26 citations · 69 across the 10 of their papers we have counts for
14 papers
Towards Synthesizing Datasets for IEEE 802.1 Time-sensitive Networking
Doğanalp Ergenç, Nurefşan Sertbaş Bülbül, Lisa Maile +2
IEEE 802.1 Time-sensitive Networking (TSN) protocols have recently been proposed to replace legacy networking technologies across different mission-critical systems (MCSs). Design,…
TSNZeek: An Open-source Intrusion Detection System for IEEE 802.1 Time-sensitive Networking
Doğanalp Ergenç, Robin Schenderlein, Mathias Fischer
IEEE 802.1 Time-sensitive Networking~(TSN) standards are envisioned to replace legacy network protocols in critical domains to ensure reliable and deterministic communication over…
Malware Sight-Seeing: Accelerating Reverse-Engineering via Point-of-Interest-Beacons
August See, Maximilian Gehring, Max Mühlhäuser +2
New types of malware are emerging at concerning rates. However, analyzing malware via reverse engineering is still a time-consuming and mostly manual task. For this reason, it is n…
Passive, Transparent, and Selective TLS Decryption for Network Security Monitoring
Florian Wilkens, Steffen Haas, Johanna Amann +1
Internet traffic is increasingly encrypted. While this protects the confidentiality and integrity of communication, it prevents network monitoring systems (NMS) and intrusion detec…
Multi-Stage Attack Detection via Kill Chain State Machines
Florian Wilkens, Felix Ortmann, Steffen Haas +2
Today, human security analysts collapse under the sheer volume of alerts they have to triage during investigations. The inability to cope with this load, coupled with a high false…
SDN-based Self-Configuration for Time-Sensitive IoT Networks
Nurefşan Sertbaş Bülbül, Doğanalp Ergenç, Mathias Fischer
The convergence of IT and OT technologies results in the need for efficient network management solutions for automotive and industrial automation environments. However, configuring…
Towards Flexible Security Testing of OT Devices
Florian Wilkens, Samuel Botzler, Julia Curts +6
In the factory of the future traditional and formerly isolated Operational Technology (OT) hardware will become connected with all kinds of networks. This leads to more complex sec…
Scan Correlation -- Revealing distributed scan campaigns
Steffen Haas, Florian Wilkens, Mathias Fischer
Public networks are exposed to port scans from the Internet. Attackers search for vulnerable services they can exploit. In large scan campaigns, attackers often utilize different m…
zeek-osquery: Host-Network Correlation for Advanced Monitoring and Intrusion Detection
Steffen Haas, Robin Sommer, Mathias Fischer
Intrusion Detection Systems (IDSs) can analyze network traffic for signs of attacks and intrusions. However, encrypted communication limits their visibility and sophisticated attac…
QUICker connection establishment with out-of-band validation tokens
Erik Sy, Christian Burkert, Tobias Mueller +2
QUIC is a secure transport protocol that improves the performance of HTTPS. An initial QUIC handshake that enforces a strict validation of the client's source address requires two…
Efficient Attack Correlation and Identification of Attack Scenarios based on Network-Motifs
Steffen Haas, Florian Wilkens, Mathias Fischer
An Intrusion Detection System (IDS) to secure computer networks reports indicators for an attack as alerts. However, every attack can result in a multitude of IDS alerts that need…
Enhanced Performance and Privacy for TLS over TCP Fast Open
Erik Sy, Tobias Mueller, Christian Burkert +2
Small TCP flows make up the majority of web flows. For them, the TCP three-way handshake induces significant delay overhead. The TCP Fast Open (TFO) protocol can significantly decr…
Enhanced Performance for the encrypted Web through TLS Resumption across Hostnames
Erik Sy, Moritz Moennich, Tobias Mueller +2
TLS can resume previous connections via abbreviated resumption handshakes that significantly decrease the delay and save expensive cryptographic operations. For that, cryptographic…
Tracking Users across the Web via TLS Session Resumption
Erik Sy, Christian Burkert, Hannes Federrath +1
User tracking on the Internet can come in various forms, e.g., via cookies or by fingerprinting web browsers. A technique that got less attention so far is user tracking based on T…