@inproceedings{RietzKoenigUllrichetal., author = {Rietz, Ren{\´e} and K{\"o}nig, Hartmut and Ullrich, Steffen and Stritter, Benjamin}, title = {Firewalls for the Web 2.0}, series = {Proceedings of the 2016 IEEE International Conference on Software Quality, Reliability and Security (QRS), 1-3 Aug. 2016}, booktitle = {Proceedings of the 2016 IEEE International Conference on Software Quality, Reliability and Security (QRS), 1-3 Aug. 2016}, publisher = {IEEE}, address = {Piscataway, NJ}, isbn = {978-1-5090-4127-5}, doi = {10.1109/QRS.2016.36}, pages = {242 -- 253}, abstract = {The widespread use of Web 2.0 technologies yields an increasing threat potential for users and related systems. Modern web applications and online services are nowadays based on Web 2.0 technologies, such as JavaScript and AJAX, and thus on the execution of active content in the browsers of the users. Firewalls are a common practice to securely connecting to the internet. In this paper, we propose a novel perimeter firewall architecture for web applications that addresses the entire process chain starting from the data transfer with HTTP via the analysis of manipulated web documents to the extraction and analysis of active contents. The basic idea is to allow only a restricted set of web applications to pass the firewall based on a model of their HTML and JavaScript structure. We evaluate the capability of the resulting models for identifying the underlying web applications and their ability to ward off additional malicious inputs.}, language = {en} } @inproceedings{DacierDietrichKargletal., author = {Dacier, Marc C. and Dietrich, Sven and Kargl, Frank and K{\"o}nig, Hartmut}, title = {Network Attack Detection and Defense - Security Challenges and Opportunities of Software-Defined Networking}, series = {Network Attack Detection and Defense, Dagstuhl Seminar 16361}, booktitle = {Network Attack Detection and Defense, Dagstuhl Seminar 16361}, publisher = {Schloss Dagstuhl}, address = {Wadern}, doi = {10.4230/DagRep.6.9.1}, url = {http://nbn-resolving.de/urn:nbn:de:0030-drops-69122}, pages = {1 -- 28}, abstract = {This report documents the program and the outcomes of Dagstuhl Seminar 16361 "Network Attack Detection and Defense: Security Challenges and Opportunities of Software-Defined Networking". Software-defined networking (SDN) has attracted a great attention both in industry and academia since the beginning of the decade. This attention keeps undiminished. Security-related aspects of software-defined networking have only been considered more recently. Opinions differ widely. The main objective of the seminar was to discuss the various contrary facets of SDN security. The seminar continued the series of Dagstuhl events Network Attack Detection and Defense held in 2008, 2012, and 2014. The objectives of the seminar were threefold, namely (1) to discuss the security challenges of SDN, (2) to debate strategies to monitor and protect SDN-enabled networks, and (3) to propose methods and strategies to leverage on the flexibility brought by SDN for designing new security mechanisms. At the seminar, which brought together participants from academia and industry, we discussed the advantages and disadvantages of using software-defined networks from the security point of view. We agreed that SDN provides new possibilities to better secure networks, but also offers a number of serious security problems which require further research. The outcome of these discussions and the proposed research directions are presented in this report.}, language = {en} } @inproceedings{GaeblerKoenig, author = {G{\"a}bler, Jan and K{\"o}nig, Hartmut}, title = {Distributed Cluster-Topology Maintenance for Mobile Collaborative Applications}, series = {IEEE 41st Conference on Local Computer Networks (LCN), 7-10 Nov. 2016}, booktitle = {IEEE 41st Conference on Local Computer Networks (LCN), 7-10 Nov. 2016}, publisher = {IEEE}, address = {Piscataway, NJ}, isbn = {978-1-5090-2054-6}, doi = {10.1109/LCN.2016.55}, pages = {271 -- 279}, abstract = {Nowadays, collaborative applications play an increasing role in mobile communications in order to enable cooperation among mobile and/or stationary participants - often using the peer-to-peer (P2P) group communication paradigm. The probability of communication failures increases in mobile environments. As a consequence, frequent leaving and joining of partners can be observed resulting in unstable group topologies. A widely used approach is to divide the group into peer clusters that are fully meshed among each other. In this paper, we propose an application-independent approach for a periodic maintenance of distributed cluster-based group topologies for mobile collaborative applications. The proposed approach also dynamically adapts the overlay structure to changing network conditions. The maintenance strategy can be parametrized by several metrics. It outperforms simple overlay maintenance strategies, such as round-robin, by respecting the resource and computation limitations of mobile devices. The run-time is increased by 10\% in the best case compared to LEACH, and by 3 — 5\% on average. We describe the approach and evaluate its performance w.r.t. different metrics.}, language = {en} } @inproceedings{KoenigUlrichHeiner, author = {K{\"o}nig, Hartmut and Ulrich, Andreas and Heiner, Monika}, title = {Design for Testability: A Step-wise Approach to Protocol Testing}, series = {Testing of Communicating Systems, IFIP TC6 10th International Workshop on Testing of Communicating Systems, 8-10 September 1997, Cheju Island, Korea}, booktitle = {Testing of Communicating Systems, IFIP TC6 10th International Workshop on Testing of Communicating Systems, 8-10 September 1997, Cheju Island, Korea}, editor = {Kim, Myungchul and Kang, Sungwon and Hong, Keesoo}, publisher = {Springer}, address = {Boston}, isbn = {978-1-4757-6701-8}, doi = {10.1007/978-0-387-35198-8_9}, pages = {125 -- 140}, language = {en} } @inproceedings{CwalinskiKoenig, author = {Cwalinski, Radoslaw and K{\"o}nig, Hartmut}, title = {Identifying Malicious Traffic in Software-Defined Wireless Local Area Networks}, series = {2018 International Conference on Computing, Networking and Communications (ICNC), Maui, HI, USA, 2018}, booktitle = {2018 International Conference on Computing, Networking and Communications (ICNC), Maui, HI, USA, 2018}, publisher = {IEEE}, isbn = {978-1-5386-3652-7}, doi = {10.1109/ICCNC.2018.8390307}, pages = {195 -- 199}, language = {en} } @inproceedings{SchusterKoppPauletal., author = {Schuster, Franka and Kopp, Fabian Malte and Paul, Andreas and K{\"o}nig, Hartmut}, title = {Attack and Fault Detection in Process Control Communication Using Unsupervised Machine Learning}, series = {IEEE 16th International Conference on Industrial Informatics (INDIN), Porto, Portugal, 18-20 July 2018}, booktitle = {IEEE 16th International Conference on Industrial Informatics (INDIN), Porto, Portugal, 18-20 July 2018}, publisher = {IEEE}, address = {Piscataway, NJ}, isbn = {978-1-5386-4829-2}, doi = {10.1109/INDIN.2018.8472054}, pages = {433 -- 438}, language = {en} } @inproceedings{SchusterPaulKoppetal., author = {Schuster, Franka and Paul, Andreas and Kopp, Fabian Malte and K{\"o}nig, Hartmut}, title = {Catching Intrusions: Classifier Performances for Detecting Network-specific Anomalies in Energy Systems}, series = {2018 International Conference on Smart Energy Systems and Technologies (SEST), Seville, Spain, September 2018}, booktitle = {2018 International Conference on Smart Energy Systems and Technologies (SEST), Seville, Spain, September 2018}, publisher = {IEEE}, address = {Piscataway, NJ}, isbn = {978-1-5386-5326-5}, doi = {10.1109/SEST.2018.8495702}, pages = {6}, language = {en} } @inproceedings{CwalinskiKoenig, author = {Cwalinski, Radoslaw and K{\"o}nig, Hartmut}, title = {SDN-based Attack Detection in Wireless Local Area Networks}, series = {4th IEEE Conference on Network Softwarization and Workshops (NetSoft), Montreal, QC, 2018}, booktitle = {4th IEEE Conference on Network Softwarization and Workshops (NetSoft), Montreal, QC, 2018}, publisher = {IEEE}, address = {Piscataway, NJ}, isbn = {978-1-5386-4633-5}, doi = {10.1109/NETSOFT.2018.8460121}, pages = {207 -- 211}, language = {en} }