Malte Wessels is a PhD candidate since June 2022. He is interested in privacy and automatic code analysis.
malte.wessels [at] tu-braunschweig.de (PGP)
Room IZ-244, ✆: 0531/391-3278
Confusing Value with Enumeration: Studying the Use of CVEs in Academia
Moritz Schloegel, Daniel Klischies, Simon Koch, David Klein, Lukas Gerlach, Malte Wessels, Leon Trampert, Martin Johns, Mathy Vanhoef, Michael Schwarz, Thorsten Holz, and Jo Van Bulck
34th USENIX Security Symposium (USENIX Security'25), 2025 [PDF] [BIB]
HyTrack: Resurrectable and Persistent Tracking Across Android Apps and the Web
Malte Wessels, Simon Koch, Jan Drescher, Louis Bettels, David Klein, and Martin Johns
34th USENIX Security Symposium (USENIX Security'25), 2025 [PDF] [BIB]
The Impact of Default Mobile SDK Usage on Privacy and Data Protection
Simon Koch, Manuel Karl, Robin Kirchner, Malte Wessels, Anne Paschke, and Martin Johns
Privacy Enhancing Technologies Symposium (PETS'25), 2025 [PDF]
SSRF vs Developers: A Study of SSRF-Defenses in PHP Applications
Malte Wessels*, Simon Koch*, Giancarlo Pellegrino, Martin Johns
33rd USENIX Security Symposium (USENIX Security'24), 2024 [PDF] [BIB] [VIDEO]
Poster: The Risk of Insufficient Isolation of Database Transactions in Web Applications
Simon Koch, Malte Wessels, David Klein, Martin Johns
30th ACM Conference on Computer and Communications Security (CCS), 2023
Keeping Privacy Labels Honest: Developer conformity to self declared data collection via Apple Privacy Labels
Simon Koch, Malte Wessels, Benjamin Altpeter, Madita Olvermann, and Martin Johns
Privacy Enhancing Technologies Symposium (PETS'22), 2022 [PDF]
HyTrack: Tracking You Across Apps and the Web Hydra-Style
13.06.2025, Elbsides 2025, Hamburg
SSRF: Attacks, Defense and Status Quo [Video, Slides]
13.11.2024, German OWASP Day 2024, Leipzig
Einführung in SSRF: Mögliche Angriffe und was man (trotz PHP) dagegen tun kann [Video, Slides]
02.03.2024, Winterkongress 2024, Winterthur, Schweiz.
Tracking in Apps: Ist das legal? – Eine Übersicht über die mobile Trackinglandschaft [Video, Slides]
mit Benjamin Altpeter und Lorenz Sieben, Datenanfragen.de e.V., 29.12.2022, remote, jev22/FireShonks
| Conferences |
|---|
| PETS 2025 |
| PETS 2024 |
| PETS 2023 |
Unfortunately, I currently have no open topics and no resources for additional theses.
| Year | Semester | Role | Name |
|---|---|---|---|
| 2025 | SoSe | TA | Seclab |
| Since 2025 | Security Ramp-Up | CS Ramp-Up | |
| 24/25 | WiSe | TA | Hacklab |
| 2024 | SoSe | TA | Seclab |
| 23/24 | WiSe | TA | Hacklab |
| 23/24 | WiSe | TA | Seminar Mobile Privacy |
| 23/24 | WiSe | TA | Salzgitter Digital Solutions Industriepraktikum |
| 2023 | SoSe | TA | Seclab |
| 22/23 | WiSe | TA | Programmieren 1 |
| 22/23 | WiSe | Support | Hacklab |
| Since WiSe 22/23 | TA for CS students | SZDS-Industriepraktikum |