38 citations · 86 across the 15 of their papers we have counts for
15 papers
An Analysis of the Impact of Psychological Factors and Techniques Across Different Types of Social Engineering
Helin Omer, Daniela Pöhn
Phishing is a well-known social engineering (SE) type used to trick individuals into revealing personal information or performing desired actions, like downloading and installing m…
Towards an Improved Taxonomy of Attacks related to Digital Identities and Identity Management Systems
Daniela Pöhn, Wolfgang Hommel
Digital transformation with the adoption of cloud technologies, outsourcing, and working-from-home possibilities permits flexibility for organizations and persons. At the same time…
Systematically Searching for Identity-Related Information in the Internet with OSINT Tools
Marcus Walkow, Daniela Pöhn
The increase of Internet services has not only created several digital identities but also more information available about the persons behind them. The data can be collected and u…
Evaluation Scheme to Analyze Keystroke Dynamics Methods
Anastasia Dimaratos, Daniela Pöhn
Password authentication is a weak point for security as passwords are easily stolen and a user may ignore the security by using a simple password. Therefore, services increasingly…
How to Design a Blue Team Scenario for Beginners on the Example of Brute-Force Attacks on Authentications
Andreas Eipper, Daniela Pöhn
Cyber attacks are ubiquitous and a constantly growing threat in the age of digitization. In order to protect important data, developers and system administrators must be trained an…
Hooked: A Real-World Study on QR Code Phishing
Marvin Geisler, Daniela Pöhn
The usage of quick response (QR) codes was limited in the pre-era of the COVID-19 pandemic. Due to the widespread and frequent application since then, this opened up an attractive…
How to Drill Into Silos: Creating a Free-to-Use Dataset of Data Subject Access Packages
Nicola Leschke, Daniela Pöhn, Frank Pallas
The European Union's General Data Protection Regulation (GDPR) strengthened several rights for individuals (data subjects). One of these is the data subjects' right to access their…
A Study of Different Awareness Campaigns in a Company
Laura Gamisch, Daniela Pöhn
Phishing is a major cyber threat to organizations that can cause financial and reputational damage, threatening their existence. The technical measures against phishing should be c…
Needle in the Haystack: Analyzing the Right of Access According to GDPR Article 15 Five Years after the Implementation
Daniela Pöhn, Niklas Mörsdorf, Wolfgang Hommel
The General Data Protection Regulation (GDPR) was implemented in 2018 to strengthen and harmonize the data protection of individuals within the European Union. One key aspect is Ar…
TASEP: A Collaborative Social Engineering Tabletop Role-Playing Game to Prevent Successful Social Engineering Attacks
Lukas Hafner, Florian Wutz, Daniela Pöhn +1
Data breaches resulting from targeted attacks against organizations, e.g., by advanced persistent threat groups, often involve social engineering (SE) as the initial attack vector…
Evaluation of Real-World Risk-Based Authentication at Online Services Revisited: Complexity Wins
Jan-Phillip Makowski, Daniela Pöhn
Risk-based authentication (RBA) aims to protect end-users against attacks involving stolen or otherwise guessed passwords without requiring a second authentication method all the t…
TaxIdMA: Towards a Taxonomy for Attacks related to Identities
Daniela Pöhn und Wolfgang Hommel
Identity management refers to the technology and policies for the identification, authentication, and authorization of users in computer networks. Identity management is therefore…
An Overview of Limitations and Approaches in Identity Management
Daniela Pöhn, Wolfgang Hommel
Identity and access management (I&AM) is the umbrella term for managing users and their permissions. It is required for users to access different services. These services can eithe…
Reference Service Model for Federated Identity Management
Daniela Pöhn, Peter Hillmann
With the pandemic of COVID-19, people around the world increasingly work from home. Each natural person typically has several digital identities with different associated informati…
Cyber Taxi: A Taxonomy of Interactive Cyber Training and Education Systems
Marcus Knüpfer, Tore Bierwirth, Lars Stiemert +4
The lack of guided exercises and practical opportunities to learn about cybersecurity in a practical way makes it difficult for security experts to improve their proficiency. Captu…