matthew Smith 0001
CCS4