Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page

Sven Hebrok

dblp:331/2250 · DBLP profile ↗
← Back
5ranked-venue papers
2as first author
5since 2021 · last 2025
0009-0006-1172-1665ORCID · corroborated

Domains — the database's venue-derived domains; a paper can count in several

Security and privacy · 5 · 2 first-author · 5 since 2021

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Network and information security
4 papers
Network security · 92% Web and mobile security · 8%
Software engineering, system software, and programming languages
1 paper
Software testing · 100%
Computer networks
1 paper
Internet architecture and protocols · 100%

Topics — the 6 heaviest of 8, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Network security › secure communication › secure communication protocol
TLS
1.522025
STEK Sharing is Not Caring: Bypassing TLS Authentication in Web Servers using Session Tickets · USENIX Security Symposium 2025
We Really Need to Talk About Session Tickets: A Large-Scale Analysis of Cryptographic Dangers with TLS Session Tickets · USENIX Security Symposium 2023
Network security › anonymity networks
censorship circumvention
0.712023
Poster: Circumventing the GFW with TLS Record Fragmentation · CCS 2023
Software testing
combinatorial testing
0.612022
TLS-Anvil: Adapting Combinatorial Testing for TLS Libraries · USENIX Security Symposium 2022
Web and mobile security › web security
web server security
0.312025
STEK Sharing is Not Caring: Bypassing TLS Authentication in Web Servers using Session Tickets · USENIX Security Symposium 2025
Internet architecture and protocols › network security
TLS
0.212023
Poster: Circumventing the GFW with TLS Record Fragmentation · CCS 2023
Network security
traffic analysis
0.212023
We Really Need to Talk About Session Tickets: A Large-Scale Analysis of Cryptographic Dangers with TLS Session Tickets · USENIX Security Symposium 2023

Methods — techniques the papers use, named apart from their topics

record fragmentation · 1.3model-based testing · 1.1combinatorial testing · 1.1protocol analysis · 0.9large-scale measurement · 0.7
YearPublicationVenuePosition
2025 STEK Sharing is Not Caring: Bypassing TLS Authentication in Web Servers using Session Tickets
Sven Hebrok, Tim Leonhard Storm, Felix Matthias Cramer, Maximilian Radoy, Juraj Somorovsky
USENIX Security Symposium1
2024 In Search of Partitioning Oracle Attacks Against TLS Session Tickets
Maximilian Radoy, Sven Hebrok, Juraj Somorovsky
ESORICS (3)2
2023 Poster: Circumventing the GFW with TLS Record Fragmentation
abstract
State actors around the world censor the HTTPS protocol to block access to certain websites. While many circumvention strategies utilize the TCP layer only little emphasis has been placed on the analysis of TLS-a complex protocol and integral building block of HTTPS. In contrast to the TCP layer, circumvention methods on the TLS layer do not require root privileges since TLS operates on the application layer. With this proposal, we want to motivate a deeper analysis of TLS in regard to censorship circumvention techniques. To prove the existence of such techniques, we present TLS record fragmentation as a novel circumvention technique and circumvent the Great Firewall of China (GFW) using this technique. We hope that our research fosters collaboration between censorship and TLS researchers.
Niklas Niere, Sven Hebrok, Juraj Somorovsky, Robert Merget
CCS2
2023 We Really Need to Talk About Session Tickets: A Large-Scale Analysis of Cryptographic Dangers with TLS Session Tickets
Sven Hebrok, Simon Nachtigall, Marcel Maehren, Nurullah Erinola, Robert Merget, Juraj Somorovsky, Jörg Schwenk
USENIX Security Symposium1
2022 TLS-Anvil: Adapting Combinatorial Testing for TLS Libraries
Marcel Maehren, Philipp Nieting, Sven Hebrok, Robert Merget, Juraj Somorovsky, Jörg Schwenk
USENIX Security Symposium3