30 citations · 51 across the 14 of their papers we have counts for
15 papers
PINsight: Systematic Threat Assessment of Cross-Domain Wi-Fi-based PIN Inference
Johannes Kortz, Christof Paar, Christian Zenger +1
Wi-Fi signals can be repurposed as radar-like sensors, exposing a side channel for inferring sensitive information. A particularly concerning example is PIN inference, where an att…
Talking to the Airgap: Exploiting Radio-Less Embedded Devices as Radio Receivers
Paul Staat, Daniel Davidovich, Christof Paar
Physical isolation from external networks - an airgap - aims to minimize exposure to remote attacks. Yet capable adversaries still achieve code execution on air-gapped systems, and…
The Battle of Metasurfaces: Understanding Security in Smart Radio Environments
Paul Staat, Christof Paar, Swarun Kumar
Metasurfaces, or Reconfigurable Intelligent Surfaces (RISs), have emerged as a transformative technology for next-generation wireless systems, enabling digitally controlled manipul…
Anti-Tamper Radio meets Reconfigurable Intelligent Surface for System-Level Tamper Detection
Maryam Shaygan Tabar, Johannes Kortz, Paul Staat +3
Many computing systems need to be protected against physical attacks using active tamper detection based on sensors. One technical solution is to employ an ATR (Anti-Tamper Radio)…
Key Exchange in the Quantum Era: Evaluating a Hybrid System of Public-Key Cryptography and Physical-Layer Security
Paul Staat, Meik Dörpinghaus, Azadeh Sheikholeslami +3
Today's information society relies on cryptography to achieve security goals such as confidentiality, integrity, authentication, and non-repudiation for digital communications. Her…
Spatial-Domain Wireless Jamming with Reconfigurable Intelligent Surfaces
Philipp Mackensen, Paul Staat, Stefan Roth +3
Wireless communication infrastructure is a cornerstone of modern digital society, yet it remains vulnerable to the persistent threat of wireless jamming. Attackers can easily creat…
Stealing Maggie's Secrets -- On the Challenges of IP Theft Through FPGA Reverse Engineering
Simon Klix, Nils Albartus, Julian Speith +9
Intellectual Property (IP) theft is a cause of major financial and reputational damage, reportedly in the range of hundreds of billions of dollars annually in the U.S. alone. Field…
RIS-Jamming: Breaking Key Consistency in Channel Reciprocity-based Key Generation
Guyue Li, Paul Staat, Haoyu Li +6
Channel Reciprocity-based Key Generation (CRKG) exploits reciprocal channel randomness to establish shared secret keys between wireless terminals. This new security technique is ex…
Analog Physical-Layer Relay Attacks with Application to Bluetooth and Phase-Based Ranging
Paul Staat, Kai Jansen, Christian Zenger +2
Today, we use smartphones as multi-purpose devices that communicate with their environment to implement context-aware services, including asset tracking, indoor localization, conta…
Anti-Tamper Radio: System-Level Tamper Detection for Computing Systems
Paul Staat, Johannes Tobisch, Christian Zenger +1
A whole range of attacks becomes possible when adversaries gain physical access to computing systems that process or contain sensitive data. Examples include side-channel analysis,…
Reconfigurable Intelligent Surface for Physical Layer Key Generation: Constructive or Destructive?
Guyue Li, Lei Hu, Paul Staat +4
Physical layer key generation (PKG) is a promising means to provide on-the-fly shared secret keys by exploiting the intrinsic randomness of the radio channel. However, the performa…
IRShield: A Countermeasure Against Adversarial Physical-Layer Wireless Sensing
Paul Staat, Simon Mulzer, Stefan Roth +5
Wireless radio channels are known to contain information about the surrounding propagation environment, which can be extracted using established wireless sensing methods. Thus, tod…
Mirror Mirror on the Wall: Wireless Environment Reconfiguration Attacks Based on Fast Software-Controlled Surfaces
Paul Staat, Harald Elders-Boll, Markus Heinrichs +2
The intelligent reflecting surface (IRS) is a promising new paradigm in wireless communications for meeting the growing connectivity demands in next-generation mobile networks. IRS…
Full-Duplex meets Reconfigurable Surfaces: RIS-assisted SIC for Full-Duplex Radios
Simon Tewes, Markus Heinrichs, Paul Staat +2
Reconfigurable intelligent surfaces (RIS) are a key enabler of various new applications in 6G smart radio environments. By utilizing an RIS prototype system, this paper aims to enh…
Intelligent Reflecting Surface-Assisted Wireless Key Generation for Low-Entropy Environments
Paul Staat, Harald Elders-Boll, Markus Heinrichs +3
Physical layer key generation is a promising candidate for cryptographic key establishment between two wireless communication parties. It offers information-theoretic security and…