@misc{Runge2023, type = {Master Thesis}, author = {Runge, Tilman}, title = {Dismantling the Quantum Threat}, doi = {10.25933/opus4-2888}, url = {http://nbn-resolving.de/urn:nbn:de:kobv:522-opus4-28889}, school = {Technische Hochschule Brandenburg}, pages = {66}, year = {2023}, abstract = {The Quantum Threat looms over cryptography: Once strong quantum computers become available, its game over for encryption and privacy. This widespread understanding of the how cryptography will be impacted by quantum computing is challenged in this thesis to achieve a more nuanced understanding of both the ramifications of the Quantum Threat and potential countermeasures to it.}, subject = {Computersicherheit}, language = {en} } @masterthesis{Ferneding2024, type = {Bachelor Thesis}, author = {Ferneding, Conrad}, title = {Analysis of Vulnerability CVE-2024-3094 in XZ Utils: Precedent Supply Chain Attack and Incident Analysis}, publisher = {Technische Hochschule Brandenburg}, address = {Brandenburg an der Havel}, doi = {10.25933/opus4-3227}, url = {http://nbn-resolving.de/urn:nbn:de:kobv:522-opus4-32278}, school = {Technische Hochschule Brandenburg}, year = {2024}, abstract = {This thesis falls within the domain of cybersecurity and computer science, specifically focusing on the vulnerability CVE-2024-3094, which has a CVSS score of 10, discovered in late March of 2024. It integrates methodologies from network security, reverse engineering, and OSINT to thoroughly investigate this vulnerability. An aspect of this thesis will be the exploration of the incident and its social engineering campaign that led to a threat actor becoming a maintainer of XZ Utils. Another part of this work will be the analysis of how the vulnerability in XZ Utils affects SSH and whether SSH authentication is compromised by this vulnerability. The objective is to conduct a Proof of Concept (PoC) to demonstrate the presence of the backdoor.}, subject = {Computersicherheit}, language = {en} } @techreport{Brucker2025, author = {Brucker, Amelie}, title = {Analyse von Cyber Threat Intelligence Quellen aus dem Projekt SzA4Hosp}, publisher = {Technische Hochschule Brandenburg}, address = {Brandenburg an der Havel}, organization = {Technische Hochschule Brandenburg}, doi = {10.25933/opus4-3274}, url = {http://nbn-resolving.de/urn:nbn:de:kobv:522-opus4-32741}, pages = {69}, year = {2025}, abstract = {Im Rahmen des Projekts "SzA4Hosp - Systeme zur Angriffserkennung in der Medizinischen Versorgung" wurde eine Erhebung f{\"u}r deutsche Krankenh{\"a}user durchgef{\"u}hrt, bei der genutzte Quellen f{\"u}r Cyber Threat Intelligence identifiziert wurden. Diese Arbeit stellt die 41 dabei erfassten Quellen hinsichtlich verschiedener Attribute wie Format, Inhalt und Bereitstellungsmodell vor. Abschließend erfolgt eine {\"u}bergreifende Auswertung der Quellen in Bezug auf die Formate, in denen sie Informationen bereitstellen. Es wird gezeigt, dass die Verwendung von nat{\"u}rlicher Sprache in den untersuchten Quellen deutlich verbreiteter ist, als der Einsatz strukturierter Formate.}, subject = {Computersicherheit}, language = {de} }