2 citations · 7 across the 28 of their papers we have counts for
13 papers · 1 filter
Checking Leakage Witnesses versus Certifying Bounded Non-Leakage
Chao Feng, Burkhard Stiller
When a language-model audit finds no leak, what is needed to certify non-leakage? We study guarantees over a declared prompt domain under an executable leakage criterion and decodi…
A Crowdsensing Intrusion Detection Dataset For Decentralized Federated Learning Models
Chao Feng, Alberto Huertas Celdran, Jing Han +6
This paper introduces a dataset and an experimental study on Decentralized Federated Learning (DFL) for Internet of Things (IoT) crowdsensing malware detection. The dataset compris…
QUIC-Exfil: Exploiting QUIC's Server Preferred Address Feature to Perform Data Exfiltration Attacks
Thomas Grübl, Weijie Niu, Jan von der Assen +1
The QUIC protocol is now widely adopted by major tech companies and accounts for a significant fraction of today's Internet traffic. QUIC's multiplexing capabilities, encrypted hea…
Leveraging MTD to Mitigate Poisoning Attacks in Decentralized FL with Non-IID Data
Chao Feng, Alberto Huertas Celdrán, Zien Zeng +4
Decentralized Federated Learning (DFL), a paradigm for managing big data in a privacy-preserved manner, is still vulnerable to poisoning attacks where malicious clients tamper with…
Towards Threat Modelling of IoT Context-Sharing Platforms
Mohammad Goudarzi, Arash Shaghaghi, Simon Finn +2
The Internet of Things (IoT) involves complex, interconnected systems and devices that depend on context-sharing platforms for interoperability and information exchange. These plat…
PACCOR4ESP: Embedded Device Security Attestation using Platform Attribute Certificates
Thomas Grübl, Jan von der Assen, Markus Knecht +1
Verifying the integrity of embedded device characteristics is required to ensure secure operation of a device. One central challenge is to securely extract and store device-specifi…
The Danger Within: Insider Threat Modeling Using Business Process Models
Jan von der Assen, Jasmin Hochuli, Thomas Grübl +1
Threat modeling has been successfully applied to model technical threats within information systems. However, a lack of methods focusing on non-technical assets and their represent…
Performance Analysis of Decentralized Physical Infrastructure Networks and Centralized Clouds
Jan von der Assen, Christian Killer, Alessandro De Carli +1
The advent of Decentralized Physical Infrastructure Networks (DePIN) represents a shift in the digital infrastructure of today's Internet. While Centralized Service Providers (CSP)…
Asset-centric Threat Modeling for AI-based Systems
Jan von der Assen, Jamo Sharif, Chao Feng +3
Threat modeling is a popular method to securely develop systems by achieving awareness of potential areas of future damage caused by adversaries. However, threat modeling for syste…
QuantTM: Business-Centric Threat Quantification for Risk Management and Cyber Resilience
Jan von der Assen, Muriel F. Franco, Muyao Dong +1
Threat modeling has emerged as a key process for understanding relevant threats within businesses. However, understanding the importance of threat events is rarely driven by the bu…
GuardFS: a File System for Integrated Detection and Mitigation of Linux-based Ransomware
Jan von der Assen, Chao Feng, Alberto Huertas Celdrán +3
Although ransomware has received broad attention in media and research, this evolving threat vector still poses a systematic threat. Related literature has explored their detection…
Empirical and Theoretical Analysis of Liquid Staking Protocols
Krzysztof Gogol, Benjamin Kraner, Malte Schlosser +3
Liquid staking has become the largest category of decentralized finance protocols in terms of total value locked. However, few studies exist on its implementation designs or underl…
Voyager: MTD-Based Aggregation Protocol for Mitigating Poisoning Attacks on DFL
Chao Feng, Alberto Huertas Celdran, Michael Vuong +2
The growing concern over malicious attacks targeting the robustness of both Centralized and Decentralized Federated Learning (FL) necessitates novel defensive strategies. In contra…