| 2026 | CHI | Public Wi-Fi Security and the Spread of Fear, Uncertainty, and Doubt. | Jonas Schmitt, Maximilian Golla, Jonas Hielscher |
| 2025 | CCS | Quantifying Security Training in Organizations Through the Analysis of U.S. SEC 10-K Filings. | Jonas Hielscher, Maximilian Golla |
| 2024 | CHI | A Comparative Long-Term Study of Fallback Authentication Schemes. | Leona Lassak, Philipp Markert, Maximilian Golla, Elizabeth Stobert, Markus Drmuth |
| 2024 | CHI | Understanding Users' Interaction with Login Notifications. | Philipp Markert, Leona Lassak, Maximilian Golla, Markus Drmuth |
| 2022 | SOUPS | "As soon as it's a risk, I want to require MFA": How Administrators Configure Risk-based Authentication. | Philipp Markert, Theodor Schnitzler, Maximilian Golla, Markus Drmuth |
| 2021 | CANS | Towards Quantum Large-Scale Password Guessing on Real-World Distributions. | Markus Drmuth, Maximilian Golla, Philipp Markert, Alexander May, Lars Schlieper |
| 2020 | SP | This PIN Can Be Easily Guessed: Analyzing the Security of Smartphone Unlock PINs. | Philipp Markert, Daniel V. Bailey, Maximilian Golla, Markus Drmuth, Adam J. Aviv |
| 2019 | SP | Reasoning Analytically about Password-Cracking Software. | Enze Liu, Amanda Nakanishi, Maximilian Golla, David Cash, Blase Ur |
| 2018 | CCS | On the Accuracy of Password Strength Meters. | Maximilian Golla, Markus Drmuth |
| 2018 | CCS | "What was that site doing with my Facebook password?": Designing Password-Reuse Notifications. | Maximilian Golla, Miranda Wei, Juliette Hainline, Lydia Filipe, Markus Drmuth, Elissa M. Redmiles, Blase Ur |
| 2017 | NDSS | Towards Implicit Visual Memory-Based Authentication. | Claude Castelluccia, Markus Drmuth, Maximilian Golla, Fatma Deniz |
| 2017 | SOUPS | "I want my money back!" Limiting Online Password-Guessing Financially. | Maximilian Golla, Daniel V. Bailey, Markus Drmuth |
| 2016 | CCS | On the Security of Cracking-Resistant Password Vaults. | Maximilian Golla, Benedict Beuscher, Markus Drmuth |