Research (July 16, 2026)
Three Full Papers Accepted at ARES 2026
Bot detection biases web studies, explanation formats in a hospital setting, GDPR barriers in the Privacy Range. To be presented in Linköping in August.
→ View PublicationsPROF. DR. DOMINIK HERRMANN
Chair of Privacy and Security in Information Systems
Security problems are design problems. Data protection fails due to lack of comprehensibility. We develop protection mechanisms that work – and teach the knowledge needed to make them effective.
dh.psi@uni-bamberg.de · Office hours Tue 3-4 pm · Room: WE5/05.064 · Dean of WIAI since October 2025 (chair operations continue normally)
What We're Currently Working On
Project (July 8, 2026)
University Study-Start Portal Is Live
More than 200 pages covering over 100 degree programs, built in eleven weeks with AI and reviewed by humans – initiated by the Chief Information Office.
→ Visit the PortalTool (February 2026)
AI Policy Generator v3 for Teaching
Customizable text modules for clear AI guidelines. Fully client-side, no data storage. In use at multiple universities.
→ Try It Out
Teaching (February 2026)
Can You Explain This? – Project Fair as Exam Format
CS students present software projects at a public fair. Not 'Did you write this yourself?' but 'Can you explain this?'
→ Read More
Position (October 2025)
AI in Exams: From Symptom to Systemic Question
Keynote at Tag der digitalen Lehre. Why demanding chat logs doesn't help and we need to require performance under controlled conditions.
→ Read the Blog PostProject (March 2026)
BaKuLe: Bamberg Cultures of Teaching
Up to 7 million euros for teaching innovation at the University of Bamberg. We contribute modern assessment formats and a feedback app. More than 50 people from all status groups develop ten work packages.
→ BaKuLe Update 01Teaching (Summer 2026)
New Seminar Format (2026)
Write an essay, critically read someone else's draft, revise under time pressure. LLM use allowed and encouraged – what counts is editorial judgment. Running from the 2026 summer semester in the PSI-Sem-B and PSI-Sem-M seminars.
→ View seminar concept
Anniversary (June 26, 2026)
25 Years of WIAI – The Recap
Our team at the open day: a World Cup prediction game against 15 AIs, the plotting campaign 'Dein Muster', and seven student projects in the project workshop.
→ Read the RecapTool (April 2026)
Booklet Tool v1.8.0
New: ILIAS Exercise Creator, complementing the Moodle tool.
→ GitHub Releases
What We Work On and What We're Known For
Our work focuses on securing information systems and protecting privacy. We analyze existing systems and develop protection mechanisms. We combine technical analyses with user studies and work interdisciplinarily with law, psychology, and ethnography.
Research Focus
- Explanations of data protection concepts
- Crawling of websites and apps
- Mechanisms for communicating security and privacy awareness
- Privacy-friendly and secure e-assessments
Teaching & Transfer
- More than 40 e-assessments per year with real tools
- Exam booklet system for continuous learning incentives
- inf.zone: All lecture content publicly accessible
- Tools for educators (e.g., AI Policy Generator, psi-exam)
Research with Impact
Our Notification Studies (USENIX Security 2021) showed how to effectively warn affected parties. For his work on privacy in DNS, Dominik Herrmann was awarded the GI Dissertation Prize 2014, among other honors.
Award-Winning Teaching with Passion
Teaching Award from the University of Siegen (2016). Hackathons, Study and Code Spaces, and lecture hall games instead of frontal instruction. PSI Thesis Guide (55 pages) for compelling theses.
Transfer to Practice
3.1 million website checks conducted with PrivacyScore. Vulnerability discovered in 170 online pharmacies. Secure passwords explained comprehensibly for children. Commitment to consumer protection as member of the board of Stiftung Warentest.
How We Work
Context-First Messaging
Context-First Messaging
We write directly what it's about and what we need – no 'hello' messages waiting for a response. This saves time and enables focused work.
We write directly what it's about and what we need – no 'hello' messages waiting for a response. This saves time and enables focused work.
Meetings with Purpose
Meetings with Purpose
No meeting without an agenda, no agenda without expected outcomes. At the end, there are clear decisions and responsibilities.
No meeting without an agenda, no agenda without expected outcomes. At the end, there are clear decisions and responsibilities.
High Standards, Transparent Support
High Standards, Transparent Support
High standards in exams and research. We provide extensive support, transparent criteria and rubrics, sample solutions, and early feedback.
High standards in exams and research. We provide extensive support, transparent criteria and rubrics, sample solutions, and early feedback.
Design & Clarity Matter
Design & Clarity Matter
Aesthetics and good design reduce errors. Readability, clear structure, and well-thought-out interfaces are quality features for us that are just as important as content and functionality.
Aesthetics and good design reduce errors. Readability, clear structure, and well-thought-out interfaces are quality features for us that are just as important as content and functionality.
Challenge Assumptions
Challenge Assumptions
We enjoy questioning established practices and testing alternatives. The 'status quo' is not an argument for us. We love to experiment.
We enjoy questioning established practices and testing alternatives. The 'status quo' is not an argument for us. We love to experiment.
Ship and Iterate
Ship and Iterate
Small steps instead of hesitation. Early feedback helps more than late perfection. We build, evaluate, and improve.
Small steps instead of hesitation. Early feedback helps more than late perfection. We build, evaluate, and improve.
Systems over Solutions
Systems over Solutions
We strive to build reusable infrastructures instead of one-off individual solutions.
We strive to build reusable infrastructures instead of one-off individual solutions.
Security with Understanding
Security with Understanding
No checkbox measures, no 'Cargo Cult Security,' but easily understandable security mechanisms and Defense in Depth. We prioritize effectiveness over formal compliance.
No checkbox measures, no 'Cargo Cult Security,' but easily understandable security mechanisms and Defense in Depth. We prioritize effectiveness over formal compliance.
Privacy by Design
Privacy by Design
When we build systems, we embrace data minimization, purpose limitation, and transparency from the start. We use privacy-friendly techniques, consistently delete old data, and inform comprehensibly.
When we build systems, we embrace data minimization, purpose limitation, and transparency from the start. We use privacy-friendly techniques, consistently delete old data, and inform comprehensibly.