19 citations · 58 across the 8 of their papers we have counts for
9 papers
Agile Network Access Control in the Container Age
Cornelius Diekmann, Johannes Naab, Andreas Korsten +1
Linux Containers, such as those managed by Docker, are an increasingly popular way to package and deploy complex applications. However, the fundamental security primitive of networ…
Provably Secure Networks: Methodology and Toolset for Configuration Management
Cornelius Diekmann
Network administration is an inherently complex task, in particular with regard to security. Using the Isabelle interactive proof assistant, we develop two automated, formally veri…
Privacy Assessment of Software Architectures based on Static Taint Analysis
Marcel von Maltitz, Cornelius Diekmann, Georg Carle
Privacy analysis is critical but also a time-consuming and tedious task. We present a formalization which eases designing and auditing high-level privacy properties of software arc…
Adaptive Load-Aware Sampling for Network Monitoring on Multicore Commodity Hardware
Lothar Braun, Cornelius Diekmann, Nils Kammenhuber +1
Many current traffic monitoring systems employ deep packet inspection (DPI) in order to analyze network traffic. These systems include intrusion detection systems, software for net…
Demonstrating topoS: Theorem-Prover-Based Synthesis of Secure Network Configurations
Cornelius Diekmann, Andreas Korsten, Georg Carle
In network management, when it comes to security breaches, human error constitutes a dominant factor. We present our tool topoS which automatically synthesizes low-level network co…
Semantics-Preserving Simplification of Real-World Firewall Rule Sets
Cornelius Diekmann, Lars Hupel, Georg Carle
The security provided by a firewall for a computer network almost completely depends on the rules it enforces. For over a decade, it has been a well-known and unsolved problem that…