@inproceedings{TwarokLangendoerferKoenig, author = {Twarok, Sven and Langend{\"o}rfer, Peter and K{\"o}nig, Hartmut}, title = {Automated Derivation of ILP Implementations from SDL Specifications}, series = {Formal techniques for networked and distributed systems, FORTE 2001, IFIP TC6/WG6.1 - 21st International Conference on Formal Techniques for Networked and Distributed Systems, August 28 - 31, 2001, Cheju Island, Korea}, booktitle = {Formal techniques for networked and distributed systems, FORTE 2001, IFIP TC6/WG6.1 - 21st International Conference on Formal Techniques for Networked and Distributed Systems, August 28 - 31, 2001, Cheju Island, Korea}, editor = {Kim, Myungchul}, publisher = {Kluwer}, address = {Boston [u.a.]}, isbn = {0-7923-7470-3}, pages = {3 -- 18}, language = {en} } @inproceedings{Koenig, author = {K{\"o}nig, Hartmut}, title = {Testing of Communicating Systems XIV (TestCom 2002): Application to Internet Technologies and Services}, language = {en} } @inproceedings{LiuKoenig, author = {Liu, Fuwen and K{\"o}nig, Hartmut}, title = {Ein Ansatz f{\"u}r eine effiziente Schl{\"u}sselverteilung f{\"u}r kleine geschlossene Peer-Gruppen}, language = {de} } @inproceedings{RakelKoenigSchmitt, author = {Rakel, Daniel and K{\"o}nig, Hartmut and Schmitt, Jens B.}, title = {Effiziente Medienstromverteilung in geschlossenen Peer-to-Peer-Videokonferenzsystemen}, series = {Kommunikation in verteilten Systemen, Kurzbeitr{\"a}ge und Workshop der 14. GI/ITG-Fachtagung, 28. Februar - 3. M{\"a}rz 2005 in Kaiserslautern}, booktitle = {Kommunikation in verteilten Systemen, Kurzbeitr{\"a}ge und Workshop der 14. GI/ITG-Fachtagung, 28. Februar - 3. M{\"a}rz 2005 in Kaiserslautern}, editor = {M{\"u}ller, Paul}, publisher = {Ges. f{\"u}r Informatik}, address = {Bonn}, isbn = {3-88579-390-3}, pages = {159 -- 162}, language = {de} } @inproceedings{LiuKoenig, author = {Liu, Fuwen and K{\"o}nig, Hartmut}, title = {Secure and Efficient Key Distribution for Collaborative Applications}, series = {2005 International Conference on Collaborative Computing: Networking, Applications and Worksharing (CollaborateCom), 19 - 22 December 2005, San Jose, CA}, booktitle = {2005 International Conference on Collaborative Computing: Networking, Applications and Worksharing (CollaborateCom), 19 - 22 December 2005, San Jose, CA}, publisher = {IEEE Operations Center}, address = {Piscataway, NJ}, isbn = {1-424-40030-9}, pages = {120 -- 130}, language = {en} } @inproceedings{Koenig, author = {K{\"o}nig, Hartmut}, title = {Peer-to-Peer Intrusion Detection Systeme f{\"u}r den Schutz sensibler IT-Infrastrukturen}, language = {de} } @inproceedings{LiuKoenig, author = {Liu, F. and K{\"o}nig, Hartmut}, title = {Designing Security Architecture for a P2P Video Conference System}, language = {en} } @inproceedings{SchmerlKoenigFlegeletal., author = {Schmerl, Sebastian and K{\"o}nig, Hartmut and Flegel, Ulrich and Meier, Michael and Rietz, Ren{\´e}}, title = {Systematic Signature Engineering by Re-use of Snort Signatures}, series = {Proceedings of the 24th International Annual Computer Security Applications Conference (ACSAC 2008), Anaheim, California, USA, December 2008}, booktitle = {Proceedings of the 24th International Annual Computer Security Applications Conference (ACSAC 2008), Anaheim, California, USA, December 2008}, pages = {23 -- 32}, language = {en} } @inproceedings{LiuKoenig, author = {Liu, Fuwen and K{\"o}nig, Hartmut}, title = {Security Considerations on Pervasive Real-time Collaboration}, series = {IEEE 6th International Conference on Mobile Adhoc and Sensor Systems, 2009, MASS '09, 12 - 15 Oct. 2009, Macau, China}, booktitle = {IEEE 6th International Conference on Mobile Adhoc and Sensor Systems, 2009, MASS '09, 12 - 15 Oct. 2009, Macau, China}, publisher = {IEEE}, address = {Piscataway, NJ}, isbn = {978-1-424-45114-2}, pages = {722 -- 727}, language = {en} } @inproceedings{KaliappanKoenigSchmerletal., author = {Kaliappan, Prabhu Shankar and K{\"o}nig, Hartmut and Schmerl, Sebastian and Dong, Jin Song and Zhu, Huibiao}, title = {Model-Driven Protocol Design Based on Component Oriented Modeling}, series = {Formal methods and software engineering, proceedings 12th International Conference on Formal Engineering Methods, ICFEM 2010, Shanghai, China, November 17 - 19, 2010}, booktitle = {Formal methods and software engineering, proceedings 12th International Conference on Formal Engineering Methods, ICFEM 2010, Shanghai, China, November 17 - 19, 2010}, publisher = {Springer}, address = {Berlin [u.a.]}, isbn = {978-3-642-16900-7}, pages = {613 -- 629}, language = {en} } @misc{LiuKoenig, author = {Liu, Fuwen and K{\"o}nig, Hartmut}, title = {A Survey of Video Encryption Algorithms}, language = {en} } @inproceedings{ZuehlkeKoenig, author = {Z{\"u}hlke, Mario and K{\"o}nig, Hartmut}, title = {Voting Based Bandwidth Management in Multiparty Video Conferences}, series = {Protocols and systems for interactive distributed multimedia, proceedings, Joint International Workshops on Interactive Distributed Multimedia Systems and Protocols for Multimedia Systems, IDMS PROMS 2002, Coimbra, Portugal, November 26 - 29, 2002}, booktitle = {Protocols and systems for interactive distributed multimedia, proceedings, Joint International Workshops on Interactive Distributed Multimedia Systems and Protocols for Multimedia Systems, IDMS PROMS 2002, Coimbra, Portugal, November 26 - 29, 2002}, editor = {Boavida, Fernando}, publisher = {Springer}, address = {Berlin [u.a.]}, isbn = {3-540-00169-7}, language = {en} } @inproceedings{HolzMeierKoenig, author = {Holz, Thomas and Meier, Michael and K{\"o}nig, Hartmut}, title = {High-efficient intrusion detection infrastructure}, series = {Real time intrusion detection, papers presented at the RTO Information Systems Technology Panel (IST) Symposium, held in Estoril, Portugal, 27 - 28 May 2002}, booktitle = {Real time intrusion detection, papers presented at the RTO Information Systems Technology Panel (IST) Symposium, held in Estoril, Portugal, 27 - 28 May 2002}, publisher = {NATO Research and Technology Organisation}, address = {Neuilly-sur-Seine}, isbn = {92-837-0032-5}, pages = {14/1 -- 14/12}, language = {en} } @inproceedings{HolzMeierKoenig, author = {Holz, Thomas and Meier, Michael and K{\"o}nig, Hartmut}, title = {An Efficient Intrusion Detection System Design}, series = {Proceedings of the ISSA 2002 Information for Security for South-Africa 2nd Annual Conference, 10-12 July 2002, Misty Hills Country Hotel, Muldersdrift, Gauteng, South Africa}, booktitle = {Proceedings of the ISSA 2002 Information for Security for South-Africa 2nd Annual Conference, 10-12 July 2002, Misty Hills Country Hotel, Muldersdrift, Gauteng, South Africa}, pages = {12}, language = {en} } @article{HolzMeierKoenig, author = {Holz, Thomas and Meier, Michael and K{\"o}nig, Hartmut}, title = {Bausteine f{\"u}r effiziente Intrusion-Detection-Syteme}, language = {de} } @inproceedings{OpitzMielkeKoenig, author = {Opitz, Alek and Mielke, Torsten and K{\"o}nig, Hartmut}, title = {Virtual Private Components}, language = {en} } @inproceedings{LiuKoenig, author = {Liu, Fuwen and K{\"o}nig, Hartmut}, title = {A Novel Encryption Algorithm for High Resolution Video}, language = {en} } @inproceedings{OpitzKoenig, author = {Opitz, Alek and K{\"o}nig, Hartmut}, title = {Optimizing the Access to Read-Only Data in Grid Computing}, series = {Distributed applications and interoperable systems, 5th IFIP WG 6.1 International Conference, DAIS 2005, Athens, Greece, June 15-17, 2005, proceedings}, booktitle = {Distributed applications and interoperable systems, 5th IFIP WG 6.1 International Conference, DAIS 2005, Athens, Greece, June 15-17, 2005, proceedings}, editor = {Kutvonen, Lea}, publisher = {Springer}, address = {Berlin [u.a.]}, isbn = {3-540-26262-8}, pages = {206 -- 219}, language = {en} } @incollection{HolzMeierKoenig, author = {Holz, Thomas and Meier, Michael and K{\"o}nig, Hartmut}, title = {High-Efficient Intrusion Detection Infrastructure}, language = {en} } @book{Koenig, author = {K{\"o}nig, Hartmut}, title = {Protocol Engineering : Prinzip, Beschreibung und Entwicklung von Kommunikationsprotokollen}, publisher = {Stuttgart [u.a.] : Teubner}, isbn = {3-519-00454-2}, language = {de} } @misc{MeierFlegelKoenig, author = {Meier, Michael and Flegel, Ulrich and K{\"o}nig, Hartmut}, title = {Reactive Security - Intrusion Detection, Honeypots, and Vulnerability Assessment}, series = {Praxis der Informationsverarbeitung und Kommunikation}, volume = {27}, journal = {Praxis der Informationsverarbeitung und Kommunikation}, number = {4}, pages = {186 -- 187}, language = {de} } @inproceedings{SchmerlMeierKoenigetal., author = {Schmerl, Sebastian and Meier, Michael and K{\"o}nig, Hartmut and Flegel, Ulrich}, title = {Simplifying Signature Engineering by Reuse}, series = {Emerging trends in information and communication security, ETRICS 2006, Freiburg, Germany, June 6 - 9, 2006 Conference, Freiburg, Germany, June 2006}, booktitle = {Emerging trends in information and communication security, ETRICS 2006, Freiburg, Germany, June 6 - 9, 2006 Conference, Freiburg, Germany, June 2006}, editor = {M{\"u}ller, G{\"u}nter}, publisher = {Springer}, address = {Berlin [u.a.]}, isbn = {3-540-34640-6}, pages = {436 -- 450}, language = {en} } @inproceedings{SchmerlKoenig, author = {Schmerl, Sebastian and K{\"o}nig, Hartmut}, title = {Towards Systematic Signature Testing}, series = {19th IFIP TC6/WG6.1 International Conference, TestCom 2007, 7th International Workshop, FATES 2007, Tallin, Estonia, June 26-29, 2007, Proceedings}, booktitle = {19th IFIP TC6/WG6.1 International Conference, TestCom 2007, 7th International Workshop, FATES 2007, Tallin, Estonia, June 26-29, 2007, Proceedings}, editor = {Petrenko, Alexandre}, publisher = {Springer}, address = {Berlin [u.a.]}, isbn = {3-540-73065-6}, pages = {276 -- 291}, language = {en} } @inproceedings{OpitzKoenig, author = {Opitz, Alek and K{\"o}nig, Hartmut}, title = {Predicting Free Computing Capacities on Individual Machines}, language = {en} } @misc{VogelSchmerlKoenig, author = {Vogel, Michael and Schmerl, Sebastian and K{\"o}nig, Hartmut}, title = {Analyseverlagerung in P2P-Overlaynetzen}, language = {de} } @inproceedings{KaliappanKoenigKaliappan, author = {Kaliappan, Prabhu Shankar and K{\"o}nig, Hartmut and Kaliappan, V. K.}, title = {Designing and Verifying Communication Protocols using Model Driven Architecture and Spin Model Checker}, language = {en} } @misc{CarleDresslerKemmereretal., author = {Carle, Georg and Dressler, Falko and Kemmerer, Richard A. and K{\"o}nig, Hartmut and Kruegel, Christopher and Laskov, Pavel}, title = {Network attack detection and defense - Manifesto of the Dagstuhl Perspective Workshop}, language = {en} } @inproceedings{LiuKoenig, author = {Liu, Fuwen and K{\"o}nig, Hartmut}, title = {A Simple Balanced Password-Authenticated Key Agreement Protocol}, series = {Proceedings, the 10th IEEE International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2011, ICESS 2011, FCST 2011, Conferences, Symposiums and Workshops, 16-18 November 2011, Changsha, Hunan Province, China}, booktitle = {Proceedings, the 10th IEEE International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2011, ICESS 2011, FCST 2011, Conferences, Symposiums and Workshops, 16-18 November 2011, Changsha, Hunan Province, China}, publisher = {IEEE Computer Society}, address = {Los Alamitos, Calif.}, isbn = {978-0-7695-4600-1}, pages = {403 -- 408}, language = {en} } @misc{KirscheDreissigKopschetal., author = {Kirsche, Michael and Dreissig, Matthias and Kopsch, Ralf and G{\"a}bler, Jan and Klauck, Ronny and Pink, Mario and Liu, Fuwen and K{\"o}nig, Hartmut}, title = {uBeeMe - Eine Plattform zur Unterst{\"u}tzung mobiler kollaborativer Anwendungen}, series = {Praxis der Informationsverarbeitung und Kommunikation : (PIK)}, volume = {34}, journal = {Praxis der Informationsverarbeitung und Kommunikation : (PIK)}, number = {1}, issn = {0930-5157}, doi = {10.1515/PIKO.2011.003}, pages = {11 -- 22}, language = {de} } @inproceedings{LiuKoenig, author = {Liu, Fuwen and K{\"o}nig, Hartmut}, title = {Cryptanalysis of a SIP Authentication Scheme}, series = {Communications and multimedia security, 12th IFIP TC 6/TC 11 international conference, CMS 2011, Ghent, Belgium, October 19-21, 2011}, booktitle = {Communications and multimedia security, 12th IFIP TC 6/TC 11 international conference, CMS 2011, Ghent, Belgium, October 19-21, 2011}, editor = {Decker, Bart De and Lapon, Jorn and Naessens, Vincent and Uhl, Andreas}, publisher = {Springer}, address = {Heidelberg [u.a.]}, isbn = {978-3-642-24711-8}, pages = {134 -- 143}, language = {en} } @misc{GaeblerKlauckSchoepkeetal., author = {G{\"a}bler, Jan and Klauck, Ronny and Sch{\"o}pke, Sebastian and K{\"o}nig, Hartmut and Werner, Martin and Roth, J{\"o}rg}, title = {Lemon Tree - Flexible Deich{\"u}berwachung mit XMPP und Cloud-Diensten}, series = {8. GI/ITG KuVS-Fachgespr{\"a}ch Ortsbezogene Anwendungen und Dienst}, journal = {8. GI/ITG KuVS-Fachgespr{\"a}ch Ortsbezogene Anwendungen und Dienst}, publisher = {Logos-Verlag}, address = {Berlin}, isbn = {978-3-8325-3041-9}, pages = {137 -- 148}, language = {de} } @misc{Koenig, author = {K{\"o}nig, Hartmut}, title = {Network Attack Detection and Defense}, series = {Praxis der Informationsverarbeitung und Kommunikation : (PIK)}, volume = {35}, journal = {Praxis der Informationsverarbeitung und Kommunikation : (PIK)}, number = {1}, issn = {0930-5157}, doi = {10.1515/pik-2012-0001}, pages = {S. 1}, language = {en} } @inproceedings{PinkPietschKoenig, author = {Pink, Mario and Pietsch, Thomas and K{\"o}nig, Hartmut}, title = {Towards a seamless mobility solution for the real world: Handover decision}, series = {Hand-over decision, International Symposium on Wireless Communication Systems 2012, August 2012, Paris, France}, booktitle = {Hand-over decision, International Symposium on Wireless Communication Systems 2012, August 2012, Paris, France}, publisher = {IEEE}, isbn = {978-1-4673-0761-1}, doi = {10.1109/ISWCS.2012.6328448}, pages = {651 -- 655}, abstract = {The increasing use of wireless networks has raised the desire to have not only a stable and good quality access to the network, but also to seamlessly change the network when moving. Various handover algorithms have been proposed to handle this situation. Unfortunately, many of these handover algorithms have only been evaluated by simulations. They do not take the wide range of mobile devices with varying system parameters into account. For the practical deployment, handover algorithms are required that adapt to various device parameters and network characteristics. In this paper we present a fuzzy-based vertical handover decision algorithm which adjusts itself to the given device and network capabilities. Starting with a discussion of handover requirements we present the algorithm and describe how it is activated in the handover process. Finally we present several experiments which evaluate the accuracy of the handover decision, the quality of service guarantees for the application, and the resource consumption.}, language = {en} } @inproceedings{PinkPietschKoenig, author = {Pink, Mario and Pietsch, Thomas and K{\"o}nig, Hartmut}, title = {An adaptive Handover decision algorithm for heterogeneous wireless networks}, series = {Mobile Wireless Middleware, Operating Systems, and Applications, 5th International Conference, Mobilware 2012, Berlin, Germany, November 13-14, 2012}, booktitle = {Mobile Wireless Middleware, Operating Systems, and Applications, 5th International Conference, Mobilware 2012, Berlin, Germany, November 13-14, 2012}, publisher = {Springer}, address = {Berlin}, isbn = {978-3-642-36659-8}, pages = {136 -- 149}, language = {en} } @inproceedings{KaliappanKoenig, author = {Kaliappan, Prabhu Shankar and K{\"o}nig, Hartmut}, title = {On the Formalization of UML Activities for Component-Based Protocol Design Specifications}, series = {Theory and practice of computer science, SOFSEM 2012, 38th Conference on Current Trends in Theory and Practice of Computer Science, Špindlerův Ml{\´y}n, Czech Republic, January 21 - 27, 2012}, booktitle = {Theory and practice of computer science, SOFSEM 2012, 38th Conference on Current Trends in Theory and Practice of Computer Science, Špindlerův Ml{\´y}n, Czech Republic, January 21 - 27, 2012}, editor = {Katzenbeisser, Stefan}, publisher = {Springer}, address = {Berlin [u.a.]}, isbn = {978-3-642-27659-0}, pages = {479 -- 491}, abstract = {This book constitutes the refereed proceedings of the 38th Conference on Current Trends in Theory and Practice of Computer Science, SOFSEM 2012, held in Špindlerův Ml{\´y}n, Czech Republic, in January 2012. The 43 revised papers presented in this volume were carefully reviewed and selected from 121 submissions. The book also contains 11 invited talks, 10 of which are in full-paper length. The contributions are organized in topical sections named: foundations of computer science; software and Web engineering; cryptography, security, and verification; and artificial intelligence.}, language = {en} } @misc{KoenigGaeblerKlaucketal., author = {K{\"o}nig, Hartmut and G{\"a}bler, Jan and Klauck, Ronny and Pink, Mario and Sprejz, Michael}, title = {uBeeMe - A Platform for Mobile Collaborative Applications}, series = {PIK - Praxis der Informationsverarbeitung und Kommunikation}, volume = {36}, journal = {PIK - Praxis der Informationsverarbeitung und Kommunikation}, number = {1}, issn = {0930-5157}, doi = {10.1515/pik-2012-0058}, pages = {S. 43}, language = {en} } @misc{GaeblerKoenig, author = {G{\"a}bler, Jan and K{\"o}nig, Hartmut}, title = {Moversight: a group communication protocol for mobile scenarios}, series = {Telecommunication systems : modeling, analysis, design and managementversion}, volume = {61}, journal = {Telecommunication systems : modeling, analysis, design and managementversion}, number = {4}, issn = {1572-9451}, doi = {10.1007/s11235-015-0062-1}, pages = {695 -- 716}, abstract = {The increasing mobility of Internet users and the growing need to collaborate with staff travelling on business belong to the key characteristics of the future Internet. Mobile collaborative applications require novel schemes for group communication that actively support collaborations in wireless scenarios. An intrinsic problem of collaborations in wireless scenarios is the temporary connection loss with the group due to user mobility and network issues. Existing group communication protocols do not sufficiently support this situation. In this paper, we present a new peer-to-peer group communication protocol, called Moversight, that was specifically designed to support closed group cooperation in mobile environments with varying churn rates. It applies a new group communication paradigm, called mobile optimistic virtual synchrony, to handle churn-related peer failures. It enhances the virtual synchrony paradigm for mobile scenarios. The paper introduces the paradigm and describes the main protocol features of Moversight. Finally we present simulation results to demonstrate the applicability of the protocol.}, language = {en} } @misc{KarglHeijdenKoenigetal., author = {Kargl, Frank and Heijden, Rens W. van der and K{\"o}nig, Hartmut and Valdes, Alfonso and Dacier, Marc C.}, title = {Insights on the Security and Dependability of Industrial Control Systems}, series = {IEEE Security \& Privacy}, volume = {12}, journal = {IEEE Security \& Privacy}, number = {6}, issn = {1540-7993}, doi = {10.1109/MSP.2014.120}, pages = {75 -- 78}, language = {en} } @misc{LiuKoenig, author = {Liu, Fuwen and K{\"o}nig, Hartmut}, title = {Puzzle - an efficient, compression independent video encryption algorithm}, series = {Multimedia tools and applications}, volume = {73}, journal = {Multimedia tools and applications}, number = {2}, issn = {1573-7721}, doi = {10.1007/s11042-012-1185-y}, pages = {715 -- 735}, language = {en} } @misc{StritterFreilingKoenigetal., author = {Stritter, Benjamin and Freiling, Felix and K{\"o}nig, Hartmut and Rietz, Ren{\´e} and Ullrich, Steffen and Gernler, Alexander von and Erlacher, Felix}, title = {Cleaning up Web 2.0's Security Mess - at Least Partly}, series = {IEEE Security \& Privacy}, volume = {14}, journal = {IEEE Security \& Privacy}, number = {2}, issn = {1540-7993}, pages = {48 -- 71}, language = {en} } @inproceedings{PaulSchusterKoenig, author = {Paul, Andreas and Schuster, Franka and K{\"o}nig, Hartmut}, title = {Network Topology Exploration for Industrial Networks}, series = {2nd EAI International Conference on Industrial Networks and Intelligent Systems (INISCOM 2016), October 31 - November 1, 2016, Leicester, Great Britain}, booktitle = {2nd EAI International Conference on Industrial Networks and Intelligent Systems (INISCOM 2016), October 31 - November 1, 2016, Leicester, Great Britain}, publisher = {Springer International Publishing}, address = {Cham}, isbn = {978-3-319-52568-6}, doi = {10.1007/978-3-319-52569-3}, pages = {63 -- 76}, language = {en} } @inproceedings{CwalinskiKoenig, author = {Cwalinski, Radoslaw and K{\"o}nig, Hartmut}, title = {RADIator - An approach for controllable wireless networks}, series = {IEEE NetSoft Conference and workshops, 6-10 June 2016, Seoul, South Corea}, booktitle = {IEEE NetSoft Conference and workshops, 6-10 June 2016, Seoul, South Corea}, publisher = {IEEE}, address = {Piscataway, NJ}, isbn = {978-1-4673-9486-4}, doi = {10.1109/NETSOFT.2016.7502421}, pages = {260 -- 268}, abstract = {In this paper we propose a novel software-defined networking architecture for enterprise wireless local area networks (WLANs). The goal is to build a framework that exposes tools and methods for a centralized processing of IEEE 802.11 frames. In our architecture all management tasks, including beaconing, client authentication and association, are performed by the central controller instead of the distributed wireless access points as in traditional networks. The generated frames are tunneled to lightweight wireless access points (APs) or thin APs that perform the media access and radio frequency (RF) conversion. Agents executed on thin APs allow scheduling of simple tasks like traffic filtering for local execution. Additionally, the agents provide functions found in modern WLAN chipsets, such as precise frame transmit timings or RF spectrum analysis to the controller. Our architecture allows to delegate computationally intensive tasks to a central instance with enough processing power. Thus, it is best suited for devices with limited resources that we use as thin APs. We present applications that can be built using our framework, e.g., client geolocalization or energy consumption optimization. Finally we evaluate the performance of our architecture in a testbed using COTS devices with open-source software.}, language = {en} } @inproceedings{RietzKoenigUllrichetal., author = {Rietz, Ren{\´e} and K{\"o}nig, Hartmut and Ullrich, Steffen and Stritter, Benjamin}, title = {Firewalls for the Web 2.0}, series = {Proceedings of the 2016 IEEE International Conference on Software Quality, Reliability and Security (QRS), 1-3 Aug. 2016}, booktitle = {Proceedings of the 2016 IEEE International Conference on Software Quality, Reliability and Security (QRS), 1-3 Aug. 2016}, publisher = {IEEE}, address = {Piscataway, NJ}, isbn = {978-1-5090-4127-5}, doi = {10.1109/QRS.2016.36}, pages = {242 -- 253}, abstract = {The widespread use of Web 2.0 technologies yields an increasing threat potential for users and related systems. Modern web applications and online services are nowadays based on Web 2.0 technologies, such as JavaScript and AJAX, and thus on the execution of active content in the browsers of the users. Firewalls are a common practice to securely connecting to the internet. In this paper, we propose a novel perimeter firewall architecture for web applications that addresses the entire process chain starting from the data transfer with HTTP via the analysis of manipulated web documents to the extraction and analysis of active contents. The basic idea is to allow only a restricted set of web applications to pass the firewall based on a model of their HTML and JavaScript structure. We evaluate the capability of the resulting models for identifying the underlying web applications and their ability to ward off additional malicious inputs.}, language = {en} } @inproceedings{DacierDietrichKargletal., author = {Dacier, Marc C. and Dietrich, Sven and Kargl, Frank and K{\"o}nig, Hartmut}, title = {Network Attack Detection and Defense - Security Challenges and Opportunities of Software-Defined Networking}, series = {Network Attack Detection and Defense, Dagstuhl Seminar 16361}, booktitle = {Network Attack Detection and Defense, Dagstuhl Seminar 16361}, publisher = {Schloss Dagstuhl}, address = {Wadern}, doi = {10.4230/DagRep.6.9.1}, url = {http://nbn-resolving.de/urn:nbn:de:0030-drops-69122}, pages = {1 -- 28}, abstract = {This report documents the program and the outcomes of Dagstuhl Seminar 16361 "Network Attack Detection and Defense: Security Challenges and Opportunities of Software-Defined Networking". Software-defined networking (SDN) has attracted a great attention both in industry and academia since the beginning of the decade. This attention keeps undiminished. Security-related aspects of software-defined networking have only been considered more recently. Opinions differ widely. The main objective of the seminar was to discuss the various contrary facets of SDN security. The seminar continued the series of Dagstuhl events Network Attack Detection and Defense held in 2008, 2012, and 2014. The objectives of the seminar were threefold, namely (1) to discuss the security challenges of SDN, (2) to debate strategies to monitor and protect SDN-enabled networks, and (3) to propose methods and strategies to leverage on the flexibility brought by SDN for designing new security mechanisms. At the seminar, which brought together participants from academia and industry, we discussed the advantages and disadvantages of using software-defined networks from the security point of view. We agreed that SDN provides new possibilities to better secure networks, but also offers a number of serious security problems which require further research. The outcome of these discussions and the proposed research directions are presented in this report.}, language = {en} } @inproceedings{GaeblerKoenig, author = {G{\"a}bler, Jan and K{\"o}nig, Hartmut}, title = {Distributed Cluster-Topology Maintenance for Mobile Collaborative Applications}, series = {IEEE 41st Conference on Local Computer Networks (LCN), 7-10 Nov. 2016}, booktitle = {IEEE 41st Conference on Local Computer Networks (LCN), 7-10 Nov. 2016}, publisher = {IEEE}, address = {Piscataway, NJ}, isbn = {978-1-5090-2054-6}, doi = {10.1109/LCN.2016.55}, pages = {271 -- 279}, abstract = {Nowadays, collaborative applications play an increasing role in mobile communications in order to enable cooperation among mobile and/or stationary participants - often using the peer-to-peer (P2P) group communication paradigm. The probability of communication failures increases in mobile environments. As a consequence, frequent leaving and joining of partners can be observed resulting in unstable group topologies. A widely used approach is to divide the group into peer clusters that are fully meshed among each other. In this paper, we propose an application-independent approach for a periodic maintenance of distributed cluster-based group topologies for mobile collaborative applications. The proposed approach also dynamically adapts the overlay structure to changing network conditions. The maintenance strategy can be parametrized by several metrics. It outperforms simple overlay maintenance strategies, such as round-robin, by respecting the resource and computation limitations of mobile devices. The run-time is increased by 10\% in the best case compared to LEACH, and by 3 — 5\% on average. We describe the approach and evaluate its performance w.r.t. different metrics.}, language = {en} } @inproceedings{KoenigUlrichHeiner, author = {K{\"o}nig, Hartmut and Ulrich, Andreas and Heiner, Monika}, title = {Design for Testability: A Step-wise Approach to Protocol Testing}, series = {Testing of Communicating Systems, IFIP TC6 10th International Workshop on Testing of Communicating Systems, 8-10 September 1997, Cheju Island, Korea}, booktitle = {Testing of Communicating Systems, IFIP TC6 10th International Workshop on Testing of Communicating Systems, 8-10 September 1997, Cheju Island, Korea}, editor = {Kim, Myungchul and Kang, Sungwon and Hong, Keesoo}, publisher = {Springer}, address = {Boston}, isbn = {978-1-4757-6701-8}, doi = {10.1007/978-0-387-35198-8_9}, pages = {125 -- 140}, language = {en} } @misc{RietzCwalinskiKoenigetal., author = {Rietz, Ren{\´e} and Cwalinski, Radoslaw and K{\"o}nig, Hartmut and Brinner, Andreas}, title = {An SDN-based Approach to Ward of LAN Attacks}, series = {Journal Computer Networks and Communications}, volume = {2018}, journal = {Journal Computer Networks and Communications}, doi = {10.1155/2018/4127487}, pages = {12}, language = {en} } @misc{CwalinskiRietzVogeletal., author = {Cwalinski, Radoslaw and Rietz, Ren{\´e} and Vogel, Michael and K{\"o}nig, Hartmut}, title = {An SDN-based Approach to Protect Communication Between Virtual Machines}, series = {IEEE 44th Conference on Local Computer Networks (LCN), October 14-17, 2019, Osnabr{\"u}ck, Germany.}, journal = {IEEE 44th Conference on Local Computer Networks (LCN), October 14-17, 2019, Osnabr{\"u}ck, Germany.}, publisher = {IEEE}, isbn = {978-1-7281-1028-8}, pages = {465 -- 468}, language = {en} } @misc{SchusterPaulMehneretal., author = {Schuster, Franka and Paul, Andreas and Mehner, Stefan and K{\"o}nig, Hartmut and Kanisch, Heiko}, title = {IT-Sicherheit im Kraftwerk - Methoden zur automatisierten Sicherheitsbewertung und Anomalieerkennung in hochsensiblen Netzen}, series = {51. Kraftwerkstechnisches Kolloquium, 21. - 23. Oktober 2019, Dresden}, journal = {51. Kraftwerkstechnisches Kolloquium, 21. - 23. Oktober 2019, Dresden}, publisher = {SAXONIA Standortentwicklungs- und -verwaltungsgesellschaft mbH}, address = {Freiberg}, isbn = {978-3-934409-94-1}, pages = {680 -- 703}, abstract = {Die zunehmende Digitalisierung auch in Kraftwerken erfordert entsprechend auf diesen Bereich zugeschnittene IT-Sicherheitsverfahren und -technologien. Aktuell stellt die obligatorische Implementierung eines angemessenen Sicherheitsprozesses, wie eines Informationssicherheitsmanagementsystems (ISMS), Betreiber von Erzeugungsanlagen, Energienetzen und anderen kritischen Infrastrukturen vor eine große Herausforderung, denn es gilt, zahlreiche Anforderungen bei der Implementierung zu erf{\"u}llen, ohne dass konkrete Methoden zur Umsetzung verf{\"u}gbar sind. Gleichzeitig ist derEinsatz von IT-Sicherheitstechnologien aus der B{\"u}rowelt aufgrund g{\"a}nzlich anderer Eigenschaften und Anforderungen industrieller Netze kaum m{\"o}glich. Zur Adressierung dieser Problematik wurden von der Brandenburgischen Technischen Universit{\"a}t Cottbus-Senftenberg (BTU) und der Lausitz Energie Kraftwerke AG (LEAG) innovative Verfahren zur (1) systematischen Bewertung sowie (2) Verbesserung der IT-Sicherheit in hochsensiblen Netzen konzipiert und prototypisch implementiert, die ein diesem Beitrag mit den zugeh{\"o}rigen Forschungsprojekten vorgestellt werden. Um eine Beeinflussung empfindlicher Kraftwerksanlagen auszuschließen, wurde f{\"u}r alle Methoden ein nichtintrusiver Entwicklungsansatz verfolgt, der sich durch eine passive und vom jeweiligen industriellen Prozess vollst{\"a}ndig entkoppelte Analyse auszeichnet und sich daher f{\"u}r einen breiten Einsatz in Netzen mit hohen Verf{\"u}gbarkeitsanforderungen eignet.}, language = {de} } @incollection{RieckWressneggerKoenigetal., author = {Rieck, Konrad and Wressnegger, Christian and K{\"o}nig, Hartmut and Paul, Andreas and Schuster, Franka and Kanisch, Heiko and Moder, Christoph}, title = {INDI - Intelligente Intrusion-Detection-Systeme f{\"u}r Industrienetze}, series = {IT-Sicherheit f{\"u}r Kritische Infrastrukturen - State of the Art : Ergebnisse des F{\"o}rderschwerpunkts IT-Sicherheit f{\"u}r Kritische Infrastrukturen ITS/KRITIS des BMBF}, booktitle = {IT-Sicherheit f{\"u}r Kritische Infrastrukturen - State of the Art : Ergebnisse des F{\"o}rderschwerpunkts IT-Sicherheit f{\"u}r Kritische Infrastrukturen ITS/KRITIS des BMBF}, editor = {Rudel, Steffi and Lechner, Ulrike}, edition = {1. Auflage}, publisher = {Professur f{\"u}r Wirtschaftsinformatik, Universit{\"a}t der Bundeswehr M{\"u}nchen}, address = {Neubiberg}, isbn = {978-3-943207-33-0}, pages = {S. 19}, language = {de} } @incollection{RieckWressneggerKoenigetal., author = {Rieck, Konrad and Wressnegger, Christian and K{\"o}nig, Hartmut and Paul, Andreas and Schuster, Franka and Kanisch, Heiko and Moder, Christoph}, title = {Prozessnahe Kommunikation als besondere Herausforderung}, series = {IT-Sicherheit f{\"u}r Kritische Infrastrukturen - State of the Art : Ergebnisse des F{\"o}rderschwerpunkts IT-Sicherheit f{\"u}r Kritische Infrastrukturen ITS/KRITIS des BMBF}, booktitle = {IT-Sicherheit f{\"u}r Kritische Infrastrukturen - State of the Art : Ergebnisse des F{\"o}rderschwerpunkts IT-Sicherheit f{\"u}r Kritische Infrastrukturen ITS/KRITIS des BMBF}, editor = {Rudel, Steffi and Lechner, Ulrike}, edition = {1. Auflage}, publisher = {Professur f{\"u}r Wirtschaftsinformatik, Universit{\"a}t der Bundeswehr M{\"u}nchen}, address = {Neubiberg}, isbn = {978-3-943207-33-0}, pages = {S. 57}, language = {de} } @incollection{KanischSchusterKoenig, author = {Kanisch, Heiko and Schuster, Franka and K{\"o}nig, Hartmut}, title = {Informationstechnik in der Energieversorgung - Besonderheiten und Regularien}, series = {IT-Sicherheit f{\"u}r Kritische Infrastrukturen - State of the Art : Ergebnisse des F{\"o}rderschwerpunkts IT-Sicherheit f{\"u}r Kritische Infrastrukturen ITS/KRITIS des BMBF}, booktitle = {IT-Sicherheit f{\"u}r Kritische Infrastrukturen - State of the Art : Ergebnisse des F{\"o}rderschwerpunkts IT-Sicherheit f{\"u}r Kritische Infrastrukturen ITS/KRITIS des BMBF}, editor = {Rudel, Steffi and Lechner, Ulrike}, edition = {1. Auflage}, publisher = {Professur f{\"u}r Wirtschaftsinformatik, Universit{\"a}t der Bundeswehr M{\"u}nchen}, address = {Neubiberg}, isbn = {978-3-943207-33-0}, pages = {67 -- 68}, language = {de} } @misc{VogelSchusterKoppetal., author = {Vogel, Michael and Schuster, Franka and Kopp, Fabian Malte and K{\"o}nig, Hartmut}, title = {Data Volume Reduction for Deep Packet Inspection by Multi-layer Application Determination}, series = {2022 IEEE International Conference on Cyber Security and Resilience (CSR), 27-29 July 2022, Rhodes, Greece}, journal = {2022 IEEE International Conference on Cyber Security and Resilience (CSR), 27-29 July 2022, Rhodes, Greece}, publisher = {IEEE}, isbn = {978-1-6654-9952-1}, doi = {10.1109/CSR54599.2022.9850293}, pages = {6}, abstract = {Attack detection in enterprise networks is increasingly faced with large data volumes, in part high data bursts, and heavily fluctuating data flows that often cause arbitrary discarding of data packets in overload situations which can be used by attackers to hide attack activities. Attack detection systems usually configure a comprehensive set of signatures for known vulnerabilities in different operating systems, protocols, and applications. Many of these signatures, however, are not relevant in each context, since certain vulnerabilities have already been eliminated, or the vulnerable applications or operating system versions, respectively, are not installed on the involved systems. In this paper, we present an approach for clustering data flows to assign them to dedicated analysis units that contain only signature sets relevant for the analysis of these flows. We discuss the performance of this clustering and show how it can be used in practice to improve the efficiency of an analysis pipeline.}, language = {en} } @inproceedings{SchusterPaulKoppetal., author = {Schuster, Franka and Paul, Andreas and Kopp, Fabian Malte and K{\"o}nig, Hartmut}, title = {Catching Intrusions: Classifier Performances for Detecting Network-specific Anomalies in Energy Systems}, series = {2018 International Conference on Smart Energy Systems and Technologies (SEST), Seville, Spain, September 2018}, booktitle = {2018 International Conference on Smart Energy Systems and Technologies (SEST), Seville, Spain, September 2018}, publisher = {IEEE}, address = {Piscataway, NJ}, isbn = {978-1-5386-5326-5}, doi = {10.1109/SEST.2018.8495702}, pages = {6}, language = {en} } @inproceedings{CwalinskiKoenig, author = {Cwalinski, Radoslaw and K{\"o}nig, Hartmut}, title = {SDN-based Attack Detection in Wireless Local Area Networks}, series = {4th IEEE Conference on Network Softwarization and Workshops (NetSoft), Montreal, QC, 2018}, booktitle = {4th IEEE Conference on Network Softwarization and Workshops (NetSoft), Montreal, QC, 2018}, publisher = {IEEE}, address = {Piscataway, NJ}, isbn = {978-1-5386-4633-5}, doi = {10.1109/NETSOFT.2018.8460121}, pages = {207 -- 211}, language = {en} } @inproceedings{SchusterKoppPauletal., author = {Schuster, Franka and Kopp, Fabian Malte and Paul, Andreas and K{\"o}nig, Hartmut}, title = {Attack and Fault Detection in Process Control Communication Using Unsupervised Machine Learning}, series = {IEEE 16th International Conference on Industrial Informatics (INDIN), Porto, Portugal, 18-20 July 2018}, booktitle = {IEEE 16th International Conference on Industrial Informatics (INDIN), Porto, Portugal, 18-20 July 2018}, publisher = {IEEE}, address = {Piscataway, NJ}, isbn = {978-1-5386-4829-2}, doi = {10.1109/INDIN.2018.8472054}, pages = {433 -- 438}, language = {en} } @inproceedings{CwalinskiKoenig, author = {Cwalinski, Radoslaw and K{\"o}nig, Hartmut}, title = {Identifying Malicious Traffic in Software-Defined Wireless Local Area Networks}, series = {2018 International Conference on Computing, Networking and Communications (ICNC), Maui, HI, USA, 2018}, booktitle = {2018 International Conference on Computing, Networking and Communications (ICNC), Maui, HI, USA, 2018}, publisher = {IEEE}, isbn = {978-1-5386-3652-7}, doi = {10.1109/ICCNC.2018.8390307}, pages = {195 -- 199}, language = {en} } @inproceedings{DacierKarglKoenigetal., author = {Dacier, Marc C. and Kargl, Frank and K{\"o}nig, Hartmut and Valdes, Alfonso}, title = {Network Attack Detection and Defense: Securing Industrial Control Systems for Critical Infrastructures}, series = {Report from Dagstuhl Seminar 14292, 13. - 16. Juli 2014,}, booktitle = {Report from Dagstuhl Seminar 14292, 13. - 16. Juli 2014,}, publisher = {Dagstuhl Publishing}, address = {Schloss Dagstuhl, Wadern}, doi = {10.4230/DagRep.4.7.62}, pages = {62 -- 79}, abstract = {This report documents the program and the outcomes of Dagstuhl Seminar 14292 "Network Attack Detection and Defense: Securing Industrial Control Systems for Critical Infrastructures". The main objective of the seminar was to discuss new approaches and ideas for securing industrial control systems. It is the sequel of several previous Dagstuhl seminars: (1) the series "Network Attack Detection and Defense" held in 2008 and 2012, and (2) the Dagstuhl seminar "Securing Critical Infrastructures from Targeted Attacks", held in 2012. At the seminar, which brought together members from academia an industry, appropriate methods for detecting attacks on industrial control systems (ICSs) and for limiting the impact on the physical components were considered. A central question was whether and how reactive security mechanisms can be made more ICS- and process-aware. To some extent it seems possible to adopt existing security approaches from other areas (e. g., conventional networks, embedded systems, or sensor networks). The main question is whether adopting these approaches is sufficient to reach the desired level of security for ICSs. Detecting attacks to the physical components and appropriate reactions to attacks are new aspects that need to be considered as well. The main result of the seminar is a list of recommendations for future directions in ICS security that is presented in this report.}, language = {en} } @inproceedings{PinkSprejzKoenig, author = {Pink, Mario and Sprejz, Michael and K{\"o}nig, Hartmut}, title = {A Coordinated Group Decision for Vertical Handovers in Heterogeneous Wireless Networks}, series = {2013 International Conference on MOBILe Wireless MiddleWARE, Operating Systems, and Applications, Bologna, Italy, November 11-13, 2013}, booktitle = {2013 International Conference on MOBILe Wireless MiddleWARE, Operating Systems, and Applications, Bologna, Italy, November 11-13, 2013}, publisher = {IEEE}, address = {Piscataway, NJ}, doi = {10.1109/Mobilware.2013.20}, pages = {130 -- 137}, abstract = {Cooperation and interactions of mobile users is a characteristic feature of mobile collaborative applications. The users are located in different mobile communication networks or move in or among them, respectively. This requires horizontal and vertical handovers. The latter is required when the networks use different network technologies. Usually each mobile device independently chooses the most appropriate network for its purposes to switch to. In group-oriented applications this may lead to an uncoordinated network selection and as consequence to increased energy consumption. In this paper, we present a distributed vertical handover decision algorithm that coordinates the selection of the network among the mobile devices in order to ensure an optimal quality of service for the collaborative application and a low energy consumption of the involved mobile devices. The network selection is based on the calculation of a group benefit for each alternative network using the Simple Additive Weighting (SAW) algorithm. The feasibility of the algorithm is evaluated regarding varying group sizes and resource requirements.}, language = {en} } @inproceedings{GaeblerKoenig, author = {G{\"a}bler, Jan and K{\"o}nig, Hartmut}, title = {Enhancing Group Communication Systems with Mobility Support}, series = {Proceedings of the 19th IEEE International Conference on Networks (ICON 2013), Singapore, December 2013}, booktitle = {Proceedings of the 19th IEEE International Conference on Networks (ICON 2013), Singapore, December 2013}, publisher = {IEEE}, address = {Piscataway, NJ}, isbn = {978-1-4799-2085-3}, pages = {342 -- 347}, language = {en} } @inproceedings{MehnerKlauckKoenig, author = {Mehner, Stefan and Klauck, Ronny and K{\"o}nig, Hartmut}, title = {Location-independent fall detection with smartphone}, series = {The 6th International Conference on PErvasive Technologies Related to Assistive Environments, PETRA '13, Island of Rhodes, Greece, May 29-31, 2013}, booktitle = {The 6th International Conference on PErvasive Technologies Related to Assistive Environments, PETRA '13, Island of Rhodes, Greece, May 29-31, 2013}, editor = {Makedon, Fillia and Betke, Margrit and Seif El-Nasr, Magy and Maglogiannis, Ilias}, publisher = {ACM}, address = {New York, NY}, isbn = {978-1-4503-1973-7}, doi = {10.1145/2504335.2504346}, pages = {8}, abstract = {Due to demographic changes in developed industrial countries and a better medical care system, the number of elderly people who still live in their home environment is rapidly growing because there they feel more comfortable and independent as in a clinical environment or in a residential care home. The elderly often live alone and receive only irregular visits. Due to impaired physical skills the probability of falls significantly increases. The detection of falls is a crucial aspect in the care of elderly. Falls are often detected very late with severe consequential damages. There are existing approaches for automatic fall detection. They usually deploy special external devices. Elderly people often do not accept these devices because they expose their frailty. In this paper, we present a location-independent fall detection method implemented as a smartphone application for an inconspicuous use in nearly every situation of the daily life. The difficulty of our approach is in the low resolution range of integrated acceleration sensors and the limited energy supply of the smartphone. As solution, we apply a modular threshold-based algorithm which uses the acceleration sensor with moderate energy consumption. Its fall detection rate is in the average of current relevant research.}, language = {en} } @inproceedings{GaeblerKlauckPinketal., author = {G{\"a}bler, Jan and Klauck, Ronny and Pink, Mario and K{\"o}nig, Hartmut}, title = {uBeeMe - a Platform to Enable Mobile Collaborative Applications}, series = {Proceedings of the 9th International Conference on Collaborative Computing: Networking, Applications and Worksharing (CollaborateCom 2013), Austin, Texas, USA, October, 2013}, booktitle = {Proceedings of the 9th International Conference on Collaborative Computing: Networking, Applications and Worksharing (CollaborateCom 2013), Austin, Texas, USA, October, 2013}, publisher = {IEEE}, address = {Piscataway, NJ}, pages = {188 -- 196}, language = {en} } @incollection{RieckWressneggerKoenigetal., author = {Rieck, Konrad and Wressnegger, Christian and K{\"o}nig, Hartmut and Paul, Andreas and Schuster, Franka and Kanisch, Heiko and Moder, Christoph}, title = {Werkzeuge und Ver{\"o}ffentlichungen}, series = {IT-Sicherheit f{\"u}r Kritische Infrastrukturen - State of the Art : Ergebnisse des F{\"o}rderschwerpunkts IT-Sicherheit f{\"u}r Kritische Infrastrukturen ITS/KRITIS des BMBF}, booktitle = {IT-Sicherheit f{\"u}r Kritische Infrastrukturen - State of the Art : Ergebnisse des F{\"o}rderschwerpunkts IT-Sicherheit f{\"u}r Kritische Infrastrukturen ITS/KRITIS des BMBF}, editor = {Rudel, Steffi and Lechner, Ulrike}, edition = {1. Auflage}, publisher = {Professur f{\"u}r Wirtschaftsinformatik, Universit{\"a}t der Bundeswehr M{\"u}nchen}, address = {Neubiberg}, isbn = {978-3-943207-33-0}, pages = {S. 85}, language = {de} } @incollection{RieckWressneggerKoenigetal., author = {Rieck, Konrad and Wressnegger, Christian and K{\"o}nig, Hartmut and Paul, Andreas and Schuster, Franka and Kanisch, Heiko and Moder, Christoph}, title = {Implementierung und Umsetzung}, series = {IT-Sicherheit f{\"u}r Kritische Infrastrukturen - State of the Art : Ergebnisse des F{\"o}rderschwerpunkts IT-Sicherheit f{\"u}r Kritische Infrastrukturen ITS/KRITIS des BMBF}, booktitle = {IT-Sicherheit f{\"u}r Kritische Infrastrukturen - State of the Art : Ergebnisse des F{\"o}rderschwerpunkts IT-Sicherheit f{\"u}r Kritische Infrastrukturen ITS/KRITIS des BMBF}, editor = {Rudel, Steffi and Lechner, Ulrike}, edition = {1. Auflage}, publisher = {Professur f{\"u}r Wirtschaftsinformatik, Universit{\"a}t der Bundeswehr M{\"u}nchen}, address = {Neubiberg}, isbn = {978-3-943207-33-0}, pages = {122 -- 124}, language = {de} } @incollection{SchusterPaulKoenig, author = {Schuster, Franka and Paul, Andreas and K{\"o}nig, Hartmut}, title = {SICIA - IT-Sicherheit in kritischen Netzen messen und systematisch verbessern}, series = {IT-Sicherheit f{\"u}r Kritische Infrastrukturen - State of the Art : Ergebnisse des F{\"o}rderschwerpunkts IT-Sicherheit f{\"u}r Kritische Infrastrukturen ITS/KRITIS des BMBF}, booktitle = {IT-Sicherheit f{\"u}r Kritische Infrastrukturen - State of the Art : Ergebnisse des F{\"o}rderschwerpunkts IT-Sicherheit f{\"u}r Kritische Infrastrukturen ITS/KRITIS des BMBF}, editor = {Rudel, Steffi and Lechner, Ulrike}, edition = {1. Auflage}, publisher = {Professur f{\"u}r Wirtschaftsinformatik, Universit{\"a}t der Bundeswehr M{\"u}nchen}, address = {Neubiberg}, isbn = {978-3-943207-33-0}, pages = {27 -- 28}, language = {de} } @incollection{SchusterPaulKoenig, author = {Schuster, Franka and Paul, Andreas and K{\"o}nig, Hartmut}, title = {Anwendung des SICIA-Verfahrens in der Praxis - am Beispiel eines ISMS}, series = {IT-Sicherheit f{\"u}r Kritische Infrastrukturen - State of the Art : Ergebnisse des F{\"o}rderschwerpunkts IT-Sicherheit f{\"u}r Kritische Infrastrukturen ITS/KRITIS des BMBF}, booktitle = {IT-Sicherheit f{\"u}r Kritische Infrastrukturen - State of the Art : Ergebnisse des F{\"o}rderschwerpunkts IT-Sicherheit f{\"u}r Kritische Infrastrukturen ITS/KRITIS des BMBF}, editor = {Rudel, Steffi and Lechner, Ulrike}, edition = {1. Auflage}, publisher = {Professur f{\"u}r Wirtschaftsinformatik, Universit{\"a}t der Bundeswehr M{\"u}nchen}, address = {Neubiberg}, isbn = {978-3-943207-33-0}, pages = {139 -- 144}, language = {de} } @inproceedings{GaeblerKoenig, author = {G{\"a}bler, Jan and K{\"o}nig, Hartmut}, title = {Moversight: A Group Communication Protocol for Mobile Collaborative Applications}, series = {Proceedings of the 6th Joint IFIP Wireless and Mobile Networking Conference (WMNC 2013), Dubai, United Arab Emirates, 23 - 25th April 2013}, booktitle = {Proceedings of the 6th Joint IFIP Wireless and Mobile Networking Conference (WMNC 2013), Dubai, United Arab Emirates, 23 - 25th April 2013}, publisher = {IEEE}, address = {Piscataway, NJ}, isbn = {978-1-4673-5615-2}, pages = {72 -- 79}, language = {en} } @inproceedings{SchmerlRietzKoenig, author = {Schmerl, Sebastian and Rietz, Ren{\´e} and K{\"o}nig, Hartmut}, title = {Systematische Ableitung von Signaturen durch Wiederverwendung am Beispiel von Snort}, series = {Sicherheit 2008, Konferenzband der 4. Jahrestagung des Fachbereichs Sicherheit der Gesellschaft f{\"u}r Informatik e.V.(GI), 2. - 4. April 2008 im Saarbr{\"u}cker Schloss}, booktitle = {Sicherheit 2008, Konferenzband der 4. Jahrestagung des Fachbereichs Sicherheit der Gesellschaft f{\"u}r Informatik e.V.(GI), 2. - 4. April 2008 im Saarbr{\"u}cker Schloss}, editor = {Alkassar, Ammar}, publisher = {Ges. f{\"u}r Informatik}, address = {Bonn}, isbn = {978-3-88579-222-2}, pages = {367 -- 379}, language = {de} } @inproceedings{SchusterPaulRietzetal., author = {Schuster, Franka and Paul, Andreas and Rietz, Ren{\´e} and K{\"o}nig, Hartmut}, title = {Potentials of Using One-class SVM for Detecting Protocol-specific Anomalies in Industrial Networks}, series = {Proceedings of the 2015 IEEE Symposium on Computational Intelligence in Cyber Security (IEEE CICS 2015)}, booktitle = {Proceedings of the 2015 IEEE Symposium on Computational Intelligence in Cyber Security (IEEE CICS 2015)}, publisher = {IEEE Press}, address = {New York}, doi = {10.1109/SSCI.2015.22}, pages = {83 -- 90}, language = {en} } @inproceedings{GaeblerKoenig, author = {G{\"a}bler, Jan and K{\"o}nig, Hartmut}, title = {Distributed latency estimation using global knowledge for mobile collaborative applications}, series = {International Wireless Communications and Mobile Computing Conference (IWCMC) 2015, Dubrovnik, Croatia, 24-28 Aug. 2015}, booktitle = {International Wireless Communications and Mobile Computing Conference (IWCMC) 2015, Dubrovnik, Croatia, 24-28 Aug. 2015}, publisher = {IEEE}, doi = {10.1109/IWCMC.2015.7289130}, pages = {474 -- 479}, language = {en} } @inproceedings{OpitzTodtenbergKoenig, author = {Opitz, Stefanie Judith and Todtenberg, Nicole and K{\"o}nig, Hartmut}, title = {Mobile bandwidth prediction in the context of emergency medical service}, series = {Proceedings of the 7th International Conference on PErvasive Technologies Related to Assistive Environments (PETRA '14)}, booktitle = {Proceedings of the 7th International Conference on PErvasive Technologies Related to Assistive Environments (PETRA '14)}, publisher = {ACM}, address = {New York, NY}, isbn = {978-1-4503-2746-6}, doi = {10.1145/2674396.2674411}, language = {en} } @inproceedings{RietzVogelSchusteretal., author = {Rietz, Ren{\´e} and Vogel, Michael and Schuster, Franka and K{\"o}nig, Hartmut}, title = {Parallelization of Network Intrusion Detection Systems under Attack Conditions}, series = {Detection of Intrusions and Malware, and Vulnerability Assessment, 11th International Conference, DIMVA 2014, Egham, UK, July 10-11, 2014}, booktitle = {Detection of Intrusions and Malware, and Vulnerability Assessment, 11th International Conference, DIMVA 2014, Egham, UK, July 10-11, 2014}, editor = {Dietrich, Sven}, publisher = {Springer International Publishing}, address = {Cham}, isbn = {978-3-319-08508-1}, pages = {172 -- 191}, language = {en} } @misc{SchusterPaulKoenig, author = {Schuster, Franka and Paul, Andreas and K{\"o}nig, Hartmut}, title = {Messung der technischen IT-Sicherheit in Energieversorgungsanlagen zur Erf{\"u}llung des IT-Sicherheitsgesetzes}, series = {International Journal for Electricy and Heat Generation, VGB Powertech}, volume = {97}, journal = {International Journal for Electricy and Heat Generation, VGB Powertech}, number = {3}, issn = {1435-3199}, pages = {76 -- 82}, language = {de} } @inproceedings{SchusterPaulKoenig, author = {Schuster, Franka and Paul, Andreas and K{\"o}nig, Hartmut}, title = {Towards Learning Normality for Anomaly Detection in Industrial Control Networks}, series = {Proceedings of the 7th IFIP WG 6.6 International Conference on Autonomous Infrastructure, Management, and Security (AIMS 2013), Barcelona, Spain, June 25-28, 2013}, booktitle = {Proceedings of the 7th IFIP WG 6.6 International Conference on Autonomous Infrastructure, Management, and Security (AIMS 2013), Barcelona, Spain, June 25-28, 2013}, publisher = {Heidleberg}, address = {Berlin [u.a.]}, isbn = {978-3-642-38997-9}, pages = {61 -- 72}, language = {en} } @inproceedings{PaulSchusterKoenig, author = {Paul, Andreas and Schuster, Franka and K{\"o}nig, Hartmut}, title = {Towards the Protection of Industrial Control Systems - Conclusions of a Vulnerability Analysis of Profinet IO}, series = {Detection of Intrusions and Malware, and Vulnerability Assessment, 10th International Conference, DIMVA 2013, Berlin, Germany, July 18-19, 2013, proceedings}, booktitle = {Detection of Intrusions and Malware, and Vulnerability Assessment, 10th International Conference, DIMVA 2013, Berlin, Germany, July 18-19, 2013, proceedings}, publisher = {Springer}, address = {Berlin [u.a.]}, isbn = {978-3-642-39234-4}, pages = {160 -- 176}, language = {en} } @inproceedings{SchusterPaulKoenig, author = {Schuster, Franka and Paul, Andreas and K{\"o}nig, Hartmut}, title = {A Distributed Intrusion Detection System for Industrial Automation Networks}, series = {Proceedings of the 17th International Conference on Emerging Technologies \& Factory Automation, Krakau, Polen, September 2012}, booktitle = {Proceedings of the 17th International Conference on Emerging Technologies \& Factory Automation, Krakau, Polen, September 2012}, publisher = {IEEE}, isbn = {978-1-4673-4736-5}, doi = {10.1109/ETFA.2012.6489703}, pages = {1 -- 4}, abstract = {Modern automation is measured in terms of interoperability and easy administration. Introducing technology focussing on these criteria, however, induce new security risks to existing and future automation installations. Current security approaches in automation do not keep pace with the rising security challenges. Prevalent in automation is the use of access control to protect the system from malicious activity, such as extern attacks. Means to inspect the automation traffic to identify attacks that already have overcome access control or are initiated from inside the automation system are not available, yet. For filling this gap, we investigate in the application of intrusion detection techniques on industrial automation. In this paper, we present the current state of an intrusion detection system tailored to the analysis of operation down to traffic between automation devices on field layer.}, language = {en} } @inproceedings{KaliappanKoenig, author = {Kaliappan, Prabhu Shankar and K{\"o}nig, Hartmut}, title = {An Approach to Synchronize UML-basedDesign Components for Model-Driven Protocol Development}, series = {Proceedings, 2011 34th IEEE Software Engineering Workshop, 20-21 June 2011, Limerick, Ireland}, booktitle = {Proceedings, 2011 34th IEEE Software Engineering Workshop, 20-21 June 2011, Limerick, Ireland}, publisher = {IEEE}, address = {Los Alamitos, Calif.}, isbn = {978-1-4673-0245-6}, pages = {27 -- 35}, language = {en} } @incollection{Koenig, author = {K{\"o}nig, Hartmut}, title = {Zur Entwicklung der Module "Grundlagen der Rechnernetze" und "High Performance Communication - Multimedia"}, language = {de} } @inproceedings{SchmerlVogelRietzetal., author = {Schmerl, Sebastian and Vogel, Michael and Rietz, Ren{\´e} and K{\"o}nig, Hartmut}, title = {Explorative Visualization of Log Data to Support Forensic Analysis and Signature Development}, series = {2010 Fifth IEEE International Workshop on Systematic Approaches to Digital Forensic Engineering (SADFE 2010), Oakland, California, USA, 20 May 2010}, booktitle = {2010 Fifth IEEE International Workshop on Systematic Approaches to Digital Forensic Engineering (SADFE 2010), Oakland, California, USA, 20 May 2010}, publisher = {IEEE}, address = {Piscataway, NJ}, isbn = {978-1-424-47220-8}, pages = {109 -- 118}, language = {en} } @inproceedings{SchmerlVogelKoenig, author = {Schmerl, Sebastian and Vogel, Michael and K{\"o}nig, Hartmut}, title = {Cooperating Intrusion Detection Overlay Structures}, series = {4th GI/ITG KuVS Workshop on Future Internet and 2nd Workshop on Economic Traffic Management (ETM), Z{\"u}rich, Switzerland, 9 - 10. November 2009}, booktitle = {4th GI/ITG KuVS Workshop on Future Internet and 2nd Workshop on Economic Traffic Management (ETM), Z{\"u}rich, Switzerland, 9 - 10. November 2009}, language = {en} } @inproceedings{SchmerlVogelKoenig, author = {Schmerl, Sebastian and Vogel, Michael and K{\"o}nig, Hartmut}, title = {Identifying Modeling Errors in Signatures by Model Checking.}, language = {en} } @inproceedings{LiuKoenig, author = {Liu, Fuwen and K{\"o}nig, Hartmut}, title = {Efficient Key Distribution for ClosedMeetings in the Internet}, series = {Communications and Multimedia Security, 9th IFIP TC-6 TC-11 International Conference, CMS 2005, Salzburg, Austria, September 19 - 21, 2005}, booktitle = {Communications and Multimedia Security, 9th IFIP TC-6 TC-11 International Conference, CMS 2005, Salzburg, Austria, September 19 - 21, 2005}, editor = {Dittmann, Jana}, publisher = {Springer}, address = {Berlin [u.a.]}, isbn = {3-540-28791-4}, pages = {271 -- 272}, language = {en} } @misc{MehnerKoenig, author = {Mehner, Stefan and K{\"o}nig, Hartmut}, title = {No Need to Marry to Change Your Name! Attacking Profinet IO Automation Networks Using DCP}, series = {Detection of Intrusions and Malware, and Vulnerability Assessment 16th International Conference, DIMVA 2019, Gothenburg, Sweden, June 19-20, 2019, Proceedings}, journal = {Detection of Intrusions and Malware, and Vulnerability Assessment 16th International Conference, DIMVA 2019, Gothenburg, Sweden, June 19-20, 2019, Proceedings}, editor = {Perdisci, Roberto and Maurice, Cl{\´e}mentine and Giacinto, Giorgio and Almgren, Magnus}, publisher = {Springer}, isbn = {978-3-030-22037-2}, doi = {10.1007/978-3-030-22038-9_19}, pages = {396 -- 414}, abstract = {Current developments in digitization and industry 4.0 bear new challenges for automation systems. In order to enable interoperability and vertical integration of corporate management systems, these networks have evolved from formerly proprietary solutions to the application of Ethernet-based communication and internet standards. This development is accompanied by an increase in the number of threats. Although the most critical IT protection objective for automation systems is availability, usually no security mechanisms have been integrated into automation protocols. Also Ethernet offers no protection by design for these protocols. One of the most popular real-time protocols for industrial applications is Profinet IO. In this paper, we describe a Denial-of-Service attack on Profinet IO that exploits a vulnerability in the Discovery and Basic Configuration Protocol (DCP) which interrupts the Application Relationship between an IO Controller and an IO Device, and thus prevents the system from being repaired by the operator. The attack combines port stealing with the sending of forged DCP packets and causes a system downtime, which in affected production networks probably lead to a serious financial damage and, in case of critical infrastructures, even represents a high risk for the supply of society. We demonstrate the practical feasibility of the attack using realistic hardware and scenarios and discuss its significance for also other setups.}, language = {en} } @misc{BoehmKoenig, author = {B{\"o}hm, Sebastian and K{\"o}nig, Hartmut}, title = {SEmulate: Seamless Network Protocol Simulation and Radio Channel Emulation for Wireless Sensor Networks}, series = {15th Annual Conference on Wireless On-demand Network Systems and Services (WONS), 22-24 Jan. 2019, Wengen, Switzerland.}, journal = {15th Annual Conference on Wireless On-demand Network Systems and Services (WONS), 22-24 Jan. 2019, Wengen, Switzerland.}, publisher = {IEEE}, isbn = {978-3-903176-13-3}, doi = {10.23919/WONS.2019.8795495}, pages = {8}, abstract = {Low-rate and low-power wireless communications are still the main drivers for innovative industrial automation and the Internet of Things (IoT). Physical mobility is one of the most important challenges for them. Common wireless technologies and protocols, e.g., WirelessHART and ISA100.11a Wireless for industrial process plants, ZigBee for building automation, or 6LoWPAN and 6TiSCH in context of the IoT, are based on the IEEE 802.15.4 standard. Event-based simulation is the method of choice for analyzing network protocols and algorithmic applications of such distributed sensor applications. Performance measurements and holistic evaluations, however, are greatly influenced by the underlying hardware resources, physical layer protocols, and radio channel conditions, which are usually not considered or highly abstracted in network simulations. In this paper we present SEmulate, a hybrid system for seamless (network) simulation and hardware-based emulation for wireless sensor networks based on the IEEE 802.15.4 protocol standard, which takes the hardware aspects into account by applying an Hardware-in-the-Loop (HIL) approach.}, language = {en} } @inproceedings{LiuKoenig, author = {Liu, Fuwen and K{\"o}nig, Hartmut}, title = {Puzzle - A Novel Video Encryption Algorithm}, editor = {Dittmann, Jana and Katzenbeisser, Stefan and Uhl, Andreas}, isbn = {3-540-28791-4}, language = {en} } @inproceedings{ZuehlkeKoenig, author = {Z{\"u}hlke, Mario and K{\"o}nig, Hartmut}, title = {A Signalling Protocol for Small Closed Dynamic Multi-peer Groups}, series = {High speed networks and multimedia communications, 7th IEEE international conference, HSNMC 2004, Toulouse, France, June 30 - July 2, 2004, proceedings}, booktitle = {High speed networks and multimedia communications, 7th IEEE international conference, HSNMC 2004, Toulouse, France, June 30 - July 2, 2004, proceedings}, editor = {Mammeri, Zoubir}, publisher = {Springer}, address = {Berlin [u.a.]}, isbn = {3-540-22262-6}, pages = {973 -- 984}, language = {en} } @inproceedings{MeierSchmerlKoenig, author = {Meier, Michael and Schmerl, Sebastian and K{\"o}nig, Hartmut}, title = {Improving the efficiency of misuse detection}, series = {Detection of intrusions and malware, and vulnerability assessment, second international conference, DIMVA 2005, Vienna, Austria, July 7-8, 2005, proceedings}, booktitle = {Detection of intrusions and malware, and vulnerability assessment, second international conference, DIMVA 2005, Vienna, Austria, July 7-8, 2005, proceedings}, editor = {Julisch, Klaus}, publisher = {Springer}, address = {Berlin [u.a.]}, isbn = {3-540-26613-5}, pages = {S. 188}, language = {en} } @inproceedings{PopoviciMahloZuehlkeetal., author = {Popovici, Eduard and Mahlo, Ralf and Z{\"u}hlke, Mario and K{\"o}nig, Hartmut}, title = {Consistency Support for a Decentralized Management in Closed Multiparty Conferences Using SIP}, language = {en} } @misc{GaeblerKoenig, author = {G{\"a}bler, Jan and K{\"o}nig, Hartmut}, title = {Moversight: An Approach to Support Mobility in Collaborative Applications}, publisher = {IEEE}, isbn = {978-1-4799-0747-2}, pages = {110 -- 112}, language = {en} } @book{LaPortaRamjeeKoenig, author = {La Porta, Tom and Ramjee, Ram and K{\"o}nig, Hartmut}, title = {Proceedings of the 12th IEEE International Conference on Network Protocols, ICNP 2004 : 4 - 8 October 2004, Berlin, Germany}, publisher = {Los Alamitos, Calif. [u.a.] : IEEE Computer Society}, isbn = {0-7695-2161-4}, language = {en} } @article{LangendoerferKraemerKoenig, author = {Langend{\"o}rfer, Peter and Kraemer, Rolf and K{\"o}nig, Hartmut}, title = {Evaluation of Well-Known Protocol Implementation Techniques for Application in Wireless Networks}, series = {The Journal of Supercomputing}, volume = {20}, journal = {The Journal of Supercomputing}, number = {2}, issn = {0920-8542}, pages = {161 -- 173}, language = {en} } @article{OpitzKoenigSzamlewska, author = {Opitz, Alek and K{\"o}nig, Hartmut and Szamlewska, Sebastian}, title = {What Does Grid Computing Cost?}, language = {en} } @article{LiuKoenigWang, author = {Liu, Fuwen and K{\"o}nig, Hartmut and Wang, W.}, title = {Designing a Security Architecture for a P2P Video Conference System}, language = {en} } @book{Koenig, author = {K{\"o}nig, Hartmut}, title = {Protocol Engineering}, publisher = {Springer}, address = {Berlin [u.a.]}, isbn = {978-3-642-29144-9}, pages = {XV, 525}, language = {en} }