@techreport{LangendoerferPeterStecklina, author = {Langend{\"o}rfer, Peter and Peter, St. and Stecklina, Oliver}, title = {Decision about Feasibility of IDS Implementation on State of the Art Sensor Nodes}, language = {en} } @inproceedings{PiotrowskiLangendoerferPeter, author = {Piotrowski, Krzysztof and Langend{\"o}rfer, Peter and Peter, St.}, title = {tinyDSM: A Highly Reliable Cooperative Data Storage for Wireless Sensor Networks}, language = {en} } @inproceedings{PeterStecklinaLangendoerfer, author = {Peter, St. and Stecklina, Oliver and Langend{\"o}rfer, Peter}, title = {An Engineering Approach for Secure and Safe Wireless Sensor and Actuator Networks for Industrial Automation Systems}, language = {en} } @inproceedings{PeterVaterLangendoerfer, author = {Peter, Steffen and Vater, Frank and Langend{\"o}rfer, Peter}, title = {Sicherheits-Engineering am Beispiel von drahtlos angebundenen Sensor/Aktor-Systemen in der Automatisierungstechnik}, language = {de} } @inproceedings{PeterPiotrowskiLangendoerfer, author = {Peter, St. and Piotrowski, Krzysztof and Langend{\"o}rfer, Peter}, title = {In-Network-Aggregation as Case Study for a Support Tool Reducing the Complexity of Designing Secure Wireless Sensor Networks}, language = {en} } @inproceedings{VaterPeterLangendoerfer, author = {Vater, Frank and Peter, Steffen and Langend{\"o}rfer, Peter}, title = {An On-Chip Security Monitoring Solution for System Clock for Low Cost Devices}, language = {en} } @misc{PeterMethfesselVateretal., author = {Peter, Steffen and Methfessel, Michael and Vater, Frank and Langend{\"o}rfer, Peter}, title = {Reduktion von Seiten-Kanal-Informationen durch interagierende Krypto-Blocks}, language = {en} } @inproceedings{PeterLangendoerferPiotrowski, author = {Peter, S. and Langend{\"o}rfer, Peter and Piotrowski, Krzysztof}, title = {On Concealed Data Aggregation for Wireless Sensor Networks}, language = {en} } @inproceedings{PeterLangendoerfer, author = {Peter, S. and Langend{\"o}rfer, Peter}, title = {An Efficient Polynomial Multiplier GF(2m) and its Application to ECC Designs}, language = {en} } @inproceedings{PeterLangendoerferPiotrowski, author = {Peter, S. and Langend{\"o}rfer, Peter and Piotrowski, Krzysztof}, title = {Flexible Hardware Reduction for Elliptic Curve Cryptography in GF (2m)}, language = {en} } @inproceedings{LangendoerferPeterPiotrowskietal., author = {Langend{\"o}rfer, Peter and Peter, St. and Piotrowski, Krzysztof and Nunes, R. and Casaca, A. J. D.}, title = {A Middleware Approach to Configure Security in WSN}, language = {en} } @misc{PeterMethfesselLangendoerferetal., author = {Peter, Steffen and Methfessel, Michael and Langend{\"o}rfer, Peter and Vater, Frank}, title = {Reduktion von Seiten-Kanal-Informationen durch interagierende Krypto-Blocks}, language = {de} } @misc{LehnigerSchoelzelJeloneketal., author = {Lehniger, Kai and Sch{\"o}lzel, Mario and Jelonek, Jonas and Tabatt, Peter and Aftowicz, Marcin and Langend{\"o}rfer, Peter}, title = {Combination of ROP Defense Mechanisms for Better Safety and Security in Embedded Systems}, series = {25th Euromicro Conference on Digital Systems Design (DSD 2022), Maspalomas, Spain, 31 August 2022 - 02 September 2022}, journal = {25th Euromicro Conference on Digital Systems Design (DSD 2022), Maspalomas, Spain, 31 August 2022 - 02 September 2022}, isbn = {978-1-6654-7404-7}, issn = {2771-2508}, doi = {10.1109/DSD57027.2022.00070}, pages = {8}, language = {en} } @misc{TabattJelonekSchoelzeletal., author = {Tabatt, Peter and Jelonek, Jonas and Sch{\"o}lzel, Mario and Lehniger, Kai and Langend{\"o}rfer, Peter}, title = {Code Mutation as a Mean Against ROP Attacks for Embedded Systems}, series = {11th Mediterranean Conference on Embedded Computing (MECO 2022), Budva, Montenegro, 07-10 June 2022}, journal = {11th Mediterranean Conference on Embedded Computing (MECO 2022), Budva, Montenegro, 07-10 June 2022}, isbn = {978-1-6654-6828-2}, issn = {2637-9511}, doi = {10.1109/MECO55406.2022.9797185}, pages = {4}, language = {en} } @inproceedings{PiotrowskiLangendoerferMaaseretal., author = {Piotrowski, Krzysztof and Langend{\"o}rfer, Peter and Maaser, Michael and Spichal, Gregor and Schwander, Peter}, title = {Charged Location Aware Services}, series = {Wireless Information Systems, Proceedings of the 4th International Workshop on Wireless Information Systems, WIS 2005}, booktitle = {Wireless Information Systems, Proceedings of the 4th International Workshop on Wireless Information Systems, WIS 2005}, publisher = {INSTICC Press}, isbn = {972-8865-21-X}, pages = {33 -- 41}, language = {en} } @misc{LehnigerSchoelzelTabattetal., author = {Lehniger, Kai and Sch{\"o}lzel, Mario and Tabatt, Peter and Aftowicz, Marcin and Langend{\"o}rfer, Peter}, title = {Simplified Control Flow Integrity Method for Permutated Programs}, series = {Proc. 32. Crypto-Day Matters 2021, (2021)}, journal = {Proc. 32. Crypto-Day Matters 2021, (2021)}, doi = {10.18420/cdm-2021-32-21}, pages = {2}, language = {en} } @inproceedings{PiotrowskiLangendoerferPeter, author = {Piotrowski, Krzysztof and Langend{\"o}rfer, Peter and Peter, St.}, title = {How Public Key Cryptography Influences Wireless Sensor Node Lifetime}, language = {en} } @misc{VaterJagdholdPeteretal., author = {Vater, Frank and Jagdhold, Ulrich and Peter, Steffen and Langend{\"o}rfer, Peter}, title = {Takt{\"u}berwachungsschaltung}, language = {de} } @misc{VaterPeterJagdholdetal., author = {Vater, Frank and Peter, Steffen and Jagdhold, Ulrich and Langend{\"o}rfer, Peter}, title = {Erweiterter Clock Watchdog}, language = {de} } @misc{VaterPeterJagdholdetal., author = {Vater, Frank and Peter, Steffen and Jagdhold, Ulrich and Langend{\"o}rfer, Peter}, title = {Verschl{\"u}sselungseinheit}, language = {de} } @misc{PeterLangendoerfer, author = {Peter, S. and Langend{\"o}rfer, Peter}, title = {Verfahren zur Reduktion eines Polynoms in einem bin{\"a}ren finiten Feld}, language = {de} } @misc{LangendoerferPeter, author = {Langend{\"o}rfer, Peter and Peter, St.}, title = {Verfahren und Vorrichtung zur Reduktion eines Polynoms in einem bin{\"a}ren finiten Feld, insbesondere im Rahmen einer kryptographischen Anwendung}, language = {en} } @techreport{LangendoerferOsipovPiotrowskietal., author = {Langend{\"o}rfer, Peter and Osipov, E. and Piotrowski, Krzysztof and Peter, St. and Jardak, C. and Nunes, R. and Grilo, Antonio and Westhoff, D. and Hessler, A.}, title = {Scenario Driven Security Analysis and Architecture Driven Requirement Specification}, language = {en} } @misc{LangendoerferPiotrowskiPeteretal., author = {Langend{\"o}rfer, Peter and Piotrowski, Krzysztof and Peter, Steffen and Lehmann, Martin}, title = {Crosslayer Firewall Interaction as a Means to Provide Effective and Efficient Protection at Mobile Devices}, language = {en} } @article{VaterPeterLangendoerfer, author = {Vater, Frank and Peter, Steffen and Langend{\"o}rfer, Peter}, title = {Combinatorial Logic Circuitry as Means to Protect Low Cost Devices Against Side Channel Attacks}, language = {en} } @article{PeterLangendoerferPiotrowski, author = {Peter, S. and Langend{\"o}rfer, Peter and Piotrowski, Krzysztof}, title = {Public Key Cryptography Empowered Smart Dust is Affordable}, language = {en} } @article{LangendoerferMaaserPiotrowskietal., author = {Langend{\"o}rfer, Peter and Maaser, Michael and Piotrowski, Krzysztof and Peter, St.}, title = {Privacy Preserving Techniques: A Survey and Classification}, language = {en} } @techreport{CasacaWesthoffLangendoerferetal., author = {Casaca, A. J. D. and Westhoff, D. and Langend{\"o}rfer, Peter and Piotrowski, Krzysztof and Peter, St.}, title = {Scenario Definition and Initial Threat Analysis}, language = {en} } @techreport{DietterleEbertLangendoerferetal., author = {Dietterle, Daniel and Ebert, Jean-Pierre and Langend{\"o}rfer, Peter and Panic, Goran and Peter, St. and Piotrowski, Krzysztof and Kersten, J. and Dombrowski, Kai F.}, title = {Feasibility Study Wireless Technologies for NSR applications}, language = {en} } @techreport{WesthoffCastellucciaPeteretal., author = {Westhoff, D. and Castelluccia, C. and Peter, St. and Langend{\"o}rfer, Peter}, title = {Specification of the Advanced Concealed Data Aggregation}, language = {en} } @misc{LangendoerferDykaPeter, author = {Langend{\"o}rfer, Peter and Dyka, Zoya and Peter, St.}, title = {Verfahren und Vorrichtung zum Berechnen einer Polynom-Multiplikation, insbesondere f{\"u}r die elliptische Kurven-Kryptographie}, language = {en} } @inproceedings{TwarokLangendoerferKoenig, author = {Twarok, Sven and Langend{\"o}rfer, Peter and K{\"o}nig, Hartmut}, title = {Automated Derivation of ILP Implementations from SDL Specifications}, series = {Formal techniques for networked and distributed systems, FORTE 2001, IFIP TC6/WG6.1 - 21st International Conference on Formal Techniques for Networked and Distributed Systems, August 28 - 31, 2001, Cheju Island, Korea}, booktitle = {Formal techniques for networked and distributed systems, FORTE 2001, IFIP TC6/WG6.1 - 21st International Conference on Formal Techniques for Networked and Distributed Systems, August 28 - 31, 2001, Cheju Island, Korea}, editor = {Kim, Myungchul}, publisher = {Kluwer}, address = {Boston [u.a.]}, isbn = {0-7923-7470-3}, pages = {3 -- 18}, language = {en} } @inproceedings{LangendoerferKraemer, author = {Langend{\"o}rfer, Peter and Kraemer, Rolf}, title = {Towards: User Defined Privacy in Location-aware Platforms}, language = {en} } @inproceedings{MethfesselLangendoerferFrankenfeldtetal., author = {Methfessel, Michael and Langend{\"o}rfer, Peter and Frankenfeldt, Horst and Babanskaja, Irina and Matthaei, Irina and Kraemer, Rolf}, title = {Optimizing the Cooperation between TCP and Wireless MAC. Proc.}, language = {en} } @misc{ButtyanGessnerHessleretal., author = {Buttyan, L. and Gessner, D. and Hessler, A. and Langend{\"o}rfer, Peter}, title = {Application of Wireless Sensor Networks in Critical Infractructure Protection - Challenges and Design Options}, language = {en} } @misc{DietterleLangendoerfer, author = {Dietterle, Daniel and Langend{\"o}rfer, Peter}, title = {Protokollbeschleunigermodul mit Paketweiterleitungsfunktion und Betriebsverfahren f{\"u}r einen Senderempf{\"a}nger zur schnellen Weiterleitung von Datenpaketen}, language = {de} } @inproceedings{BrzozowskiSalomonLangendoerfer, author = {Brzozowski, Marcin and Salomon, H. and Langend{\"o}rfer, Peter}, title = {ILA: Idle Listening Avoidance in Scheduled Wireless Sensor Networks}, language = {en} } @inproceedings{BrzozowskiSalomonLangendoerfer, author = {Brzozowski, Marcin and Salomon, H. and Langend{\"o}rfer, Peter}, title = {On Efficient Clock Drift Prediction Means and their Applicability to IEEE 802.15.4}, language = {en} } @misc{OrtmannMaaserLangendoerfer, author = {Ortmann, Steffen and Maaser, Michael and Langend{\"o}rfer, Peter}, title = {Self-Adapting Event Configuration in Ubiquitous Wireless Sensor Networks}, language = {en} } @misc{DykaLangendoerfer, author = {Dyka, Zoya and Langend{\"o}rfer, Peter}, title = {Unifizierter Multiplizierer}, language = {de} } @inproceedings{LangendoerferVaterPiotrowski, author = {Langend{\"o}rfer, Peter and Vater, Frank and Piotrowski, Krzysztof}, title = {Customizing Sensor Nodes and Software for Individual Pervasive Health Applications}, language = {en} } @inproceedings{ReinoehlLangendoerfer, author = {Rein{\"o}hl, J. and Langend{\"o}rfer, Peter}, title = {Ein Weg aus dem Dilemma der oberfl{\"a}chlichen Messsysteme}, series = {Ambient assisted living 2008,1. Deutscher Kongress mit Ausstellung, 30.1. - 1.2.2008 in Berlin, Tagungsbandbeitr{\"a}ge}, booktitle = {Ambient assisted living 2008,1. Deutscher Kongress mit Ausstellung, 30.1. - 1.2.2008 in Berlin, Tagungsbandbeitr{\"a}ge}, publisher = {VDE-Verl.}, address = {Berlin [u.a.]}, isbn = {978-3-8007-3076-6}, pages = {223 -- 224}, language = {de} } @inproceedings{LangendoerferGriloPiotrowskietal., author = {Langend{\"o}rfer, Peter and Grilo, Antonio and Piotrowski, Krzysztof and Casaca, A. J. D.}, title = {A Wireless Sensor Network Reliable Architecture for Intrusion Detection}, language = {en} } @inproceedings{BrzozowskiLangendoerfer, author = {Brzozowski, Marcin and Langend{\"o}rfer, Peter}, title = {On Prolonging Sensornode Gataway Lifetime by Adapting its Duty Cycle}, language = {en} } @inproceedings{OrtmannLangendoerfer, author = {Ortmann, Steffen and Langend{\"o}rfer, Peter}, title = {Enhancing Reliability of Sensor Networks by Fine Tuning Their Event Observation Behavior}, language = {en} } @inproceedings{BrzozowskiSalomonLangendoerfer, author = {Brzozowski, Marcin and Salomon, H. and Langend{\"o}rfer, Peter}, title = {Completely Distributed Low Duty Cycle Communication for Long-Living Sensor Networks}, language = {en} } @inproceedings{GriloLangendoerferCasaca, author = {Grilo, Antonio and Langend{\"o}rfer, Peter and Casaca, A. J. D.}, title = {A Wireless Sensor Network Architecture for Homeland Security Application}, language = {en} } @misc{MaaserLangendoerfer, author = {Maaser, Michael and Langend{\"o}rfer, Peter}, title = {Privacy Guaranteeing Execution Container}, language = {en} } @incollection{MaaserOrtmannLangendoerfer, author = {Maaser, Michael and Ortmann, Steffen and Langend{\"o}rfer, Peter}, title = {The Privacy Advocate: Assertion of Privacy by Personalised Contracts}, language = {en} } @inproceedings{MaaserOrtmannLangendoerfer, author = {Maaser, Michael and Ortmann, Steffen and Langend{\"o}rfer, Peter}, title = {The Privacy Advocate (PrivAd): A Framework for Negotiating Individualized Privacy Contracts}, language = {en} } @inproceedings{WinklerFischerGrassetal., author = {Winkler, F. and Fischer, E. and Grass, Eckhard and Langend{\"o}rfer, Peter}, title = {An Indoor Localization System Based on DTDOA for Different Wireless LAN}, language = {en} } @inproceedings{DykaLangendoerfer, author = {Dyka, Zoya and Langend{\"o}rfer, Peter}, title = {Area Efficient Hardware Implementation of Elliptic Curve Cryptography by Iteratively Applying Karatsuba's Method}, language = {en} } @techreport{DeistLangendoerfer, author = {Deist, C. and Langend{\"o}rfer, Peter}, title = {Tragf{\"a}hige Architekturenprinzipien}, language = {de} } @techreport{DeistLangendoerfer, author = {Deist, C. and Langend{\"o}rfer, Peter}, title = {Spezifikation der Anwendung (final)}, language = {de} } @techreport{Langendoerfer, author = {Langend{\"o}rfer, Peter}, title = {Middleware Spezifikation (final)}, language = {de} } @techreport{LehmannLangendoerfer, author = {Lehmann, J. and Langend{\"o}rfer, Peter}, title = {Abschlußbericht Feldtest, Empfehlungen}, language = {de} } @techreport{MaassLangendoerfer, author = {Maass, H. and Langend{\"o}rfer, Peter}, title = {Zwischenbericht 1. Halbjahr 2005}, language = {de} } @inproceedings{LangendoerferMaassFalck, author = {Langend{\"o}rfer, Peter and Maass, H. and Falck, T.}, title = {PLASMADS: Smart Mobiles Meet Intelligent Environments}, language = {en} } @inproceedings{PostLangendoerferKraemer, author = {Post, A. and Langend{\"o}rfer, Peter and Kraemer, Rolf}, title = {Applying Position Prediction as a Means for Performance-Tuning in Location-Aware Platforms}, language = {en} } @inproceedings{PiotrowskiLangendoerferKulikowski, author = {Piotrowski, Krzysztof and Langend{\"o}rfer, Peter and Kulikowski, D.}, title = {Moneta: An Anonymity Providing Lightweight Payment System for Mobile Devices}, language = {en} } @inproceedings{KraemerDombrowskiDietterleetal., author = {Kraemer, Rolf and Dombrowski, Kai F. and Dietterle, Daniel and Langend{\"o}rfer, Peter and Methfessel, Michael}, title = {Remote Operations: A Middleware and Distributed Systems Architecture for Satellite On-Board Wireless Communication}, language = {en} } @techreport{LehmannLangendoerfer, author = {Lehmann, B. and Langend{\"o}rfer, Peter}, title = {Ergebnisbericht Wireless Internet - zellular}, language = {de} } @techreport{LangendoerferPiotrowskiSojka, author = {Langend{\"o}rfer, Peter and Piotrowski, Krzysztof and Sojka, A.}, title = {Implementation of the Secure Middleware Architecture with an Energy Management System}, language = {de} } @techreport{PelaezLangendoerferPiotrowskietal., author = {Pelaez, F. D. and Langend{\"o}rfer, Peter and Piotrowski, Krzysztof and Sojka, A.}, title = {FeuerWhere: Sensornetze als Lebensretter}, language = {de} } @incollection{OrtmannMaaserLangendoerfer, author = {Ortmann, Steffen and Maaser, Michael and Langend{\"o}rfer, Peter}, title = {High Level Definition of Event-based Applications for Pervasive Systems}, language = {en} } @incollection{OrtmannLangendoerfer, author = {Ortmann, Steffen and Langend{\"o}rfer, Peter}, title = {Social Networking and Privacy, a Contradiction?}, language = {en} } @inproceedings{SojkaPiotrowskiLangendoerfer, author = {Sojka, A. and Piotrowski, Krzysztof and Langend{\"o}rfer, Peter}, title = {Symbiosis on a Lightweight ECC Security and Distributed Shared Memory in Wireless Sensor Networks}, language = {en} } @inproceedings{StecklinaLangendoerferMenzel, author = {Stecklina, Oliver and Langend{\"o}rfer, Peter and Menzel, Hannes}, title = {Towards a Secure Address Space Separation for Low Power Sensor Nodes}, language = {en} } @inproceedings{StecklinaLangendoerfer, author = {Stecklina, Oliver and Langend{\"o}rfer, Peter}, title = {Ubiquitous Computing Asks for Ubiquitous Line of Defense}, language = {en} } @misc{DykaLangendoerfer, author = {Dyka, Zoya and Langend{\"o}rfer, Peter}, title = {Unifizierter Multiplizierer}, language = {de} } @misc{JenihhinHamdiouiSonzaReordaetal., author = {Jenihhin, Maksim and Hamdioui, Said and Sonza-Reorda, Matteo and Krstic, Milos and Langend{\"o}rfer, Peter and Sauer, Christian and Klotz, Anton and H{\"u}bner, Michael and Nolte, J{\"o}rg and Vierhaus, Heinrich Theodor and Selimis, Georgions and Alexandrescu, Dan and Taouil, Mottaqiallah and Schrijen, Geert-Jan and Sterpone, Luca and Squillero, Giovanni and Dyka, Zoya and Raik, Jaan}, title = {RESCUE: Interdependent Challenges of Reliability, Security and Quality in Nanoelectronic Systems}, series = {ArXiv.org}, journal = {ArXiv.org}, pages = {7}, language = {en} } @misc{DykaVogelKabinetal., author = {Dyka, Zoya and Vogel, Elisabeth and Kabin, Ievgen and Klann, Dan and Shamilyan, Oxana and Langend{\"o}rfer, Peter}, title = {No Resilience without Security}, series = {International Conference on Cyber-Physical Systems and Internet-of-Things (CPS \& IoT 2020)}, journal = {International Conference on Cyber-Physical Systems and Internet-of-Things (CPS \& IoT 2020)}, isbn = {978-1-7281-6949-1}, doi = {10.1109/MECO49872.2020.9134179}, pages = {5}, language = {en} } @misc{KabinDykaKlannetal., author = {Kabin, Ievgen and Dyka, Zoya and Klann, Dan and Langend{\"o}rfer, Peter}, title = {EC P-256: Successful Simple Power Analysis}, series = {arXiv}, journal = {arXiv}, doi = {10.48550/arXiv.2106.12321}, pages = {1 -- 5}, language = {en} } @misc{AlsabbaghLangendoerfer, author = {Alsabbagh, Wael and Langend{\"o}rfer, Peter}, title = {A New Injection Threat on S7-1500 PLCs - Disrupting the Physical Process Offline}, series = {IEEE Open Journal of the Industrial Electronics Society}, journal = {IEEE Open Journal of the Industrial Electronics Society}, number = {3}, issn = {2644-1284}, doi = {10.1109/OJIES.2022.3151528}, pages = {146 -- 162}, language = {en} } @misc{KabinDykaLangendoerfer, author = {Kabin, Ievgen and Dyka, Zoya and Langend{\"o}rfer, Peter}, title = {Atomicity and Regularity Principles do not Ensure Full Resistance of ECC Designs against Single-Trace Attacks}, series = {Sensors}, volume = {22}, journal = {Sensors}, number = {8}, issn = {1424-8220}, doi = {10.3390/s22083083}, language = {en} } @misc{DykaKabinBrzozowskietal., author = {Dyka, Zoya and Kabin, Ievgen and Brzozowski, Marcin and Panic, Goran and Calligaro, Cristiano and Krstic, Milos and Langend{\"o}rfer, Peter}, title = {On the SCA Resistance of Crypto IP Cores}, series = {23rd IEEE Latin-American Test Symposium (LATS 2022), Montevideo, Uruguay, 05-08 September 2022}, journal = {23rd IEEE Latin-American Test Symposium (LATS 2022), Montevideo, Uruguay, 05-08 September 2022}, isbn = {978-1-6654-5707-1}, issn = {2373-0862}, doi = {10.1109/LATS57337.2022.9937007}, pages = {2}, language = {en} } @misc{ShamilyanKabinDykaetal., author = {Shamilyan, Oxana and Kabin, Ievgen and Dyka, Zoya and Langend{\"o}rfer, Peter}, title = {Distributed Artificial Intelligence as a Means to Achieve Self-X-Functions for Increasing Resilience: the First Steps}, series = {11th Mediterranean Conference on Embedded Computing (MECO), Budva, Montenegro, 07-10 June 2022}, journal = {11th Mediterranean Conference on Embedded Computing (MECO), Budva, Montenegro, 07-10 June 2022}, isbn = {978-1-6654-6828-2}, issn = {2637-9511}, doi = {10.1109/MECO55406.2022.9797193}, pages = {6}, language = {en} } @misc{LehnigerLangendoerfer, author = {Lehniger, Kai and Langend{\"o}rfer, Peter}, title = {Through the Window: On the Exploitability of Xtensa's Register Window Overflow}, series = {32nd International Telecommunication Networks and Applications Conference (ITNAC 2022), Wellington, New Zealand, 30 November 2022 - 02 December 2022}, journal = {32nd International Telecommunication Networks and Applications Conference (ITNAC 2022), Wellington, New Zealand, 30 November 2022 - 02 December 2022}, isbn = {978-1-6654-7103-9}, issn = {2474-154X}, doi = {10.1109/ITNAC55475.2022.9998407}, pages = {353 -- 358}, language = {en} } @misc{ShamilyanKabinDykaetal., author = {Shamilyan, Oxana and Kabin, Ievgen and Dyka, Zoya and Sudakov, Oleksandr and Cherninskyi, Andrii and Brzozowski, Marcin and Langend{\"o}rfer, Peter}, title = {Intelligence and Motion Models of Continuum Robots: an Overview}, series = {IEEE Access}, journal = {IEEE Access}, number = {11}, issn = {2169-3536}, doi = {10.1109/ACCESS.2023.3286300}, pages = {60988 -- 61003}, abstract = {Many technical solutions are bio-inspired. Octopus-inspired robotic arms belong to continuum robots which are used in minimally invasive surgery or for technical system restoration in areas difficult-to-access. Continuum robot missions are bounded with their motions, whereby the motion of the robots is controlled by humans via wireless communication. In case of a lost connection, robot autonomy is required. Distributed control and distributed decision-making mechanisms based on artificial intelligence approaches can be a promising solution to achieve autonomy of technical systems and to increase their resilience. However these methods are not well investigated yet. Octopuses are the living example of natural distributed intelligence but their learning and decision-making mechanisms are also not fully investigated and understood yet. Our major interest is investigating mechanisms of Distributed Artificial Intelligence as a basis for improving resilience of complex systems. We decided to use a physical continuum robot prototype that is able to perform some basic movements for our research. The idea is to research how a technical system can be empowered to combine movements into sequences of motions by itself. For the experimental investigations a suitable physical prototype has to be selected, its motion control has to be implemented and automated. In this paper, we give an overview combining different fields of research, such as Distributed Artificial Intelligence and continuum robots based on 98 publications. We provide a detailed description of the basic motion control models of continuum robots based on the literature reviewed, discuss different aspects of autonomy and give an overview of physical prototypes of continuum robots.}, language = {en} } @misc{LehnigerLangendoerfer, author = {Lehniger, Kai and Langend{\"o}rfer, Peter}, title = {Window Canaries: Re-Thinking Stack Canaries for Architectures With Register Windows}, series = {IEEE Transactions on Dependable and Secure Computing}, volume = {20}, journal = {IEEE Transactions on Dependable and Secure Computing}, number = {6}, issn = {1941-0018}, doi = {10.1109/TDSC.2022.3230748}, pages = {4637 -- 4647}, abstract = {his paper presents Window Canaries, a novel approach to Stack Canaries for architectures with a register window that protects return addresses and stack pointers without the need of adding additional instruction to each potentially vulnerable function. Instead, placement and check of the canary word is moved to window exception handlers that are responsible to handle register window overflows and underflows. The approach offers low performance overhead while guaranteeing that return addresses are protected by stack buffer overflows without relying on a heuristic that decides which functions to instrument. The contributions of this paper are a complete implementation of the approach for the Xtensa LX architecture with register window option as well as a performance evaluation and discussion of advantages and drawbacks.}, language = {en} } @misc{LehnigerLangendoerfer, author = {Lehniger, Kai and Langend{\"o}rfer, Peter}, title = {Through the Window: Exploitation and Countermeasures of the ESP32 Register Window Overflow}, series = {Future Internet}, volume = {15}, journal = {Future Internet}, number = {6}, issn = {1999-5903}, doi = {10.3390/fi15060217}, abstract = {With the increasing popularity of IoT (Internet-of-Things) devices, their security becomes an increasingly important issue. Buffer overflow vulnerabilities have been known for decades, but are still relevant, especially for embedded devices where certain security measures cannot be implemented due to hardware restrictions or simply due to their impact on performance. Therefore, many buffer overflow detection mechanisms check for overflows only before critical data are used. All data that an attacker could use for his own purposes can be considered critical. It is, therefore, essential that all critical data are checked between writing a buffer and its usage. This paper presents a vulnerability of the ESP32 microcontroller, used in millions of IoT devices, that is based on a pointer that is not protected by classic buffer overflow detection mechanisms such as Stack Canaries or Shadow Stacks. This paper discusses the implications of vulnerability and presents mitigation techniques, including a patch, that fixes the vulnerability. The overhead of the patch is evaluated using simulation as well as an ESP32-WROVER-E development board. We showed that, in the simulation with 32 general-purpose registers, the overhead for the CoreMark benchmark ranges between 0.1\% and 0.4\%. On the ESP32, which uses an Xtensa LX6 core with 64 general-purpose registers, the overhead went down to below 0.01\%. A worst-case scenario, modeled by a synthetic benchmark, showed overheads up to 9.68\%.}, language = {en} } @misc{AlsabbaghLangendoerfer, author = {Alsabbagh, Wael and Langend{\"o}rfer, Peter}, title = {Security of Programmable Logic Controllers and Related Systems: Today and Tomorrow}, series = {IEEE Open Journal of the Industrial Electronics Society}, journal = {IEEE Open Journal of the Industrial Electronics Society}, number = {4}, issn = {2644-1284}, doi = {10.1109/OJIES.2023.3335976}, pages = {659 -- 693}, abstract = {Programmable logic controllers (PLCs) are indispensable in critical infrastructures and industrial control systems. The increasing demand for enhanced cost-effectiveness and production efficiency has driven automation manufacturers to integrate PLC-based applications and systems with external networks, such as Internet. Unfortunately, this connectivity has exposed systems to potential malicious attacks from motivated adversaries. Addressing this pressing issue necessitates a comprehensive summary of ongoing research related to PLCs and their related systems. This summary should classify these systems based on disclosed vulnerabilities, potential threats, and proposed security solutions, catering to both scientists and industrial engineers. While several recent surveys have reviewed and discussed PLC security and related topics, they often fell short of covering all essential aspects comprehensively. Furthermore, prior surveys tended to focus on analyzing vulnerabilities at the system level, overlooking the vulnerabilities specific to PLCs themselves. Consequently, their findings failed to effectively secure current operational systems or propose improved solutions for future PLC designs. In this article, we bridge this research gap by providing a detailed review of all aspects concerning the security of PLCs and related systems. This includes vulnerabilities, potential attacks, and security solutions including digital forensics. We aim to offer a precise analysis, addressing the shortcomings of previous studies. Finally, we conclude this article by presenting our recommendations tailored for PLC manufacturers, researchers, and engineers. We hope that these recommendations will contribute to the development of more secure PLCs in the future.}, language = {en} } @phdthesis{Langendoerfer, author = {Langend{\"o}rfer, Peter}, title = {Gestaltung konfigurierbarer Codegeneratoren f{\"u}r die automatische Erzeugung effizienter Protokollimplementierungen}, publisher = {Shaker}, address = {Aachen}, isbn = {3-8265-8539-9}, language = {de} } @techreport{VaterLangendoerferBasmeretal., author = {Vater, Frank and Langend{\"o}rfer, Peter and Basmer, Thomas and Stecklina, Oliver}, title = {Abschlussbericht Trusted Sensor Node}, language = {de} } @misc{MartinLangendoerferZarrinetal., author = {Martin, Cristian and Langend{\"o}rfer, Peter and Zarrin, Pouya Soltani and D{\´i}az, Manuel and Rubio, Bartolom{\´e}}, title = {Kafka-ML: Connecting the Data Stream with ML/AI Frameworks}, series = {Future Generation Computer Systems}, volume = {126}, journal = {Future Generation Computer Systems}, issn = {0167-739X}, doi = {10.1016/j.future.2021.07.037}, pages = {15 -- 33}, language = {en} } @misc{LehnigerSaadLangendoerfer, author = {Lehniger, Kai and Saad, Abdelaziz and Langend{\"o}rfer, Peter}, title = {Finding Gadgets in Incremental Code Updates for Return-Oriented Programming Attacks on Resource-Constrained Devices}, series = {Annals of Telecommunications}, volume = {78}, journal = {Annals of Telecommunications}, issn = {0003-4347}, doi = {10.1007/s12243-022-00917-8}, pages = {209 -- 229}, language = {en} } @misc{PetrykDykaPerezetal., author = {Petryk, Dmytro and Dyka, Zoya and Perez, Eduardo and Kabin, Ievgen and Katzer, Jens and Sch{\"a}ffner, Jan and Langend{\"o}rfer, Peter}, title = {Sensitivity of HfO2-based RRAM Cells to Laser Irradiation}, series = {Microprocessors and Microsystems}, journal = {Microprocessors and Microsystems}, number = {87}, issn = {0141-9331}, doi = {10.1016/j.micpro.2021.104376}, language = {en} } @misc{AssafoLangendoerfer, author = {Assafo, Maryam and Langend{\"o}rfer, Peter}, title = {A TOPSIS-Assisted Feature Selection Scheme and SOM-Based Anomaly Detection for Milling Tools under Different Operating Conditions}, series = {IEEE Access}, journal = {IEEE Access}, number = {9}, issn = {2169-3536}, doi = {10.1109/ACCESS.2021.3091476}, pages = {90011 -- 90028}, language = {en} } @misc{KabinDykaKlannetal., author = {Kabin, Ievgen and Dyka, Zoya and Klann, Dan and Aftowicz, Marcin and Langend{\"o}rfer, Peter}, title = {Resistance of the Montgomery Ladder against Simple SCA: Theory and Practice}, series = {Journal of Electronic Testing}, volume = {37}, journal = {Journal of Electronic Testing}, number = {3}, issn = {1573-0727}, doi = {10.1007/s10836-021-05951-3}, pages = {289 -- 303}, language = {en} } @misc{KabinDykaKlannetal., author = {Kabin, Ievgen and Dyka, Zoya and Klann, Dan and Sch{\"a}ffner, Jan and Langend{\"o}rfer, Peter}, title = {On the Complexity of Attacking Commercial Authentication Products}, series = {Microprocessors and Microsystems}, journal = {Microprocessors and Microsystems}, number = {80}, issn = {0141-9331}, doi = {10.1016/j.micpro.2020.103480}, language = {en} } @misc{HaddadiEsfahaniDykaOrtmannetal., author = {Haddadi Esfahani, Ali and Dyka, Zoya and Ortmann, Steffen and Langend{\"o}rfer, Peter}, title = {Impact of Data Preparation in Freezing of Gait Detection using Feature-Less Recurrent Neural Network}, series = {IEEE Access}, journal = {IEEE Access}, number = {9}, issn = {2169-3536}, doi = {10.1109/ACCESS.2021.3117543}, pages = {138120 -- 138131}, language = {en} } @misc{VogelDykaKlannetal., author = {Vogel, Elisabeth and Dyka, Zoya and Klann, Dan and Langend{\"o}rfer, Peter}, title = {Resilience in the Cyber World: Definitions, Features and Models}, series = {Future Internet}, volume = {13}, journal = {Future Internet}, number = {11}, issn = {1999-5903}, doi = {10.3390/fi13110293}, language = {en} } @misc{LangHaddadiEsfahaniDykaetal., author = {Lang, Patrick and Haddadi Esfahani, Ali and Dyka, Zoya and Langend{\"o}rfer, Peter}, title = {FPGA-based Realtime Detection of Freezing of Gait of Parkinson Patients}, series = {Body Area Networks. Smart IoT and Big Data for Intelligent Health Management : 16th EAI International Conference, BODYNETS 2021, Virtual Event, October 25-26, 2021, Proceedings}, journal = {Body Area Networks. Smart IoT and Big Data for Intelligent Health Management : 16th EAI International Conference, BODYNETS 2021, Virtual Event, October 25-26, 2021, Proceedings}, editor = {Rehman, Masood Ur}, publisher = {Springer International Publishing}, isbn = {978-3-030-95593-9}, issn = {1867-8211}, doi = {10.1007/978-3-030-95593-9_9}, pages = {101 -- 111}, language = {en} } @misc{AmatovLehnigerLangendoerfer, author = {Amatov, Batyi and Lehniger, Kai and Langend{\"o}rfer, Peter}, title = {Return-Oriented Programming Gadget Catalog for the Xtensa Architecture}, series = {6th International Workshop on Security, Privacy and Trust in the Internet of Things (SPT-IoT 2022)}, journal = {6th International Workshop on Security, Privacy and Trust in the Internet of Things (SPT-IoT 2022)}, isbn = {978-1-6654-1647-4}, doi = {10.1109/PerComWorkshops53856.2022.9767489}, pages = {6}, language = {en} } @misc{AftowiczLehnigerLangendoerfer, author = {Aftowicz, Marcin and Lehniger, Kai and Langend{\"o}rfer, Peter}, title = {Scalable FPGA Hardware Accelerator for SVM Inference}, series = {Proc. 10th International Conference on Cyber-Physical Systems and Internet-of-Things (CPS\&IoT 2022)}, journal = {Proc. 10th International Conference on Cyber-Physical Systems and Internet-of-Things (CPS\&IoT 2022)}, isbn = {978-1-6654-6828-2}, issn = {2637-9511}, doi = {10.1109/MECO55406.2022.9797110}, pages = {4}, language = {en} } @misc{PetrykDykaSorgeetal., author = {Petryk, Dmytro and Dyka, Zoya and Sorge, Roland and Schaeffner, Jan and Langend{\"o}rfer, Peter}, title = {Optical Fault Injection Attacks against Radiation-Hard Registers}, series = {Proc. 24th EUROMICRO Conference on Digital System Design (DSD 2021), Special Session: Architectures and Hardware for Security Applications (AHSA), 371}, journal = {Proc. 24th EUROMICRO Conference on Digital System Design (DSD 2021), Special Session: Architectures and Hardware for Security Applications (AHSA), 371}, doi = {10.48550/arXiv.2106.07271}, pages = {7}, language = {en} } @misc{KabinKlannDykaetal., author = {Kabin, Ievgen and Klann, Dan and Dyka, Zoya and Langend{\"o}rfer, Peter}, title = {Fast Dual-Field ECDSA Accelerator with Increased Resistance against Horizontal SCA Attacks}, series = {2021 IEEE International Conference on Cyber Security and Resilience (CSR)}, journal = {2021 IEEE International Conference on Cyber Security and Resilience (CSR)}, isbn = {978-1-6654-0285-9}, doi = {10.1109/CSR51186.2021.9527912}, language = {en} } @misc{ShamilyanKabinDykaetal., author = {Shamilyan, Oxana and Kabin, Ievgen and Dyka, Zoya and Kuba, Michael and Langend{\"o}rfer, Peter}, title = {Octopuses: Biological Facts and Technical Solutions}, series = {2021 10th Mediterranean Conference on Embedded Computing (MECO)}, journal = {2021 10th Mediterranean Conference on Embedded Computing (MECO)}, isbn = {978-1-6654-2989-4}, issn = {2637-9511}, doi = {10.1109/MECO52532.2021.9459727}, language = {en} } @misc{AlsabbaghLangendoerfer, author = {Alsabbagh, Wael and Langend{\"o}rfer, Peter}, title = {A Control Injection Attack against S7 PLCs -Manipulating the Decompiled Code}, series = {IECON 2021 - 47th Annual Conference of the IEEE Industrial Electronics Society}, journal = {IECON 2021 - 47th Annual Conference of the IEEE Industrial Electronics Society}, isbn = {978-1-6654-0256-9}, issn = {2577-1647}, doi = {10.1109/IECON48115.2021.9589721}, language = {en} } @misc{PetrykDykaPerezetal., author = {Petryk, Dmytro and Dyka, Zoya and Perez, Eduardo and Mahadevaiah, Mamathamba Kalishettyhalli and Kabin, Ievgen and Wenger, Christian and Langend{\"o}rfer, Peter}, title = {Evaluation of the Sensitivity of RRAM Cells to Optical Fault Injection Attacks}, series = {EUROMICRO Conference on Digital System Design (DSD 2020), Special Session: Architecture and Hardware for Security Applications (AHSA)}, journal = {EUROMICRO Conference on Digital System Design (DSD 2020), Special Session: Architecture and Hardware for Security Applications (AHSA)}, isbn = {978-1-7281-9535-3}, issn = {978-1-7281-9536-0}, doi = {10.1109/DSD51259.2020.00047}, pages = {8}, language = {en} } @misc{PetrykDykaLangendoerfer, author = {Petryk, Dmytro and Dyka, Zoya and Langend{\"o}rfer, Peter}, title = {Sensitivity of Standard Library Cells to Optical Fault Injection Attacks in IHP 250 nm Technology}, series = {Mediterranean Conference on Embedded Computing (MECO 2020)}, journal = {Mediterranean Conference on Embedded Computing (MECO 2020)}, isbn = {978-1-7281-6949-1}, issn = {2637-9511}, doi = {10.1109/MECO49872.2020.9134146}, pages = {4}, language = {en} } @inproceedings{BrzozowskiSalomonLangendoerfer, author = {Brzozowski, Marcin and Salomon, H. and Langend{\"o}rfer, Peter}, title = {Limiting End-to-End Delays in Long-Lasting Sensor Networks}, language = {en} } @misc{LehnigerAftowiczSchoelzeletal., author = {Lehniger, Kai and Aftowicz, Marcin and Sch{\"o}lzel, Mario and Langend{\"o}rfer, Peter}, title = {Coarse-Grained Control Flow Integrity Check for Processors with Sliding Register Windows}, series = {12th Mediterranean Conference on Embedded Computing (MECO)}, journal = {12th Mediterranean Conference on Embedded Computing (MECO)}, isbn = {979-8-3503-2291-0}, issn = {2637-9511}, doi = {10.1109/MECO58584.2023.10154928}, pages = {7}, language = {en} } @misc{AlsabbaghLangendoerfer, author = {Alsabbagh, Wael and Langend{\"o}rfer, Peter}, title = {No Need to be Online to Attack - Exploiting S7-1500 PLCs by Time-Of-Day Block}, series = {Proc. 28th International Conference on Information, Communication and Automation Technologies (ICAT 2022), arajevo, Bosnia and Herzegovina, 16-18 June 2022}, journal = {Proc. 28th International Conference on Information, Communication and Automation Technologies (ICAT 2022), arajevo, Bosnia and Herzegovina, 16-18 June 2022}, isbn = {978-1-6654-6692-9}, issn = {2643-1858}, doi = {10.1109/ICAT54566.2022.9811147}, pages = {8}, language = {en} } @misc{AlsabbaghLangendoerfer, author = {Alsabbagh, Wael and Langend{\"o}rfer, Peter}, title = {A Remote Attack Tool on Siemens S7-300 Controllers: Practical Report}, series = {Kommunikation und Bildverarbeitung in der Automation : Ausgew{\"a}hlte Beitr{\"a}ge der Jahreskolloquien KommA und BVAu 2020}, journal = {Kommunikation und Bildverarbeitung in der Automation : Ausgew{\"a}hlte Beitr{\"a}ge der Jahreskolloquien KommA und BVAu 2020}, editor = {Jasperneite, J{\"u}rgen and Lohweg, Volker}, publisher = {Springer Vieweg}, address = {Heidelberg}, isbn = {978-3-662-64282-5}, issn = {2522-8579}, doi = {10.1007/978-3-662-64283-2_1}, pages = {3 -- 21}, language = {en} } @misc{BrzozowskiLangendoerferCasacaetal., author = {Brzozowski, Marcin and Langend{\"o}rfer, Peter and Casaca, Augusto and Grilo, Antonio and Diaz, Manuel and Mart{\´i}n, Cristian and Camacho, Jose and Landi, Giada}, title = {UNITE: Integrated IoT-Edge-Cloud Continuum}, series = {2022 IEEE 8th World Forum on Internet of Things (WF-IoT), Yokohama, 26 October 2022 - 11 November 2022 Japan}, journal = {2022 IEEE 8th World Forum on Internet of Things (WF-IoT), Yokohama, 26 October 2022 - 11 November 2022 Japan}, isbn = {978-1-6654-9153-2}, doi = {10.1109/WF-IoT54382.2022.10152292}, pages = {6}, language = {en} } @inproceedings{OrtmannLangendoerfer, author = {Ortmann, Steffen and Langend{\"o}rfer, Peter}, title = {The Impact of Social Networks on User Privacy - What Social Networks Really Learn about their Users}, language = {en} } @inproceedings{OrtmannLangendoerfer, author = {Ortmann, Steffen and Langend{\"o}rfer, Peter}, title = {A Telemedicine System for Improved Rehabilitation of Stroke Patients}, language = {en} } @misc{SaadLehnigerLangendoerfer, author = {Saad, AbdElaziz AbdElaal and Lehniger, Kai and Langend{\"o}rfer, Peter}, title = {Incremental Code Updates Exploitation as a Basis for Return Oriented Programming Attacks on Resource-Constrained Devices}, series = {5th Cyber Security in Networking Conference (CSNet 2021), (2021)}, journal = {5th Cyber Security in Networking Conference (CSNet 2021), (2021)}, isbn = {978-1-6654-0723-6}, issn = {2768-0029}, doi = {10.1109/CSNet52717.2021.9614275}, pages = {8}, language = {en} } @misc{SosaDykaKabinetal., author = {Sosa, Omar Alejandro and Dyka, Zoya and Kabin, Ievgen and Langend{\"o}rfer, Peter}, title = {Cryptographic ICs: Simulation of Electromagnetic Radiation}, series = {Proc. 33rd Crypto-Day Matters 2021, (2021)}, journal = {Proc. 33rd Crypto-Day Matters 2021, (2021)}, doi = {10.18420/cdm-2021-33-13}, pages = {2}, language = {en} } @misc{KabinDykaKlannetal., author = {Kabin, Ievgen and Dyka, Zoya and Klann, Dan and Langend{\"o}rfer, Peter}, title = {Breaking of an Open Source Fully Balanced Elliptic Curve Design using Automated Simple SCA}, series = {Proc. 32. Crypto-Day Matters 2021, (2021)}, journal = {Proc. 32. Crypto-Day Matters 2021, (2021)}, doi = {10.18420/cdm-2021-32-23}, pages = {2}, language = {en} } @misc{PetrykDykaLangendoerfer, author = {Petryk, Dmytro and Dyka, Zoya and Langend{\"o}rfer, Peter}, title = {Optical Fault Injection Attacks: Single-Mode versus Multi-Mode Laser}, series = {Proc. 33rd Crypto-Day Matters 2021, (2021)}, journal = {Proc. 33rd Crypto-Day Matters 2021, (2021)}, doi = {10.18420/cdm-2021-33-23}, pages = {2}, language = {en} } @misc{KlannKabinDykaetal., author = {Klann, Dan and Kabin, Ievgen and Dyka, Zoya and Langend{\"o}rfer, Peter}, title = {Efficient Implementation of Unified ECC Accelerators based on the Karatsuba Multiplication Method}, series = {Proc. 32. Crypto-Day Matters 2021, (2021)}, journal = {Proc. 32. Crypto-Day Matters 2021, (2021)}, doi = {10.18420/cdm-2021-32-24}, pages = {2}, language = {en} } @misc{AftowiczKlannKabinetal., author = {Aftowicz, Marcin and Klann, Dan and Kabin, Ievgen and Dyka, Zoya and Langend{\"o}rfer, Peter}, title = {Extended Horizontal SCA Attack using Clustering Algorithm}, series = {Proc. 32. Crypto-Day Matters 2021, (2021)}, journal = {Proc. 32. Crypto-Day Matters 2021, (2021)}, doi = {10.18420/cdm-2021-32-25}, pages = {2}, language = {en} } @misc{PetrykDykaLangendoerfer, author = {Petryk, Dmytro and Dyka, Zoya and Langend{\"o}rfer, Peter}, title = {Laser Fault Injection Attacks against IHP Chips}, series = {Proc. 32. Crypto-Day Matters 2021, (2021)}, journal = {Proc. 32. Crypto-Day Matters 2021, (2021)}, doi = {10.18420/cdm-2021-32-22}, pages = {2}, language = {en} } @misc{SosaDykaKabinetal., author = {Sosa, Omar Alejandro and Dyka, Zoya and Kabin, Ievgen and Langend{\"o}rfer, Peter}, title = {Simulation of Electromagnetic Emanation of Cryptographic ICs: Tools, Methods, Problems}, series = {19th IEEE East-West Design \& Test Symposium (EWDTS 2021), 12 (2021)}, journal = {19th IEEE East-West Design \& Test Symposium (EWDTS 2021), 12 (2021)}, isbn = {978-1-6654-4504-7}, issn = {2472-761X}, doi = {10.1109/EWDTS52692.2021.9581013}, pages = {5}, language = {en} } @misc{DykaKabinKlannetal., author = {Dyka, Zoya and Kabin, Ievgen and Klann, Dan and Langend{\"o}rfer, Peter}, title = {Multiplier as a Mean for Reducing Vulnerability of Atomic Patterns to Horizontal Address-Bit Attacks}, series = {2021 10th Mediterranean Conference on Embedded Computing (MECO)}, journal = {2021 10th Mediterranean Conference on Embedded Computing (MECO)}, isbn = {978-1-6654-2989-4}, issn = {2377-5475}, doi = {10.1109/MECO52532.2021.9460158}, language = {en} } @misc{AftowiczKabinDykaetal., author = {Aftowicz, Marcin and Kabin, Ievgen and Dyka, Zoya and Langend{\"o}rfer, Peter}, title = {Clustering versus Statistical Analysis for SCA: when Machine Learning is Better}, series = {2021 10th Mediterranean Conference on Embedded Computing (MECO)}, journal = {2021 10th Mediterranean Conference on Embedded Computing (MECO)}, isbn = {978-1-6654-2989-4}, issn = {2377-5475}, doi = {10.1109/MECO52532.2021.9460161}, language = {en} } @misc{AlsabbaghLangendoerfer, author = {Alsabbagh, Wael and Langend{\"o}rfer, Peter}, title = {A Fully-Blind False Data Injection on PROFINET I/O Systems}, series = {2021 IEEE 30th International Symposium on Industrial Electronics (ISIE)}, journal = {2021 IEEE 30th International Symposium on Industrial Electronics (ISIE)}, isbn = {978-1-7281-9024-2}, issn = {2163-5145}, doi = {10.1109/ISIE45552.2021.9576496}, language = {en} } @misc{AlsabbaghLangendoerfer, author = {Alsabbagh, Wael and Langend{\"o}rfer, Peter}, title = {Patch Now and Attack Later - Exploiting S7 PLCs by Time-Of-Day Block}, series = {2021 4th IEEE International Conference on Industrial Cyber-Physical Systems (ICPS)}, journal = {2021 4th IEEE International Conference on Industrial Cyber-Physical Systems (ICPS)}, isbn = {978-1-6654-3045-6}, doi = {10.1109/ICPS49255.2021.9468226}, language = {en} } @misc{AlsabbaghLangendoerfer, author = {Alsabbagh, Wael and Langend{\"o}rfer, Peter}, title = {A Stealth Program Injection Attack against S7-300 PLCs}, series = {2021 22nd IEEE International Conference on Industrial Technology (ICIT)}, journal = {2021 22nd IEEE International Conference on Industrial Technology (ICIT)}, isbn = {978-1-7281-5731-3}, doi = {10.1109/ICIT46573.2021.9453483}, language = {en} } @misc{FrohbergWeidlingLangendoerfer, author = {Frohberg, Max and Weidling, Stefan and Langend{\"o}rfer, Peter}, title = {Challenges in Developing a Wireless Sensor Network for an Agricultural Monitoring and Decision System}, series = {Selected Papers from the 12th International Networking Conference, INC 2020}, journal = {Selected Papers from the 12th International Networking Conference, INC 2020}, publisher = {Springer}, address = {Cham}, isbn = {978-3-030-64757-5}, issn = {2367-3370}, doi = {10.1007/978-3-030-64758-2_16}, pages = {224 -- 240}, language = {en} } @misc{KabinDykaKlannetal., author = {Kabin, Ievgen and Dyka, Zoya and Klann, Dan and Langend{\"o}rfer, Peter}, title = {EC Scalar Multiplication: Successful Simple Address-Bit SCA Attack against Atomic Patterns}, series = {IEEE 22nd Latin American Test Symposium (LATS)}, journal = {IEEE 22nd Latin American Test Symposium (LATS)}, isbn = {978-1-6654-2058-7}, issn = {2373-0862}, doi = {10.1109/LATS53581.2021.9651877}, pages = {2}, language = {en} } @misc{KabinDykaKlannetal., author = {Kabin, Ievgen and Dyka, Zoya and Klann, Dan and Aftowicz, Marcin and Langend{\"o}rfer, Peter}, title = {FFT based Horizontal SCA Attack against ECC}, series = {2021 11th IFIP International Conference on New Technologies, Mobility and Security (NTMS)}, journal = {2021 11th IFIP International Conference on New Technologies, Mobility and Security (NTMS)}, isbn = {978-1-6654-4400-2}, issn = {2157-4960}, doi = {10.1109/NTMS49979.2021.9432665}, language = {en} } @inproceedings{LangendoerferPiotrowski, author = {Langend{\"o}rfer, Peter and Piotrowski, Krzysztof}, title = {More Privacy in Context-aware Platforms: User Controlled Access Right Delegation Using Kerberos}, language = {en} } @inproceedings{LangendoerferPiotrowskiMaaser, author = {Langend{\"o}rfer, Peter and Piotrowski, Krzysztof and Maaser, Michael}, title = {Charged Location Aware Services: A Privacy Analysis}, series = {International Conference on Mobile Business, ICMB 2005, July 11 - 13, 2005, Crowne Plaza Darling Harbour, Sydney, Australia}, booktitle = {International Conference on Mobile Business, ICMB 2005, July 11 - 13, 2005, Crowne Plaza Darling Harbour, Sydney, Australia}, publisher = {IEEE Computer Society}, address = {Los Alamitos, Calif. [u.a.]}, isbn = {0-7695-2367-6}, pages = {116 -- 120}, language = {en} } @inproceedings{Langendoerfer, author = {Langend{\"o}rfer, Peter}, title = {Privacy and Convenient Up Time of Mobile Devices: An Antagonism?}, language = {en} } @inproceedings{LangendoerferAdam, author = {Langend{\"o}rfer, Peter and Adam, Sebastian}, title = {A Graphical Tool for Specification, Rapid Prototyping and Implementation of Location Based Services}, language = {en} } @inproceedings{WinklerMeffertLangendoerferetal., author = {Winkler, F. and Meffert, B. and Langend{\"o}rfer, Peter and Fischer, E.}, title = {Indoor Localization based on Wireless LAN}, language = {en} } @misc{LangendoerferMaaser, author = {Langend{\"o}rfer, Peter and Maaser, Michael}, title = {Gesch{\"u}tztes Ausf{\"u}hren einer Datenverarbeitungsanwendung eines Diensteanbieters f{\"u}r einen Nutzer durch eine vertrauensw{\"u}rdige Ausf{\"u}hrungsumgebung}, language = {de} } @article{MethfesselDombrowskiLangendoerferetal., author = {Methfessel, Michael and Dombrowski, Kai F. and Langend{\"o}rfer, Peter and Frankenfeldt, Horst and Babanskaja, Irina and Matthaei, Irina and Kraemer, Rolf}, title = {Vertical Optimization of Data Transmission for Mobile Wireless Terminals}, language = {en} } @article{LangendoerferKraemerKoenig, author = {Langend{\"o}rfer, Peter and Kraemer, Rolf and K{\"o}nig, Hartmut}, title = {Evaluation of Well-Known Protocol Implementation Techniques for Application in Wireless Networks}, series = {The Journal of Supercomputing}, volume = {20}, journal = {The Journal of Supercomputing}, number = {2}, issn = {0920-8542}, pages = {161 -- 173}, language = {en} } @misc{MaaserNowakLangendoerfer, author = {Maaser, Michael and Nowak, Stefan and Langend{\"o}rfer, Peter}, title = {Automated Mapping of MAC Parameters into Generic QoS Parameters by Inter-MAC Adaptors}, language = {en} } @misc{OrtmannMaaserLangendoerfer, author = {Ortmann, Steffen and Maaser, Michael and Langend{\"o}rfer, Peter}, title = {Adaptive Pruning of Event Decision Trees for Energy Efficient Collaboration in Event Driven WSN}, language = {en} } @misc{LangendoerferMaaser, author = {Langend{\"o}rfer, Peter and Maaser, Michael}, title = {Privacy Guaranteeing Execution Containers: One Time use of Personal Data by Location Based Services}, language = {en} } @misc{OrtmannLangendoerferMaaser, author = {Ortmann, Steffen and Langend{\"o}rfer, Peter and Maaser, Michael}, title = {Enhancing Privacy by Applying Information Flow Modelling in Pervasive Systems}, language = {en} } @misc{OrtmannLangendoerferMaaser, author = {Ortmann, Steffen and Langend{\"o}rfer, Peter and Maaser, Michael}, title = {A Self-Configuring Privacy Management Architecture for Pervasive Systems}, language = {en} } @misc{MaaserOrtmannLangendoerfer, author = {Maaser, Michael and Ortmann, Steffen and Langend{\"o}rfer, Peter}, title = {NEPP: Negotiation Enhancements for Privacy Policies}, language = {en} } @misc{LangendoerferPiotrowskiMaaser, author = {Langend{\"o}rfer, Peter and Piotrowski, Krzysztof and Maaser, Michael}, title = {A Distributed Privacy Enforcement Architecture Based on Kerberos}, language = {en} } @misc{LangendoerferLehmannPiotrowski, author = {Langend{\"o}rfer, Peter and Lehmann, Martin and Piotrowski, Krzysztof}, title = {Efficient Protection of Mobile Devices by Cross Layer Interaction of Firewall Approaches}, language = {en} } @misc{MaaserLangendoerfer, author = {Maaser, Michael and Langend{\"o}rfer, Peter}, title = {Automated Negotiation of Privacy Contracts}, language = {en} } @misc{LangendoerferLehmann, author = {Langend{\"o}rfer, Peter and Lehmann, Martin}, title = {Implementation Independent Profiling of SDL Specifications}, language = {en} } @misc{Langendoerfer, author = {Langend{\"o}rfer, Peter}, title = {Wireless sensor and actuator networks for critical infrastructure protection}, language = {en} } @misc{OrtmannLangendoerferKornemann, author = {Ortmann, Steffen and Langend{\"o}rfer, Peter and Kornemann, Stephan}, title = {WiSec 2011 Demo: Demonstrating Self-Contained on-node Counter Measures for Various Jamming Attacks in WSN}, language = {en} } @article{LangendoerferMayeDykaetal., author = {Langend{\"o}rfer, Peter and Maye, Oliver and Dyka, Zoya and Sorge, R. and Winkler, R. and Kraemer, Rolf}, title = {Plasma - A Middleware for Location-Based Services: Design, Implementations and Lessons Learned}, language = {en} } @article{LangendoerferTsaoussidis, author = {Langend{\"o}rfer, Peter and Tsaoussidis, V.}, title = {Some Open Issues on Internetworking for the Next Generation}, language = {en} } @article{KulikowskiLangendoerferPiotrowski, author = {Kulikowski, D. and Langend{\"o}rfer, Peter and Piotrowski, Krzysztof}, title = {A Location Aware Revocation Approach}, language = {en} } @article{VaterLangendoerfer, author = {Vater, Frank and Langend{\"o}rfer, Peter}, title = {An Area Efficient Realization of AES for Wireless Devices}, language = {en} } @article{PiotrowskiLangendoerferMayeetal., author = {Piotrowski, Krzysztof and Langend{\"o}rfer, Peter and Maye, Oliver and Dyka, Zoya}, title = {Protecting Privacy in E-Cash Schemes by Securing Hidden Identity Approaches against Stochastic Attacks}, language = {en} } @article{OrtmannLangendoerferMaaser, author = {Ortmann, Steffen and Langend{\"o}rfer, Peter and Maaser, Michael}, title = {Adaptive Pervasive Systems to Multiuser Privacy Requirements}, language = {en} } @article{LangendoerferMethfesselFrankenfeldtetal., author = {Langend{\"o}rfer, Peter and Methfessel, Michael and Frankenfeldt, Horst and Babanskaja, Irina and Matthaei, Irina and Kraemer, Rolf}, title = {Shielding TCP from Wireless Link Errors: Retransmission Effort and Fragmentation}, language = {en} } @misc{BrankiCrossDiazetal., author = {Branki, C. and Cross, B. and Diaz, G. and Langend{\"o}rfer, Peter and Laux, F. and Ortiz, G. and Randles, M. and Taleb-Bendiab, A. and Teuteberg, F. and Unland, R. and Wanner, G.}, title = {Techniques and Applications for Mobile Commerce}, publisher = {Amsterdam : IOS Press}, isbn = {978-1-58603-826-7}, language = {en} } @misc{HarjuHeijenkLangendoerferetal., author = {Harju, J. and Heijenk, G. and Langend{\"o}rfer, Peter and Siris, V. A.}, title = {Wired / Wireless Internet Communications}, publisher = {Springer}, address = {Berlin}, isbn = {978-3-540-68805-1}, pages = {XII, 223}, language = {en} } @book{ShenLinSunetal., author = {Shen, S. and Lin, C. and Sun, Yaoming and Pan, J. and Langend{\"o}rfer, Peter and Cao, Z.}, title = {Wireless Network Security}, publisher = {Wiley}, issn = {1530-8669}, language = {en} } @techreport{LangendoerferPiotrowskiPanicetal., author = {Langend{\"o}rfer, Peter and Piotrowski, Krzysztof and Panic, Goran and Sojka, A. and Grilo, Antonio and Barreiros d'Almeida Pereira, P. R.}, title = {Specification and Testing of the Secure Middleware Architecture with an Energy Management System}, language = {en} } @techreport{PiotrowskiLangendoerferCastellucciaetal., author = {Piotrowski, Krzysztof and Langend{\"o}rfer, Peter and Castelluccia, C. and Westhoff, D.}, title = {Specification of an IDS Scheme and Secure Code Attestation Protocol for WSAN}, language = {en} } @misc{DietterleLangendoerfer, author = {Dietterle, Daniel and Langend{\"o}rfer, Peter}, title = {Protokollbeschleunigermodul mit Paketweiterleitungsfunktion und Betriebsverfahren f{\"u}r einen Senderempf{\"a}nger zur schnellen Weiterleitung von Datenpaketen}, language = {en} } @techreport{PiotrowskiLangendoerferKornemann, author = {Piotrowski, Krzysztof and Langend{\"o}rfer, Peter and Kornemann, Stephan}, title = {Implementation of an IDS Scheme and Secure Code Attestation Protocol for WSAN}, language = {en} } @techreport{VaterLangendoerferBasmeretal., author = {Vater, Frank and Langend{\"o}rfer, Peter and Basmer, Thomas and Stecklina, Oliver}, title = {User Manual Trusted Sensor Node}, language = {en} } @techreport{TuinenbreijerMarchesaniLangendoerferetal., author = {Tuinenbreijer, K. and Marchesani, R. and Langend{\"o}rfer, Peter and Dallas, A. and Leligou, N. and Redondo, L. and Torre, E. de la and Lippert, P. and Berekovic, M.}, title = {Set of Representative WSN Application Domains}, language = {en} } @techreport{LangendoerferHiebelMaaseretal., author = {Langend{\"o}rfer, Peter and Hiebel, St. and Maaser, Michael and Nowak, St.}, title = {Djamal-Eddine Meddour: OMEGA common semantic, Deliverable 5.1, 2008}, language = {en} } @misc{LangendoerferMaaser, author = {Langend{\"o}rfer, Peter and Maaser, Michael}, title = {Gesch{\"u}tztes Ausf{\"u}hren einer Datenverarbeitungsanwendung eines Diensteanbieters f{\"u}r einen Nutzer durch eine vertrauensw{\"u}rdige Ausf{\"u}hrungsumgebung}, language = {en} } @techreport{LangendoerferMaaser, author = {Langend{\"o}rfer, Peter and Maaser, Michael}, title = {White Paper WG5 Services and Applications: Middleware Platforms for Heterogeneous Distributed Systems}, language = {en} } @techreport{WesthoffLangendoerferPiotrowskietal., author = {Westhoff, D. and Langend{\"o}rfer, Peter and Piotrowski, Krzysztof and Poschmann, A.}, title = {Specification, Implementation and Simulation of Secure Distributed Data Storage}, language = {en} } @misc{LangendoerferDyka, author = {Langend{\"o}rfer, Peter and Dyka, Zoya}, title = {Area Efficient Hardware Implementation of Elliptic Curve Cryptography by Iteratively Applying Karatsuba's Method}, language = {en} } @misc{FalckMaassWeidenhauptetal., author = {Falck, T. and Maass, H. and Weidenhaupt, K. and Langend{\"o}rfer, Peter}, title = {Verfahren zum schrittweisen Austausch pers{\"o}nlicher Informationen in non-trusted Peer-to-Peer Umgebungen}, language = {en} } @techreport{DykaVaterMayeetal., author = {Dyka, Zoya and Vater, Frank and Maye, Oliver and Langend{\"o}rfer, Peter and Kraemer, Rolf}, title = {Efficient Implementations of Cryptographic Routines - A Review and Performance Analysis of Various Approaches}, language = {en} } @misc{AlsabbaghAmogbonjayeUrregoetal., author = {Alsabbagh, Wael and Amogbonjaye, Samuel and Urrego, Diego and Langend{\"o}rfer, Peter}, title = {A Stealthy False Command Injection Attack on Modbus based SCADA Systems}, series = {20th Consumer Communications \& Networking Conference (CCNC), (2023)}, journal = {20th Consumer Communications \& Networking Conference (CCNC), (2023)}, isbn = {978-1-6654-9734-3}, issn = {2331-9860}, doi = {10.1109/CCNC51644.2023.10059804}, pages = {9}, abstract = {Modbus is a widely-used industrial protocol in Supervisory Control and Data Acquisition (SCADA) systems for different purposes such as controlling remote devices, monitoring physical processes, data acquisition, etc. Unfortunately, such a protocol lacks security means i.e., authentication, integrity, and confidentiality. This has exposed industrial plants using the Modbus protocol and made them attractive to malicious adversaries who could perform various kinds of cyber-attacks causing significant consequences as Stuxnet showed. In this paper, we exploit the insecurity of the Modbus protocol and perform a stealthy false command injection scenario concealing our injection from the SCADA operator. Our attack approach is comprised of two main phases: 1) Pre-attack phase (offline) where an attacker sniffs, collects and stores sufficient valid request-response pairs in a database, 2) Attack phase (online) where the attacker performs false command injection and conceals his injection by replaying a valid response from his database upon each request sent from the HMI user. Such a scenario is quite severe and might cause disastrous damages in SCADA systems and critical infrastructures if it is successfully implemented by malicious adversaries. Finally, we suggest some appropriate mitigation solutions to prevent such a serious threat.}, language = {en} } @misc{FoersterLangendoerferHinze, author = {F{\"o}rster, Benjamin and Langend{\"o}rfer, Peter and Hinze, Thomas}, title = {Determining Distributions of Security Means for Wireless Sensor Networks based on the Model of a Neighbourhood Watch}, series = {arXiv}, journal = {arXiv}, doi = {10.48550/arXiv.2212.09050}, pages = {24}, abstract = {Neighbourhood watch is a concept that allows a community to distribute a complex security task in between all members. Members of the community carry out individual security tasks to contribute to the overall security of it. It reduces the workload of a particular individual while securing all members and allowing them to carry out a multitude of security tasks. Wireless sensor networks (WSNs) are composed of resource-constraint independent battery driven computers as nodes communicating wirelessly. Security in WSNs is essential. Without sufficient security, an attacker is able to eavesdrop the communication, tamper monitoring results or deny critical nodes providing their service in a way to cut off larger network parts. The resource-constraint nature of sensor nodes prevents them from running full-fledged security protocols. Instead, it is necessary to assess the most significant security threats and implement specialised protocols. A neighbourhood-watch inspired distributed security scheme for WSNs has been introduced by Langend\"orfer. Its goal is to increase the variety of attacks a WSN can fend off. A framework of such complexity has to be designed in multiple steps. Here, we introduce an approach to determine distributions of security means on large-scale static homogeneous WSNs. Therefore, we model WSNs as undirected graphs in which two nodes connected iff they are in transmission range. The framework aims to partition the graph into \$n\$ distinct security means resulting in the targeted distribution. The underlying problems turn out to be NP hard and we attempt to solve them using linear programs (LPs). To evaluate the computability of the LPs, we generate large numbers of random {\lambda}-precision unit disk graphs (UDGs) as representation of WSNs. For this purpose, we introduce a novel {\lambda}-precision UDG generator to model WSNs with a minimal distance in between nodes.}, language = {en} } @misc{FoersterLangendoerferHinze, author = {F{\"o}rster, Benjamin and Langend{\"o}rfer, Peter and Hinze, Thomas}, title = {Novel Approach to a Plant Inspired Distributed Security Scheme for Wireless Sensor Networks}, series = {12th Mediterranean Conference on Embedded Computing (MECO), Budva, Montenegro, 2023}, journal = {12th Mediterranean Conference on Embedded Computing (MECO), Budva, Montenegro, 2023}, isbn = {979-8-3503-2291-0}, issn = {2637-9511}, doi = {10.1109/MECO58584.2023.10154949}, pages = {6}, abstract = {Energy efficiency is a key factor for the longevity of wireless sensor networks (WSNs). Most representatives of the plants have evolved to be highly energy-efficient in their survival strategies, despite their limited resources. Plants have to deal with a variety of threats originating from different herbivores and microbial pathogens while handling a number of abiotic stress factors. For plants and WSNs, different defence mechanisms impose different fitness costs and therefore the costs and benefits have to be well-balanced. This way, plants are able to not only conquer a large variety of different attacks but also handle several different simultaneous attacks adequately. To react early and adapt to upcoming threats, plants within a network are capable of signalling each other within a certain distance about ongoing attacks. The biological strategies of plants in terms of signalling and defence, as well as their energy and resource limitations, share significant similarities with WSNs. This study aims to explore these similarities and demonstrates the correspondence between the biological concepts and WSNs. Additionally, we present a novel approach to enhancing security in WSNs through a cooperative distributed security scheme inspired by key factors of plant defence mechanisms, with the goal of reducing the energy constraints and maximising the longevity of the network.}, language = {en} } @misc{AlsabbaghLangendoerfer, author = {Alsabbagh, Wael and Langend{\"o}rfer, Peter}, title = {You Are What You Attack: Breaking the Cryptographically-Protected S7 Protocol}, series = {19th International Conference on Factory Communication Systems (WFCS), (2023)}, journal = {19th International Conference on Factory Communication Systems (WFCS), (2023)}, publisher = {IEEE}, isbn = {978-1-6654-6432-1}, issn = {2835-8414}, doi = {10.1109/WFCS57264.2023.10144251}, pages = {8}, abstract = {S7 protocol defines an appropriate format for exchanging messages between SIMATIC S7 PLCs and their corresponding engineering software i.e., TIA Portal. Recently, Siemens has provided its newer PLC models and their proprietary S7 protocols with a very developed and sophisticated integrity check mechanism to protect them from various exploits e.g., replay attacks. This paper addresses exactly this point, and investigates the security of the most developed integrity check mechanism that the newest S7CommPlus protocol version implements. Our results showed that the latest S7 PLC models as well as their related protocols are still vulnerable. We found that adversaries can manipulate two hashes that play a significant role in generating keys and bytes for the encryption processes implemented in the S7CommPlus protocol. This allows to reproduce S7 packets and conduct several attacks that eventually impact the operation of the target PLC and the entire physical process it controls. To validate our findings, we test all the attack scenarios presented in this work on a cryptographically protected S7 PLC from the 1500 family which uses the S7CommPlusV3 protocol.}, language = {en} } @incollection{LangendoerferKornemannAlsabbaghetal., author = {Langend{\"o}rfer, Peter and Kornemann, Stephan and Alsabbagh, Wael and Hermann, Erik}, title = {Information Security: The Cornerstone for Surviving the Digital Wild}, series = {The Future of Smart Production for SMEs: A Methodological and Practical Approach Towards Digitalization in SMEs}, booktitle = {The Future of Smart Production for SMEs: A Methodological and Practical Approach Towards Digitalization in SMEs}, publisher = {Springer International Publishing}, address = {Cham}, isbn = {978-3-031-15428-7}, doi = {10.1007/978-3-031-15428-7_29}, pages = {335 -- 341}, abstract = {In this chapter we are discussing the very basics in the sense of how to prepare your company with respect to security. The essential issues are a proper information security governance framework that takes into account the managerial and organizational issues as well as proper technical means. For the latter we introduce network separation as this is one of the prime means to protect your production network from network based attacks.}, language = {en} } @misc{SigourouKabinLangendoerferetal., author = {Sigourou, Alkistis and Kabin, Ievgen and Langend{\"o}rfer, Peter and Sklavos, Nicolas and Dyka, Zoya}, title = {Successful Simple Side Channel Analysis: Vulnerability of an Atomic Pattern kP Algorithm Implemented with a Constant Time Crypto Library to Simple Electromagnetic Analysis Attacks}, series = {12th Mediterranean Conference on Embedded Computing (MECO 2023), 167 (2023)}, journal = {12th Mediterranean Conference on Embedded Computing (MECO 2023), 167 (2023)}, isbn = {979-8-3503-2291-0}, issn = {2637-9511}, doi = {10.1109/MECO58584.2023.10154940}, pages = {6}, language = {en} } @misc{KabinDykaLangendoerfer, author = {Kabin, Ievgen and Dyka, Zoya and Langend{\"o}rfer, Peter}, title = {Randomized Addressing Countermeasures are Inefficient against Address-Bit SCA}, series = {IEEE International Conference on Cyber Security and Resilience (CSR 2023), 580 (2023)}, journal = {IEEE International Conference on Cyber Security and Resilience (CSR 2023), 580 (2023)}, isbn = {979-8-3503-1170-9}, doi = {10.1109/CSR57506.2023.10224968}, pages = {6}, language = {en} } @misc{AlsabbaghKimLangendoerfer, author = {Alsabbagh, Wael and Kim, Chaerin and Langend{\"o}rfer, Peter}, title = {Good Night, and Good Luck: A Control Logic Injection Attack on OpenPLC}, series = {Proc. 49th Annual Conference of the IEEE Industrial Electronics Society (IECON 2023), (2023)}, journal = {Proc. 49th Annual Conference of the IEEE Industrial Electronics Society (IECON 2023), (2023)}, doi = {10.13140/RG.2.2.32913.20321}, pages = {8}, language = {en} } @misc{AlsabbaghKimLangendoerfer, author = {Alsabbagh, Wael and Kim, Chaerin and Langend{\"o}rfer, Peter}, title = {No Attacks Are Available: Securing the OpenPLC and Related Systems}, series = {8th GI/ACM Workshop on Industrial Automation and Control Systems (IACS WS 2023), 2085 (2023)}, journal = {8th GI/ACM Workshop on Industrial Automation and Control Systems (IACS WS 2023), 2085 (2023)}, doi = {10.13140/RG.2.2.24570.47043}, pages = {12}, abstract = {The use of Programmable Logic Controllers (PLCs) expands in industrial domains, which makes ensuring the security of Industrial Control Systems (ICSs) become paramount. The OpenPLC project, the first open-source initiative, provides flexible and cost-effective PLC solutions to build up affordable test-beds, as well as conduct experiments and academic researches. This project has wildly grown in the last few years, thus it is essential to address the most emerging security challenges it encounters. This paper introduces a new OpenPLC architecture, called OpenPLC Aqua, provided with a set of security solutions designed specifically to overcome the vulnerabilities that the current OpenPLC versions are prone to. The new OpenPLC architecture includes four security features: 1) user credentials encryption, securing the Webserver, Whitelisting and secure SSL/TLS communication channel. The OpenPLC Aqua software was tested against several attack scenarios, that were feasible against the old OpenPLC versions. Our experimental results showed our enhanced OpenPLC software is secure and resistant against several attack scenarios e.g., authentication, injection, Man-in-the-Middle and replay attacks. The OpenPLC Aqua is publicly available and a proof of concept demo is also published with this paper.}, language = {en} } @misc{KabinLangendoerferDyka, author = {Kabin, Ievgen and Langend{\"o}rfer, Peter and Dyka, Zoya}, title = {Vulnerability of Atomic Patterns to Simple SCA}, series = {19th IEEE East-West Design \& Test Symposium (EWDTS 2023), (2023)}, journal = {19th IEEE East-West Design \& Test Symposium (EWDTS 2023), (2023)}, isbn = {979-8-3503-1484-7}, issn = {2472-761X}, doi = {10.1109/EWDTS59469.2023.10297074}, pages = {4}, abstract = {In this work we discuss the vulnerability of atomic pattern algorithms for elliptic curve point multiplication against simple side-channel analysis attacks using our own implementation as an example. One of the assumptions, on which the atomicity principle is based, is the indistinguishability of operations with different registers, i.e. storing of the data into two different registers cannot be distinguished if their old and new data values are the same. But before the data can be stored in a register/block, this register/block has to be addressed for storing the data. Different registers/blocks have different addresses. The key-dependent addressing of registers/blocks is an inherent feature of the binary kP algorithms and allows to reveal the key k. In our work we demonstrated it. This means that the main assumption, that addressing of different registers/blocks is an indistinguishable operation, may no longer be applied when realizing kP implementations, at least not for hardware implementations.}, language = {en} } @misc{HaddadiEsfahaniMayeFrohbergetal., author = {Haddadi Esfahani, Ali and Maye, Oliver and Frohberg, Max and Speh, Maria and J{\"o}bges, Michael and Langend{\"o}rfer, Peter}, title = {Machine Learning based Real Time Detection of Freezing of Gait of Parkinson Patients Running on a Body Worn Device}, series = {IEEE/ACM international conference on Connected Health: Applications, Systems and Engineering Technologies (CHASE 2023), 181 (2023)}, journal = {IEEE/ACM international conference on Connected Health: Applications, Systems and Engineering Technologies (CHASE 2023), 181 (2023)}, isbn = {979-8-4007-0102-3}, issn = {2832-2975}, doi = {10.1145/3580252.3589423}, pages = {181 -- 182}, abstract = {For those who have Parkinson's disease, one of the most incapacitating symptoms is Freezing of Gait (FOG). Gait impairment and disruptions limit everyday activities and reduce quality of daily life along with the increase in the risk of falling [1]. Thanks to recent advancement in embedded electronics and sensors as well as their adaptation in the wearable device market, low power devices are becoming more and more capable running neural networks. This enables researchers to implement complex models on wearable devices that capture and analyze sensor data to detect FOGin real-time.}, language = {en} } @misc{AftowiczKabinDykaetal., author = {Aftowicz, Marcin and Kabin, Ievgen and Dyka, Zoya and Langend{\"o}rfer, Peter}, title = {Non-Profiled Unsupervised Horizontal Iterative Attack against Hardware Elliptic Curve Scalar Multiplication Using Machine Learning}, series = {Future Internet}, volume = {16}, journal = {Future Internet}, number = {2}, issn = {1999-5903}, doi = {10.3390/fi16020045}, abstract = {While IoT technology makes industries, cities, and homes smarter, it also opens the door to security risks. With the right equipment and physical access to the devices, the attacker can leverage side-channel information, like timing, power consumption, or electromagnetic emanation, to compromise cryptographic operations and extract the secret key. This work presents a side channel analysis of a cryptographic hardware accelerator for the Elliptic Curve Scalar Multiplication operation, implemented in a Field-Programmable Gate Array and as an Application-Specific Integrated Circuit. The presented framework consists of initial key extraction using a state-of-the-art statistical horizontal attack and is followed by regularized Artificial Neural Networks, which take, as input, the partially incorrect key guesses from the horizontal attack and correct them iteratively. The initial correctness of the horizontal attack, measured as the fraction of correctly extracted bits of the secret key, was improved from 75\% to 98\% by applying the iterative learning.}, language = {en} } @misc{NatarovSudakovDykaetal., author = {Natarov, Roman and Sudakov, Oleksandr and Dyka, Zoya and Kabin, Ievgen and Maksymyuk, O. and Iegorova, O. and Krishtal, Oleg A. and Langend{\"o}rfer, Peter}, title = {Resilience Aspects in Distributed Wireless Electroencephalographic Sampling}, series = {2020 9th Mediterranean Conference on Embedded Computing (MECO)}, journal = {2020 9th Mediterranean Conference on Embedded Computing (MECO)}, isbn = {978-1-7281-6949-1}, doi = {10.1109/MECO49872.2020.9134157}, pages = {7}, language = {en} } @misc{AssafoStaedterMeiseletal., author = {Assafo, Maryam and St{\"a}dter, Jost Philipp and Meisel, Tenia and Langend{\"o}rfer, Peter}, title = {On the Stability and Homogeneous Ensemble of Feature Selection for Predictive Maintenance: A Classification Application for Tool Condition Monitoring in Milling}, series = {Sensors}, volume = {23}, journal = {Sensors}, number = {9}, issn = {1424-8220}, doi = {10.3390/s23094461}, abstract = {Feature selection (FS) represents an essential step for many machine learning-based predictive maintenance (PdM) applications, including various industrial processes, components, and monitoring tasks. The selected features not only serve as inputs to the learning models but also can influence further decisions and analysis, e.g., sensor selection and understandability of the PdM system. Hence, before deploying the PdM system, it is crucial to examine the reproducibility and robustness of the selected features under variations in the input data. This is particularly critical for real-world datasets with a low sample-to-dimension ratio (SDR). However, to the best of our knowledge, stability of the FS methods under data variations has not been considered yet in the field of PdM. This paper addresses this issue with an application to tool condition monitoring in milling, where classifiers based on support vector machines and random forest were employed. We used a five-fold cross-validation to evaluate three popular filter-based FS methods, namely Fisher score, minimum redundancy maximum relevance (mRMR), and ReliefF, in terms of both stability and macro-F1. Further, for each method, we investigated the impact of the homogeneous FS ensemble on both performance indicators. To gain broad insights, we used four (2:2) milling datasets obtained from our experiments and NASA's repository, which differ in the operating conditions, sensors, SDR, number of classes, etc. For each dataset, the study was conducted for two individual sensors and their fusion. Among the conclusions: (1) Different FS methods can yield comparable macro-F1 yet considerably different FS stability values. (2) Fisher score (single and/or ensemble) is superior in most of the cases. (3) mRMR's stability is overall the lowest, the most variable over different settings (e.g., sensor(s), subset cardinality), and the one that benefits the most from the ensemble.}, language = {en} } @misc{AlsabbaghLangendoerfer, author = {Alsabbagh, Wael and Langend{\"o}rfer, Peter}, title = {A Flashback on Control Logic Injection Attacks against Programmable Logic Controllers}, series = {Automation}, volume = {3}, journal = {Automation}, number = {4}, issn = {2673-4052}, doi = {10.3390/automation3040030}, pages = {596 -- 621}, abstract = {Programmable logic controllers (PLCs) make up a substantial part of critical infrastructures (CIs) and industrial control systems (ICSs). They are programmed with a control logic that defines how to drive and operate critical processes such as nuclear power plants, petrochemical factories, water treatment systems, and other facilities. Unfortunately, these devices are not fully secure and are prone to malicious threats, especially those exploiting vulnerabilities in the control logic of PLCs. Such threats are known as control logic injection attacks. They mainly aim at sabotaging physical processes controlled by exposed PLCs, causing catastrophic damage to target systems as shown by Stuxnet. Looking back over the last decade, many research endeavors exploring and discussing these threats have been published. In this article, we present a flashback on the recent works related to control logic injection attacks against PLCs. To this end, we provide the security research community with a new systematization based on the attacker techniques under three main attack scenarios. For each study presented in this work, we overview the attack strategies, tools, security goals, infected devices, and underlying vulnerabilities. Based on our analysis, we highlight the current security challenges in protecting PLCs from such severe attacks and suggest security recommendations for future research directions.}, language = {en} } @misc{NatarovDykaBohovyketal., author = {Natarov, Roman and Dyka, Zoya and Bohovyk, R. and Fedoriuk, M. and Isaev, Dmytro S. and Sudakov, Oleksandr and Maksymyuk, O. and Krishtal, Oleg A. and Langend{\"o}rfer, Peter}, title = {Artefacts in EEG Signals Epileptic Seizure Prediction using Edge Devices}, series = {International Conference on Cyber-Physical Systems and Internet-of-Things (CPS \& IoT 2020)}, journal = {International Conference on Cyber-Physical Systems and Internet-of-Things (CPS \& IoT 2020)}, isbn = {978-1-7281-6949-1}, doi = {10.1109/MECO49872.2020.9134076}, pages = {3}, language = {en} } @misc{MykytynKabinDykaetal., author = {Mykytyn, Pavlo and Kabin, Ievgen and Dyka, Zoya and Langend{\"o}rfer, Peter}, title = {Ensuring a Secure Communication Between a GCS and a UAV via the MAVlink Protocol}, series = {Proc. 33rd Crypto-Day Matters 2021, (2021)}, journal = {Proc. 33rd Crypto-Day Matters 2021, (2021)}, doi = {10.18420/cdm-2021-33-21}, pages = {2}, language = {en} } @misc{AssafoLautschSuawaetal., author = {Assafo, Maryam and Lautsch, Martin and Suawa, Priscile Fogou and Jongmanns, Marcel and H{\"u}bner, Michael and Reichenbach, Marc and Brockmann, Carsten and Reinhardt, Denis and Langend{\"o}rfer, Peter}, title = {The ForTune Toolbox: Building Solutions for Condition-Based and Predictive Maintenance Focusing on Retrofitting}, publisher = {VDE Verlag}, address = {Berlin}, isbn = {978-3-8007-6204-0}, pages = {S. 541}, language = {en} } @misc{MykytynBrzozowskiDykaetal., author = {Mykytyn, Pavlo and Brzozowski, Marcin and Dyka, Zoya and Langend{\"o}rfer, Peter}, title = {Jamming Detection for IR-UWB Ranging Technology in Autonomous UAV Swarms}, series = {2021 10th Mediterranean Conference on Embedded Computing (MECO)}, journal = {2021 10th Mediterranean Conference on Embedded Computing (MECO)}, isbn = {978-1-6654-2989-4}, issn = {2637-9511}, doi = {10.1109/MECO52532.2021.9460250}, language = {en} } @misc{MykytynBrzozowskiDykaetal., author = {Mykytyn, Pavlo and Brzozowski, Marcin and Dyka, Zoya and Langend{\"o}rfer, Peter}, title = {GPS-Spoofing Attack Detection Mechanism for UAV Swarms}, series = {12th Mediterranean Conference on Embedded Computing (MECO)}, journal = {12th Mediterranean Conference on Embedded Computing (MECO)}, isbn = {979-8-3503-2290-3}, issn = {2637-9511}, doi = {10.1109/MECO58584.2023.10154998}, pages = {8}, language = {en} }