CISPA @ NDSS 2025 in San Diego

The NDSS Symposium (Network and Distributed System Security Symposium) is one of the top annual events for security researchers. At last week’s 2025 edition in San Diego, the world's security research community came together to discuss the latest security challenges and innovations. Many CISPA researchers were among them, showcasing their cutting-edge work and exchanging ideas with the global community.

The following papers by CISPA authors were presented at NDSS 2025 in San Diego:

• Cascading Spy Sheets: Exploiting the Complexity of Modern CSS for Email and Browser Fingerprinting

Leon Trampert, Daniel Weber, Lukas Gerlach, Christian Rossow, Michael Schwarz

• The (Un)usual Suspects – Studying Reasons for Lacking Updates in WordPress

Maria Hellenthal, Lena Gotsche, Rafael Mrowczynski, Sarah Kugel, Michael Schilling, Ben Stock

• The Power of Words: A Comprehensive Analysis of Rationales and Their Effects on Users' Permission Decision

Yusra Elbitar, Alexander Hart, Sven Bugiel

• Understanding Data Importance in Machine Learning Attacks: Does Valuable Data Pose Greater Harm?

Rui Wen, Michael Backes, Yang Zhang

• Welcome to Jurassic Park: A Comprehensive Study of Security Risks in Deno and its Ecosystem

Abdullah AlHamdan, Cristian-Alexandru Staicu

• A Comprehensive Memory Safety Analysis of Bootloaders

​​​​​​​ Jianqiang Wang, Meng Wang, Ali Abbasi, Thorsten Holz, Qinying Wang (Zhejiang University), Nils Langius (Leibniz Universität Hannover), Li Shi (ETH Zurich)

• Attributing Open-Source Contributions is Critical but Difficult: A Systematic Analysis of GitHub Practices and Their Impact on Software Supply Chain Security

​​​​​​​Jan-Ulrich Holtgrave, Kay Friedrich, Fabian Fischer, Niklas Busch, Jan H. Klemmer, Oliver Wiese, Sascha Fahl, Nicolas Huaman (Leibniz University Hannover), Marcel Fourné (Paderborn University), Dominik Wermke (North Carolina State University)

• Do (Not) Follow the White Rabbit: Challenging the Myth of Harmless Open Redirection

​​​​​​​Soheil Khodayari, Giancarlo Pellegrino, Kai Glauber (Saarland University)

• Towards Understanding Unsafe Video Generation

​​​​​​​​​​​​​​Yang Zhang (CISPA), Yan Pang (University of Virginia), Aiping Xiong (Penn State University), Tianhao Wang (University of Virginia)

• TWINFUZZ: Differential Testing of Video Hardware Acceleration Stacks

​​​​​​​Matteo Leonelli, Addison Crump, Meng Wang, Florian Bauckholt, Keno Hassler, Ali Abbasi, Thorsten Holz

• ​​​​​​​YuraScanner: Leveraging LLMs for Task-driven Web App Scanning

​​​​​​​Aleksei Stafeev, Tim Recktenwald, Gianluca De Stefano, Soheil Khodayari, Giancarlo Pellegrino