234 citations · 1k across the 47 of their papers we have counts for
9 papers · 1 filter
Do CAA, CT, and DANE Interlink in Certificate Deployments? A Web PKI Measurement Study
Pouyan Fotouhi Tehrani, Raphael Hiesgen, Teresa Lübeck +2
Integrity and trust on the web build on X.509 certificates. Misuse or misissuance of these certificates threaten the Web PKI security model, which led to the development of several…
SoK: A Data-driven View on Methods to Detect Reflective Amplification DDoS Attacks Using Honeypots
Marcin Nawrocki, John Kristoff, Raphael Hiesgen +3
In this paper, we revisit the use of honeypots for detecting reflective amplification attacks. These measurement tools require careful design of both data collection and data analy…
PUF for the Commons: Enhancing Embedded Security on the OS Level
Peter Kietzmann, Thomas C. Schmidt, Matthias Wählisch
Security is essential for the Internet of Things (IoT). Cryptographic operations for authentication and encryption commonly rely on random input of high entropy and secure, tamper-…
Usable Security for an IoT OS: Integrating the Zoo of Embedded Crypto Components Below a Common API
Lena Boeckmann, Peter Kietzmann, Leandro Lanzieri +2
IoT devices differ widely in crypto-supporting hardware, ranging from no hardware support to powerful accelerators supporting numerous of operations including protected key storage…
The Race to the Vulnerable: Measuring the Log4j Shell Incident
Raphael Hiesgen, Marcin Nawrocki, Thomas C. Schmidt +1
The critical remote-code-execution (RCE) Log4Shell is a severe vulnerability that was disclosed to the public on December 10, 2021. It exploits a bug in the wide-spread Log4j libra…
The Far Side of DNS Amplification: Tracing the DDoS Attack Ecosystem from the Internet Core
Marcin Nawrocki, Mattijs Jonker, Thomas C. Schmidt +1
In this paper, we shed new light on the DNS amplification ecosystem, by studying complementary data sources, bolstered by orthogonal methodologies. First, we introduce a passive at…
From the Beginning: Key Transitions in the First 15 Years of DNSSEC
Eric Osterweil, Pouyan Fotouhi Tehrani, Thomas C. Schmidt +1
When the global rollout of the DNS Security Extensions (DNSSEC) began in 2005, a first-of-its-kind trial started: The complexity of a core Internet protocol was magnified in favor…
A Guideline on Pseudorandom Number Generation (PRNG) in the IoT
Peter Kietzmann, Thomas C. Schmidt, Matthias Wählisch
Random numbers are an essential input to many functions on the Internet of Things (IoT). Common use cases of randomness range from low-level packet transmission to advanced algorit…
A Survey on Honeypot Software and Data Analysis
Marcin Nawrocki, Matthias Wählisch, Thomas C. Schmidt +2
In this survey, we give an extensive overview on honeypots. This includes not only honeypot software but also methodologies to analyse honeypot data.