@misc{LehnigerSchoelzelJeloneketal., author = {Lehniger, Kai and Sch{\"o}lzel, Mario and Jelonek, Jonas and Tabatt, Peter and Aftowicz, Marcin and Langend{\"o}rfer, Peter}, title = {Combination of ROP Defense Mechanisms for Better Safety and Security in Embedded Systems}, series = {25th Euromicro Conference on Digital Systems Design (DSD 2022), Maspalomas, Spain, 31 August 2022 - 02 September 2022}, journal = {25th Euromicro Conference on Digital Systems Design (DSD 2022), Maspalomas, Spain, 31 August 2022 - 02 September 2022}, isbn = {978-1-6654-7404-7}, issn = {2771-2508}, doi = {10.1109/DSD57027.2022.00070}, pages = {8}, language = {en} } @misc{TabattJelonekSchoelzeletal., author = {Tabatt, Peter and Jelonek, Jonas and Sch{\"o}lzel, Mario and Lehniger, Kai and Langend{\"o}rfer, Peter}, title = {Code Mutation as a Mean Against ROP Attacks for Embedded Systems}, series = {11th Mediterranean Conference on Embedded Computing (MECO 2022), Budva, Montenegro, 07-10 June 2022}, journal = {11th Mediterranean Conference on Embedded Computing (MECO 2022), Budva, Montenegro, 07-10 June 2022}, isbn = {978-1-6654-6828-2}, issn = {2637-9511}, doi = {10.1109/MECO55406.2022.9797185}, pages = {4}, language = {en} } @misc{AlsabbaghLangendoerfer, author = {Alsabbagh, Wael and Langend{\"o}rfer, Peter}, title = {A Flashback on Control Logic Injection Attacks against Programmable Logic Controllers}, series = {Automation}, volume = {3}, journal = {Automation}, number = {4}, issn = {2673-4052}, doi = {10.3390/automation3040030}, pages = {596 -- 621}, abstract = {Programmable logic controllers (PLCs) make up a substantial part of critical infrastructures (CIs) and industrial control systems (ICSs). They are programmed with a control logic that defines how to drive and operate critical processes such as nuclear power plants, petrochemical factories, water treatment systems, and other facilities. Unfortunately, these devices are not fully secure and are prone to malicious threats, especially those exploiting vulnerabilities in the control logic of PLCs. Such threats are known as control logic injection attacks. They mainly aim at sabotaging physical processes controlled by exposed PLCs, causing catastrophic damage to target systems as shown by Stuxnet. Looking back over the last decade, many research endeavors exploring and discussing these threats have been published. In this article, we present a flashback on the recent works related to control logic injection attacks against PLCs. To this end, we provide the security research community with a new systematization based on the attacker techniques under three main attack scenarios. For each study presented in this work, we overview the attack strategies, tools, security goals, infected devices, and underlying vulnerabilities. Based on our analysis, we highlight the current security challenges in protecting PLCs from such severe attacks and suggest security recommendations for future research directions.}, language = {en} } @misc{AlsabbaghLangendoerfer, author = {Alsabbagh, Wael and Langend{\"o}rfer, Peter}, title = {A New Injection Threat on S7-1500 PLCs - Disrupting the Physical Process Offline}, series = {IEEE Open Journal of the Industrial Electronics Society}, journal = {IEEE Open Journal of the Industrial Electronics Society}, number = {3}, issn = {2644-1284}, doi = {10.1109/OJIES.2022.3151528}, pages = {146 -- 162}, language = {en} } @misc{KabinDykaLangendoerfer, author = {Kabin, Ievgen and Dyka, Zoya and Langend{\"o}rfer, Peter}, title = {Atomicity and Regularity Principles do not Ensure Full Resistance of ECC Designs against Single-Trace Attacks}, series = {Sensors}, volume = {22}, journal = {Sensors}, number = {8}, issn = {1424-8220}, doi = {10.3390/s22083083}, language = {en} } @misc{LehnigerSaadLangendoerfer, author = {Lehniger, Kai and Saad, Abdelaziz and Langend{\"o}rfer, Peter}, title = {Finding Gadgets in Incremental Code Updates for Return-Oriented Programming Attacks on Resource-Constrained Devices}, series = {Annals of Telecommunications}, volume = {78}, journal = {Annals of Telecommunications}, issn = {0003-4347}, doi = {10.1007/s12243-022-00917-8}, pages = {209 -- 229}, language = {en} } @misc{MartinLangendoerferZarrinetal., author = {Martin, Cristian and Langend{\"o}rfer, Peter and Zarrin, Pouya Soltani and D{\´i}az, Manuel and Rubio, Bartolom{\´e}}, title = {Kafka-ML: Connecting the Data Stream with ML/AI Frameworks}, series = {Future Generation Computer Systems}, volume = {126}, journal = {Future Generation Computer Systems}, issn = {0167-739X}, doi = {10.1016/j.future.2021.07.037}, pages = {15 -- 33}, language = {en} } @misc{AmatovLehnigerLangendoerfer, author = {Amatov, Batyi and Lehniger, Kai and Langend{\"o}rfer, Peter}, title = {Return-Oriented Programming Gadget Catalog for the Xtensa Architecture}, series = {6th International Workshop on Security, Privacy and Trust in the Internet of Things (SPT-IoT 2022)}, journal = {6th International Workshop on Security, Privacy and Trust in the Internet of Things (SPT-IoT 2022)}, isbn = {978-1-6654-1647-4}, doi = {10.1109/PerComWorkshops53856.2022.9767489}, pages = {6}, language = {en} } @misc{LangHaddadiEsfahaniDykaetal., author = {Lang, Patrick and Haddadi Esfahani, Ali and Dyka, Zoya and Langend{\"o}rfer, Peter}, title = {FPGA-based Realtime Detection of Freezing of Gait of Parkinson Patients}, series = {Body Area Networks. Smart IoT and Big Data for Intelligent Health Management : 16th EAI International Conference, BODYNETS 2021, Virtual Event, October 25-26, 2021, Proceedings}, journal = {Body Area Networks. Smart IoT and Big Data for Intelligent Health Management : 16th EAI International Conference, BODYNETS 2021, Virtual Event, October 25-26, 2021, Proceedings}, editor = {Rehman, Masood Ur}, publisher = {Springer International Publishing}, isbn = {978-3-030-95593-9}, issn = {1867-8211}, doi = {10.1007/978-3-030-95593-9_9}, pages = {101 -- 111}, language = {en} } @misc{AlsabbaghLangendoerfer, author = {Alsabbagh, Wael and Langend{\"o}rfer, Peter}, title = {No Need to be Online to Attack - Exploiting S7-1500 PLCs by Time-Of-Day Block}, series = {Proc. 28th International Conference on Information, Communication and Automation Technologies (ICAT 2022), arajevo, Bosnia and Herzegovina, 16-18 June 2022}, journal = {Proc. 28th International Conference on Information, Communication and Automation Technologies (ICAT 2022), arajevo, Bosnia and Herzegovina, 16-18 June 2022}, isbn = {978-1-6654-6692-9}, issn = {2643-1858}, doi = {10.1109/ICAT54566.2022.9811147}, pages = {8}, language = {en} } @misc{DykaKabinBrzozowskietal., author = {Dyka, Zoya and Kabin, Ievgen and Brzozowski, Marcin and Panic, Goran and Calligaro, Cristiano and Krstic, Milos and Langend{\"o}rfer, Peter}, title = {On the SCA Resistance of Crypto IP Cores}, series = {23rd IEEE Latin-American Test Symposium (LATS 2022), Montevideo, Uruguay, 05-08 September 2022}, journal = {23rd IEEE Latin-American Test Symposium (LATS 2022), Montevideo, Uruguay, 05-08 September 2022}, isbn = {978-1-6654-5707-1}, issn = {2373-0862}, doi = {10.1109/LATS57337.2022.9937007}, pages = {2}, language = {en} } @misc{ShamilyanKabinDykaetal., author = {Shamilyan, Oxana and Kabin, Ievgen and Dyka, Zoya and Langend{\"o}rfer, Peter}, title = {Distributed Artificial Intelligence as a Means to Achieve Self-X-Functions for Increasing Resilience: the First Steps}, series = {11th Mediterranean Conference on Embedded Computing (MECO), Budva, Montenegro, 07-10 June 2022}, journal = {11th Mediterranean Conference on Embedded Computing (MECO), Budva, Montenegro, 07-10 June 2022}, isbn = {978-1-6654-6828-2}, issn = {2637-9511}, doi = {10.1109/MECO55406.2022.9797193}, pages = {6}, language = {en} } @misc{AftowiczLehnigerLangendoerfer, author = {Aftowicz, Marcin and Lehniger, Kai and Langend{\"o}rfer, Peter}, title = {Scalable FPGA Hardware Accelerator for SVM Inference}, series = {Proc. 10th International Conference on Cyber-Physical Systems and Internet-of-Things (CPS\&IoT 2022)}, journal = {Proc. 10th International Conference on Cyber-Physical Systems and Internet-of-Things (CPS\&IoT 2022)}, isbn = {978-1-6654-6828-2}, issn = {2637-9511}, doi = {10.1109/MECO55406.2022.9797110}, pages = {4}, language = {en} } @misc{AlsabbaghLangendoerfer, author = {Alsabbagh, Wael and Langend{\"o}rfer, Peter}, title = {A Remote Attack Tool on Siemens S7-300 Controllers: Practical Report}, series = {Kommunikation und Bildverarbeitung in der Automation : Ausgew{\"a}hlte Beitr{\"a}ge der Jahreskolloquien KommA und BVAu 2020}, journal = {Kommunikation und Bildverarbeitung in der Automation : Ausgew{\"a}hlte Beitr{\"a}ge der Jahreskolloquien KommA und BVAu 2020}, editor = {Jasperneite, J{\"u}rgen and Lohweg, Volker}, publisher = {Springer Vieweg}, address = {Heidelberg}, isbn = {978-3-662-64282-5}, issn = {2522-8579}, doi = {10.1007/978-3-662-64283-2_1}, pages = {3 -- 21}, language = {en} } @misc{LehnigerLangendoerfer, author = {Lehniger, Kai and Langend{\"o}rfer, Peter}, title = {Through the Window: On the Exploitability of Xtensa's Register Window Overflow}, series = {32nd International Telecommunication Networks and Applications Conference (ITNAC 2022), Wellington, New Zealand, 30 November 2022 - 02 December 2022}, journal = {32nd International Telecommunication Networks and Applications Conference (ITNAC 2022), Wellington, New Zealand, 30 November 2022 - 02 December 2022}, isbn = {978-1-6654-7103-9}, issn = {2474-154X}, doi = {10.1109/ITNAC55475.2022.9998407}, pages = {353 -- 358}, language = {en} } @misc{BrzozowskiLangendoerferCasacaetal., author = {Brzozowski, Marcin and Langend{\"o}rfer, Peter and Casaca, Augusto and Grilo, Antonio and Diaz, Manuel and Mart{\´i}n, Cristian and Camacho, Jose and Landi, Giada}, title = {UNITE: Integrated IoT-Edge-Cloud Continuum}, series = {2022 IEEE 8th World Forum on Internet of Things (WF-IoT), Yokohama, 26 October 2022 - 11 November 2022 Japan}, journal = {2022 IEEE 8th World Forum on Internet of Things (WF-IoT), Yokohama, 26 October 2022 - 11 November 2022 Japan}, isbn = {978-1-6654-9153-2}, doi = {10.1109/WF-IoT54382.2022.10152292}, pages = {6}, language = {en} }