Position (October 2025)
AI in Exams: From Symptom to Systemic Question
Keynote at Tag der digitalen Lehre. Why demanding chat logs doesn't help and we need to require performance under controlled conditions.
→ View AbstractPROF. DR. DOMINIK HERRMANN
Chair of Privacy and Security in Information Systems
Security problems are design problems. Data protection fails due to lack of comprehensibility. We develop protection mechanisms that work – and teach the knowledge needed to make them effective.
dh.psi@uni-bamberg.de · Office hours Tue 3-4 pm · Room: WE5/05.064 · Dean of WIAI since October 2025 (chair operations continue normally)
What We're Currently Working On
Tool (July 2025)
AI Policy Generator for Teaching
Customizable text modules for clear AI guidelines. Fully client-side, no data storage. In use at multiple universities.
→ Try It OutProject (October 2025)
Up to 7 Million Euros for University of Bamberg
BaKuLe project to improve teaching with Prof. Herrmann as co-project leader
→ Visit Website
Children's University (May 2025)
Secure Passwords for Children
Lecture 'Secure Passwords You Can Remember' – the lecture hall was packed.
Archive (May 2025)
PrivacyScore.org Offline After 3.1 Million Checks
Operational and maintenance effort became too large
What We Work On and What We're Known For
Our work focuses on securing information systems and protecting privacy. We analyze existing systems and develop protection mechanisms. We combine technical analyses with user studies and work interdisciplinarily with law, psychology, and ethnography.
Research Focus
- Explanations of data protection concepts
- Crawling of websites and apps
- Mechanisms for communicating security and privacy awareness
- Privacy-friendly and secure e-assessments
Teaching & Transfer
- More than 40 e-assessments per year with real tools
- Exam booklet system for continuous learning incentives
- inf.zone: All lecture content publicly accessible
- Tools for educators (e.g., AI Policy Generator, psi-exam)
Research with Impact
Our Notification Studies (USENIX Security 2021) showed how to effectively warn affected parties. For his work on privacy in DNS, Dominik Herrmann was awarded the GI Dissertation Prize 2014, among other honors.
Award-Winning Teaching with Passion
Teaching Award from the University of Siegen (2016). Hackathons, Study and Code Spaces, and lecture hall games instead of frontal instruction. PSI Thesis Guide (55 pages) for compelling theses.
Transfer to Practice
3.1 million website checks conducted with PrivacyScore. Vulnerability discovered in 170 online pharmacies. Secure passwords explained comprehensibly for children. Commitment to consumer protection as member of the board of Stiftung Warentest.
How We Work
Context-First Messaging
Context-First Messaging
We write directly what it's about and what we need – no 'hello' messages waiting for a response. This saves time and enables focused work.
We write directly what it's about and what we need – no 'hello' messages waiting for a response. This saves time and enables focused work.
Meetings with Purpose
Meetings with Purpose
No meeting without an agenda, no agenda without expected outcomes. At the end, there are clear decisions and responsibilities.
No meeting without an agenda, no agenda without expected outcomes. At the end, there are clear decisions and responsibilities.
High Standards, Transparent Support
High Standards, Transparent Support
High standards in exams and research. We provide extensive support, transparent criteria and rubrics, sample solutions, and early feedback.
High standards in exams and research. We provide extensive support, transparent criteria and rubrics, sample solutions, and early feedback.
Design & Clarity Matter
Design & Clarity Matter
Aesthetics and good design reduce errors. Readability, clear structure, and well-thought-out interfaces are quality features for us that are just as important as content and functionality.
Aesthetics and good design reduce errors. Readability, clear structure, and well-thought-out interfaces are quality features for us that are just as important as content and functionality.
Challenge Assumptions
Challenge Assumptions
We enjoy questioning established practices and testing alternatives. The 'status quo' is not an argument for us. We love to experiment.
We enjoy questioning established practices and testing alternatives. The 'status quo' is not an argument for us. We love to experiment.
Ship and Iterate
Ship and Iterate
Small steps instead of hesitation. Early feedback helps more than late perfection. We build, evaluate, and improve.
Small steps instead of hesitation. Early feedback helps more than late perfection. We build, evaluate, and improve.
Systems over Solutions
Systems over Solutions
We strive to build reusable infrastructures instead of one-off individual solutions.
We strive to build reusable infrastructures instead of one-off individual solutions.
Security with Understanding
Security with Understanding
No checkbox measures, no 'Cargo Cult Security,' but easily understandable security mechanisms and Defense in Depth. We prioritize effectiveness over formal compliance.
No checkbox measures, no 'Cargo Cult Security,' but easily understandable security mechanisms and Defense in Depth. We prioritize effectiveness over formal compliance.
Privacy by Design
Privacy by Design
When we build systems, we embrace data minimization, purpose limitation, and transparency from the start. We use privacy-friendly techniques, consistently delete old data, and inform comprehensibly.
When we build systems, we embrace data minimization, purpose limitation, and transparency from the start. We use privacy-friendly techniques, consistently delete old data, and inform comprehensibly.