Sebastian Roth
I am a PhD student at Saarland University, working as a PhD Candidate at the CISPA Helmholtz Center for Information Security.
My research interest is focused on client-side Web security as well as usable security for developers. In addition to that I have taught other students as a tutor and teaching assistant in several different lectures.
During leisure time, I regularly organize and participate in information security competitions called Capture the Flag (CTF)
together with our team saarsec (saarsec|steg1) located at Saarland University.
Moreover, I am also interested in sports, in particular Jugger.
Currently I am playing for our university team Keulen Eulen.
Educational Curriculum Vitae
PhD Student @ CISPA / Saarland University
Master Computer Science @ Saarland University
Bachelor Cybersecurity @ Saarland University
Supervised by: Prof. Dr. Sascha Fahl
High School
Balthasar Neumann Technical College Trier
Secondary School
Working Curriculum Vitae
Researcher @ CISPA Helmholtz Center for Information Security
Internship @ Hardenize Limited
Research Assistant @ CISPA Helmholtz Center for Information Security
Supervised by: Prof. Dr. Sascha Fahl (Oct. 2015 – Dec. 2017)
Scientific Publications
The Security Lottery: Measuring Client-Side Web Security Inconsistencies
USENIX Security Symposium 2022 (USENIX '22)
To hash or not to hash: A security assessment of CSP's unsafe-hashes expression
SecWeb Workshop co-located with IEEE S&P 2022 (SecWeb '22)
12 Angry Developers – A Qualitative Study on Developers’ Struggles with CSP
Conference on Computer and Communications Security (CCS '21)
A Tale of Two Headers: A Formal Analysis of Inconsistent Click-Jacking Protection on the Web
USENIX Security Symposium (USENIX '20)
Assessing the Impact of Script Gadgets on CSP at Scale
Asia Conference on Computer and Communications Security (AsiaCCS '20)
Complex Security Policy? – A Longitudinal Analysis of Deployed Content Security Policies
Network and Distributed System Security Symposium (NDSS '20)
ScriptProtect: Mitigating Unsafe Third-Party JavaScript Practices
Asia Conference on Computer and Communications Security (AsiaCCS '19)