Over the last decade, web security research has used notification campaigns as a tool to
help web operators fix security problems or stop infrastructure abuse. First attempts at …

We consider how the DNS security and privacy landscape has evolved over time, using data
collected annually at A-root between 2008 and 2021. We consider issues such as …

Network services are processes running on a system with network exposure. A key activity
for any network defender, penetration tester, or red team is network attack surface mapping …

Cookie disclaimers are omnipresent since the GDPR went into effect in 2018. By far not all
disclaimers are designed in a way that they are aligned with the ideas of the GDPR, some …

With the growing reliance on cloud services for storage and deployment, securing cloud
environments has become critically important. Cloud storage solutions like AWS S3, Google …

Running a business without having a website is nearly impossible nowadays. Most business
owners use content managements systems to manage their websites. Yet, those can pose …

In efforts to understand the reasons behind Internet-connected devices remaining
vulnerable for a long time, previous literature analyzed the effectiveness of large-scale …

Enterprise-scale mandatory password changes are disruptive, complex endeavors that
require the entire workforce to prioritize a goal that is often secondary to most users. While …

Online advertising relies on a complex and opaque supply chain that involves multiple
stakeholders, including advertisers, publishers, and ad-networks, each with distinct and …

Modern websites often make use of third-party services to facilitate web development or to
analyze visitors' behavior. This integration allows the third-party vendor to access and collect …