198 citations · 364 across the 22 of their papers we have counts for
23 papers
Protocol Prying: Systematic Vulnerability Research in the Apple AirDrop and Android Quick Share Proximity Transfer Protocols
Arash Ale Ebrahim, Nils Ole Tippenhauer
Apple AirDrop and Google/Samsung Quick Share are proximity file-transfer protocols used by over five billion devices, yet their application-layer security properties remain largely…
Enabling Physical Localization of Uncooperative Cellular Devices
Taekkyung Oh, Sangwook Bae, Junho Ahn +5
In cellular networks, authorities may need to physically locate user devices to track criminals or illegal equipment. This process involves authorized agents tracing devices by mon…
Why Don't You Clean Your Glasses? Perception Attacks with Dynamic Optical Perturbations
Yi Han, Matthew Chan, Eric Wengrowski +5
Camera-based autonomous systems that emulate human perception are increasingly being integrated into safety-critical platforms. Consequently, an established body of literature has…
Identifying Near-Optimal Single-Shot Attacks on ICSs with Limited Process Knowledge
Herson Esquivel-Vargas, John Henry Castellanos, Marco Caselli +2
Industrial Control Systems (ICSs) rely on insecure protocols and devices to monitor and operate critical infrastructure. Prior work has demonstrated that powerful attackers with de…
FieldFuzz: In Situ Blackbox Fuzzing of Proprietary Industrial Automation Runtimes via the Network
Andrei Bytes, Prashant Hari Narayan Rajput, Constantine Doumanidis +3
Networked Programmable Logic Controllers (PLCs) are proprietary industrial devices utilized in critical infrastructure that execute control logic applications in complex proprietar…
Security Analysis of Vendor Implementations of the OPC UA Protocol for Industrial Control Systems
Alessandro Erba, Anne Müller, Nils Ole Tippenhauer
The OPC UA protocol is an upcoming de-facto standard for building Industry 4.0 processes in Europe, and one of the few industrial protocols that promises security features to preve…
No Need to Know Physics: Resilience of Process-based Model-free Anomaly Detection for Industrial Control Systems
Alessandro Erba, Nils Ole Tippenhauer
In recent years, a number of process-based anomaly detection schemes for Industrial Control Systems were proposed. In this work, we provide the first systematic analysis of such sc…
BLURtooth: Exploiting Cross-Transport Key Derivation in Bluetooth Classic and Bluetooth Low Energy
Daniele Antonioli, Nils Ole Tippenhauer, Kasper Rasmussen +1
The Bluetooth standard specifies two transports: Bluetooth Classic (BT) for high-throughput wireless services and Bluetooth Low Energy (BLE) for very low-power scenarios. BT and BL…
Assessing the Use of Insecure ICS Protocols via IXP Network Traffic Analysis
Giovanni Barbieri, Mauro Conti, Nils Ole Tippenhauer +1
Modern Industrial Control Systems (ICSs) allow remote communication through the Internet using industrial protocols that were not designed to work with external networks. To unders…
Decentralized Privacy-Preserving Proximity Tracing
Carmela Troncoso, Mathias Payer, Jean-Pierre Hubaux +31
This document describes and analyzes a system for secure and privacy-preserving proximity tracing at large scale. This system, referred to as DP3T, provides a technological foundat…
Constrained Concealment Attacks against Reconstruction-based Anomaly Detectors in Industrial Control Systems
Alessandro Erba, Riccardo Taormina, Stefano Galelli +4
Recently, reconstruction-based anomaly detection was proposed as an effective technique to detect attacks in dynamic industrial control networks. Unlike classical network anomaly d…
Challenges for Security Assessment of Enterprises in the IoT Era
Yael Mathov, Noga Agmon, Asaf Shabtai +3
For years, attack graphs have been an important tool for security assessment of enterprise networks, but IoT devices, a new player in the IT world, might threat the reliability of…
HADES-IoT: A Practical Host-Based Anomaly Detection System for IoT Devices (Extended Version)
Dominik Breitenbacher, Ivan Homoliak, Yan Lin Aung +2
Internet of Things (IoT) devices have become ubiquitous and are spread across many application domains including the industry, transportation, healthcare, and households. However,…
Taking Control: Design and Implementation of Botnets for Cyber-Physical Attacks with CPSBot
Daniele Antonioli, Giuseppe Bernieri, Nils Ole Tippenhauer
Recently, botnets such as Mirai and Persirai targeted IoT devices on a large scale. We consider attacks by botnets on cyber-physical systems (CPS), which require advanced capabilit…
Detection of Unauthorized IoT Devices Using Machine Learning Techniques
Yair Meidan, Michael Bohadana, Asaf Shabtai +4
Security experts have demonstrated numerous risks imposed by Internet of Things (IoT) devices on organizations. Due to the widespread adoption of such devices, their diversity, sta…
On Ladder Logic Bombs in Industrial Control Systems
Naman Govil, Anand Agrawal, Nils Ole Tippenhauer
In industrial control systems, devices such as Programmable Logic Controllers (PLCs) are commonly used to directly interact with sensors and actuators, and perform local automatic…
Gamifying Education and Research on ICS Security: Design, Implementation and Results of S3
Daniele Antonioli, Hamid Reza Ghaeini, Sridhar Adepu +2
In this work, we consider challenges relating to security for Industrial Control Systems (ICS) in the context of ICS security education and research targeted both to academia and i…
IoTScanner: Detecting and Classifying Privacy Threats in IoT Neighborhoods
Sandra Siby, Rajib Ranjan Maiti, Nils Tippenhauer
In the context of the emerging Internet of Things (IoT), a proliferation of wireless connectivity can be expected. That ubiquitous wireless communication will be hard to centrally…
SIPHON: Towards Scalable High-Interaction Physical Honeypots
Juan Guarnizo, Amit Tambe, Suman Sankar Bhunia +4
In recent years, the emerging Internet-of-Things (IoT) has led to rising concerns about the security of networked embedded devices. In this work, we focus on the adaptation of Hone…
Power-saving transportation mode identification for large-scale applications
Yuren Zhou, Jin Wang, Peng Shi +3
Transportation mode detection with personal devices has been investigated for over ten years due to its importance in monitoring ones' activities, understanding human mobility, and…
CPDY: Extending the Dolev-Yao Attacker with Physical-Layer Interactions
Marco Rocchetto, Nils Ole Tippenhauer
We propose extensions to the Dolev-Yao attacker model to make it suitable for arguments about security of Cyber-Physical Systems. The Dolev-Yao attacker model uses a set of rules t…
MiniCPS: A toolkit for security research on CPS Networks
Daniele Antonioli, Nils Ole Tippenhauer
In recent years, tremendous effort has been spent to modernizing communication infrastructure in Cyber-Physical Systems (CPS) such as Industrial Control Systems (ICS) and related S…
Automatic Generation of Security Argument Graphs
Nils Ole Tippenhauer, William G. Temple, An Hoa Vu +4
Graph-based assessment formalisms have proven to be useful in the safety, dependability, and security communities to help stakeholders manage risk and maintain appropriate document…