539 citations · 1.2k across the 24 of their papers we have counts for
24 papers · 1 filter
ARIstoteles -- Dissecting Apple's Baseband Interface
Tobias Kröll, Stephan Kleber, Frank Kargl +2
Wireless chips and interfaces expose a substantial remote attack surface. As of today, most cellular baseband security research is performed on the Android ecosystem, leaving a hug…
PrePaMS: Privacy-Preserving Participant Management System for Studies with Rewards and Prerequisites
Echo Meißner, Frank Kargl, Benjamin Erb +1
Taking part in surveys, experiments, and studies is often compensated by rewards to increase the number of participants and encourage attendance. While privacy requirements are usu…
Zero Trust Score-based Network-level Access Control in Enterprise Networks
Leonard Bradatsch, Oleksandr Miroshkin, Natasa Trkulja +1
Zero Trust security has recently gained attention in enterprise network security. One of its key ideas is making network-level access decisions based on trust scores. However, scor…
Refining Network Message Segmentation with Principal Component Analysis
Stephan Kleber, Frank Kargl
Reverse engineering of undocumented protocols is a common task in security analyses of networked services. The communication itself, captured in traffic traces, contains much of th…
Network Message Field Type Classification and Recognition for Unknown Binary Protocols
Stephan Kleber, Milan Stute, Matthias Hollick +1
Reverse engineering of unknown network protocols based on recorded traffic traces enables security analyses and debugging of undocumented network services. In particular for binary…
Evaluating the Future Device Security Risk Indicator for Hundreds of IoT Devices
Pascal Oser, Felix Engelmann, Stefan Lüders +1
IoT devices are present in many, especially corporate and sensitive, networks and regularly introduce security risks due to slow vendor responses to vulnerabilities and high diffic…
Confidential Token-Based License Management
Felix Engelmann, Jan Philip Speichert, Ralf God +2
In a global economy with many competitive participants, licensing and tracking of 3D printed parts is desirable if not mandatory for many use-cases. We investigate a blockchain-bas…
Zero Trust Service Function Chaining
Leonard Bradatsch, Frank Kargl, Oleksandr Miroshkin
In this paper, we address the inefficient handling of traditional security functions in Zero Trust (ZT) networks. For this reason, we propose a novel network security concept that…
WAIT: Protecting the Integrity of Web Applications with Binary-Equivalent Transparency
Echo Meißner, Frank Kargl, Benjamin Erb
Modern single page web applications require client-side executions of application logic, including critical functionality such as client-side cryptography. Existing mechanisms such…
PeQES: A Platform for Privacy-enhanced Quantitative Empirical Studies
Echo Meißner, Felix Engelmann, Frank Kargl +1
Empirical sciences and in particular psychology suffer a methodological crisis due to the non-reproducibility of results, and in rare cases, questionable research practices. Pre-re…
SAFER: Development and Evaluation of an IoT Device Risk Assessment Framework in a Multinational Organization
Pascal Oser, Sebastian Feger, Paweł W. Woźniak +6
Users of Internet of Things (IoT) devices are often unaware of their security risks and cannot sufficiently factor security considerations into their device selection. This puts ne…
Mitigation of Flooding and Slow DDoS Attacks in a Software-Defined Network
Thomas Lukaseder, Shreya Ghosh, Frank Kargl
Distributed denial of service (DDoS) attacks are a constant threat for services in the Internet. This year, the record for the largest DDoS attack ever observed was set at 1.7 Tbps…
An SDN-based Approach For Defending Against Reflective DDoS Attacks
Thomas Lukaseder, Kevin Stölzle, Stephan Kleber +2
Distributed Reflective Denial of Service (DRDoS) attacks are an immanent threat to Internet services. The potential scale of such attacks became apparent in March 2018 when a memca…
Coloured Ring Confidential Transactions
Felix Engelmann, Frank Kargl, Christoph Bösch
Privacy in block-chains is considered second to functionality, but a vital requirement for many new applications, e.g., in the industrial environment. We propose a novel transactio…
Performance Evaluation in High-Speed Networks by the Example of Intrusion Detection
Thomas Lukaseder, Jessika Fiedler, Frank Kargl
Purchase decisions for devices in high-throughput networks as well as scientific evaluations of algorithms and technologies need to be based in measurements and clear procedures. T…
SDN-Assisted Network-Based Mitigation of Slow DDoS Attacks
Thomas Lukaseder, Lisa Maile, Benjamin Erb +1
Slow-running attacks against network applications are often not easy to detect, as the attackers behave according to the specification. The servers of many network applications are…
VeReMi: A Dataset for Comparable Evaluation of Misbehavior Detection in VANETs
Rens W. van der Heijden, Thomas Lukaseder, Frank Kargl
Vehicular networks are networks of communicating vehicles, a major enabling technology for future cooperative and autonomous driving technologies. The most important messages in th…
Blackchain: Scalability for Resource-Constrained Accountable Vehicle-to-X Communication
Rens Wouter van der Heijden, Felix Engelmann, David Mödinger +2
In this paper, we propose a new Blockchain-based message and revocation accountability system called Blackchain. Combining a distributed ledger with existing mechanisms for securit…
Analyzing Attacks on Cooperative Adaptive Cruise Control (CACC)
Rens Wouter van der Heijden, Thomas Lukaseder, Frank Kargl
Cooperative Adaptive Cruise Control (CACC) is one of the driving applications of vehicular ad-hoc networks (VANETs) and promises to bring more efficient and faster transportation t…
Formal Analysis of V2X Revocation Protocols
Jorden Whitefield, Liqun Chen, Frank Kargl +4
Research on vehicular networking (V2X) security has produced a range of security mechanisms and protocols tailored for this domain, addressing both security and privacy. Typically,…
Enhanced Position Verification for VANETs using Subjective Logic
Rens W. van der Heijden, Ala'a Al-Momani, Frank Kargl +1
The integrity of messages in vehicular ad-hoc networks has been extensively studied by the research community, resulting in the IEEE~1609.2 standard, which provides typical integri…
Survey on Misbehavior Detection in Cooperative Intelligent Transportation Systems
Rens W. van der Heijden, Stefan Dietzel, Tim Leinmüller +1
Cooperative Intelligent Transportation Systems (cITS) are a promising technology to enhance driving safety and efficiency. Vehicles communicate wirelessly with other vehicles and i…
Secure Vehicular Communication Systems: Implementation, Performance, and Research Challenges
F. Kargl, P. Papadimitratos, L. Buttyan +8
Vehicular Communication (VC) systems are on the verge of practical deployment. Nonetheless, their security and privacy protection is one of the problems that have been addressed on…
Secure Vehicular Communication Systems: Design and Architecture
P. Papadimitratos, L. Buttyan, T. Holczer +7
Significant developments have taken place over the past few years in the area of vehicular communication (VC) systems. Now, it is well understood in the community that security and…