9 citations · 29 across the 19 of their papers we have counts for
19 papers
Introducing the Cyber-Physical Data Flow Diagram to Improve Threat Modelling of Internet of Things Devices
Simon Liebl, Ian Ferguson, Andreas Aßmuth +2
A growing number of Internet of Things (IoT) devices are used across consumer, medical, and industrial domains. They interact with their environment through sensors and actuators a…
An Analysis of Attack Vectors Against FIDO2 Authentication
Alexander Berladskyy, Andreas Aßmuth
Phishing attacks remain one of the most prevalent threats to online security, with the Anti-Phishing Working Group reporting over 890,000 attacks in Q3 2025 alone. Traditional pass…
CVEs With a CVSS Score Greater Than or Equal to 9
Lena Sinterhauf, Andreas Aßmuth, Roland Kaltefleiter
Critical vulnerabilities with Common Vulnerability Scoring System scores of 9.0 or higher pose severe risks to organisations' information systems. Timely detection and remediation…
Practical Acoustic Eavesdropping On Typed Passphrases
Darren Fürst, Andreas Aßmuth
Cloud services have become an essential infrastructure for enterprises and individuals. Access to these cloud services is typically governed by Identity and Access Management syste…
Graph of Effort: Quantifying Risk of AI Usage for Vulnerability Assessment
Anket Mehra, Andreas Aßmuth, Malte Prieß
With AI-based software becoming widely available, the risk of exploiting its capabilities, such as high automation and complex pattern recognition, could significantly increase. An…
Securing Confidential Data For Distributed Software Development Teams: Encrypted Container File
Tobias J. Bauer, Andreas Aßmuth
In the context of modern software engineering, there is a trend towards Cloud-native software development involving international teams with members from all over the world. Cloud-…
Analyzing the Attack Surface and Threats of Industrial Internet of Things Devices
Simon Liebl, Leah Lathrop, Ulrich Raithel +3
The growing connectivity of industrial devices as a result of the Internet of Things is increasing the risks to Industrial Control Systems. Since attacks on such devices can also c…
Threat Analysis of Industrial Internet of Things Devices
Simon Liebl, Leah Lathrop, Ulrich Raithel +2
As part of the Internet of Things, industrial devices are now also connected to cloud services. However, the connection to the Internet increases the risks for Industrial Control S…
PLASMA -- Platform for Service Management in Digital Remote Maintenance Applications
Natascha Stumpp, Doris Aschenbrenner, Manuel Stahl +1
To support maintenance and servicing of industrial machines, service processes are even today often performed manually and analogously, although supportive technologies such as aug…
Security of Cloud Services with Low-Performance Devices in Critical Infrastructures
Michael Molle, Ulrich Raithel, Dirk Kraemer +3
As part of the Internet of Things (IoT) and Industry 4.0 Cloud services are increasingly interacting with low-performance devices that are used in automation. This results in secur…
Cloud Security and Security Challenges Revisited
Fabian Süß, Marco Freimuth, Andreas Aßmuth +2
In recent years, Cloud Computing has transformed local businesses and created new business models on the Internet- and Cloud services are still flourishing. But after the emphatic…
A Secure and Privacy-Friendly Logging Scheme
Andreas Aßmuth, Robert Duncan, Simon Liebl +1
Finding a robust security mechanism for audit trail logging has long been a poorly satisfied goal. There are many reasons for this. The most significant of these is that the audit…
Securing 3rd Party App Integration in Docker-based Cloud Software Ecosystems
Christian Binkowski, Stefan Appel, Andreas Aßmuth
Open software ecosystems are beneficial for customers; they benefit from 3rd party services and applications, e.g. analysis of data using apps, developed and deployed by other comp…
Encrypted Container File: Design and Implementation of a Hybrid-Encrypted Multi-Recipient File Structure
Tobias J. Bauer, Andreas Aßmuth
Modern software engineering trends towards Cloud-native software development by international teams of developers. Cloud-based version management services, such as GitHub, are used…
Distinguishing Tor From Other Encrypted Network Traffic Through Character Analysis
Pitpimon Choorod, Tobias J. Bauer, Andreas Aßmuth
For journalists reporting from a totalitarian regime, whistleblowers and resistance fighters, the anonymous use of cloud services on the Internet can be vital for survival. The Tor…
An Approach for Decentralized Authentication in Networks of UAVs
Nicholas Jäger, Andreas Aßmuth
We propose a decentralized authentication system for networks of unmanned aerial vehicles. A blockchain-based public key infrastructure allows the usage of public key cryptography…
Managing Forensic Recovery in the Cloud
George R. S. Weir, Andreas Aßmuth, Nicholas Jäger
As organisations move away from locally hosted computer services toward Cloud platforms, there is a corresponding need to ensure the forensic integrity of such instances. The prima…
Strategies for Intrusion Monitoring in Cloud Services
George R. S. Weir, Andreas Aßmuth
Effective activity and event monitoring is an essential aspect of digital forensic readiness. Techniques for capturing log and other event data are familiar from conventional netwo…
Security Challenges for Cloud or Fog Computing-Based AI Applications
Amir Pakmehr, Andreas Aßmuth, Christoph P. Neumann +1
Security challenges for Cloud or Fog-based machine learning services pose several concerns. Securing the underlying Cloud or Fog services is essential, as successful attacks agains…