@inproceedings{KlauckKirsche, author = {Klauck, Ronny and Kirsche, Michael}, title = {Bonjour Contiki: A Case Study of a DNS-Based Discovery Service for the Internet of Things}, series = {Ad-hoc, mobile, and wireless networks, 11th international conference, ADHOC-NOW 2012, Belgrade, Serbia, July 9 - 11, 2012, proceedings}, booktitle = {Ad-hoc, mobile, and wireless networks, 11th international conference, ADHOC-NOW 2012, Belgrade, Serbia, July 9 - 11, 2012, proceedings}, editor = {Li, Xiang-Yang and Papavassiliou, Symeon and Ruehrup, Stefan}, publisher = {Springer}, address = {Berlin [u.a.]}, isbn = {978-3-642-31637-1}, pages = {317 -- 330}, language = {en} } @inproceedings{KlauckKirsche, author = {Klauck, Ronny and Kirsche, Michael}, title = {Chatty Things - Making the Internet of Things Readily Usable for the Masses with XMPP}, series = {Proceedings of the 8th International Conference on Collaborative Computing: Networking, Applications and Worksharing (CollaborateCom 2012), Pittsburgh, Pennsylvania, USA, October, 2012}, booktitle = {Proceedings of the 8th International Conference on Collaborative Computing: Networking, Applications and Worksharing (CollaborateCom 2012), Pittsburgh, Pennsylvania, USA, October, 2012}, publisher = {IEEE}, isbn = {978-1-4673-2740-4}, pages = {60 -- 69}, language = {en} } @book{KoallKlauck, author = {Koall, Sebastian and Klauck, Ronny}, title = {Dualisierung graphischer Benutzeroberfl{\"a}chen: Portierung einer GUI vom Desktop auf Smartphone}, publisher = {Akademieverlag}, address = {Berlin}, isbn = {978-3-639-39126-8}, pages = {100}, language = {de} } @book{Koenig, author = {K{\"o}nig, Hartmut}, title = {Protocol Engineering}, publisher = {Springer}, address = {Berlin [u.a.]}, isbn = {978-3-642-29144-9}, pages = {XV, 525}, language = {en} } @inproceedings{PaulSchusterKoenig, author = {Paul, Andreas and Schuster, Franka and K{\"o}nig, Hartmut}, title = {Towards the Protection of Industrial Control Systems - Conclusions of a Vulnerability Analysis of Profinet IO}, series = {Detection of Intrusions and Malware, and Vulnerability Assessment, 10th International Conference, DIMVA 2013, Berlin, Germany, July 18-19, 2013, proceedings}, booktitle = {Detection of Intrusions and Malware, and Vulnerability Assessment, 10th International Conference, DIMVA 2013, Berlin, Germany, July 18-19, 2013, proceedings}, publisher = {Springer}, address = {Berlin [u.a.]}, isbn = {978-3-642-39234-4}, pages = {160 -- 176}, language = {en} } @inproceedings{GaeblerKoenig, author = {G{\"a}bler, Jan and K{\"o}nig, Hartmut}, title = {Moversight: A Group Communication Protocol for Mobile Collaborative Applications}, series = {Proceedings of the 6th Joint IFIP Wireless and Mobile Networking Conference (WMNC 2013), Dubai, United Arab Emirates, 23 - 25th April 2013}, booktitle = {Proceedings of the 6th Joint IFIP Wireless and Mobile Networking Conference (WMNC 2013), Dubai, United Arab Emirates, 23 - 25th April 2013}, publisher = {IEEE}, address = {Piscataway, NJ}, isbn = {978-1-4673-5615-2}, pages = {72 -- 79}, language = {en} } @misc{GaeblerKoenig, author = {G{\"a}bler, Jan and K{\"o}nig, Hartmut}, title = {Moversight: An Approach to Support Mobility in Collaborative Applications}, publisher = {IEEE}, isbn = {978-1-4799-0747-2}, pages = {110 -- 112}, language = {en} } @misc{KirscheHartwig, author = {Kirsche, Michael and Hartwig, Jonas}, title = {A 6LoWPAN Model for OMNeT++}, isbn = {978-1-4503-2464-9}, pages = {330 -- 333}, language = {en} } @inproceedings{KlauckKirsche, author = {Klauck, Ronny and Kirsche, Michael}, title = {Enhanced DNS Message Compression - Optimizing mDNS/DNS-SD for the Use in 6LoWPANs}, series = {Proceedings,9th IEEE International Workshop on Sensor Networks and Systems for Pervasive Computing 2013 (PerSeNS 2013), co-located with the 11th IEEE Conference on Pervasive Computing and Communication (PerCom 2013), San Diego, Calif., USA, 2013}, booktitle = {Proceedings,9th IEEE International Workshop on Sensor Networks and Systems for Pervasive Computing 2013 (PerSeNS 2013), co-located with the 11th IEEE Conference on Pervasive Computing and Communication (PerCom 2013), San Diego, Calif., USA, 2013}, publisher = {IEEE}, isbn = {978-1-4673-5075-4}, doi = {10.1109/PerComW.2013.6529565}, pages = {596 -- 601}, language = {en} } @inproceedings{SchusterPaulKoenig, author = {Schuster, Franka and Paul, Andreas and K{\"o}nig, Hartmut}, title = {Towards Learning Normality for Anomaly Detection in Industrial Control Networks}, series = {Proceedings of the 7th IFIP WG 6.6 International Conference on Autonomous Infrastructure, Management, and Security (AIMS 2013), Barcelona, Spain, June 25-28, 2013}, booktitle = {Proceedings of the 7th IFIP WG 6.6 International Conference on Autonomous Infrastructure, Management, and Security (AIMS 2013), Barcelona, Spain, June 25-28, 2013}, publisher = {Heidleberg}, address = {Berlin [u.a.]}, isbn = {978-3-642-38997-9}, pages = {61 -- 72}, language = {en} } @inproceedings{RietzVogelSchusteretal., author = {Rietz, Ren{\´e} and Vogel, Michael and Schuster, Franka and K{\"o}nig, Hartmut}, title = {Parallelization of Network Intrusion Detection Systems under Attack Conditions}, series = {Detection of Intrusions and Malware, and Vulnerability Assessment, 11th International Conference, DIMVA 2014, Egham, UK, July 10-11, 2014}, booktitle = {Detection of Intrusions and Malware, and Vulnerability Assessment, 11th International Conference, DIMVA 2014, Egham, UK, July 10-11, 2014}, editor = {Dietrich, Sven}, publisher = {Springer International Publishing}, address = {Cham}, isbn = {978-3-319-08508-1}, pages = {172 -- 191}, language = {en} } @inproceedings{MehnerKlauckKoenig, author = {Mehner, Stefan and Klauck, Ronny and K{\"o}nig, Hartmut}, title = {Location-independent fall detection with smartphone}, series = {The 6th International Conference on PErvasive Technologies Related to Assistive Environments, PETRA '13, Island of Rhodes, Greece, May 29-31, 2013}, booktitle = {The 6th International Conference on PErvasive Technologies Related to Assistive Environments, PETRA '13, Island of Rhodes, Greece, May 29-31, 2013}, editor = {Makedon, Fillia and Betke, Margrit and Seif El-Nasr, Magy and Maglogiannis, Ilias}, publisher = {ACM}, address = {New York, NY}, isbn = {978-1-4503-1973-7}, doi = {10.1145/2504335.2504346}, pages = {8}, abstract = {Due to demographic changes in developed industrial countries and a better medical care system, the number of elderly people who still live in their home environment is rapidly growing because there they feel more comfortable and independent as in a clinical environment or in a residential care home. The elderly often live alone and receive only irregular visits. Due to impaired physical skills the probability of falls significantly increases. The detection of falls is a crucial aspect in the care of elderly. Falls are often detected very late with severe consequential damages. There are existing approaches for automatic fall detection. They usually deploy special external devices. Elderly people often do not accept these devices because they expose their frailty. In this paper, we present a location-independent fall detection method implemented as a smartphone application for an inconspicuous use in nearly every situation of the daily life. The difficulty of our approach is in the low resolution range of integrated acceleration sensors and the limited energy supply of the smartphone. As solution, we apply a modular threshold-based algorithm which uses the acceleration sensor with moderate energy consumption. Its fall detection rate is in the average of current relevant research.}, language = {en} } @inproceedings{GaeblerKlauckPinketal., author = {G{\"a}bler, Jan and Klauck, Ronny and Pink, Mario and K{\"o}nig, Hartmut}, title = {uBeeMe - a Platform to Enable Mobile Collaborative Applications}, series = {Proceedings of the 9th International Conference on Collaborative Computing: Networking, Applications and Worksharing (CollaborateCom 2013), Austin, Texas, USA, October, 2013}, booktitle = {Proceedings of the 9th International Conference on Collaborative Computing: Networking, Applications and Worksharing (CollaborateCom 2013), Austin, Texas, USA, October, 2013}, publisher = {IEEE}, address = {Piscataway, NJ}, pages = {188 -- 196}, language = {en} } @misc{KoenigGaeblerKlaucketal., author = {K{\"o}nig, Hartmut and G{\"a}bler, Jan and Klauck, Ronny and Pink, Mario and Sprejz, Michael}, title = {uBeeMe - A Platform for Mobile Collaborative Applications}, series = {PIK - Praxis der Informationsverarbeitung und Kommunikation}, volume = {36}, journal = {PIK - Praxis der Informationsverarbeitung und Kommunikation}, number = {1}, issn = {0930-5157}, doi = {10.1515/pik-2012-0058}, pages = {S. 43}, language = {en} } @inproceedings{GaeblerKoenig, author = {G{\"a}bler, Jan and K{\"o}nig, Hartmut}, title = {Enhancing Group Communication Systems with Mobility Support}, series = {Proceedings of the 19th IEEE International Conference on Networks (ICON 2013), Singapore, December 2013}, booktitle = {Proceedings of the 19th IEEE International Conference on Networks (ICON 2013), Singapore, December 2013}, publisher = {IEEE}, address = {Piscataway, NJ}, isbn = {978-1-4799-2085-3}, pages = {342 -- 347}, language = {en} } @inproceedings{PinkSprejzKoenig, author = {Pink, Mario and Sprejz, Michael and K{\"o}nig, Hartmut}, title = {A Coordinated Group Decision for Vertical Handovers in Heterogeneous Wireless Networks}, series = {2013 International Conference on MOBILe Wireless MiddleWARE, Operating Systems, and Applications, Bologna, Italy, November 11-13, 2013}, booktitle = {2013 International Conference on MOBILe Wireless MiddleWARE, Operating Systems, and Applications, Bologna, Italy, November 11-13, 2013}, publisher = {IEEE}, address = {Piscataway, NJ}, doi = {10.1109/Mobilware.2013.20}, pages = {130 -- 137}, abstract = {Cooperation and interactions of mobile users is a characteristic feature of mobile collaborative applications. The users are located in different mobile communication networks or move in or among them, respectively. This requires horizontal and vertical handovers. The latter is required when the networks use different network technologies. Usually each mobile device independently chooses the most appropriate network for its purposes to switch to. In group-oriented applications this may lead to an uncoordinated network selection and as consequence to increased energy consumption. In this paper, we present a distributed vertical handover decision algorithm that coordinates the selection of the network among the mobile devices in order to ensure an optimal quality of service for the collaborative application and a low energy consumption of the involved mobile devices. The network selection is based on the calculation of a group benefit for each alternative network using the Simple Additive Weighting (SAW) algorithm. The feasibility of the algorithm is evaluated regarding varying group sizes and resource requirements.}, language = {en} } @inproceedings{OpitzTodtenbergKoenig, author = {Opitz, Stefanie Judith and Todtenberg, Nicole and K{\"o}nig, Hartmut}, title = {Mobile bandwidth prediction in the context of emergency medical service}, series = {Proceedings of the 7th International Conference on PErvasive Technologies Related to Assistive Environments (PETRA '14)}, booktitle = {Proceedings of the 7th International Conference on PErvasive Technologies Related to Assistive Environments (PETRA '14)}, publisher = {ACM}, address = {New York, NY}, isbn = {978-1-4503-2746-6}, doi = {10.1145/2674396.2674411}, language = {en} } @misc{GaeblerKoenig, author = {G{\"a}bler, Jan and K{\"o}nig, Hartmut}, title = {Moversight: a group communication protocol for mobile scenarios}, series = {Telecommunication systems : modeling, analysis, design and managementversion}, volume = {61}, journal = {Telecommunication systems : modeling, analysis, design and managementversion}, number = {4}, issn = {1572-9451}, doi = {10.1007/s11235-015-0062-1}, pages = {695 -- 716}, abstract = {The increasing mobility of Internet users and the growing need to collaborate with staff travelling on business belong to the key characteristics of the future Internet. Mobile collaborative applications require novel schemes for group communication that actively support collaborations in wireless scenarios. An intrinsic problem of collaborations in wireless scenarios is the temporary connection loss with the group due to user mobility and network issues. Existing group communication protocols do not sufficiently support this situation. In this paper, we present a new peer-to-peer group communication protocol, called Moversight, that was specifically designed to support closed group cooperation in mobile environments with varying churn rates. It applies a new group communication paradigm, called mobile optimistic virtual synchrony, to handle churn-related peer failures. It enhances the virtual synchrony paradigm for mobile scenarios. The paper introduces the paradigm and describes the main protocol features of Moversight. Finally we present simulation results to demonstrate the applicability of the protocol.}, language = {en} } @misc{KlauckKirsche, author = {Klauck, Ronny and Kirsche, Michael}, title = {Combining Mobile XMPP Entities and Cloud Services for Collaborative Post-Disaster Management in Hybrid Network Environments}, series = {Mobile Networks and Applications : the journal of special issues on mobility of systems, users, data and computing}, volume = {18}, journal = {Mobile Networks and Applications : the journal of special issues on mobility of systems, users, data and computing}, number = {2}, issn = {1383-469X}, doi = {10.1007/s11036-012-0391-1}, pages = {253 -- 270}, abstract = {Crises such as the Fukushima incident in Japan showed the demand for flexible and easy-to-use monitoring and communication systems to support post-disaster management (i.e. the organization of actions in the follow-up of disasters), especially when critical infrastructure is affected. Such systems can effectively only be realized with a merging of various device classes and the integration of mobile actors and wireless communication technologies to provide the necessary flexibility. This article introduces a system design that combines portable hand-held devices as well as autonomous sensors through XMPP with the flexibility of cloud services to support post-disaster management. This combination provides the communication between the different involved parties (e.g., rescue teams, relief forces, NGOs) and enables a global view on sensed data through the use of cloud-based storage and analysis services. Along with a discussion about requirements and a description of appropriate solutions and initial evaluations, we present new insights on the practical appliance of XMPP and potential enhancements for XMPP-based real life collaboration applications in hybrid (ad hoc and infrastructure) networkscenarios.We also show that resource constrained devices can run the XMPP protocol to extend smartphones with sensors or to connect different device classes in a seamless way.}, language = {en} } @inproceedings{SchusterGrubitzschRenzeletal., author = {Schuster, Daniel and Grubitzsch, Philipp and Renzel, Dominik and Klauck, Ronny and Kirsche, Michael}, title = {Global-scale Federated Access to Smart Objects Using XMPP}, series = {2014 IEEE International Conference on Internet of Things (iThings 2014), and IEEE green computing and communications (GreenCom 2014) and IEEE cyber, physical and social computing (CPSCom 2014), Taipei, Taiwan, 1 - 3 September 2014}, booktitle = {2014 IEEE International Conference on Internet of Things (iThings 2014), and IEEE green computing and communications (GreenCom 2014) and IEEE cyber, physical and social computing (CPSCom 2014), Taipei, Taiwan, 1 - 3 September 2014}, publisher = {IEEE}, address = {Piscataway, NJ}, isbn = {978-1-4799-5967-9}, pages = {185 -- 192}, abstract = {Communication with smart objects currently only works in isolated, sometimes even proprietary islands. This lack of interoperability limits the value of smart objects connected to the Internet of Things (IoT). We propose to use the eXtensible Messaging and Presence Protocol (XMPP) to connect IoT islands. XMPP is inherently federated, secure, globally scalable and designed for collaboration. We use XMPP Multi-User Chat (MUC) to build a secure and accessible platform for sensor data exchange between organizations. We demonstrate a scenario of three distributed and interconnected XMPP-driven sites, whereas different client types access sensor data from all sites. Our evaluation results confirm that the architectural pattern presented in this work can easily be used in any XMPP-based system without the need to enhance or to extend the standards.}, language = {en} } @inproceedings{KirscheSchnurbusch, author = {Kirsche, Michael and Schnurbusch, Matti}, title = {A new IEEE 802.15.4 Simulation Model for OMNeT++ / INET}, series = {Proceedings of the 1st International OMNeT++ Community Summit (OMNeT 2014)}, booktitle = {Proceedings of the 1st International OMNeT++ Community Summit (OMNeT 2014)}, abstract = {This paper introduces a new IEEE 802.15.4 simulation model for OMNeT++ / INET. 802.15.4 is an important underlying standard for wireless sensor networks and Internet of Things scenarios. The presented implementation is designed to be compatible with OMNeT++ 4.x and INET 2.x and laid-out to be expandable for newer revisions of the 802.15.4 standard.}, language = {en} } @inproceedings{KirscheKremmer, author = {Kirsche, Michael and Kremmer, Roman}, title = {uIP Support for the Network Simulation Cradle}, series = {Proceedings of the 2nd International OMNeT++ Community Summit (OMNeT 2015)}, booktitle = {Proceedings of the 2nd International OMNeT++ Community Summit (OMNeT 2015)}, abstract = {We introduce the ongoing integration of Contiki's uIP stack into the OMNeT++ port of the Network Simulation Cradle (NSC). The NSC utilizes code from real world stack implementations and allows for an accurate simulation and comparison of different TCP/IP stacks and a validation of thereby connected simulation models. uIP(v6) provides resource-constrained devices with an RFC-compliant TCP/IP stack and promotes the use of IPv6 in the vastly growing field of Internet of Things scenarios. This work-in-progress report discusses our motivation to integrate uIP into the NSC, our chosen approach and possible use cases for the simulation of uIP in OMNeT++.}, language = {en} } @inproceedings{DacierKarglKoenigetal., author = {Dacier, Marc C. and Kargl, Frank and K{\"o}nig, Hartmut and Valdes, Alfonso}, title = {Network Attack Detection and Defense: Securing Industrial Control Systems for Critical Infrastructures}, series = {Report from Dagstuhl Seminar 14292, 13. - 16. Juli 2014,}, booktitle = {Report from Dagstuhl Seminar 14292, 13. - 16. Juli 2014,}, publisher = {Dagstuhl Publishing}, address = {Schloss Dagstuhl, Wadern}, doi = {10.4230/DagRep.4.7.62}, pages = {62 -- 79}, abstract = {This report documents the program and the outcomes of Dagstuhl Seminar 14292 "Network Attack Detection and Defense: Securing Industrial Control Systems for Critical Infrastructures". The main objective of the seminar was to discuss new approaches and ideas for securing industrial control systems. It is the sequel of several previous Dagstuhl seminars: (1) the series "Network Attack Detection and Defense" held in 2008 and 2012, and (2) the Dagstuhl seminar "Securing Critical Infrastructures from Targeted Attacks", held in 2012. At the seminar, which brought together members from academia an industry, appropriate methods for detecting attacks on industrial control systems (ICSs) and for limiting the impact on the physical components were considered. A central question was whether and how reactive security mechanisms can be made more ICS- and process-aware. To some extent it seems possible to adopt existing security approaches from other areas (e. g., conventional networks, embedded systems, or sensor networks). The main question is whether adopting these approaches is sufficient to reach the desired level of security for ICSs. Detecting attacks to the physical components and appropriate reactions to attacks are new aspects that need to be considered as well. The main result of the seminar is a list of recommendations for future directions in ICS security that is presented in this report.}, language = {en} } @misc{KarglHeijdenKoenigetal., author = {Kargl, Frank and Heijden, Rens W. van der and K{\"o}nig, Hartmut and Valdes, Alfonso and Dacier, Marc C.}, title = {Insights on the Security and Dependability of Industrial Control Systems}, series = {IEEE Security \& Privacy}, volume = {12}, journal = {IEEE Security \& Privacy}, number = {6}, issn = {1540-7993}, doi = {10.1109/MSP.2014.120}, pages = {75 -- 78}, language = {en} } @misc{LiuKoenig, author = {Liu, Fuwen and K{\"o}nig, Hartmut}, title = {Puzzle - an efficient, compression independent video encryption algorithm}, series = {Multimedia tools and applications}, volume = {73}, journal = {Multimedia tools and applications}, number = {2}, issn = {1573-7721}, doi = {10.1007/s11042-012-1185-y}, pages = {715 -- 735}, language = {en} } @inproceedings{BoehmKirsche, author = {B{\"o}hm, Sebastian and Kirsche, Michael}, title = {Looking into Hardware-in-the-Loop Coupling of OMNeT++ and RoSeNet}, series = {Proceedings of the 2nd International OMNeT++ Community Summit (OMNeT 2015), Zurich, Switzerland, September, 2015, CoRR}, booktitle = {Proceedings of the 2nd International OMNeT++ Community Summit (OMNeT 2015), Zurich, Switzerland, September, 2015, CoRR}, pages = {5}, language = {en} } @misc{OPUS4-14954, title = {Proceedings of the 2nd International OMNeT++ Community Summit (OMNeT 2015), Zurich, Switzerland on September 3-4, 2015}, editor = {F{\"o}rster, Anna and Minkenberg, Cyriel and Herrera, German Rodriguez and Kirsche, Michael}, language = {en} } @inproceedings{GaeblerKoenig, author = {G{\"a}bler, Jan and K{\"o}nig, Hartmut}, title = {Distributed latency estimation using global knowledge for mobile collaborative applications}, series = {International Wireless Communications and Mobile Computing Conference (IWCMC) 2015, Dubrovnik, Croatia, 24-28 Aug. 2015}, booktitle = {International Wireless Communications and Mobile Computing Conference (IWCMC) 2015, Dubrovnik, Croatia, 24-28 Aug. 2015}, publisher = {IEEE}, doi = {10.1109/IWCMC.2015.7289130}, pages = {474 -- 479}, language = {en} } @inproceedings{SchusterPaulRietzetal., author = {Schuster, Franka and Paul, Andreas and Rietz, Ren{\´e} and K{\"o}nig, Hartmut}, title = {Potentials of Using One-class SVM for Detecting Protocol-specific Anomalies in Industrial Networks}, series = {Proceedings of the 2015 IEEE Symposium on Computational Intelligence in Cyber Security (IEEE CICS 2015)}, booktitle = {Proceedings of the 2015 IEEE Symposium on Computational Intelligence in Cyber Security (IEEE CICS 2015)}, publisher = {IEEE Press}, address = {New York}, doi = {10.1109/SSCI.2015.22}, pages = {83 -- 90}, language = {en} } @misc{StritterFreilingKoenigetal., author = {Stritter, Benjamin and Freiling, Felix and K{\"o}nig, Hartmut and Rietz, Ren{\´e} and Ullrich, Steffen and Gernler, Alexander von and Erlacher, Felix}, title = {Cleaning up Web 2.0's Security Mess - at Least Partly}, series = {IEEE Security \& Privacy}, volume = {14}, journal = {IEEE Security \& Privacy}, number = {2}, issn = {1540-7993}, pages = {48 -- 71}, language = {en} } @inproceedings{PaulSchusterKoenig, author = {Paul, Andreas and Schuster, Franka and K{\"o}nig, Hartmut}, title = {Network Topology Exploration for Industrial Networks}, series = {2nd EAI International Conference on Industrial Networks and Intelligent Systems (INISCOM 2016), October 31 - November 1, 2016, Leicester, Great Britain}, booktitle = {2nd EAI International Conference on Industrial Networks and Intelligent Systems (INISCOM 2016), October 31 - November 1, 2016, Leicester, Great Britain}, publisher = {Springer International Publishing}, address = {Cham}, isbn = {978-3-319-52568-6}, doi = {10.1007/978-3-319-52569-3}, pages = {63 -- 76}, language = {en} } @misc{OPUS4-17925, title = {Proceedings of the 3rd International OMNeT++ Community Summit (OMNeT 2016), Brno University of Technology, Czech Republic, September 15-16, 2016}, editor = {F{\"o}rster, Anna and Vesel{\´y}, Vladim{\´i}r and Virdis, Antonio and Kirsche, Michael}, publisher = {Brno University of Technology, Czech Republic}, address = {Brno}, language = {en} } @inproceedings{CwalinskiKoenig, author = {Cwalinski, Radoslaw and K{\"o}nig, Hartmut}, title = {RADIator - An approach for controllable wireless networks}, series = {IEEE NetSoft Conference and workshops, 6-10 June 2016, Seoul, South Corea}, booktitle = {IEEE NetSoft Conference and workshops, 6-10 June 2016, Seoul, South Corea}, publisher = {IEEE}, address = {Piscataway, NJ}, isbn = {978-1-4673-9486-4}, doi = {10.1109/NETSOFT.2016.7502421}, pages = {260 -- 268}, abstract = {In this paper we propose a novel software-defined networking architecture for enterprise wireless local area networks (WLANs). The goal is to build a framework that exposes tools and methods for a centralized processing of IEEE 802.11 frames. In our architecture all management tasks, including beaconing, client authentication and association, are performed by the central controller instead of the distributed wireless access points as in traditional networks. The generated frames are tunneled to lightweight wireless access points (APs) or thin APs that perform the media access and radio frequency (RF) conversion. Agents executed on thin APs allow scheduling of simple tasks like traffic filtering for local execution. Additionally, the agents provide functions found in modern WLAN chipsets, such as precise frame transmit timings or RF spectrum analysis to the controller. Our architecture allows to delegate computationally intensive tasks to a central instance with enough processing power. Thus, it is best suited for devices with limited resources that we use as thin APs. We present applications that can be built using our framework, e.g., client geolocalization or energy consumption optimization. Finally we evaluate the performance of our architecture in a testbed using COTS devices with open-source software.}, language = {en} } @inproceedings{RietzKoenigUllrichetal., author = {Rietz, Ren{\´e} and K{\"o}nig, Hartmut and Ullrich, Steffen and Stritter, Benjamin}, title = {Firewalls for the Web 2.0}, series = {Proceedings of the 2016 IEEE International Conference on Software Quality, Reliability and Security (QRS), 1-3 Aug. 2016}, booktitle = {Proceedings of the 2016 IEEE International Conference on Software Quality, Reliability and Security (QRS), 1-3 Aug. 2016}, publisher = {IEEE}, address = {Piscataway, NJ}, isbn = {978-1-5090-4127-5}, doi = {10.1109/QRS.2016.36}, pages = {242 -- 253}, abstract = {The widespread use of Web 2.0 technologies yields an increasing threat potential for users and related systems. Modern web applications and online services are nowadays based on Web 2.0 technologies, such as JavaScript and AJAX, and thus on the execution of active content in the browsers of the users. Firewalls are a common practice to securely connecting to the internet. In this paper, we propose a novel perimeter firewall architecture for web applications that addresses the entire process chain starting from the data transfer with HTTP via the analysis of manipulated web documents to the extraction and analysis of active contents. The basic idea is to allow only a restricted set of web applications to pass the firewall based on a model of their HTML and JavaScript structure. We evaluate the capability of the resulting models for identifying the underlying web applications and their ability to ward off additional malicious inputs.}, language = {en} } @inproceedings{DacierDietrichKargletal., author = {Dacier, Marc C. and Dietrich, Sven and Kargl, Frank and K{\"o}nig, Hartmut}, title = {Network Attack Detection and Defense - Security Challenges and Opportunities of Software-Defined Networking}, series = {Network Attack Detection and Defense, Dagstuhl Seminar 16361}, booktitle = {Network Attack Detection and Defense, Dagstuhl Seminar 16361}, publisher = {Schloss Dagstuhl}, address = {Wadern}, doi = {10.4230/DagRep.6.9.1}, url = {http://nbn-resolving.de/urn:nbn:de:0030-drops-69122}, pages = {1 -- 28}, abstract = {This report documents the program and the outcomes of Dagstuhl Seminar 16361 "Network Attack Detection and Defense: Security Challenges and Opportunities of Software-Defined Networking". Software-defined networking (SDN) has attracted a great attention both in industry and academia since the beginning of the decade. This attention keeps undiminished. Security-related aspects of software-defined networking have only been considered more recently. Opinions differ widely. The main objective of the seminar was to discuss the various contrary facets of SDN security. The seminar continued the series of Dagstuhl events Network Attack Detection and Defense held in 2008, 2012, and 2014. The objectives of the seminar were threefold, namely (1) to discuss the security challenges of SDN, (2) to debate strategies to monitor and protect SDN-enabled networks, and (3) to propose methods and strategies to leverage on the flexibility brought by SDN for designing new security mechanisms. At the seminar, which brought together participants from academia and industry, we discussed the advantages and disadvantages of using software-defined networks from the security point of view. We agreed that SDN provides new possibilities to better secure networks, but also offers a number of serious security problems which require further research. The outcome of these discussions and the proposed research directions are presented in this report.}, language = {en} } @inproceedings{GaeblerKoenig, author = {G{\"a}bler, Jan and K{\"o}nig, Hartmut}, title = {Distributed Cluster-Topology Maintenance for Mobile Collaborative Applications}, series = {IEEE 41st Conference on Local Computer Networks (LCN), 7-10 Nov. 2016}, booktitle = {IEEE 41st Conference on Local Computer Networks (LCN), 7-10 Nov. 2016}, publisher = {IEEE}, address = {Piscataway, NJ}, isbn = {978-1-5090-2054-6}, doi = {10.1109/LCN.2016.55}, pages = {271 -- 279}, abstract = {Nowadays, collaborative applications play an increasing role in mobile communications in order to enable cooperation among mobile and/or stationary participants - often using the peer-to-peer (P2P) group communication paradigm. The probability of communication failures increases in mobile environments. As a consequence, frequent leaving and joining of partners can be observed resulting in unstable group topologies. A widely used approach is to divide the group into peer clusters that are fully meshed among each other. In this paper, we propose an application-independent approach for a periodic maintenance of distributed cluster-based group topologies for mobile collaborative applications. The proposed approach also dynamically adapts the overlay structure to changing network conditions. The maintenance strategy can be parametrized by several metrics. It outperforms simple overlay maintenance strategies, such as round-robin, by respecting the resource and computation limitations of mobile devices. The run-time is increased by 10\% in the best case compared to LEACH, and by 3 — 5\% on average. We describe the approach and evaluate its performance w.r.t. different metrics.}, language = {en} } @misc{SchusterPaulKoenig, author = {Schuster, Franka and Paul, Andreas and K{\"o}nig, Hartmut}, title = {Messung der technischen IT-Sicherheit in Energieversorgungsanlagen zur Erf{\"u}llung des IT-Sicherheitsgesetzes}, series = {International Journal for Electricy and Heat Generation, VGB Powertech}, volume = {97}, journal = {International Journal for Electricy and Heat Generation, VGB Powertech}, number = {3}, issn = {1435-3199}, pages = {76 -- 82}, language = {de} } @misc{OPUS4-20972, title = {Proceedings of the 4th OMNeT++ Community Summit, University of Bremen - Germany, September 7-8, 2017}, editor = {F{\"o}rster, Anna and Udugama, Asanga and K{\"o}nsgen, Andreas and Virdis, Antonio and Kirsche, Michael}, publisher = {arXiv}, language = {en} } @inproceedings{CwalinskiKoenig, author = {Cwalinski, Radoslaw and K{\"o}nig, Hartmut}, title = {Identifying Malicious Traffic in Software-Defined Wireless Local Area Networks}, series = {2018 International Conference on Computing, Networking and Communications (ICNC), Maui, HI, USA, 2018}, booktitle = {2018 International Conference on Computing, Networking and Communications (ICNC), Maui, HI, USA, 2018}, publisher = {IEEE}, isbn = {978-1-5386-3652-7}, doi = {10.1109/ICCNC.2018.8390307}, pages = {195 -- 199}, language = {en} } @inproceedings{SchusterKoppPauletal., author = {Schuster, Franka and Kopp, Fabian Malte and Paul, Andreas and K{\"o}nig, Hartmut}, title = {Attack and Fault Detection in Process Control Communication Using Unsupervised Machine Learning}, series = {IEEE 16th International Conference on Industrial Informatics (INDIN), Porto, Portugal, 18-20 July 2018}, booktitle = {IEEE 16th International Conference on Industrial Informatics (INDIN), Porto, Portugal, 18-20 July 2018}, publisher = {IEEE}, address = {Piscataway, NJ}, isbn = {978-1-5386-4829-2}, doi = {10.1109/INDIN.2018.8472054}, pages = {433 -- 438}, language = {en} } @inproceedings{SchusterPaulKoppetal., author = {Schuster, Franka and Paul, Andreas and Kopp, Fabian Malte and K{\"o}nig, Hartmut}, title = {Catching Intrusions: Classifier Performances for Detecting Network-specific Anomalies in Energy Systems}, series = {2018 International Conference on Smart Energy Systems and Technologies (SEST), Seville, Spain, September 2018}, booktitle = {2018 International Conference on Smart Energy Systems and Technologies (SEST), Seville, Spain, September 2018}, publisher = {IEEE}, address = {Piscataway, NJ}, isbn = {978-1-5386-5326-5}, doi = {10.1109/SEST.2018.8495702}, pages = {6}, language = {en} } @inproceedings{CwalinskiKoenig, author = {Cwalinski, Radoslaw and K{\"o}nig, Hartmut}, title = {SDN-based Attack Detection in Wireless Local Area Networks}, series = {4th IEEE Conference on Network Softwarization and Workshops (NetSoft), Montreal, QC, 2018}, booktitle = {4th IEEE Conference on Network Softwarization and Workshops (NetSoft), Montreal, QC, 2018}, publisher = {IEEE}, address = {Piscataway, NJ}, isbn = {978-1-5386-4633-5}, doi = {10.1109/NETSOFT.2018.8460121}, pages = {207 -- 211}, language = {en} } @inproceedings{BoehmKirsche, author = {B{\"o}hm, Sebastian and Kirsche, Michael}, title = {Unifying Radio-in-the-Loop Channel Emulation and Network Protocol Simulation to Improve Wireless Sensor Network Evaluation}, series = {Simulation Science, First International Workshop, SimScience 2017, G{\"o}ttingen, Germany, April 27-28, 2017}, booktitle = {Simulation Science, First International Workshop, SimScience 2017, G{\"o}ttingen, Germany, April 27-28, 2017}, editor = {Baum, Marcus and Brenner, Gunther and Grabowski, Jens and Hanschke, Thomas and Hartmann, Stefan and Sch{\"o}bel, Anita}, publisher = {Springer International Publishing}, address = {Cham}, isbn = {978-3-319-96271-9}, doi = {10.1007/978-3-319-96271-9_14}, pages = {219 -- 238}, abstract = {Evaluations of Internet of Things (IoT) and Wireless Sensor Network (WSN) applications demonstrate the significant and still existing gap between examinations with generic simulation environments and real-life (e.g., field test) or controlled (e.g., testbed) sensor network deployments in terms of realistic and accurate results. The separated use of single examination approaches is often not enough to overcome all evaluation challenges. We therefore propose a combination of discrete-event simulation, radio-channel emulation, and real hardware working together on different layers of the protocol stack of the system-under-test. Our combined approach reduces the gap between abstract simulations and network testbed experiments by providing adjustable radio conditions for repeatable evaluations of WSN and IoT networks.}, language = {en} } @misc{RietzCwalinskiKoenigetal., author = {Rietz, Ren{\´e} and Cwalinski, Radoslaw and K{\"o}nig, Hartmut and Brinner, Andreas}, title = {An SDN-based Approach to Ward of LAN Attacks}, series = {Journal Computer Networks and Communications}, volume = {2018}, journal = {Journal Computer Networks and Communications}, doi = {10.1155/2018/4127487}, pages = {12}, language = {en} } @misc{HohlfeldKrudeReelfsetal., author = {Hohlfeld, Oliver and Krude, Johannes and Reelfs, Jens Helge and R{\"u}th, Jan and Wehrle, Klaus}, title = {Demystifying the Performance of XDP BPF}, series = {IEEE Conference on Network Softwarization, 24-28 June 2019, Paris, France}, journal = {IEEE Conference on Network Softwarization, 24-28 June 2019, Paris, France}, doi = {10.1109/NETSOFT.2019.8806651}, pages = {5}, abstract = {High packet rates at ≥ 10 GBit/s challenge the packet processing performance of network stacks. A common solution is to offload (parts of) the user-space packet processing to other execution environments, e.g., into the device driver (kernel-space), the NIC or even from virtual machines into the host operating system (OS), or any combination of those. While common wisdom states that offloading optimizes performance, neither benefits nor negative effects are comprehensively studied. In this paper, we aim to shed light on the benefits and shortcomings of eBPF/XDP-based offloading from the user-space to i) the kernel-space or ii) a smart NIC-including VM virtualization. We show that offloading can indeed optimize packet processing, but only if the task is small and optimized for the target environment. Otherwise, offloading can even lead to detrimental performance.}, language = {en} } @misc{RuethKunzeHohlfeld, author = {R{\"u}th, Jan and Kunze, Ike and Hohlfeld, Oliver}, title = {TCP's Initial Window - Deployment in the Wild and its Impact on Performance}, series = {IEEE Transactions on Network and Service Management}, volume = {16}, journal = {IEEE Transactions on Network and Service Management}, number = {2}, issn = {1932-4537}, doi = {10.1109/TNSM.2019.2896335}, pages = {389 -- 402}, language = {en} } @misc{RuethZimmermannHohlfeld, author = {R{\"u}th, Jan and Zimmermann, Torsten and Hohlfeld, Oliver}, title = {Hidden Treasures - Recycling Large-Scale Internet Measurements to Study the Internet's Control Plane}, series = {Passive Active Measurement Conference (PAM 2019), 27-29 March 2019, Puerto Varas, Chile}, journal = {Passive Active Measurement Conference (PAM 2019), 27-29 March 2019, Puerto Varas, Chile}, publisher = {Springer}, address = {New York}, isbn = {978-3-030-15985-6}, doi = {10.1007/978-3-030-15986-3_4}, pages = {67}, language = {en} } @misc{PennekampHenzeHohlfeldetal., author = {Pennekamp, Jan and Henze, Martin and Hohlfeld, Oliver and Panchenko, Andriy}, title = {Hi Doppelg{\"a}nger: Towards Detecting Manipulation in News Comments}, series = {Companion Proceedings of the 2019 World Wide Web Conference (WWW '19 Companion), 4th Workshop on Computational Methods in Online Misbehavior (CyberSafety '19), May 13-17, 2019, San Francisco, CA, USA}, journal = {Companion Proceedings of the 2019 World Wide Web Conference (WWW '19 Companion), 4th Workshop on Computational Methods in Online Misbehavior (CyberSafety '19), May 13-17, 2019, San Francisco, CA, USA}, publisher = {ACM}, address = {New York}, isbn = {978-1-4503-6675-5}, doi = {10.1145/3308560.3316496}, pages = {197 -- 205}, language = {en} } @misc{ReelfsMohauptHohlfeldetal., author = {Reelfs, Jens Helge and Mohaupt, Timon and Hohlfeld, Oliver and Henckell, Niklas}, title = {Hashtag Usage in a Geographically-Local Microblogging App}, series = {Proceedings of the 2019 World Wide Web Conference (WWW '19 Companion), 9th International Workshop on Location and the Web (LocWeb '19), May 13-17, 2019, San Francisco, CA, USA}, journal = {Proceedings of the 2019 World Wide Web Conference (WWW '19 Companion), 9th International Workshop on Location and the Web (LocWeb '19), May 13-17, 2019, San Francisco, CA, USA}, publisher = {ACM}, address = {New York}, isbn = {978-1-4503-6675-5}, doi = {10.1145/3308560.3316537}, pages = {919 -- 927}, language = {en} } @misc{GuseOreficeReimersetal., author = {Guse, Dennis and Orefice, Henrique R. and Reimers, Gabriel and Hohlfeld, Oliver}, title = {TheFragebogen: A Web Browser-based Questionnaire Framework for Scientific Research}, series = {2019 Eleventh International Conference on Quality of Multimedia Experience (QoMEX 2019), June 5-7 2019, Berlin}, journal = {2019 Eleventh International Conference on Quality of Multimedia Experience (QoMEX 2019), June 5-7 2019, Berlin}, pages = {3}, language = {en} }