19 citations · 58 across the 8 of their papers we have counts for
6 papers · 1 filter
Privacy Assessment of Software Architectures based on Static Taint Analysis
Marcel von Maltitz, Cornelius Diekmann, Georg Carle
Privacy analysis is critical but also a time-consuming and tedious task. We present a formalization which eases designing and auditing high-level privacy properties of software arc…
Adaptive Load-Aware Sampling for Network Monitoring on Multicore Commodity Hardware
Lothar Braun, Cornelius Diekmann, Nils Kammenhuber +1
Many current traffic monitoring systems employ deep packet inspection (DPI) in order to analyze network traffic. These systems include intrusion detection systems, software for net…
Demonstrating topoS: Theorem-Prover-Based Synthesis of Secure Network Configurations
Cornelius Diekmann, Andreas Korsten, Georg Carle
In network management, when it comes to security breaches, human error constitutes a dominant factor. We present our tool topoS which automatically synthesizes low-level network co…
Semantics-Preserving Simplification of Real-World Firewall Rule Sets
Cornelius Diekmann, Lars Hupel, Georg Carle
The security provided by a firewall for a computer network almost completely depends on the rules it enforces. For over a decade, it has been a well-known and unsolved problem that…
Verifying Security Policies using Host Attributes
Cornelius Diekmann, Stephan-A. Posselt, Heiko Niedermayer +3
For the formal verification of a network security policy, it is crucial to express the verification goals. These formal goals, called security invariants, should be easy to express…
Certifying Spoofing-Protection of Firewalls
Cornelius Diekmann, Lukas Schwaighofer, Georg Carle
We present an algorithm to certify IP spoofing protection of firewall rulesets. The algorithm is machine-verifiably proven sound and its use is demonstrated in real-world scenarios…