26 citations · 73 across the 13 of their papers we have counts for
15 papers
LoVe is in the Air -- Location Verification of ADS-B Signals using Distributed Public Sensors
Johanna Ansohn McDougall, Alessandro Brighente, Willi Großmann +3
The Automatic Dependant Surveillance-Broadcast (ADS-B) message scheme was designed without any authentication or encryption of messages in place. It is therefore easily possible to…
Probing for Passwords -- Privacy Implications of SSIDs in Probe Requests
Johanna Ansohn McDougall, Christian Burkert, Daniel Demmler +3
Probe requests help mobile devices discover active Wi-Fi networks. They often contain a multitude of data that can be used to identify and track devices and thereby their users. Th…
PrivacyDates: A Framework for More Privacy-Preserving Timestamp Data Types
Christian Burkert, Jonathan Balack, Hannes Federrath
Case studies of application software data models indicate that timestamps are excessively used in connection with user activity. This contradicts the principle of data minimisation…
Lessons Learned: Defending Against Property Inference Attacks
Joshua Stock, Jens Wettlaufer, Daniel Demmler +1
This work investigates and evaluates multiple defense strategies against property inference attacks (PIAs), a privacy attack against machine learning models. Given a trained machin…
A Structured Analysis of Information Security Incidents in the Maritime Sector
Monina Schwarz, Matthias Marx, Hannes Federrath
Cyber attacks in the maritime sector can have a major impact on world economy. However, the severity of this threat can be underestimated because many attacks remain unknown or unn…
Operating Tor Relays at Universities: Experiences and Considerations
Christoph Döpmann, Matthias Marx, Hannes Federrath +1
In today's digital society, the Tor network has become an indispensable tool for individuals to protect their privacy on the Internet. Operated by volunteers, relay servers constit…
PEEPLL: Privacy-Enhanced Event Pseudonymisation with Limited Linkability
Ephraim Zimmer, Christian Burkert, Tom Petersen +1
Pseudonymisation provides the means to reduce the privacy impact of monitoring, auditing, intrusion detection, and data collection in general on individual subjects. Its applicatio…
Accelerating QUIC's Connection Establishment on High-Latency Access Networks
Erik Sy, Tobias Mueller, Moritz Moennich +1
A significant amount of connection establishments on the web require a prior domain name resolution by the client. Especially on high-latency access networks, these DNS lookups cau…
QUICker connection establishment with out-of-band validation tokens
Erik Sy, Christian Burkert, Tobias Mueller +2
QUIC is a secure transport protocol that improves the performance of HTTPS. An initial QUIC handshake that enforces a strict validation of the client's source address requires two…
Enhanced Performance and Privacy for TLS over TCP Fast Open
Erik Sy, Tobias Mueller, Christian Burkert +2
Small TCP flows make up the majority of web flows. For them, the TCP three-way handshake induces significant delay overhead. The TCP Fast Open (TFO) protocol can significantly decr…
Enhanced Performance for the encrypted Web through TLS Resumption across Hostnames
Erik Sy, Moritz Moennich, Tobias Mueller +2
TLS can resume previous connections via abbreviated resumption handshakes that significantly decrease the delay and save expensive cryptographic operations. For that, cryptographic…
Tracking Users across the Web via TLS Session Resumption
Erik Sy, Christian Burkert, Hannes Federrath +1
User tracking on the Internet can come in various forms, e.g., via cookies or by fingerprinting web browsers. A technique that got less attention so far is user tracking based on T…
Integrating Privacy-Enhancing Technologies into the Internet Infrastructure
David Harborth, Dominik Herrmann, Stefan Köpsell +5
The AN.ON-Next project aims to integrate privacy-enhancing technologies into the internet's infrastructure and establish them in the consumer mass market. The technologies in focus…
Evaluating the Security of a DNS Query Obfuscation Scheme for Private Web Surfing
Dominik Herrmann, Max Maaß, Hannes Federrath
The Domain Name System (DNS) does not provide query privacy. Query obfuscation schemes have been proposed to overcome this limitation, but, so far, they have not been evaluated in…
IPv6 Prefix Alteration: An Opportunity to Improve Online Privacy
Dominik Herrmann, Christine Arndt, Hannes Federrath
This paper is focused on privacy issues related to the prefix part of IPv6 addresses. Long-lived prefixes may introduce additional tracking opportunities for communication partners…