539 citations · 1.2k across the 24 of their papers we have counts for
28 papers
ARIstoteles -- Dissecting Apple's Baseband Interface
Tobias Kröll, Stephan Kleber, Frank Kargl +2
Wireless chips and interfaces expose a substantial remote attack surface. As of today, most cellular baseband security research is performed on the Android ecosystem, leaving a hug…
PrePaMS: Privacy-Preserving Participant Management System for Studies with Rewards and Prerequisites
Echo Meißner, Frank Kargl, Benjamin Erb +1
Taking part in surveys, experiments, and studies is often compensated by rewards to increase the number of participants and encourage attendance. While privacy requirements are usu…
Zero Trust Score-based Network-level Access Control in Enterprise Networks
Leonard Bradatsch, Oleksandr Miroshkin, Natasa Trkulja +1
Zero Trust security has recently gained attention in enterprise network security. One of its key ideas is making network-level access decisions based on trust scores. However, scor…
Refining Network Message Segmentation with Principal Component Analysis
Stephan Kleber, Frank Kargl
Reverse engineering of undocumented protocols is a common task in security analyses of networked services. The communication itself, captured in traffic traces, contains much of th…
Network Message Field Type Classification and Recognition for Unknown Binary Protocols
Stephan Kleber, Milan Stute, Matthias Hollick +1
Reverse engineering of unknown network protocols based on recorded traffic traces enables security analyses and debugging of undocumented network services. In particular for binary…
Evaluating the Future Device Security Risk Indicator for Hundreds of IoT Devices
Pascal Oser, Felix Engelmann, Stefan Lüders +1
IoT devices are present in many, especially corporate and sensitive, networks and regularly introduce security risks due to slow vendor responses to vulnerabilities and high diffic…
Confidential Token-Based License Management
Felix Engelmann, Jan Philip Speichert, Ralf God +2
In a global economy with many competitive participants, licensing and tracking of 3D printed parts is desirable if not mandatory for many use-cases. We investigate a blockchain-bas…
Zero Trust Service Function Chaining
Leonard Bradatsch, Frank Kargl, Oleksandr Miroshkin
In this paper, we address the inefficient handling of traditional security functions in Zero Trust (ZT) networks. For this reason, we propose a novel network security concept that…
WAIT: Protecting the Integrity of Web Applications with Binary-Equivalent Transparency
Echo Meißner, Frank Kargl, Benjamin Erb
Modern single page web applications require client-side executions of application logic, including critical functionality such as client-side cryptography. Existing mechanisms such…
PeQES: A Platform for Privacy-enhanced Quantitative Empirical Studies
Echo Meißner, Felix Engelmann, Frank Kargl +1
Empirical sciences and in particular psychology suffer a methodological crisis due to the non-reproducibility of results, and in rare cases, questionable research practices. Pre-re…
SAFER: Development and Evaluation of an IoT Device Risk Assessment Framework in a Multinational Organization
Pascal Oser, Sebastian Feger, Paweł W. Woźniak +6
Users of Internet of Things (IoT) devices are often unaware of their security risks and cannot sufficiently factor security considerations into their device selection. This puts ne…
Message Type Identification of Binary Network Protocols using Continuous Segment Similarity
Stephan Kleber, Rens Wouter van der Heijden, Frank Kargl
Protocol reverse engineering based on traffic traces infers the behavior of unknown network protocols by analyzing observable network messages. To perform correct deduction of mess…
Mitigation of Flooding and Slow DDoS Attacks in a Software-Defined Network
Thomas Lukaseder, Shreya Ghosh, Frank Kargl
Distributed denial of service (DDoS) attacks are a constant threat for services in the Internet. This year, the record for the largest DDoS attack ever observed was set at 1.7 Tbps…
An SDN-based Approach For Defending Against Reflective DDoS Attacks
Thomas Lukaseder, Kevin Stölzle, Stephan Kleber +2
Distributed Reflective Denial of Service (DRDoS) attacks are an immanent threat to Internet services. The potential scale of such attacks became apparent in March 2018 when a memca…
A Flexible Network Approach to Privacy of Blockchain Transactions
David Mödinger, Henning Kopp, Frank Kargl +1
For preserving privacy, blockchains can be equipped with dedicated mechanisms to anonymize participants. However, these mechanism often take only the abstraction layer of blockchai…
Coloured Ring Confidential Transactions
Felix Engelmann, Frank Kargl, Christoph Bösch
Privacy in block-chains is considered second to functionality, but a vital requirement for many new applications, e.g., in the industrial environment. We propose a novel transactio…
Performance Evaluation in High-Speed Networks by the Example of Intrusion Detection
Thomas Lukaseder, Jessika Fiedler, Frank Kargl
Purchase decisions for devices in high-throughput networks as well as scientific evaluations of algorithms and technologies need to be based in measurements and clear procedures. T…
Multi-Source Fusion Operations in Subjective Logic
Rens Wouter van der Heijden, Henning Kopp, Frank Kargl
The purpose of multi-source fusion is to combine information from more than two evidence sources, or subjective opinions from multiple actors. For subjective logic, a number of dif…
SDN-Assisted Network-Based Mitigation of Slow DDoS Attacks
Thomas Lukaseder, Lisa Maile, Benjamin Erb +1
Slow-running attacks against network applications are often not easy to detect, as the attackers behave according to the specification. The servers of many network applications are…
VeReMi: A Dataset for Comparable Evaluation of Misbehavior Detection in VANETs
Rens W. van der Heijden, Thomas Lukaseder, Frank Kargl
Vehicular networks are networks of communicating vehicles, a major enabling technology for future cooperative and autonomous driving technologies. The most important messages in th…
Towards an Economic Analysis of Routing in Payment Channel Networks
Felix Engelmann, Florian Glaser, Henning Kopp +2
Payment channel networks are supposed to overcome technical scalability limitations of blockchain infrastructure by employing a special overlay network with fast payment confirmati…
Blackchain: Scalability for Resource-Constrained Accountable Vehicle-to-X Communication
Rens Wouter van der Heijden, Felix Engelmann, David Mödinger +2
In this paper, we propose a new Blockchain-based message and revocation accountability system called Blackchain. Combining a distributed ledger with existing mechanisms for securit…
Analyzing Attacks on Cooperative Adaptive Cruise Control (CACC)
Rens Wouter van der Heijden, Thomas Lukaseder, Frank Kargl
Cooperative Adaptive Cruise Control (CACC) is one of the driving applications of vehicular ad-hoc networks (VANETs) and promises to bring more efficient and faster transportation t…
Formal Analysis of V2X Revocation Protocols
Jorden Whitefield, Liqun Chen, Frank Kargl +4
Research on vehicular networking (V2X) security has produced a range of security mechanisms and protocols tailored for this domain, addressing both security and privacy. Typically,…