@misc{LehnigerLangendoerfer, author = {Lehniger, Kai and Langend{\"o}rfer, Peter}, title = {StackSpecter: detecting stack buffer overflows for the Xtensa architecture}, series = {2024 34th International Telecommunication Networks and Applications Conference (ITNAC)}, journal = {2024 34th International Telecommunication Networks and Applications Conference (ITNAC)}, publisher = {IEEE}, doi = {10.1109/ITNAC62915.2024.10815333}, pages = {1 -- 7}, language = {en} } @misc{ChitauroBrzozowskiYeneretal., author = {Chitauro, Ronald and Brzozowski, Marcin and Yener, Onur and Langend{\"o}rfer, Peter}, title = {Out of distribution generalization: KPI vs spectrogram based jamming classification in 5G}, series = {2024 International Conference on Software, Telecommunications and Computer Networks (SoftCOM)}, journal = {2024 International Conference on Software, Telecommunications and Computer Networks (SoftCOM)}, publisher = {IEEE}, doi = {10.23919/SoftCOM62040.2024.10721712}, pages = {1 -- 6}, language = {en} } @misc{AlsabbaghKimPatiletal., author = {Alsabbagh, Wael and Kim, Chaerin and Patil, Nitin Sanjay and Langend{\"o}rfer, Peter}, title = {Beyond the lens: false data injection attacks on IIoT-cameras through MQTT manipulation}, series = {2024 7th Conference on Cloud and Internet of Things (CIoT)}, journal = {2024 7th Conference on Cloud and Internet of Things (CIoT)}, publisher = {IEEE}, doi = {10.1109/CIoT63799.2024.10757025}, pages = {1 -- 7}, language = {en} } @misc{KabinSchaeffnerSigourouetal., author = {Kabin, Ievgen and Schaeffner, Jan and Sigourou, Alkistis and Petryk, Dmytro and Dyka, Zoya and Klein, Dominik and Freud, Sven and Langend{\"o}rfer, Peter}, title = {Stealth attacks on PCBs: an experimental plausibility analysis}, series = {2024 IEEE International Conference on Cyber Security and Resilience (CSR)}, journal = {2024 IEEE International Conference on Cyber Security and Resilience (CSR)}, publisher = {IEEE}, doi = {10.1109/CSR61664.2024.10679465}, pages = {905 -- 912}, language = {en} } @misc{AlsabbaghKimPatiletal., author = {Alsabbagh, Wael and Kim, Chaerin and Patil, Nitin Sanjay and Langend{\"o}rfer, Peter}, title = {Hacking the backbone : shell reverse attacks on IIoT systems}, series = {21st International Conference on Embedded Wireless Systems and Networks (EWSN)}, journal = {21st International Conference on Embedded Wireless Systems and Networks (EWSN)}, doi = {10.13140/RG.2.2.23097.79207}, pages = {1 -- 7}, abstract = {As Industrial Internet of Things (IIoT) systems expand , they face growing risks from complex cyber threats, including reverse shell attacks. These attacks exploit IIoT vulnerabilities, allowing unauthorized remote access and endangering industrial operations. This paper explores reverse shell attacks, where adversaries trick operators into unwittingly installing malware on IIoT devices. This malware then establishes hidden connections to the attacker's server, bypassing traditional firewalls. Exploiting command injection vulnerabilities on IIoT servers facilitates the deployment of reverse shell scripts, granting attackers persistent and covert system access. Our research focuses on IIoT device authentication, identifying weak credentials and using brute force attacks for initial access. We also demonstrate deploying Python-based reverse shell payloads via the SFTP protocol, creating lasting connections to the attacker's server. Through experiments with the Fischertechnik Learning Factory 4.0, we show how reverse shell payloads disrupt operations, enabling unauthorized commands and data theft. To counter these threats, we advocate for robust security measures like network segmentation, rigorous patch management, and advanced intrusion detection systems. All our attack codes and a proof-of-concept are publicly accessible.}, language = {de} } @misc{ChitauroBrzozowskiYeneretal., author = {Chitauro, Ronald and Brzozowski, Marcin and Yener, Onur and Langend{\"o}rfer, Peter}, title = {Real-time jamming detection, classification and logging using computer vision in 5G private networks}, series = {2024 19th International Symposium on Wireless Communication Systems (ISWCS)}, journal = {2024 19th International Symposium on Wireless Communication Systems (ISWCS)}, publisher = {IEEE}, doi = {10.1109/ISWCS61526.2024.10639080}, pages = {1 -- 6}, language = {en} } @misc{KabinDykaSigourouetal., author = {Kabin, Ievgen and Dyka, Zoya and Sigourou, Alkistis-Aikaterini and Langend{\"o}rfer, Peter}, title = {Static power consumption as a new side-channel analysis threat to elliptic curve cryptography implementations}, series = {2024 IEEE International Conference on Cyber Security and Resilience (CSR)}, journal = {2024 IEEE International Conference on Cyber Security and Resilience (CSR)}, publisher = {IEEE}, doi = {10.1109/CSR61664.2024.10679507}, pages = {884 -- 889}, language = {en} } @misc{AssafoLangendoerfer, author = {Assafo, Maryam and Langend{\"o}rfer, Peter}, title = {Unsupervised and semisupervised machine learning frameworks for multiclass tool wear recognition}, series = {IEEE Open Journal of the Industrial Electronics Society}, volume = {5 (2024)}, journal = {IEEE Open Journal of the Industrial Electronics Society}, publisher = {Institute of Electrical and Electronics Engineers (IEEE)}, issn = {2644-1284}, doi = {10.1109/OJIES.2024.3455264}, pages = {993 -- 1010}, language = {en} } @misc{VogelLangendoerfer, author = {Vogel, Elisabeth and Langend{\"o}rfer, Peter}, title = {Enhancing Cyber-Resilience in Cyber-Physical Systems of Systems: A Methodical Approach}, series = {Posters : iCCC2024 - iCampµs Cottbus Conference 2024-05-14 - 2024-05-16 Cottbus}, journal = {Posters : iCCC2024 - iCampµs Cottbus Conference 2024-05-14 - 2024-05-16 Cottbus}, publisher = {AMA Service GmbH}, address = {Von-M{\"u}nchhausen-Str. 49, 31515 Wunstorf, Germany}, doi = {10.5162/iCCC2024/P10}, pages = {146 -- 149}, language = {en} } @misc{LehnigerRaghunathanLangendoerfer, author = {Lehniger, Kai and Raghunathan, Shuba Pradha and Langend{\"o}rfer, Peter}, title = {WindowGuardian: return address integrity for ESP32 microcontrollers with Xtensa Processors using AES and register Windows}, series = {2024 13th Mediterranean Conference on Embedded Computing (MECO)}, journal = {2024 13th Mediterranean Conference on Embedded Computing (MECO)}, publisher = {IEEE}, doi = {10.1109/MECO62516.2024.10577840}, pages = {1 -- 8}, language = {en} } @misc{MykytynBrzozowskiDykaetal., author = {Mykytyn, Pavlo and Brzozowski, Marcin and Dyka, Zoya and Langend{\"o}rfer, Peter}, title = {Towards secure and reliable heterogeneous real-time telemetry communication in autonomous UAV swarms}, series = {Poster : iCCC2024 - iCampµs Cottbus Conference 2024-05-14 - 2024-05-16 Cottbus}, journal = {Poster : iCCC2024 - iCampµs Cottbus Conference 2024-05-14 - 2024-05-16 Cottbus}, publisher = {AMA Service GmbH}, address = {Von-M{\"u}nchhausen-Str. 49, 31515 Wunstorf, Germany}, doi = {10.5162/iCCC2024/P15}, pages = {222 -- 225}, language = {en} } @misc{AlsabbaghKimLangendoerfer, author = {Alsabbagh, Wael and Kim, Chaerin and Langend{\"o}rfer, Peter}, title = {Silent sabotage : a stealthy control logic injection in IIoT systems}, series = {5th Silicon Valley Cybersecurity Conference (SVCC 2024)}, journal = {5th Silicon Valley Cybersecurity Conference (SVCC 2024)}, publisher = {IEEE}, address = {New York}, doi = {10.1109/SVCC61185.2024.10637363}, pages = {1 -- 8}, language = {de} } @misc{HaddadiEsfahaniMayeFrohbergetal., author = {Haddadi Esfahani, Ali and Maye, Oliver and Frohberg, Max and Langend{\"o}rfer, Peter}, title = {Minimizing the latency of freezing of gait detection on wearable devices}, series = {Vortr{\"a}ge : iCCC2024 - iCampµs Cottbus Conference 2024-05-14 - 2024-05-16 Cottbus}, journal = {Vortr{\"a}ge : iCCC2024 - iCampµs Cottbus Conference 2024-05-14 - 2024-05-16 Cottbus}, publisher = {AMA Service GmbH}, address = {Von-M{\"u}nchhausen-Str. 49, 31515 Wunstorf, Germany}, doi = {10.5162/iCCC2024/2.2}, pages = {49 -- 52}, language = {en} } @misc{FoersterLangendoerferHinze, author = {F{\"o}rster, Benjamin and Langend{\"o}rfer, Peter and Hinze, Thomas}, title = {Security mean distribution in WSNs for cooperative schemes}, series = {Vortr{\"a}ge : iCCC2024 - iCampµs Cottbus Conference 2024-05-14 - 2024-05-16 Cottbus}, journal = {Vortr{\"a}ge : iCCC2024 - iCampµs Cottbus Conference 2024-05-14 - 2024-05-16 Cottbus}, publisher = {AMA Service GmbH}, address = {Von-M{\"u}nchhausen-Str. 49, 31515 Wunstorf, Germany}, doi = {10.5162/iCCC2024/1.2}, pages = {38 -- 41}, language = {en} } @misc{AlsabbaghKimLangendoerfer, author = {Alsabbagh, Wael and Kim, Chaerin and Langend{\"o}rfer, Peter}, title = {Investigating the security of OpenPLC : vulnerabilities, attacks, and mitigation solutions}, series = {IEEE Access}, volume = {12}, journal = {IEEE Access}, publisher = {Institute of Electrical and Electronics Engineers (IEEE)}, issn = {2169-3536}, doi = {10.1109/ACCESS.2024.3356051}, pages = {11561 -- 11583}, language = {en} } @misc{KabinDykaKlannetal., author = {Kabin, Ievgen and Dyka, Zoya and Klann, Dan and Langend{\"o}rfer, Peter}, title = {EC P-256: Successful Simple Power Analysis}, series = {arXiv}, journal = {arXiv}, doi = {10.48550/arXiv.2106.12321}, pages = {1 -- 5}, language = {en} } @misc{KabinDykaKlannetal., author = {Kabin, Ievgen and Dyka, Zoya and Klann, Dan and Langend{\"o}rfer, Peter}, title = {EC Scalar Multiplication: Successful Simple Address-Bit SCA Attack against Atomic Patterns}, series = {IEEE 22nd Latin American Test Symposium (LATS)}, journal = {IEEE 22nd Latin American Test Symposium (LATS)}, isbn = {978-1-6654-2058-7}, issn = {2373-0862}, doi = {10.1109/LATS53581.2021.9651877}, pages = {2}, language = {en} } @misc{SosaDykaKabinetal., author = {Sosa, Omar Alejandro and Dyka, Zoya and Kabin, Ievgen and Langend{\"o}rfer, Peter}, title = {Simulation of Electromagnetic Emanation of Cryptographic ICs: Tools, Methods, Problems}, series = {19th IEEE East-West Design \& Test Symposium (EWDTS 2021), 12 (2021)}, journal = {19th IEEE East-West Design \& Test Symposium (EWDTS 2021), 12 (2021)}, isbn = {978-1-6654-4504-7}, issn = {2472-761X}, doi = {10.1109/EWDTS52692.2021.9581013}, pages = {5}, language = {en} } @misc{SaadLehnigerLangendoerfer, author = {Saad, AbdElaziz AbdElaal and Lehniger, Kai and Langend{\"o}rfer, Peter}, title = {Incremental Code Updates Exploitation as a Basis for Return Oriented Programming Attacks on Resource-Constrained Devices}, series = {5th Cyber Security in Networking Conference (CSNet 2021), (2021)}, journal = {5th Cyber Security in Networking Conference (CSNet 2021), (2021)}, isbn = {978-1-6654-0723-6}, issn = {2768-0029}, doi = {10.1109/CSNet52717.2021.9614275}, pages = {8}, language = {en} } @misc{MykytynBrzozowskiDykaetal., author = {Mykytyn, Pavlo and Brzozowski, Marcin and Dyka, Zoya and Langend{\"o}rfer, Peter}, title = {Jamming Detection for IR-UWB Ranging Technology in Autonomous UAV Swarms}, series = {2021 10th Mediterranean Conference on Embedded Computing (MECO)}, journal = {2021 10th Mediterranean Conference on Embedded Computing (MECO)}, isbn = {978-1-6654-2989-4}, issn = {2637-9511}, doi = {10.1109/MECO52532.2021.9460250}, language = {en} }