31 citations · 86 across the 11 of their papers we have counts for
11 papers
EMERALD: Evidence Management for Continuous Certification as a Service in the Cloud
Christian Banse, Björn Fanta, Juncal Alonso +1
The conspicuous lack of cloud-specific security certifications, in addition to the existing market fragmentation, hinder transparency and accountability in the provision and usage…
owl2proto: Enabling Semantic Processing in Modern Cloud Micro-Services
Christian Banse, Angelika Schneider, Immanuel Kunz
The usefulness of semantic technologies in the context of security has been demonstrated many times, e.g., for processing certification evidence, log files, and creating security p…
Poster: Patient Community -- A Test Bed For Privacy Threat Analysis
Immanuel Kunz, Angelika Schneider, Christian Banse +2
Research and development of privacy analysis tools currently suffers from a lack of test beds for evaluation and comparison of such tools. In this work, we propose a benchmark appl…
A Uniform Representation of Classical and Quantum Source Code for Static Code Analysis
Maximilian Kaul, Alexander Küchler, Christian Banse
The emergence of quantum computing raises the question of how to identify (security-relevant) programming errors during development. However, current static code analysis tools fai…
Representing LLVM-IR in a Code Property Graph
Alexander Küchler, Christian Banse
In the past years, a number of static application security testing tools have been proposed which make use of so-called code property graphs, a graph model which keeps rich informa…
A Continuous Risk Assessment Methodology for Cloud Infrastructures
Immanuel Kunz, Angelika Schneider, Christian Banse
Cloud systems are dynamic environments which make it difficult to keep track of security risks that resources are exposed to. Traditionally, risk assessment is conducted for indivi…
Cloud Property Graph: Connecting Cloud Security Assessments with Static Code Analysis
Christian Banse, Immanuel Kunz, Angelika Schneider +1
In this paper, we present the Cloud Property Graph (CloudPG), which bridges the gap between static code analysis and runtime security assessment of cloud services. The CloudPG is a…
A Language-Independent Analysis Platform for Source Code
Konrad Weiss, Christian Banse
In this paper, we present the CPG analysis platform, which enables the translation of source code into a programming language-independent representation, based on a code property g…
Towards Tracking Data Flows in Cloud Architectures
Immanuel Kunz, Valentina Casola, Angelika Schneider +2
As cloud services become central in an increasing number of applications, they process and store more personal and business-critical data. At the same time, privacy and compliance…
ZKlaims: Privacy-preserving Attribute-based Credentials using Non-interactive Zero-knowledge Techniques
Martin Schanzenbach, Thomas Kilian, Julian Schütte +1
In this paper we present ZKlaims: a system that allows users to present attribute-based credentials in a privacy-preserving way. We achieve a zero-knowledge property on the basis o…
Practical Decentralized Attribute-Based Delegation using Secure Name Systems
Martin Schanzenbach, Christian Banse, Julian Schütte
Identity and trust in the modern Internet are centralized around an oligopoly of identity service providers consisting solely of major tech companies. The problem with centralizing…