Malte Wessels

Publications

HyTrack: Resurrectable and Persistent Tracking Across Android Apps and the Web
Malte Wessels, Simon Koch, Jan Drescher, Louis Bettels, David Klein, and Martin Johns
34th USENIX Security Symposium (USENIX Security'25), 2025 [PDF] [BIB]

The Impact of Default Mobile SDK Usage on Privacy and Data Protection
Simon Koch, Manuel Karl, Robin Kirchner, Malte Wessels, Anne Paschke, and Martin Johns
Privacy Enhancing Technologies Symposium (PETS'25), 2025 [PDF]

SSRF vs Developers: A Study of SSRF-Defenses in PHP Applications
Malte Wessels*, Simon Koch*, Giancarlo Pellegrino, Martin Johns
33rd USENIX Security Symposium (USENIX Security'24), 2024 [PDF] [BIB] [VIDEO]

Poster: The Risk of Insufficient Isolation of Database Transactions in Web Applications
Simon Koch, Malte Wessels, David Klein, Martin Johns
30th ACM Conference on Computer and Communications Security (CCS), 2023

Keeping Privacy Labels Honest: Developer conformity to self declared data collection via Apple Privacy Labels
Simon Koch, Malte Wessels, Benjamin Altpeter, Madita Olvermann, and Martin Johns
Privacy Enhancing Technologies Symposium (PETS'22), 2022 [PDF]

Talks

SSRF: Attacks, Defense and Status Quo [Video, Slides]
13.11.2024, German OWASP Day 2024, Leipzig

Einführung in SSRF: Mögliche Angriffe und was man (trotz PHP) dagegen tun kann [Video, Slides]
02.03.2024, Winterkongress 2024, Winterthur, Schweiz.

Tracking in Apps: Ist das legal? – Eine Übersicht über die mobile Trackinglandschaft [Video, Slides]
mit Benjamin Altpeter und Lorenz Sieben, Datenanfragen.de e.V., 29.12.2022, remote, jev22/FireShonks