Nicolas Huaman | TeamUSEC

“That’s my perspective from 30 years of doing this”: An Interview Study on Practices, Experiences, and Challenges of Updating Cryptographic Code

Alexander Krause, Harjot Kaur, Jan H. Klemmer, Oliver Wiese and Sascha Fahl. In 34th USENIX Security Symposium, USENIX 2025, Seattle, WA, USA, August 13-15, 2025

PDF Abstract Cite URL

Attributing Open-Source Contributions is Critical but Difficult: A Systematic Analysis of GitHub Practices and Their Impact on Software Supply Chain Security

Jan-Ulrich Holtgrave, Kay Friedrich, Fabian Fischer, Nicolas Huaman, Niklas Busch, Jan H. Klemmer, Marcel Fourné, Oliver Wiese, Dominik Wermke and Sascha Fahl. Network and Distributed System Security (NDSS) Symposium 2025, February 24-28, 2025

PDF Abstract Cite

Passwords To-Go: Investigating Multi-faceted Challenges for Password Managers in the Android Ecosystem

Nicolas Huaman, Marten Oltrogge, Sabrina Amft, Yannick Evers and Sascha Fahl. 40th Annual Computer Security Applications Conference, ACSAC'24, Dec 11-13, 2024

Abstract Cite URL

“You have to read 50 different RFCs that contradict each other”: An Interview Study on the Experiences of Implementing Cryptographic Standards

Nicolas Huaman, Jacques Suray, Jan H. Klemmer, Marcel Fourné, Sabrina Amft, Ivana Trummová, Yasemin Acar and Sascha Fahl. In 33rd USENIX Security Symposium, USENIX Security '24, Philadelphia, PA, USA, August 14-16, 2024

Website PDF Abstract Cite URL

“We’ve Disabled MFA for You”: An Evaluation of the Security and Usability of Multi-Factor Authentication Recovery Deployments

Sabrina Amft, Sandra Höltervennhoff, Nicolas Huaman, Alexander Krause, Lucy Simko, Yasemin Acar and Sascha Fahl. In 2023 ACM SIGSAC Conference on Computer and Communications Security (CCS '23), November 26–30, 2023, Copenhagen, Denmark

PDF Abstract Cite URL

Pushed by Accident: A Mixed-Methods Study on Strategies of Handling Secret Information in Source Code Repositories

Alexander Krause, Jan H. Klemmer, Nicolas Huaman, Dominik Wermke, Yasemin Acar and Sascha Fahl. In 32nd USENIX Security Symposium, USENIX 2023, Anaheim CA, USA, August 9-11, 2023

Website PDF Abstract Cite URL

Poster: Pushed by Accident – Prevention and Remediation Strategies Against Secret Leakage

Alexander Krause, Jan H. Klemmer, Nicolas Huaman, Dominik Wermke, Yasemin Acar and Sascha Fahl. In 19th Symposium on Usable Privacy and Security, SOUPS 2023, Anaheim CA, USA, August 6-8, 2023

Abstract Poster Cite

“Would You Give the Same Priority to the Bank and a Game? I Do Not!” Exploring Credential Management Strategies and Obstacles during Password Manager Setup

Sabrina Amft, Sandra Höltervennhoff, Nicolas Huaman, Yasemin Acar and Sascha Fahl. In 19th Symposium on Usable Privacy and Security, SOUPS 2023, Anaheim CA, USA, August 6-8, 2023

Website PDF Abstract Cite URL

If You Can’t Get Them to the Lab: Evaluating a Virtual Study Environment with Security Information Workers

Nicolas Huaman, Alexander Krause, Dominik Wermke, Jan H. Klemmer, Christian Stransky, Yasemin Acar and Sascha Fahl. Eighteenth Symposium on Usable Privacy and Security, SOUPS 2022, Boston MA, USA, August 8-9, 2022

Website PDF Abstract Cite URL

Poster: They Would do Better if They Worked Together The Case of Interaction Problems Between Password Managers and Websites

Nicolas Huaman, Sabrina Amft, Marten Oltrogge, Yasemin Acar and Sascha Fahl. In 43rd IEEE Symposium on Security and Privacy, IEEE S&P 2022, May 23-26, 2022

PDF Abstract Poster Cite URL

Poster: Committed by Accident – Prevention and Remediation Strategies Against Secret Leakage

Alexander Krause, Jan H. Klemmer, Nicolas Huaman, Dominik Wermke, Yasemin Acar and Sascha Fahl. In 43rd IEEE Symposium on Security and Privacy, IEEE S&P 2022, May 23-26, 2022

PDF Abstract Poster Cite URL

Why Eve and Mallory Still Love Android: Revisiting TLS (In)Security in Android Applications

Marten Oltrogge, Nicolas Huaman, Sabrina Amft, Yasemin Acar, Michael Backes and Sascha Fahl. In 30th USENIX Security Symposium, USENIX Security '21, Vancouver, B.C., Canada, August 11-13, 2021

PDF Abstract Cite URL

Poster: They Would do Better if They Worked Together The Case of Interaction Problems Between Password Managers and Websites

Nicolas Huaman, Sabrina Amft, Marten Oltrogge, Yasemin Acar and Sascha Fahl. In Seventeenth Symposium on Usable Privacy and Security, SOUPS 2021, August 8-10, 2021

Poster Cite URL

Poster: Cybercrime in Small and Medium-sized Enterprises

Nicolas Huaman, Alexander Krause, Bennet von Skarczinski, Christian Stransky, Dominik Wermke, Yasemin Acar, Arne Dreißigacker and Sascha Fahl. In Seventeenth Symposium on Usable Privacy and Security, SOUPS 2021, August 8-10, 2021

Poster Cite URL

On the Limited Impact of Visualizing Encryption: Perceptions of E2E Messaging Security

Christian Stransky, Dominik Wermke, Johanna Schrader, Nicolas Huaman, Yasemin Acar, Anna Lena Fehlhaber, Miranda Wei, Blase Ur and Sascha Fahl. Seventeenth Symposium on Usable Privacy and Security, SOUPS 2021, August 8-10, 2021

Website PDF Abstract Cite URL

A Large-Scale Interview Study on Information Security in and Attacks against Small and Medium-sized Enterprises

Nicolas Huaman, Bennet von Skarczinski, Dominik Wermke, Christian Stransky, Yasemin Acar, Arne Dreißigacker and Sascha Fahl. In 30th USENIX Security Symposium, USENIX Security '21, Vancouver, B.C., Canada, August 11-13, 2021

Website PDF Abstract Cite URL

They Would do Better if They Worked Together: The Case of Interaction Problems Between Password Managers and Websites

Nicolas Huaman, Sabrina Amft, Marten Oltrogge, Yasemin Acar and Sascha Fahl. 42nd IEEE Symposium on Security and Privacy, IEEE S&P 2021, May 24-27, 2021

Website PDF Abstract Cite URL

Cloudy with a Chance of Misconceptions: Exploring Users' Perceptions and Expectations of Security and Privacy in Cloud Office Suites

Dominik Wermke, Christian Stransky, Nicolas Huaman, Niklas Busch, Yasemin Acar and Sascha Fahl. Sixteenth Symposium on Usable Privacy and Security, SOUPS 2020, August 12-14, 2020

Website PDF Abstract Cite URL

Poster: Perceptions of Handling Sensitive Data in Cloud Office Applications

Dominik Wermke, Christian Stransky, Nicolas Huaman, Niklas Busch, Alexander Krause, Yasemin Acar and Sascha Fahl. In 41st IEEE Symposium on Security and Privacy, IEEE S&P 2020, May 18-20, 2020

PDF Abstract Poster Cite URL

Poster: Towards Understanding the WhatsApp Dilemma

Christian Stransky, Dominik Wermke, Johanna Schrader, Nicolas Huaman, Anna Lena Fehlhaber, Yasemin Acar and Sascha Fahl. In 28th USENIX Security Symposium, USENIX Security 2019, Santa Clara, CA, USA, August 14-16, 2019

Poster Cite URL

Poster: Project Leine - A Virtualized Study Infrastructure

Dominik Wermke, Nicolas Huaman, Christian Stransky, Yasemin Acar and Sascha Fahl. In 26th Annual Network and Distributed System Security Symposium, NDSS 2019, San Diego, California, USA, February 24-27, 2019

PDF Abstract Poster Cite URL

Poster: A Large Scale Investigation of Obfuscation Use in Google Play

Dominik Wermke, Nicolas Huaman, Yasemin Acar, Bradley Reaves, Patrick Traynor and Sascha Fahl. In 26th Annual Network and Distributed System Security Symposium, NDSS 2019, San Diego, California, USA, February 24-27, 2019

PDF Abstract Poster Cite URL

A Large Scale Investigation of Obfuscation Use in Google Play

Dominik Wermke, Nicolas Huaman, Yasemin Acar, Bradley Reaves, Patrick Traynor and Sascha Fahl. Proceedings of the 34th Annual Computer Security Applications Conference, ACSAC 2018, San Juan, PR, USA, December 03-07, 2018

PDF Abstract Cite DOI

Selected Publications