Security problems are design problems. Data protection fails due to lack of comprehensibility. We develop protection mechanisms that work – and teach the knowledge needed to make them effective.
“Detecting Bot Detection” was named best paper of the conference in Linköping. The measurement study across 10,000 websites shows that bot detection systematically biases web measurement research – and that 83% of papers at top venues do not report the problem.
→ About the PaperBot detection biases web studies, explanation formats in a hospital setting, GDPR barriers in the Privacy Range. Presented in Linköping in August.
→ View PublicationsOne Markdown file yields the projection, a presenter cockpit, a reading document and a handout. Slides and script can no longer drift apart. The outputs are self-contained HTML files that work offline; already used for a full semester of teaching.
→ Try It OutOne Markdown document, one command, one self-contained HTML file with text-dense 16:9 slides – for material that has to work without a presenter in the room.
→ Take a LookMore than 200 pages covering over 100 degree programs, built in eleven weeks with AI and reviewed by humans – initiated by the Chief Information Office. The field report covers the process, the numbers and the pitfalls, technical and organizational.
→ Read the Field ReportCustomizable text modules for clear AI guidelines. Fully client-side, no data storage. In use at multiple universities.
→ Try It Out
CS students present software projects at a public fair. Not 'Did you write this yourself?' but 'Can you explain this?'
→ Read More
Keynote at Tag der digitalen Lehre. Why demanding chat logs doesn't help and we need to require performance under controlled conditions.
→ Read the Blog PostUp to 7 million euros for teaching innovation at the University of Bamberg. We contribute modern assessment formats and a feedback app. More than 50 people from all status groups develop ten work packages.
→ BaKuLe Update 01Write an essay, critically read someone else's draft, revise under time pressure. LLM use allowed and encouraged – what counts is editorial judgment. Running from the 2026 summer semester in the PSI-Sem-B and PSI-Sem-M seminars.
→ View seminar concept
Our team at the open day: a World Cup prediction game against 15 AIs, the plotting campaign 'Dein Muster', and seven student projects in the project workshop.
→ Read the RecapNew: names are taken from the Moodle grading worksheet, so multi-part first and last names appear correctly on the cover sheet.
→ GitHub Releases
Our work focuses on securing information systems and protecting privacy. We analyze existing systems and develop protection mechanisms. We combine technical analyses with user studies and work interdisciplinarily with law, psychology, and ethnography.
Our Notification Studies (USENIX Security 2021) showed how to effectively warn affected parties. For his work on privacy in DNS, Dominik Herrmann was awarded the GI Dissertation Prize 2014, among other honors.
Teaching Award from the University of Siegen (2016). Hackathons, Study and Code Spaces, and lecture hall games instead of frontal instruction. PSI Thesis Guide (55 pages) for compelling theses.
3.1 million website checks conducted with PrivacyScore. Vulnerability discovered in 170 online pharmacies. Secure passwords explained comprehensibly for children. Commitment to consumer protection as member of the board of Stiftung Warentest.