Stefan More

Stefan is a senior researcher at ISEC. He is currently working with the Secure Applications group (at A-SIT). Before that, he was a postdoctoral researcher and project assistant at IAIK. Prior to that, he worked in IAIK's JavaTrust group and on the institute's elliptic-curve Java library ECCelerate. He was also working at SIC on the cryptographic Java toolkit IAIK-JCE, on its openPGP implementation.

---

Research

Publications: ORCID  |  DBLP  

Topics

• Identity and Trust Management
• Applied Privacy
• Web Security
• Usability of Security
• Technology & Society

Research projects

• H2020 LIGHTest (2016-2020)
• H2020 KRAKEN (2019-2023)
• H2020 Eratosthenes (2021-2025)
• HEU LICORICE (2024-2027)
• HEU POSEIDON (2025-2028)

---

Teaching

 

Advising of bachelor's & master's theses and student projects

Are you looking for a bachelor's thesis, master's thesis, or project in trust-/identity-management, web security, or applied privacy? Let us know; we’re always happy to discuss open topics!

Former students

• Simon Guggi, "Use-After-FreeMail" [AsiaCCS Paper]
• Jan Kowalczyk, "SGX-based Universal 2nd Factor"
• Patrick Deutschmann, "Security Aspects of Container Orchestration"
• Lukas Alber, "A Short-Lived Answer to Full Delegation: Applying Time-Bound Identity-Based Signatures to TLS" [CCSW Paper]
• Stefan di Vora, "Hosting a CTF using Kubernetes"
• Clemens Walluschek, "Ledger Attestations" [SECRYPT Paper]
• Dominik König, "Trusted Credential Transformations" [IFIP SEC Paper]
• Johannes Haring, "Deploying LosFuzzys' FuzzyLand on Kubernetes" [fuzzy.land]
• Bernhard Zenz, "A Trust Policy Language for the Self Sovereign Identity World" [OID Paper]
• Peter Grassberger, "A Self-Sovereign Identity and Smart Contract based Web of Trust for Student Mobility" [IFIP SEC Paper]
• Marco Herzl, "Extending Expressive Access Policies with Privacy Features" [TrustCom Paper]
• Valentina Wieser, "Analysis of Federated Credential Management (FedCM)"
• Lukas Treffner, "FIDO2 Portal for Linux"
• Maximilian Mathie, "Service Provider Accreditation" [ARES Paper]
• Peter Panzitt, "Passkey Management"
• Dmytro Shvets, "Future-Proof Asynchronous IoT Backups" [IFIP SEC Paper]
• Daniel Konrath, "FedCM for eGov?"

Previously offered courses

• SE Security & Privacy in Modern Web Services

---

Service, etc

• Program Committee: OID (2021), ARES (SECPID 2023, IWAPS 2024, SECPID 2025, EDId 2025)
• Session Chair: IFIP SEC (2021)
• External PhD Reviewer (Universidad de Murcia)
• Visiting Researcher: KU Leuven (October 2024)
• Stefan is a former coordinator of the competitive hacking team LosFuzzys, and a co-founder of CryptoParty Graz.