Recent Topics in Web Security

Hi all,

I have added the grades and explanations for them into the CMS. You can see both in the "Personal Status" page. Note that I did not include all my notes, but mostly left info about the length of the presentation and if questions were handled well. 

I'll upload the grades also to the LSF now.

For our final meeting, I wanted to clarify some aspects.

• There is no mandatory practice talk. If you want to do it, please let me know by the end of next week so I can find a slot in my schedule.
• You are required to submit questions for the paper if you are assigned to the topic. I added the submission accordingly (Deadline August 4, 23:59)
• The plan is to start at 13:30 and finish by 18:00. The order will be the same as the original talks. For the exact timeline (2h + 30 min break + 2h or 1.5h + 15 min break + 1.5h + 15 min break + 1h), we can discuss on the day.

Looking forward to the final presentations!

I have only received five submissions for the presentation about deployment of CSP and four for Service Workers and Inconsistencies. Note that you have to submit feedback for all talks except your own (i.e., even if you present in the meeting, you still have to provide feedback for the other talks!). I have re-opened the submissions until Monday 23:59. Make sure to submit the feedback by that time.

I have added submission items for the meetings. You only need to upload questions for the topics you are assigned to. If you have two topics for one meeting, just upload a ZIP file. I prefer if you can put your questions into a .txt file (possibly two inside the zipped archive), since that allows me to easily copy them together.

Hi all,

I have a colleague from Italy visiting us this week. He'll give a talk on improving the science of Web Security on Thursday, May 19, 14:30. This will be a hybrid event, split between the CISPA lecture hall and Zoom.  Please see below for details.

https://cispa-de.zoom.us/j/94023681911?pwd=bUgrTlJaR0tFSDlnTi9IMDZzVXNWdz09

Title: Towards improving the science of web security

Abstract: Though useful, many web security papers (including mine!) do not satisfy traditional criteria of the scientific method. In this talk, I will provide a personal perspective on how the science of web security could be improved, by discussing recent work which (partially) tackled this issue. The talk will focus in particular on reproducibility and the importance of definitions for web security research.

Bio: Stefano Calzavara is an associate professor in Computer Science at Università Ca’ Foscari Venezia, Italy. Stefano’s research focuses on formal methods, computer security and their intersection, with a strong emphasis on web security. He has published ~50 papers on these topics at widely recognized international conferences and journals. He is pleased to regularly serve in the PC of a number of scientific events, including flagship conferences like ACM CCS, USENIX Security and TheWebConf (WWW). Stefano chaired the first three editions of the SecWeb workshop and is serving as the program chair of CSF 2022 and 2023.

Hope to see you there (in person or remote)

I was made aware that Nebenläufige Programmierung added the exam slot on August 8 after I had checked for collisions. Given travel constraints on my end, I cannot do it on any other day of that week. Hence, the only alternative is to move it to Friday, August 5. 

Could you please let me know if any of you still need to attend the MfI 2 exam? I would then schedule the final session after that (13 - 17:30). If there is no constraint about that exam, I'd prefer we start at 10:00, take one hour break between 12:00 and 13:00, and finish at 15:00.

Hi all,

since I received yet another last last-minute drop request, we will skip the first meeting on May 20 to give more time to the first presenters. Given the preferences, this also means we skip the first two topics and stick to the remaining original timeline. Given these constraints added after the fact, I had to assign two topics for Q/A without the explicit bid from the respective students. I tried to pick areas that are close to the ones those students selected, though.

Please find your topic assignments here: https://cms.cispa.saarland/retows/2/Topic_assignment. Note that Q/A 1 and Q/A 2 do not mean that you have to only ask questions for the first or second iteration of presentations ;-)

Hi folks,

I'm looking forward to the kickoff on Friday. Since the timeline is quite tight around the first talks, please go ahead and get a feeling for the papers listed on the main page and try to identify four areas you'd be interested in either presenting or stating questions for. I'll try to do the assignment of topics as early as possible then. 

We will meet in CISPA's 0.02 (when you enter the building, just turn right). In the building, there is a mask mandate, but the room itself offers sufficient distance to take it off when seated.

See you Friday at 10:15!