@misc{LehnigerRaghunathanLangendoerfer, author = {Lehniger, Kai and Raghunathan, Shuba Pradha and Langend{\"o}rfer, Peter}, title = {WindowGuardian: return address integrity for ESP32 microcontrollers with Xtensa Processors using AES and register Windows}, series = {2024 13th Mediterranean Conference on Embedded Computing (MECO)}, journal = {2024 13th Mediterranean Conference on Embedded Computing (MECO)}, publisher = {IEEE}, doi = {10.1109/MECO62516.2024.10577840}, pages = {1 -- 8}, language = {en} } @misc{MykytynBrzozowskiDykaetal., author = {Mykytyn, Pavlo and Brzozowski, Marcin and Dyka, Zoya and Langend{\"o}rfer, Peter}, title = {Towards secure and reliable heterogeneous real-time telemetry communication in autonomous UAV swarms}, series = {Poster : iCCC2024 - iCampµs Cottbus Conference 2024-05-14 - 2024-05-16 Cottbus}, journal = {Poster : iCCC2024 - iCampµs Cottbus Conference 2024-05-14 - 2024-05-16 Cottbus}, publisher = {AMA Service GmbH}, address = {Von-M{\"u}nchhausen-Str. 49, 31515 Wunstorf, Germany}, doi = {10.5162/iCCC2024/P15}, pages = {222 -- 225}, language = {en} } @misc{AlsabbaghKimLangendoerfer, author = {Alsabbagh, Wael and Kim, Chaerin and Langend{\"o}rfer, Peter}, title = {Silent sabotage : a stealthy control logic injection in IIoT systems}, series = {5th Silicon Valley Cybersecurity Conference (SVCC 2024)}, journal = {5th Silicon Valley Cybersecurity Conference (SVCC 2024)}, publisher = {IEEE}, address = {New York}, doi = {10.1109/SVCC61185.2024.10637363}, pages = {1 -- 8}, language = {de} } @misc{HaddadiEsfahaniMayeFrohbergetal., author = {Haddadi Esfahani, Ali and Maye, Oliver and Frohberg, Max and Langend{\"o}rfer, Peter}, title = {Minimizing the latency of freezing of gait detection on wearable devices}, series = {Vortr{\"a}ge : iCCC2024 - iCampµs Cottbus Conference 2024-05-14 - 2024-05-16 Cottbus}, journal = {Vortr{\"a}ge : iCCC2024 - iCampµs Cottbus Conference 2024-05-14 - 2024-05-16 Cottbus}, publisher = {AMA Service GmbH}, address = {Von-M{\"u}nchhausen-Str. 49, 31515 Wunstorf, Germany}, doi = {10.5162/iCCC2024/2.2}, pages = {49 -- 52}, language = {en} } @misc{FoersterLangendoerferHinze, author = {F{\"o}rster, Benjamin and Langend{\"o}rfer, Peter and Hinze, Thomas}, title = {Security mean distribution in WSNs for cooperative schemes}, series = {Vortr{\"a}ge : iCCC2024 - iCampµs Cottbus Conference 2024-05-14 - 2024-05-16 Cottbus}, journal = {Vortr{\"a}ge : iCCC2024 - iCampµs Cottbus Conference 2024-05-14 - 2024-05-16 Cottbus}, publisher = {AMA Service GmbH}, address = {Von-M{\"u}nchhausen-Str. 49, 31515 Wunstorf, Germany}, doi = {10.5162/iCCC2024/1.2}, pages = {38 -- 41}, language = {en} } @misc{AlsabbaghKimLangendoerfer, author = {Alsabbagh, Wael and Kim, Chaerin and Langend{\"o}rfer, Peter}, title = {Investigating the security of OpenPLC : vulnerabilities, attacks, and mitigation solutions}, series = {IEEE Access}, volume = {12}, journal = {IEEE Access}, publisher = {Institute of Electrical and Electronics Engineers (IEEE)}, issn = {2169-3536}, doi = {10.1109/ACCESS.2024.3356051}, pages = {11561 -- 11583}, language = {en} } @misc{KabinDykaKlannetal., author = {Kabin, Ievgen and Dyka, Zoya and Klann, Dan and Langend{\"o}rfer, Peter}, title = {EC P-256: Successful Simple Power Analysis}, series = {arXiv}, journal = {arXiv}, doi = {10.48550/arXiv.2106.12321}, pages = {1 -- 5}, language = {en} } @misc{KabinDykaKlannetal., author = {Kabin, Ievgen and Dyka, Zoya and Klann, Dan and Langend{\"o}rfer, Peter}, title = {EC Scalar Multiplication: Successful Simple Address-Bit SCA Attack against Atomic Patterns}, series = {IEEE 22nd Latin American Test Symposium (LATS)}, journal = {IEEE 22nd Latin American Test Symposium (LATS)}, isbn = {978-1-6654-2058-7}, issn = {2373-0862}, doi = {10.1109/LATS53581.2021.9651877}, pages = {2}, language = {en} } @misc{SosaDykaKabinetal., author = {Sosa, Omar Alejandro and Dyka, Zoya and Kabin, Ievgen and Langend{\"o}rfer, Peter}, title = {Simulation of Electromagnetic Emanation of Cryptographic ICs: Tools, Methods, Problems}, series = {19th IEEE East-West Design \& Test Symposium (EWDTS 2021), 12 (2021)}, journal = {19th IEEE East-West Design \& Test Symposium (EWDTS 2021), 12 (2021)}, isbn = {978-1-6654-4504-7}, issn = {2472-761X}, doi = {10.1109/EWDTS52692.2021.9581013}, pages = {5}, language = {en} } @misc{SaadLehnigerLangendoerfer, author = {Saad, AbdElaziz AbdElaal and Lehniger, Kai and Langend{\"o}rfer, Peter}, title = {Incremental Code Updates Exploitation as a Basis for Return Oriented Programming Attacks on Resource-Constrained Devices}, series = {5th Cyber Security in Networking Conference (CSNet 2021), (2021)}, journal = {5th Cyber Security in Networking Conference (CSNet 2021), (2021)}, isbn = {978-1-6654-0723-6}, issn = {2768-0029}, doi = {10.1109/CSNet52717.2021.9614275}, pages = {8}, language = {en} } @misc{MykytynBrzozowskiDykaetal., author = {Mykytyn, Pavlo and Brzozowski, Marcin and Dyka, Zoya and Langend{\"o}rfer, Peter}, title = {Jamming Detection for IR-UWB Ranging Technology in Autonomous UAV Swarms}, series = {2021 10th Mediterranean Conference on Embedded Computing (MECO)}, journal = {2021 10th Mediterranean Conference on Embedded Computing (MECO)}, isbn = {978-1-6654-2989-4}, issn = {2637-9511}, doi = {10.1109/MECO52532.2021.9460250}, language = {en} } @misc{DykaKabinKlannetal., author = {Dyka, Zoya and Kabin, Ievgen and Klann, Dan and Langend{\"o}rfer, Peter}, title = {Multiplier as a Mean for Reducing Vulnerability of Atomic Patterns to Horizontal Address-Bit Attacks}, series = {2021 10th Mediterranean Conference on Embedded Computing (MECO)}, journal = {2021 10th Mediterranean Conference on Embedded Computing (MECO)}, isbn = {978-1-6654-2989-4}, issn = {2377-5475}, doi = {10.1109/MECO52532.2021.9460158}, language = {en} } @misc{AftowiczKabinDykaetal., author = {Aftowicz, Marcin and Kabin, Ievgen and Dyka, Zoya and Langend{\"o}rfer, Peter}, title = {Clustering versus Statistical Analysis for SCA: when Machine Learning is Better}, series = {2021 10th Mediterranean Conference on Embedded Computing (MECO)}, journal = {2021 10th Mediterranean Conference on Embedded Computing (MECO)}, isbn = {978-1-6654-2989-4}, issn = {2377-5475}, doi = {10.1109/MECO52532.2021.9460161}, language = {en} } @misc{AlsabbaghLangendoerfer, author = {Alsabbagh, Wael and Langend{\"o}rfer, Peter}, title = {A Fully-Blind False Data Injection on PROFINET I/O Systems}, series = {2021 IEEE 30th International Symposium on Industrial Electronics (ISIE)}, journal = {2021 IEEE 30th International Symposium on Industrial Electronics (ISIE)}, isbn = {978-1-7281-9024-2}, issn = {2163-5145}, doi = {10.1109/ISIE45552.2021.9576496}, language = {en} } @misc{AlsabbaghLangendoerfer, author = {Alsabbagh, Wael and Langend{\"o}rfer, Peter}, title = {Patch Now and Attack Later - Exploiting S7 PLCs by Time-Of-Day Block}, series = {2021 4th IEEE International Conference on Industrial Cyber-Physical Systems (ICPS)}, journal = {2021 4th IEEE International Conference on Industrial Cyber-Physical Systems (ICPS)}, isbn = {978-1-6654-3045-6}, doi = {10.1109/ICPS49255.2021.9468226}, language = {en} } @misc{SosaDykaKabinetal., author = {Sosa, Omar Alejandro and Dyka, Zoya and Kabin, Ievgen and Langend{\"o}rfer, Peter}, title = {Cryptographic ICs: Simulation of Electromagnetic Radiation}, series = {Proc. 33rd Crypto-Day Matters 2021, (2021)}, journal = {Proc. 33rd Crypto-Day Matters 2021, (2021)}, doi = {10.18420/cdm-2021-33-13}, pages = {2}, language = {en} } @misc{MykytynKabinDykaetal., author = {Mykytyn, Pavlo and Kabin, Ievgen and Dyka, Zoya and Langend{\"o}rfer, Peter}, title = {Ensuring a Secure Communication Between a GCS and a UAV via the MAVlink Protocol}, series = {Proc. 33rd Crypto-Day Matters 2021, (2021)}, journal = {Proc. 33rd Crypto-Day Matters 2021, (2021)}, doi = {10.18420/cdm-2021-33-21}, pages = {2}, language = {en} } @misc{PetrykDykaLangendoerfer, author = {Petryk, Dmytro and Dyka, Zoya and Langend{\"o}rfer, Peter}, title = {Optical Fault Injection Attacks: Single-Mode versus Multi-Mode Laser}, series = {Proc. 33rd Crypto-Day Matters 2021, (2021)}, journal = {Proc. 33rd Crypto-Day Matters 2021, (2021)}, doi = {10.18420/cdm-2021-33-23}, pages = {2}, language = {en} } @misc{KabinDykaKlannetal., author = {Kabin, Ievgen and Dyka, Zoya and Klann, Dan and Langend{\"o}rfer, Peter}, title = {Breaking of an Open Source Fully Balanced Elliptic Curve Design using Automated Simple SCA}, series = {Proc. 32. Crypto-Day Matters 2021, (2021)}, journal = {Proc. 32. Crypto-Day Matters 2021, (2021)}, doi = {10.18420/cdm-2021-32-23}, pages = {2}, language = {en} } @misc{KlannKabinDykaetal., author = {Klann, Dan and Kabin, Ievgen and Dyka, Zoya and Langend{\"o}rfer, Peter}, title = {Efficient Implementation of Unified ECC Accelerators based on the Karatsuba Multiplication Method}, series = {Proc. 32. Crypto-Day Matters 2021, (2021)}, journal = {Proc. 32. Crypto-Day Matters 2021, (2021)}, doi = {10.18420/cdm-2021-32-24}, pages = {2}, language = {en} } @misc{AftowiczKlannKabinetal., author = {Aftowicz, Marcin and Klann, Dan and Kabin, Ievgen and Dyka, Zoya and Langend{\"o}rfer, Peter}, title = {Extended Horizontal SCA Attack using Clustering Algorithm}, series = {Proc. 32. Crypto-Day Matters 2021, (2021)}, journal = {Proc. 32. Crypto-Day Matters 2021, (2021)}, doi = {10.18420/cdm-2021-32-25}, pages = {2}, language = {en} } @misc{PetrykDykaLangendoerfer, author = {Petryk, Dmytro and Dyka, Zoya and Langend{\"o}rfer, Peter}, title = {Laser Fault Injection Attacks against IHP Chips}, series = {Proc. 32. Crypto-Day Matters 2021, (2021)}, journal = {Proc. 32. Crypto-Day Matters 2021, (2021)}, doi = {10.18420/cdm-2021-32-22}, pages = {2}, language = {en} } @misc{AlsabbaghLangendoerfer, author = {Alsabbagh, Wael and Langend{\"o}rfer, Peter}, title = {A Stealth Program Injection Attack against S7-300 PLCs}, series = {2021 22nd IEEE International Conference on Industrial Technology (ICIT)}, journal = {2021 22nd IEEE International Conference on Industrial Technology (ICIT)}, isbn = {978-1-7281-5731-3}, doi = {10.1109/ICIT46573.2021.9453483}, language = {en} } @misc{FrohbergWeidlingLangendoerfer, author = {Frohberg, Max and Weidling, Stefan and Langend{\"o}rfer, Peter}, title = {Challenges in Developing a Wireless Sensor Network for an Agricultural Monitoring and Decision System}, series = {Selected Papers from the 12th International Networking Conference, INC 2020}, journal = {Selected Papers from the 12th International Networking Conference, INC 2020}, publisher = {Springer}, address = {Cham}, isbn = {978-3-030-64757-5}, issn = {2367-3370}, doi = {10.1007/978-3-030-64758-2_16}, pages = {224 -- 240}, language = {en} } @misc{KabinDykaKlannetal., author = {Kabin, Ievgen and Dyka, Zoya and Klann, Dan and Aftowicz, Marcin and Langend{\"o}rfer, Peter}, title = {FFT based Horizontal SCA Attack against ECC}, series = {2021 11th IFIP International Conference on New Technologies, Mobility and Security (NTMS)}, journal = {2021 11th IFIP International Conference on New Technologies, Mobility and Security (NTMS)}, isbn = {978-1-6654-4400-2}, issn = {2157-4960}, doi = {10.1109/NTMS49979.2021.9432665}, language = {en} } @misc{HaddadiEsfahaniDykaOrtmannetal., author = {Haddadi Esfahani, Ali and Dyka, Zoya and Ortmann, Steffen and Langend{\"o}rfer, Peter}, title = {Impact of Data Preparation in Freezing of Gait Detection using Feature-Less Recurrent Neural Network}, series = {IEEE Access}, journal = {IEEE Access}, number = {9}, issn = {2169-3536}, doi = {10.1109/ACCESS.2021.3117543}, pages = {138120 -- 138131}, language = {en} } @misc{KabinDykaKlannetal., author = {Kabin, Ievgen and Dyka, Zoya and Klann, Dan and Aftowicz, Marcin and Langend{\"o}rfer, Peter}, title = {Resistance of the Montgomery Ladder against Simple SCA: Theory and Practice}, series = {Journal of Electronic Testing}, volume = {37}, journal = {Journal of Electronic Testing}, number = {3}, issn = {1573-0727}, doi = {10.1007/s10836-021-05951-3}, pages = {289 -- 303}, language = {en} } @misc{AssafoLangendoerfer, author = {Assafo, Maryam and Langend{\"o}rfer, Peter}, title = {A TOPSIS-Assisted Feature Selection Scheme and SOM-Based Anomaly Detection for Milling Tools under Different Operating Conditions}, series = {IEEE Access}, journal = {IEEE Access}, number = {9}, issn = {2169-3536}, doi = {10.1109/ACCESS.2021.3091476}, pages = {90011 -- 90028}, language = {en} } @misc{PetrykDykaPerezetal., author = {Petryk, Dmytro and Dyka, Zoya and P{\´e}rez, Eduardo and Kabin, Ievgen and Katzer, Jens and Sch{\"a}ffner, Jan and Langend{\"o}rfer, Peter}, title = {Sensitivity of HfO2-based RRAM Cells to Laser Irradiation}, series = {Microprocessors and Microsystems}, journal = {Microprocessors and Microsystems}, number = {87}, issn = {0141-9331}, doi = {10.1016/j.micpro.2021.104376}, language = {en} } @misc{VogelDykaKlannetal., author = {Vogel, Elisabeth and Dyka, Zoya and Klann, Dan and Langend{\"o}rfer, Peter}, title = {Resilience in the Cyber World: Definitions, Features and Models}, series = {Future Internet}, volume = {13}, journal = {Future Internet}, number = {11}, issn = {1999-5903}, doi = {10.3390/fi13110293}, language = {en} } @misc{KabinDykaKlannetal., author = {Kabin, Ievgen and Dyka, Zoya and Klann, Dan and Sch{\"a}ffner, Jan and Langend{\"o}rfer, Peter}, title = {On the Complexity of Attacking Commercial Authentication Products}, series = {Microprocessors and Microsystems}, journal = {Microprocessors and Microsystems}, number = {80}, issn = {0141-9331}, doi = {10.1016/j.micpro.2020.103480}, language = {en} } @misc{AssafoStaedterMeiseletal., author = {Assafo, Maryam and St{\"a}dter, Jost Philipp and Meisel, Tenia and Langend{\"o}rfer, Peter}, title = {On the Stability and Homogeneous Ensemble of Feature Selection for Predictive Maintenance: A Classification Application for Tool Condition Monitoring in Milling}, series = {Sensors}, volume = {23}, journal = {Sensors}, number = {9}, issn = {1424-8220}, doi = {10.3390/s23094461}, abstract = {Feature selection (FS) represents an essential step for many machine learning-based predictive maintenance (PdM) applications, including various industrial processes, components, and monitoring tasks. The selected features not only serve as inputs to the learning models but also can influence further decisions and analysis, e.g., sensor selection and understandability of the PdM system. Hence, before deploying the PdM system, it is crucial to examine the reproducibility and robustness of the selected features under variations in the input data. This is particularly critical for real-world datasets with a low sample-to-dimension ratio (SDR). However, to the best of our knowledge, stability of the FS methods under data variations has not been considered yet in the field of PdM. This paper addresses this issue with an application to tool condition monitoring in milling, where classifiers based on support vector machines and random forest were employed. We used a five-fold cross-validation to evaluate three popular filter-based FS methods, namely Fisher score, minimum redundancy maximum relevance (mRMR), and ReliefF, in terms of both stability and macro-F1. Further, for each method, we investigated the impact of the homogeneous FS ensemble on both performance indicators. To gain broad insights, we used four (2:2) milling datasets obtained from our experiments and NASA's repository, which differ in the operating conditions, sensors, SDR, number of classes, etc. For each dataset, the study was conducted for two individual sensors and their fusion. Among the conclusions: (1) Different FS methods can yield comparable macro-F1 yet considerably different FS stability values. (2) Fisher score (single and/or ensemble) is superior in most of the cases. (3) mRMR's stability is overall the lowest, the most variable over different settings (e.g., sensor(s), subset cardinality), and the one that benefits the most from the ensemble.}, language = {en} } @misc{AlsabbaghLangendoerfer, author = {Alsabbagh, Wael and Langend{\"o}rfer, Peter}, title = {A New Injection Threat on S7-1500 PLCs - Disrupting the Physical Process Offline}, series = {IEEE Open Journal of the Industrial Electronics Society}, journal = {IEEE Open Journal of the Industrial Electronics Society}, number = {3}, issn = {2644-1284}, doi = {10.1109/OJIES.2022.3151528}, pages = {146 -- 162}, language = {en} } @misc{KabinDykaLangendoerfer, author = {Kabin, Ievgen and Dyka, Zoya and Langend{\"o}rfer, Peter}, title = {Atomicity and Regularity Principles do not Ensure Full Resistance of ECC Designs against Single-Trace Attacks}, series = {Sensors}, volume = {22}, journal = {Sensors}, number = {8}, issn = {1424-8220}, doi = {10.3390/s22083083}, language = {en} } @misc{LehnigerSaadLangendoerfer, author = {Lehniger, Kai and Saad, Abdelaziz and Langend{\"o}rfer, Peter}, title = {Finding Gadgets in Incremental Code Updates for Return-Oriented Programming Attacks on Resource-Constrained Devices}, series = {Annals of Telecommunications}, volume = {78}, journal = {Annals of Telecommunications}, issn = {0003-4347}, doi = {10.1007/s12243-022-00917-8}, pages = {209 -- 229}, language = {en} } @misc{MartinLangendoerferZarrinetal., author = {Martin, Cristian and Langend{\"o}rfer, Peter and Zarrin, Pouya Soltani and D{\´i}az, Manuel and Rubio, Bartolom{\´e}}, title = {Kafka-ML: Connecting the Data Stream with ML/AI Frameworks}, series = {Future Generation Computer Systems}, volume = {126}, journal = {Future Generation Computer Systems}, issn = {0167-739X}, doi = {10.1016/j.future.2021.07.037}, pages = {15 -- 33}, language = {en} } @misc{AmatovLehnigerLangendoerfer, author = {Amatov, Batyi and Lehniger, Kai and Langend{\"o}rfer, Peter}, title = {Return-Oriented Programming Gadget Catalog for the Xtensa Architecture}, series = {6th International Workshop on Security, Privacy and Trust in the Internet of Things (SPT-IoT 2022)}, journal = {6th International Workshop on Security, Privacy and Trust in the Internet of Things (SPT-IoT 2022)}, isbn = {978-1-6654-1647-4}, doi = {10.1109/PerComWorkshops53856.2022.9767489}, pages = {6}, language = {en} } @misc{LangHaddadiEsfahaniDykaetal., author = {Lang, Patrick and Haddadi Esfahani, Ali and Dyka, Zoya and Langend{\"o}rfer, Peter}, title = {FPGA-based Realtime Detection of Freezing of Gait of Parkinson Patients}, series = {Body Area Networks. Smart IoT and Big Data for Intelligent Health Management : 16th EAI International Conference, BODYNETS 2021, Virtual Event, October 25-26, 2021, Proceedings}, journal = {Body Area Networks. Smart IoT and Big Data for Intelligent Health Management : 16th EAI International Conference, BODYNETS 2021, Virtual Event, October 25-26, 2021, Proceedings}, editor = {Rehman, Masood Ur}, publisher = {Springer International Publishing}, isbn = {978-3-030-95593-9}, issn = {1867-8211}, doi = {10.1007/978-3-030-95593-9_9}, pages = {101 -- 111}, language = {en} } @misc{AlsabbaghLangendoerfer, author = {Alsabbagh, Wael and Langend{\"o}rfer, Peter}, title = {No Need to be Online to Attack - Exploiting S7-1500 PLCs by Time-Of-Day Block}, series = {Proc. 28th International Conference on Information, Communication and Automation Technologies (ICAT 2022), arajevo, Bosnia and Herzegovina, 16-18 June 2022}, journal = {Proc. 28th International Conference on Information, Communication and Automation Technologies (ICAT 2022), arajevo, Bosnia and Herzegovina, 16-18 June 2022}, isbn = {978-1-6654-6692-9}, issn = {2643-1858}, doi = {10.1109/ICAT54566.2022.9811147}, pages = {8}, language = {en} } @misc{DykaKabinBrzozowskietal., author = {Dyka, Zoya and Kabin, Ievgen and Brzozowski, Marcin and Panic, Goran and Calligaro, Cristiano and Krstic, Milos and Langend{\"o}rfer, Peter}, title = {On the SCA Resistance of Crypto IP Cores}, series = {23rd IEEE Latin-American Test Symposium (LATS 2022), Montevideo, Uruguay, 05-08 September 2022}, journal = {23rd IEEE Latin-American Test Symposium (LATS 2022), Montevideo, Uruguay, 05-08 September 2022}, isbn = {978-1-6654-5707-1}, issn = {2373-0862}, doi = {10.1109/LATS57337.2022.9937007}, pages = {2}, language = {en} } @misc{ShamilyanKabinDykaetal., author = {Shamilyan, Oxana and Kabin, Ievgen and Dyka, Zoya and Langend{\"o}rfer, Peter}, title = {Distributed Artificial Intelligence as a Means to Achieve Self-X-Functions for Increasing Resilience: the First Steps}, series = {11th Mediterranean Conference on Embedded Computing (MECO), Budva, Montenegro, 07-10 June 2022}, journal = {11th Mediterranean Conference on Embedded Computing (MECO), Budva, Montenegro, 07-10 June 2022}, isbn = {978-1-6654-6828-2}, issn = {2637-9511}, doi = {10.1109/MECO55406.2022.9797193}, pages = {6}, language = {en} } @misc{AftowiczLehnigerLangendoerfer, author = {Aftowicz, Marcin and Lehniger, Kai and Langend{\"o}rfer, Peter}, title = {Scalable FPGA Hardware Accelerator for SVM Inference}, series = {Proc. 10th International Conference on Cyber-Physical Systems and Internet-of-Things (CPS\&IoT 2022)}, journal = {Proc. 10th International Conference on Cyber-Physical Systems and Internet-of-Things (CPS\&IoT 2022)}, isbn = {978-1-6654-6828-2}, issn = {2637-9511}, doi = {10.1109/MECO55406.2022.9797110}, pages = {4}, language = {en} } @misc{AlsabbaghLangendoerfer, author = {Alsabbagh, Wael and Langend{\"o}rfer, Peter}, title = {A Remote Attack Tool on Siemens S7-300 Controllers: Practical Report}, series = {Kommunikation und Bildverarbeitung in der Automation : Ausgew{\"a}hlte Beitr{\"a}ge der Jahreskolloquien KommA und BVAu 2020}, journal = {Kommunikation und Bildverarbeitung in der Automation : Ausgew{\"a}hlte Beitr{\"a}ge der Jahreskolloquien KommA und BVAu 2020}, editor = {Jasperneite, J{\"u}rgen and Lohweg, Volker}, publisher = {Springer Vieweg}, address = {Heidelberg}, isbn = {978-3-662-64282-5}, issn = {2522-8579}, doi = {10.1007/978-3-662-64283-2_1}, pages = {3 -- 21}, language = {en} } @misc{LehnigerLangendoerfer, author = {Lehniger, Kai and Langend{\"o}rfer, Peter}, title = {Through the Window: On the Exploitability of Xtensa's Register Window Overflow}, series = {32nd International Telecommunication Networks and Applications Conference (ITNAC 2022), Wellington, New Zealand, 30 November 2022 - 02 December 2022}, journal = {32nd International Telecommunication Networks and Applications Conference (ITNAC 2022), Wellington, New Zealand, 30 November 2022 - 02 December 2022}, isbn = {978-1-6654-7103-9}, issn = {2474-154X}, doi = {10.1109/ITNAC55475.2022.9998407}, pages = {353 -- 358}, language = {en} } @misc{BrzozowskiLangendoerferCasacaetal., author = {Brzozowski, Marcin and Langend{\"o}rfer, Peter and Casaca, Augusto and Grilo, Antonio and Diaz, Manuel and Mart{\´i}n, Cristian and Camacho, Jose and Landi, Giada}, title = {UNITE: Integrated IoT-Edge-Cloud Continuum}, series = {2022 IEEE 8th World Forum on Internet of Things (WF-IoT), Yokohama, 26 October 2022 - 11 November 2022 Japan}, journal = {2022 IEEE 8th World Forum on Internet of Things (WF-IoT), Yokohama, 26 October 2022 - 11 November 2022 Japan}, isbn = {978-1-6654-9153-2}, doi = {10.1109/WF-IoT54382.2022.10152292}, pages = {6}, language = {en} } @misc{FoersterHinzeLangendorfer, author = {F{\"o}rster, Benjamin and Hinze, Thomas and Langendorfer, Peter}, title = {Topology- and Resource-Based Distribution Scheme for Collaborative Security-Focused Design Space Exploration in Large-Scale Static WSNs}, series = {2024 34th International Telecommunication Networks and Applications Conference (ITNAC)}, journal = {2024 34th International Telecommunication Networks and Applications Conference (ITNAC)}, publisher = {IEEE}, doi = {10.1109/ITNAC62915.2024.10815368}, pages = {1 -- 6}, language = {en} } @misc{EsfahaniMayeFrohbergetal., author = {Esfahani, Ali Haddadi and Maye, Oliver and Frohberg, Max and Speh, Maria and J{\"o}bges, Micheal and Langend{\"o}rfer, Peter}, title = {Real time detection of Freezing of Gait of Parkinson patients based on machine learning running on a body worn device}, series = {Procedia Computer Science}, volume = {239}, journal = {Procedia Computer Science}, publisher = {Elsevier BV}, issn = {1877-0509}, doi = {10.1016/j.procs.2024.06.160}, pages = {177 -- 184}, language = {en} } @misc{AlsabbaghAmogbonjayeKimetal., author = {Alsabbagh, Wael and Amogbonjaye, Samuel and Kim, Chaerin and Langend{\"o}rfer, Peter}, title = {Pirates of the MQTT : raiding IIoT systems with a rogue client}, series = {2024 8th Cyber Security in Networking Conference (CSNet)}, journal = {2024 8th Cyber Security in Networking Conference (CSNet)}, publisher = {IEEE}, address = {Piscataway, NJ}, doi = {10.1109/CSNet64211.2024.10851733}, pages = {248 -- 253}, abstract = {The integration of MQTT (Message Queuing Telemetry Transport) in Industrial Internet of Things (IIoT) systems enhances operational efficiency but introduces significant security vulnerabilities, particularly through rogue MQTT clients. These clients exploit MQTT weaknesses to disrupt industrial processes and compromise data integrity. This paper examines the impact of rogue MQTT client attacks, demonstrated through a detailed case study using the Fischertechnik Lernfabrik 4.0. We highlight how attackers can exploit MQTT's inherent vulnerabilities, including anonymous connections and message retention, to inject false data and interfere with operations. To address these risks, we propose several mitigation strategies: implementing fine-grained authorization for topic access control, enhancing replay attack protection with Message Authentication Code (MAC), employing mutual TLS (mTLS) for secure client authentication, and incorporating real-time client activity monitoring and anomaly detection. These measures aim to bolster IIoT system security, mitigate potential disruptions, and maintain operational integrity. Our findings and recommendations contribute to advancing security practices in MQTT-based IIoT environments. All attack codes and a proof-of-concept are ublicly available.}, language = {en} } @misc{LehnigerLangendoerfer, author = {Lehniger, Kai and Langend{\"o}rfer, Peter}, title = {Comment on ''RIO: Return Instruction Obfuscation for Bare-Metal IoT Devices''}, series = {IEEE Access}, volume = {13}, journal = {IEEE Access}, publisher = {IEEE}, address = {Piscataway, NJ}, issn = {2169-3536}, doi = {10.1109/ACCESS.2025.3568598}, pages = {90358 -- 90361}, abstract = {This is a comment on "RIO: Return Instruction Obfuscation for Bare-Metal IoT Devices." RIO prevents finding gadgets for return-oriented programming attacks by encrypting return instructions. This paper shows flaws in the design of RIO that allow for the easy retrieval of the plaintext return instructions without decrypting them. Additionally, changes are proposed to improve upon the original idea.}, language = {en} } @misc{AlsabbaghKimLangendoerfer, author = {Alsabbagh, Wael and Kim, Chaerin and Langend{\"o}rfer, Peter}, title = {A payload of lies : false data injection attacks on MQTT-based IIoT systems}, series = {IECON 2024 - 50th Annual Conference of the IEEE Industrial Electronics Society : proceedings}, journal = {IECON 2024 - 50th Annual Conference of the IEEE Industrial Electronics Society : proceedings}, publisher = {IEEE}, address = {Piscataway, NJ}, isbn = {978-1-6654-6454-3}, doi = {10.1109/IECON55916.2024.10905487}, pages = {1 -- 8}, abstract = {In the ever-evolving landscape of Industrial Internet of Things (IIoT), security emerges as a critical concern. This paper delves into the realm of False Data Injection Attacks (FDIAs) within MQTT-based IIoT systems, specifically targeting the publisher-subscriber model. Our exploration unveils two distinct attack scenarios that exploit the vulnerabilities inherent in the communication fabric. In the first scenario, we demonstrate the potential chaos wrought by sending false data to subscribers, manipulating their perception and inducing actions that align with the attacker's whims. The second scenario ventures into the heart of the publisher, where the attacker injects false data - deceptive status updates from other publishers e.g., Programmable Logic Controllers (PLCs). The repercussions ripple through the entire industrial process, impacting operations based on fraudulent information. This showcases the cascading effects of FDIAs, illustrating the profound threat they pose to the reliability and integrity of IIoT systems. For real-world attack scenarios, Our attacks were conducted on a small MQTT-based IIoT system, using the Fischertechnik Lernfabrik 4.0 9V factory. Finally, we proposes mitigation solutions to safeguard IIoT systems from the far-reaching consequences of false data manipulation. Our attack codes as well as a proof-of-concept are publicly available for further research.}, language = {en} } @misc{ShamilyanKabinDykaetal., author = {Shamilyan, Oxana and Kabin, Ievgen and Dyka, Zoya and Langend{\"o}rfer, Peter}, title = {Resilient movement planning for continuum robots}, series = {MODeM 2024 : Multi-Objective Decision Making Workshop at ECAI 2024, 20 October 2024, Santiago de Compostela, Spain}, journal = {MODeM 2024 : Multi-Objective Decision Making Workshop at ECAI 2024, 20 October 2024, Santiago de Compostela, Spain}, doi = {10.48550/arXiv.2404.06178}, pages = {1 -- 7}, abstract = {The paper presents an experimental study of resilient path planning for con-tinuum robots taking into account the multi-objective optimisation problem. To do this, we used two well-known algorithms, namely Genetic algorithm and A* algorithm, for path planning and the Analytical Hierarchy Process algorithm for paths evaluation. In our experiment Analytical Hierarchy Process algorithm considers four different criteria, i.e. distance, motors damage, mechanical damage and accuracy each considered to contribute to the resilience of a continuum robot. The use of different criteria is necessary to increasing the time to maintenance operations of the robot. The experiment shows that on the one hand both algorithms can be used in combination with Analytical Hierarchy Process algorithm for multi criteria path-planning, while Genetic algorithm shows superior performance in the comparison of the two algorithms.}, language = {en} } @misc{DietrichFoersterLangendoerferetal., author = {Dietrich, Lucas and F{\"o}rster, Benjamin and Langend{\"o}rfer, Peter and Hinze, Thomas}, title = {A visual discrete event-based simulator for protection of plants against herbivores employed as computational optimization game}, publisher = {arXiv}, doi = {10.48550/arXiv.2509.15787}, pages = {1 -- 25}, abstract = {Plants come with sophisticated strategies to survive within a highly competing environment. In addition, they need to resist frequent attacks from a variety of herbivores acting alone, in small groups, or in swarms. Since the amount of energy a plant might invest in defense and reproduction is limited, a complex optimization problem emerges. In a shared habitat, plants fight herbivores by shape and camouflage, by the release of specific toxins, or by attracting predators of herbivores. Furthermore, plants alert their surrounding field by signaling substances in the event of an assault. Transported by air or through a network of roots, signaling substances reach neighbors to trigger their defense. The offsprings of a plant commonly grow within a certain distance to benefit from symbiotic protection. We introduce a grid-based visual simulation software for detailed configuration and subsequent processing of the behavior of the resulting system in time and space. In terms of solution to a computational optimization problem inspired by nature, settings with low energy need and long life able to cope with different patterns of attack can be figured out and analyzed. Applications include novel techniques for efficient construction and secure operation of sensor networks.}, language = {en} } @misc{LehnigerLangendoerfer, author = {Lehniger, Kai and Langend{\"o}rfer, Peter}, title = {Investigating compact shadow stacks for the Xtensa LX architecture}, series = {2025 14th Mediterranean Conference on Embedded Computing (MECO)}, journal = {2025 14th Mediterranean Conference on Embedded Computing (MECO)}, publisher = {IEEE}, address = {Piscataway, NJ}, isbn = {979-8-3315-1341-2}, doi = {10.1109/MECO66322.2025.11049161}, pages = {1 -- 6}, abstract = {This paper presents a compact shadow stack implementation for the Xtensa LX architecture, implemented for an ESP32 microcontroller. The implementation is done by changing the register window exception handlers in the FreeRTOS operating system. In a second implementation the shadow stack was extended to all register values, not just return addresses. This not only increases security but also performance, reducing the overhead from 17.220\% to 13.529\%, in the worst-case-scenario. The paper also suggests future improvements that could decrease the overhead even further.}, language = {en} }