TY - CHAP A1 - Liu, F. A1 - König, Hartmut T1 - Designing Security Architecture for a P2P Video Conference System Y1 - 2007 ER - TY - CHAP A1 - Schmerl, Sebastian A1 - Rietz, René A1 - König, Hartmut ED - Alkassar, Ammar T1 - Systematische Ableitung von Signaturen durch Wiederverwendung am Beispiel von Snort T2 - Sicherheit 2008, Konferenzband der 4. Jahrestagung des Fachbereichs Sicherheit der Gesellschaft für Informatik e.V.(GI), 2. - 4. April 2008 im Saarbrücker Schloss Y1 - 2008 SN - 978-3-88579-222-2 SP - 367 EP - 379 PB - Ges. für Informatik CY - Bonn ER - TY - CHAP A1 - Opitz, Alek A1 - König, Hartmut T1 - Predicting Free Computing Capacities on Individual Machines Y1 - 2009 ER - TY - JOUR A1 - Liu, Fuwen A1 - König, Hartmut A1 - Wang, W. T1 - Designing a Security Architecture for a P2P Video Conference System Y1 - 2008 ER - TY - JOUR A1 - Opitz, Alek A1 - König, Hartmut A1 - Szamlewska, Sebastian T1 - What Does Grid Computing Cost? Y1 - 2008 ER - TY - GEN A1 - Vogel, Michael A1 - Schmerl, Sebastian A1 - König, Hartmut T1 - Analyseverlagerung in P2P-Overlaynetzen Y1 - 2009 ER - TY - CHAP A1 - Kaliappan, Prabhu Shankar A1 - König, Hartmut A1 - Kaliappan, V. K. T1 - Designing and Verifying Communication Protocols using Model Driven Architecture and Spin Model Checker Y1 - 2008 ER - TY - GEN A1 - Carle, Georg A1 - Dressler, Falko A1 - Kemmerer, Richard A. A1 - König, Hartmut A1 - Kruegel, Christopher A1 - Laskov, Pavel T1 - Network attack detection and defense - Manifesto of the Dagstuhl Perspective Workshop Y1 - 2009 ER - TY - CHAP A1 - Liu, Fuwen A1 - König, Hartmut T1 - Security Considerations on Pervasive Real-time Collaboration T2 - IEEE 6th International Conference on Mobile Adhoc and Sensor Systems, 2009, MASS '09, 12 - 15 Oct. 2009, Macau, China Y1 - 2009 SN - 978-1-424-45114-2 SP - 722 EP - 727 PB - IEEE CY - Piscataway, NJ ER - TY - CHAP A1 - Schmerl, Sebastian A1 - König, Hartmut A1 - Flegel, Ulrich A1 - Meier, Michael A1 - Rietz, René T1 - Systematic Signature Engineering by Re-use of Snort Signatures T2 - Proceedings of the 24th International Annual Computer Security Applications Conference (ACSAC 2008), Anaheim, California, USA, December 2008 Y1 - 2008 UR - http://www.acsac.org/openconf2008/modules/request.php?module=oc_proceedings&action=proceedings.php&a=Accept SP - 23 EP - 32 ER - TY - CHAP A1 - Schmerl, Sebastian A1 - Vogel, Michael A1 - König, Hartmut T1 - Cooperating Intrusion Detection Overlay Structures T2 - 4th GI/ITG KuVS Workshop on Future Internet and 2nd Workshop on Economic Traffic Management (ETM), Zürich, Switzerland, 9 - 10. November 2009 Y1 - 2009 ER - TY - CHAP A1 - Schmerl, Sebastian A1 - Vogel, Michael A1 - König, Hartmut T1 - Identifying Modeling Errors in Signatures by Model Checking. Y1 - 2009 ER - TY - CHAP A1 - Kaliappan, Prabhu Shankar A1 - König, Hartmut A1 - Schmerl, Sebastian A1 - Dong, Jin Song A1 - Zhu, Huibiao T1 - Model-Driven Protocol Design Based on Component Oriented Modeling T2 - Formal methods and software engineering, proceedings 12th International Conference on Formal Engineering Methods, ICFEM 2010, Shanghai, China, November 17 - 19, 2010 Y1 - 2010 UR - www.springer.com/lncs SN - 978-3-642-16900-7 SP - 613 EP - 629 PB - Springer CY - Berlin [u.a.] ER - TY - GEN A1 - Liu, Fuwen A1 - König, Hartmut T1 - A Survey of Video Encryption Algorithms Y1 - 2010 ER - TY - CHAP A1 - Schmerl, Sebastian A1 - Vogel, Michael A1 - Rietz, René A1 - König, Hartmut T1 - Explorative Visualization of Log Data to Support Forensic Analysis and Signature Development T2 - 2010 Fifth IEEE International Workshop on Systematic Approaches to Digital Forensic Engineering (SADFE 2010), Oakland, California, USA, 20 May 2010 Y1 - 2010 SN - 978-1-424-47220-8 SP - 109 EP - 118 PB - IEEE CY - Piscataway, NJ ER - TY - CHAP A1 - Liu, Fuwen A1 - König, Hartmut T1 - A Simple Balanced Password-Authenticated Key Agreement Protocol T2 - Proceedings, the 10th IEEE International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2011, ICESS 2011, FCST 2011, Conferences, Symposiums and Workshops, 16-18 November 2011, Changsha, Hunan Province, China Y1 - 2011 SN - 978-0-7695-4600-1 SP - 403 EP - 408 PB - IEEE Computer Society CY - Los Alamitos, Calif. ER - TY - GEN A1 - Kirsche, Michael A1 - Dreissig, Matthias A1 - Kopsch, Ralf A1 - Gäbler, Jan A1 - Klauck, Ronny A1 - Pink, Mario A1 - Liu, Fuwen A1 - König, Hartmut T1 - uBeeMe - Eine Plattform zur Unterstützung mobiler kollaborativer Anwendungen T2 - Praxis der Informationsverarbeitung und Kommunikation : (PIK) Y1 - 2011 U6 - https://doi.org/10.1515/PIKO.2011.003 SN - 0930-5157 VL - 34 IS - 1 SP - 11 EP - 22 ER - TY - CHAP A1 - Kaliappan, Prabhu Shankar A1 - König, Hartmut T1 - An Approach to Synchronize UML-basedDesign Components for Model-Driven Protocol Development T2 - Proceedings, 2011 34th IEEE Software Engineering Workshop, 20-21 June 2011, Limerick, Ireland Y1 - 2011 SN - 978-1-4673-0245-6 SP - 27 EP - 35 PB - IEEE CY - Los Alamitos, Calif. ER - TY - CHAP A1 - Liu, Fuwen A1 - König, Hartmut ED - Decker, Bart De ED - Lapon, Jorn ED - Naessens, Vincent ED - Uhl, Andreas T1 - Cryptanalysis of a SIP Authentication Scheme T2 - Communications and multimedia security, 12th IFIP TC 6/TC 11 international conference, CMS 2011, Ghent, Belgium, October 19-21, 2011 Y1 - 2011 SN - 978-3-642-24711-8 SP - 134 EP - 143 PB - Springer CY - Heidelberg [u.a.] ER - TY - GEN A1 - Gäbler, Jan A1 - Klauck, Ronny A1 - Schöpke, Sebastian A1 - König, Hartmut A1 - Werner, Martin A1 - Roth, Jörg T1 - Lemon Tree - Flexible Deichüberwachung mit XMPP und Cloud-Diensten T2 - 8. GI/ITG KuVS-Fachgespräch Ortsbezogene Anwendungen und Dienst Y1 - 2011 SN - 978-3-8325-3041-9 SP - 137 EP - 148 PB - Logos-Verlag CY - Berlin ER - TY - GEN A1 - König, Hartmut T1 - Network Attack Detection and Defense T2 - Praxis der Informationsverarbeitung und Kommunikation : (PIK) Y1 - 2012 U6 - https://doi.org/10.1515/pik-2012-0001 SN - 0930-5157 VL - 35 IS - 1 ER - TY - CHAP A1 - Pink, Mario A1 - Pietsch, Thomas A1 - König, Hartmut T1 - Towards a seamless mobility solution for the real world: Handover decision T2 - Hand-over decision, International Symposium on Wireless Communication Systems 2012, August 2012, Paris, France N2 - The increasing use of wireless networks has raised the desire to have not only a stable and good quality access to the network, but also to seamlessly change the network when moving. Various handover algorithms have been proposed to handle this situation. Unfortunately, many of these handover algorithms have only been evaluated by simulations. They do not take the wide range of mobile devices with varying system parameters into account. For the practical deployment, handover algorithms are required that adapt to various device parameters and network characteristics. In this paper we present a fuzzy-based vertical handover decision algorithm which adjusts itself to the given device and network capabilities. Starting with a discussion of handover requirements we present the algorithm and describe how it is activated in the handover process. Finally we present several experiments which evaluate the accuracy of the handover decision, the quality of service guarantees for the application, and the resource consumption. Y1 - 2012 SN - 978-1-4673-0761-1 U6 - https://doi.org/10.1109/ISWCS.2012.6328448 SP - 651 EP - 655 PB - IEEE ER - TY - CHAP A1 - Pink, Mario A1 - Pietsch, Thomas A1 - König, Hartmut T1 - An adaptive Handover decision algorithm for heterogeneous wireless networks T2 - Mobile Wireless Middleware, Operating Systems, and Applications, 5th International Conference, Mobilware 2012, Berlin, Germany, November 13-14, 2012 Y1 - 2012 SN - 978-3-642-36659-8 SP - 136 EP - 149 PB - Springer CY - Berlin ER - TY - CHAP A1 - Schuster, Franka A1 - Paul, Andreas A1 - König, Hartmut T1 - A Distributed Intrusion Detection System for Industrial Automation Networks T2 - Proceedings of the 17th International Conference on Emerging Technologies & Factory Automation, Krakau, Polen, September 2012 N2 - Modern automation is measured in terms of interoperability and easy administration. Introducing technology focussing on these criteria, however, induce new security risks to existing and future automation installations. Current security approaches in automation do not keep pace with the rising security challenges. Prevalent in automation is the use of access control to protect the system from malicious activity, such as extern attacks. Means to inspect the automation traffic to identify attacks that already have overcome access control or are initiated from inside the automation system are not available, yet. For filling this gap, we investigate in the application of intrusion detection techniques on industrial automation. In this paper, we present the current state of an intrusion detection system tailored to the analysis of operation down to traffic between automation devices on field layer. Y1 - 2012 SN - 978-1-4673-4736-5 U6 - https://doi.org/10.1109/ETFA.2012.6489703 SP - 1 EP - 4 PB - IEEE ER - TY - CHAP A1 - Kaliappan, Prabhu Shankar A1 - König, Hartmut ED - Katzenbeisser, Stefan T1 - On the Formalization of UML Activities for Component-Based Protocol Design Specifications T2 - Theory and practice of computer science, SOFSEM 2012, 38th Conference on Current Trends in Theory and Practice of Computer Science, Špindlerův Mlýn, Czech Republic, January 21 - 27, 2012 N2 - This book constitutes the refereed proceedings of the 38th Conference on Current Trends in Theory and Practice of Computer Science, SOFSEM 2012, held in Špindlerův Mlýn, Czech Republic, in January 2012. The 43 revised papers presented in this volume were carefully reviewed and selected from 121 submissions. The book also contains 11 invited talks, 10 of which are in full-paper length. The contributions are organized in topical sections named: foundations of computer science; software and Web engineering; cryptography, security, and verification; and artificial intelligence. Y1 - 2012 UR - http://www.springer.com/computer/theoretical+computer+science/book/978-3-642-27659-0 SN - 978-3-642-27659-0 SP - 479 EP - 491 PB - Springer CY - Berlin [u.a.] ER - TY - BOOK A1 - König, Hartmut T1 - Protocol Engineering Y1 - 2012 SN - 978-3-642-29144-9 PB - Springer CY - Berlin [u.a.] ER - TY - CHAP A1 - Paul, Andreas A1 - Schuster, Franka A1 - König, Hartmut T1 - Towards the Protection of Industrial Control Systems - Conclusions of a Vulnerability Analysis of Profinet IO T2 - Detection of Intrusions and Malware, and Vulnerability Assessment, 10th International Conference, DIMVA 2013, Berlin, Germany, July 18-19, 2013, proceedings Y1 - 2013 SN - 978-3-642-39234-4 SP - 160 EP - 176 PB - Springer CY - Berlin [u.a.] ER - TY - CHAP A1 - Gäbler, Jan A1 - König, Hartmut T1 - Moversight: A Group Communication Protocol for Mobile Collaborative Applications T2 - Proceedings of the 6th Joint IFIP Wireless and Mobile Networking Conference (WMNC 2013), Dubai, United Arab Emirates, 23 - 25th April 2013 Y1 - 2013 SN - 978-1-4673-5615-2 SN - 978-1-4673-5614-5 SP - 72 EP - 79 PB - IEEE CY - Piscataway, NJ ER - TY - GEN A1 - Gäbler, Jan A1 - König, Hartmut T1 - Moversight: An Approach to Support Mobility in Collaborative Applications Y1 - 2013 UR - http://ieeexplore.ieee.org/xpl/articleDetails.jsp?arnumber=6578331 UR - http://ieeexplore.ieee.org/xpl/mostRecentIssue.jsp?punumber=6573245 SN - 978-1-4799-0747-2 N1 - 10th Annual Conference on Wireless On-demand Network Systems and Services (WONS), 2013 SP - 110 EP - 112 PB - IEEE ER - TY - CHAP A1 - Schuster, Franka A1 - Paul, Andreas A1 - König, Hartmut T1 - Towards Learning Normality for Anomaly Detection in Industrial Control Networks T2 - Proceedings of the 7th IFIP WG 6.6 International Conference on Autonomous Infrastructure, Management, and Security (AIMS 2013), Barcelona, Spain, June 25-28, 2013 Y1 - 2013 SN - 978-3-642-38997-9 SP - 61 EP - 72 PB - Heidleberg CY - Berlin [u.a.] ER - TY - CHAP A1 - Rietz, René A1 - Vogel, Michael A1 - Schuster, Franka A1 - König, Hartmut ED - Dietrich, Sven T1 - Parallelization of Network Intrusion Detection Systems under Attack Conditions T2 - Detection of Intrusions and Malware, and Vulnerability Assessment, 11th International Conference, DIMVA 2014, Egham, UK, July 10-11, 2014 Y1 - 2014 SN - 978-3-319-08508-1 SP - 172 EP - 191 PB - Springer International Publishing CY - Cham ER - TY - CHAP A1 - Mehner, Stefan A1 - Klauck, Ronny A1 - König, Hartmut ED - Makedon, Fillia ED - Betke, Margrit ED - Seif El-Nasr, Magy ED - Maglogiannis, Ilias T1 - Location-independent fall detection with smartphone T2 - The 6th International Conference on PErvasive Technologies Related to Assistive Environments, PETRA '13, Island of Rhodes, Greece, May 29-31, 2013 N2 - Due to demographic changes in developed industrial countries and a better medical care system, the number of elderly people who still live in their home environment is rapidly growing because there they feel more comfortable and independent as in a clinical environment or in a residential care home. The elderly often live alone and receive only irregular visits. Due to impaired physical skills the probability of falls significantly increases. The detection of falls is a crucial aspect in the care of elderly. Falls are often detected very late with severe consequential damages. There are existing approaches for automatic fall detection. They usually deploy special external devices. Elderly people often do not accept these devices because they expose their frailty. In this paper, we present a location-independent fall detection method implemented as a smartphone application for an inconspicuous use in nearly every situation of the daily life. The difficulty of our approach is in the low resolution range of integrated acceleration sensors and the limited energy supply of the smartphone. As solution, we apply a modular threshold-based algorithm which uses the acceleration sensor with moderate energy consumption. Its fall detection rate is in the average of current relevant research. Y1 - 2013 SN - 978-1-4503-1973-7 U6 - https://doi.org/10.1145/2504335.2504346 PB - ACM CY - New York, NY ER - TY - CHAP A1 - Gäbler, Jan A1 - Klauck, Ronny A1 - Pink, Mario A1 - König, Hartmut T1 - uBeeMe - a Platform to Enable Mobile Collaborative Applications T2 - Proceedings of the 9th International Conference on Collaborative Computing: Networking, Applications and Worksharing (CollaborateCom 2013), Austin, Texas, USA, October, 2013 Y1 - 2013 SP - 188 EP - 196 PB - IEEE CY - Piscataway, NJ ER - TY - GEN A1 - König, Hartmut A1 - Gäbler, Jan A1 - Klauck, Ronny A1 - Pink, Mario A1 - Sprejz, Michael T1 - uBeeMe - A Platform for Mobile Collaborative Applications T2 - PIK - Praxis der Informationsverarbeitung und Kommunikation Y1 - 2013 U6 - https://doi.org/10.1515/pik-2012-0058 SN - 0930-5157 VL - 36 IS - 1 SP - S. 43 ER - TY - CHAP A1 - Gäbler, Jan A1 - König, Hartmut T1 - Enhancing Group Communication Systems with Mobility Support T2 - Proceedings of the 19th IEEE International Conference on Networks (ICON 2013), Singapore, December 2013 Y1 - 2014 SN - 978-1-4799-2085-3 SP - 342 EP - 347 PB - IEEE CY - Piscataway, NJ ER - TY - CHAP A1 - Pink, Mario A1 - Sprejz, Michael A1 - König, Hartmut T1 - A Coordinated Group Decision for Vertical Handovers in Heterogeneous Wireless Networks T2 - 2013 International Conference on MOBILe Wireless MiddleWARE, Operating Systems, and Applications, Bologna, Italy, November 11-13, 2013 N2 - Cooperation and interactions of mobile users is a characteristic feature of mobile collaborative applications. The users are located in different mobile communication networks or move in or among them, respectively. This requires horizontal and vertical handovers. The latter is required when the networks use different network technologies. Usually each mobile device independently chooses the most appropriate network for its purposes to switch to. In group-oriented applications this may lead to an uncoordinated network selection and as consequence to increased energy consumption. In this paper, we present a distributed vertical handover decision algorithm that coordinates the selection of the network among the mobile devices in order to ensure an optimal quality of service for the collaborative application and a low energy consumption of the involved mobile devices. The network selection is based on the calculation of a group benefit for each alternative network using the Simple Additive Weighting (SAW) algorithm. The feasibility of the algorithm is evaluated regarding varying group sizes and resource requirements. Y1 - 2013 U6 - https://doi.org/10.1109/Mobilware.2013.20 SP - 130 EP - 137 PB - IEEE CY - Piscataway, NJ ER - TY - CHAP A1 - Opitz, Stefanie Judith A1 - Todtenberg, Nicole A1 - König, Hartmut T1 - Mobile bandwidth prediction in the context of emergency medical service T2 - Proceedings of the 7th International Conference on PErvasive Technologies Related to Assistive Environments (PETRA '14) Y1 - 2014 UR - http://doi.acm.org/10.1145/2674396.2674411 SN - 978-1-4503-2746-6 U6 - https://doi.org/10.1145/2674396.2674411 PB - ACM CY - New York, NY ER - TY - GEN A1 - Gäbler, Jan A1 - König, Hartmut T1 - Moversight: a group communication protocol for mobile scenarios T2 - Telecommunication systems : modeling, analysis, design and managementversion N2 - The increasing mobility of Internet users and the growing need to collaborate with staff travelling on business belong to the key characteristics of the future Internet. Mobile collaborative applications require novel schemes for group communication that actively support collaborations in wireless scenarios. An intrinsic problem of collaborations in wireless scenarios is the temporary connection loss with the group due to user mobility and network issues. Existing group communication protocols do not sufficiently support this situation. In this paper, we present a new peer-to-peer group communication protocol, called Moversight, that was specifically designed to support closed group cooperation in mobile environments with varying churn rates. It applies a new group communication paradigm, called mobile optimistic virtual synchrony, to handle churn-related peer failures. It enhances the virtual synchrony paradigm for mobile scenarios. The paper introduces the paradigm and describes the main protocol features of Moversight. Finally we present simulation results to demonstrate the applicability of the protocol. KW - Mobile group communication, Mobility support, Mobile collaborative applications, Closed groups, Group communication system, Virtual synchrony Y1 - 2016 UR - http://link.springer.com/article/10.1007%2Fs11235-015-0062-1 U6 - https://doi.org/10.1007/s11235-015-0062-1 SN - 1572-9451 SN - 1018-4864 VL - 61 IS - 4 SP - 695 EP - 716 ER - TY - CHAP A1 - Dacier, Marc C. A1 - Kargl, Frank A1 - König, Hartmut A1 - Valdes, Alfonso T1 - Network Attack Detection and Defense: Securing Industrial Control Systems for Critical Infrastructures T2 - Report from Dagstuhl Seminar 14292, 13. – 16. Juli 2014, N2 - This report documents the program and the outcomes of Dagstuhl Seminar 14292 “Network Attack Detection and Defense: Securing Industrial Control Systems for Critical Infrastructures”. The main objective of the seminar was to discuss new approaches and ideas for securing industrial control systems. It is the sequel of several previous Dagstuhl seminars: (1) the series “Network Attack Detection and Defense” held in 2008 and 2012, and (2) the Dagstuhl seminar “Securing Critical Infrastructures from Targeted Attacks”, held in 2012. At the seminar, which brought together members from academia an industry, appropriate methods for detecting attacks on industrial control systems (ICSs) and for limiting the impact on the physical components were considered. A central question was whether and how reactive security mechanisms can be made more ICS- and process-aware. To some extent it seems possible to adopt existing security approaches from other areas (e. g., conventional networks, embedded systems, or sensor networks). The main question is whether adopting these approaches is sufficient to reach the desired level of security for ICSs. Detecting attacks to the physical components and appropriate reactions to attacks are new aspects that need to be considered as well. The main result of the seminar is a list of recommendations for future directions in ICS security that is presented in this report. KW - Security, Intrusion Detection, Critical Infrastructures, Industrial Control Systems, SCADA, Vulnerability Analysis, Malware Assessment, Attack Response and Countermeasures Y1 - 2014 UR - http://www.dagstuhl.de/14292 U6 - https://doi.org/10.4230/DagRep.4.7.62 SP - 62 EP - 79 PB - Dagstuhl Publishing CY - Schloss Dagstuhl, Wadern ER - TY - GEN A1 - Kargl, Frank A1 - Heijden, Rens W. van der A1 - König, Hartmut A1 - Valdes, Alfonso A1 - Dacier, Marc C. T1 - Insights on the Security and Dependability of Industrial Control Systems T2 - IEEE Security & Privacy KW - Computer security;Industrial control;Industrial power systems;Industrial safety;Management;DCS;ICS;cyber-physical systems;distributed control systems;industrial control systems;security;security management Y1 - 2014 U6 - https://doi.org/10.1109/MSP.2014.120 SN - 1540-7993 VL - 12 IS - 6 SP - 75 EP - 78 ER - TY - GEN A1 - Liu, Fuwen A1 - König, Hartmut T1 - Puzzle - an efficient, compression independent video encryption algorithm T2 - Multimedia tools and applications Y1 - 2014 U6 - https://doi.org/10.1007/s11042-012-1185-y SN - 1573-7721 VL - 73 IS - 2 SP - 715 EP - 735 ER - TY - CHAP A1 - Gäbler, Jan A1 - König, Hartmut T1 - Distributed latency estimation using global knowledge for mobile collaborative applications T2 - International Wireless Communications and Mobile Computing Conference (IWCMC) 2015, Dubrovnik, Croatia, 24-28 Aug. 2015 Y1 - 2015 U6 - https://doi.org/10.1109/IWCMC.2015.7289130 SP - 474 EP - 479 PB - IEEE ER - TY - CHAP A1 - Schuster, Franka A1 - Paul, Andreas A1 - Rietz, René A1 - König, Hartmut T1 - Potentials of Using One-class SVM for Detecting Protocol-specific Anomalies in Industrial Networks T2 - Proceedings of the 2015 IEEE Symposium on Computational Intelligence in Cyber Security (IEEE CICS 2015) Y1 - 2015 U6 - https://doi.org/10.1109/SSCI.2015.22 SP - 83 EP - 90 PB - IEEE Press CY - New York ER - TY - GEN A1 - Stritter, Benjamin A1 - Freiling, Felix A1 - König, Hartmut A1 - Rietz, René A1 - Ullrich, Steffen A1 - Gernler, Alexander von A1 - Erlacher, Felix T1 - Cleaning up Web 2.0's Security Mess - at Least Partly T2 - IEEE Security & Privacy Y1 - 2016 UR - http://online.qmags.com/SNP0316?pg=92&mode=2#pg92&mode2 SN - 1540-7993 VL - 14 IS - 2 SP - 48 EP - 71 ER - TY - CHAP A1 - Paul, Andreas A1 - Schuster, Franka A1 - König, Hartmut T1 - Network Topology Exploration for Industrial Networks T2 - 2nd EAI International Conference on Industrial Networks and Intelligent Systems (INISCOM 2016), October 31 - November 1, 2016, Leicester, Great Britain Y1 - 2017 UR - http://www.springer.com/de/book/9783319525686 SN - 978-3-319-52568-6 U6 - https://doi.org/10.1007/978-3-319-52569-3 SP - 63 EP - 76 PB - Springer International Publishing CY - Cham ER - TY - CHAP A1 - Cwalinski, Radoslaw A1 - König, Hartmut T1 - RADIator - An approach for controllable wireless networks T2 - IEEE NetSoft Conference and workshops, 6-10 June 2016, Seoul, South Corea N2 - In this paper we propose a novel software-defined networking architecture for enterprise wireless local area networks (WLANs). The goal is to build a framework that exposes tools and methods for a centralized processing of IEEE 802.11 frames. In our architecture all management tasks, including beaconing, client authentication and association, are performed by the central controller instead of the distributed wireless access points as in traditional networks. The generated frames are tunneled to lightweight wireless access points (APs) or thin APs that perform the media access and radio frequency (RF) conversion. Agents executed on thin APs allow scheduling of simple tasks like traffic filtering for local execution. Additionally, the agents provide functions found in modern WLAN chipsets, such as precise frame transmit timings or RF spectrum analysis to the controller. Our architecture allows to delegate computationally intensive tasks to a central instance with enough processing power. Thus, it is best suited for devices with limited resources that we use as thin APs. We present applications that can be built using our framework, e.g., client geolocalization or energy consumption optimization. Finally we evaluate the performance of our architecture in a testbed using COTS devices with open-source software. Y1 - 2016 UR - http://ieeexplore.ieee.org/document/7502421/ SN - 978-1-4673-9486-4 U6 - https://doi.org/10.1109/NETSOFT.2016.7502421 SP - 260 EP - 268 PB - IEEE CY - Piscataway, NJ ER - TY - CHAP A1 - Rietz, René A1 - König, Hartmut A1 - Ullrich, Steffen A1 - Stritter, Benjamin T1 - Firewalls for the Web 2.0 T2 - Proceedings of the 2016 IEEE International Conference on Software Quality, Reliability and Security (QRS), 1-3 Aug. 2016 N2 - The widespread use of Web 2.0 technologies yields an increasing threat potential for users and related systems. Modern web applications and online services are nowadays based on Web 2.0 technologies, such as JavaScript and AJAX, and thus on the execution of active content in the browsers of the users. Firewalls are a common practice to securely connecting to the internet. In this paper, we propose a novel perimeter firewall architecture for web applications that addresses the entire process chain starting from the data transfer with HTTP via the analysis of manipulated web documents to the extraction and analysis of active contents. The basic idea is to allow only a restricted set of web applications to pass the firewall based on a model of their HTML and JavaScript structure. We evaluate the capability of the resulting models for identifying the underlying web applications and their ability to ward off additional malicious inputs. Y1 - 2016 UR - http://ieeexplore.ieee.org/document/7589804/ SN - 978-1-5090-4127-5 SN - 978-1-5090-4128-2 U6 - https://doi.org/10.1109/QRS.2016.36 SP - 242 EP - 253 PB - IEEE CY - Piscataway, NJ ER - TY - CHAP A1 - Dacier, Marc C. A1 - Dietrich, Sven A1 - Kargl, Frank A1 - König, Hartmut T1 - Network Attack Detection and Defense – Security Challenges and Opportunities of Software-Defined Networking T2 - Network Attack Detection and Defense, Dagstuhl Seminar 16361 N2 - This report documents the program and the outcomes of Dagstuhl Seminar 16361 "Network Attack Detection and Defense: Security Challenges and Opportunities of Software-Defined Networking". Software-defined networking (SDN) has attracted a great attention both in industry and academia since the beginning of the decade. This attention keeps undiminished. Security-related aspects of software-defined networking have only been considered more recently. Opinions differ widely. The main objective of the seminar was to discuss the various contrary facets of SDN security. The seminar continued the series of Dagstuhl events Network Attack Detection and Defense held in 2008, 2012, and 2014. The objectives of the seminar were threefold, namely (1) to discuss the security challenges of SDN, (2) to debate strategies to monitor and protect SDN-enabled networks, and (3) to propose methods and strategies to leverage on the flexibility brought by SDN for designing new security mechanisms. At the seminar, which brought together participants from academia and industry, we discussed the advantages and disadvantages of using software-defined networks from the security point of view. We agreed that SDN provides new possibilities to better secure networks, but also offers a number of serious security problems which require further research. The outcome of these discussions and the proposed research directions are presented in this report. Y1 - 2016 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:0030-drops-69122 UR - http://drops.dagstuhl.de/opus/volltexte/2017/6912/ SP - 1 EP - 28 PB - Schloss Dagstuhl CY - Wadern ER - TY - CHAP A1 - Gäbler, Jan A1 - König, Hartmut T1 - Distributed Cluster-Topology Maintenance for Mobile Collaborative Applications T2 - IEEE 41st Conference on Local Computer Networks (LCN), 7-10 Nov. 2016 N2 - Nowadays, collaborative applications play an increasing role in mobile communications in order to enable cooperation among mobile and/or stationary participants – often using the peer-to-peer (P2P) group communication paradigm. The probability of communication failures increases in mobile environments. As a consequence, frequent leaving and joining of partners can be observed resulting in unstable group topologies. A widely used approach is to divide the group into peer clusters that are fully meshed among each other. In this paper, we propose an application-independent approach for a periodic maintenance of distributed cluster-based group topologies for mobile collaborative applications. The proposed approach also dynamically adapts the overlay structure to changing network conditions. The maintenance strategy can be parametrized by several metrics. It outperforms simple overlay maintenance strategies, such as round-robin, by respecting the resource and computation limitations of mobile devices. The run-time is increased by 10% in the best case compared to LEACH, and by 3 — 5% on average. We describe the approach and evaluate its performance w.r.t. different metrics. Y1 - 2016 UR - http://ieeexplore.ieee.org/document/7796799/ SN - 978-1-5090-2054-6 SN - 978-1-5090-2055-3 U6 - https://doi.org/10.1109/LCN.2016.55 SP - 271 EP - 279 PB - IEEE CY - Piscataway, NJ ER - TY - GEN A1 - Schuster, Franka A1 - Paul, Andreas A1 - König, Hartmut T1 - Messung der technischen IT-Sicherheit in Energieversorgungsanlagen zur Erfüllung des IT-Sicherheitsgesetzes T2 - International Journal for Electricy and Heat Generation, VGB Powertech Y1 - 2017 SN - 1435-3199 VL - 97 IS - 3 SP - 76 EP - 82 ER - TY - CHAP A1 - König, Hartmut A1 - Ulrich, Andreas A1 - Heiner, Monika ED - Kim, Myungchul ED - Kang, Sungwon ED - Hong, Keesoo T1 - Design for Testability: A Step-wise Approach to Protocol Testing T2 - Testing of Communicating Systems, IFIP TC6 10th International Workshop on Testing of Communicating Systems, 8-10 September 1997, Cheju Island, Korea Y1 - 1997 SN - 978-1-4757-6701-8 SN - 978-0-387-35198-8 U6 - https://doi.org/10.1007/978-0-387-35198-8_9 N1 - referiert SP - 125 EP - 140 PB - Springer CY - Boston ER - TY - CHAP A1 - Cwalinski, Radoslaw A1 - König, Hartmut T1 - Identifying Malicious Traffic in Software-Defined Wireless Local Area Networks T2 - 2018 International Conference on Computing, Networking and Communications (ICNC), Maui, HI, USA, 2018 KW - Communication system security KW - Hardware KW - IEEE 802.11 Standard KW - Security KW - Wireless LAN KW - Wireless networks Y1 - 2018 UR - http://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=8390307&isnumber=8390234 SN - 978-1-5386-3652-7 U6 - https://doi.org/10.1109/ICCNC.2018.8390307 SP - 195 EP - 199 PB - IEEE ER - TY - CHAP A1 - Schuster, Franka A1 - Kopp, Fabian Malte A1 - Paul, Andreas A1 - König, Hartmut T1 - Attack and Fault Detection in Process Control Communication Using Unsupervised Machine Learning T2 - IEEE 16th International Conference on Industrial Informatics (INDIN), Porto, Portugal, 18-20 July 2018 Y1 - 2018 SN - 978-1-5386-4829-2 U6 - https://doi.org/10.1109/INDIN.2018.8472054 SP - 433 EP - 438 PB - IEEE CY - Piscataway, NJ ER - TY - CHAP A1 - Schuster, Franka A1 - Paul, Andreas A1 - Kopp, Fabian Malte A1 - König, Hartmut T1 - Catching Intrusions: Classifier Performances for Detecting Network-specific Anomalies in Energy Systems T2 - 2018 International Conference on Smart Energy Systems and Technologies (SEST), Seville, Spain, September 2018 Y1 - 2018 SN - 978-1-5386-5326-5 U6 - https://doi.org/10.1109/SEST.2018.8495702 PB - IEEE CY - Piscataway, NJ ER -