TY - JOUR A1 - Pilgermann, Michael A1 - Vielhauer, Claus A1 - Petrov, Denis A1 - Dittmann, Jana A1 - Krätzer, Christian T1 - Attribution im IT-Grundschutz des BSI: Ausweitung der Detektion von Cyberangriffen im IT-Sicherheitsprozess JF - Datenschutz und Datensicherheit (DuD) N2 - Inzwischen hat sich die Einsicht durchgesetzt, dass Cyberangriffe nicht komplett verhindert werden können. Stattdessen sollen die möglichen Auswirkungen von Vorfällen sinnvoll reduziert werden. Damit steigt die Bedeutung der Erkennung von Sicherheitsvorfällen, um schnell reagieren und das Schadensausmaß begrenzen zu können. Damit die Fortschritte bei der Erkennung künftig auch in der Praxis angewendet werden können, ist eine Verankerung in den entsprechenden Vorgehensweisen erforderlich. Dies erfolgt nachfolgend am Beispiel des IT-Grundschutzes, dessen Methoden in der deutschsprachigen IT-Sicherheitscommunity verbreitet sind. Y1 - 2025 U6 - https://doi.org/10.1007/s11623-025-2173-5 VL - 49 IS - 11 SP - 731 EP - 736 PB - Springer ER - TY - JOUR A1 - Neubert, Tom A1 - Schueler, Eric A1 - Ullrich, Henning A1 - Buxhoidt, Laura A1 - Vielhauer, Claus T1 - Extended Analysis, Detection and Attribution of Steganographic Embedding Methods in Network Data of Industrial Controls Systems JF - International Journal on Advances in Security N2 - Since the last decade, it is well known that Industrial Control Systems (ICS) are under attack and attackers nowadays increasingly use stealthy malware (i.e., stegomalware) imple- mented by steganographic embedding methods to in- and exfil- trate hidden information. Unfortunately, current mechanisms to distinguish between network steganographic embedding methods and embedded message types need improvement for a potential attribution of attackers. For the analysis of steganographic em- bedding methods which are utilized in stealthy malware, the work presented in this paper builds upon a state-of-the-art analysis testbed proposed earlier, which is recapitulated here. It offers the opportunity to analyze network steganographic embedding methods in ICS to elaborate methods to detect and distinguish between them to gain forensic information for attribution of potential attackers and their methods. In this work, we introduce a novel machine learning based approach to distinguish between five selected embedding methods and two embedded message types. We use the analysis testbed to evaluate and determine the accuracy of the novel approach compared to a state-of-the-art approach. In our extensive evaluation, our novel approach has shown to be able to distinguish between network steganographic embedding methods with an average accuracy of 85.7%, which is an improvement in comparison to the state-of-the-art by +5.9% and enables a more accurate attribution of attackers. Additionally, the novel approach is able to improve the accuracy of distinction between embedding method and embedded message type by +9.3% in comparison to the evaluated state-of-the-art approach. Y1 - 2025 VL - 18 IS - 1&2 SP - 112 EP - 122 PB - IARIA ER - TY - JOUR A1 - Neubert, Tom A1 - Vielhauer, Claus T1 - Kill Chain Attack Modelling for Hidden Channel Attack Scenarios in Industrial Control Systems JF - IFAC-PapersOnLine Y1 - 2020 UR - https://linkinghub.elsevier.com/retrieve/pii/S2405896320305231 U6 - https://doi.org/10.1016/j.ifacol.2020.12.246 SN - 24058963 SP - 11074 EP - 11080 PB - Elsevier ER - TY - JOUR A1 - Lamshöft, Kevin A1 - Neubert, Tom A1 - Hielscher, Jonas A1 - Vielhauer, Claus T1 - Knock, knock, log: Threat analysis, detection & mitigation of covert channels in syslog using port scans as cover JF - Forensic Science International: Digital Investigation Y1 - 2022 U6 - https://doi.org/10.1016/j.fsidi.2022.301335 SN - 2666-2817 VL - 40 PB - Elsevier ER - TY - JOUR A1 - Whiskerd, Nicholas A1 - Körtge, Nicklas A1 - Jürgens, Kris A1 - Ezennaya-Gomez, Salatiel A1 - Vielhauer, Claus A1 - Dittmann, Jana A1 - Hildebrandt, Mario T1 - Keystroke biometrics in the encrypted domain: a first study on search suggestion functions of web search engines JF - EURASIP Journal on Information Security KW - keystroke dynamics KW - biometrics KW - search engines KW - encrypted domain Y1 - 2020 U6 - https://doi.org/10.1186/s13635-020-0100-8 IS - 2020:2 PB - Springer ER - TY - JOUR A1 - Scheidat, Tobias A1 - Kalbitz, Michael A1 - Vielhauer, Claus T1 - Biometric authentication based on 2D/3D sensing of forensic handwriting traces JF - IET Biometrics KW - feature extraction KW - handwriting recognition KW - image classification KW - image enhancement KW - image segmentation Y1 - 2017 U6 - https://doi.org/10.1049/iet-bmt.2016.0127 VL - 6 IS - 4 SP - 316 EP - 324 ER - TY - JOUR A1 - Merkel, Ronny A1 - Dittmann, Jana A1 - Vielhauer, Claus T1 - A first public research collection of high-resolution latent fingerprint time series for short- and long-term print age estimation JF - IEEE transactions on information forensics and security Y1 - 2017 U6 - https://doi.org/10.1109/TIFS.2017.2705622 VL - 12 IS - 10 SP - 2276 EP - 2291 ER - TY - JOUR A1 - Köppen, Veit A1 - Krätzer, Christian A1 - Dittmann, Jana A1 - Saake, Gunter A1 - Vielhauer, Claus T1 - Impacts on Database Performance in a Privacy-Preserving Biometric Authentication : Scenario JF - International Journal on Advances in Security Y1 - 2015 VL - 8 IS - 1/2 SP - 99 EP - 108 PB - IARIA ER - TY - JOUR A1 - Merkel, Ronny A1 - Gruhn, Stefan A1 - Dittmann, Jana A1 - Vielhauer, Claus A1 - Bräutigam, Anja T1 - On non-invasive 2D and 3D Chromatic White Light image sensors for age determination of latent fingerprints JF - Forensic science international : an international journal dedicated to the applications of medicine and science in the administration of justice KW - Crime scene forensics KW - Latent fingerprints KW - Age determination KW - Binary pixel feature KW - Chromatic White Light sensor KW - Influences on fingerprint aging KW - Fingerprint aging variability Y1 - 2012 U6 - https://doi.org/10.1016/j.forsciint.2012.05.001 VL - 222 IS - 1-3 SP - 52 EP - 70 PB - Elsevier Science CY - Amsterdam ER - TY - JOUR A1 - Makrushin, Andrey A1 - Scheidat, Tobias A1 - Vielhauer, Claus T1 - Improving Reliability of Biometric Hash Generation through the Selection of Dynamic Handwriting Features JF - Transactions on Data Hiding and Multimedia Security VIII T3 - Lecture notes in computer science - 7228 Y1 - 2012 SN - 978-3-642-31971-6 U6 - https://doi.org/10.1007/978-3-642-31971-6_2 SP - 19 EP - 41 PB - Springer CY - Berlin ER - TY - JOUR A1 - Dittmann, Jana A1 - Vielhauer, Claus A1 - Ulrich, Michael A1 - Pocs, Matthias T1 - Fingerspuren in der Tatortforensik JF - Digma : Zeitschrift für Datenrecht und Informationssicherheit Y1 - 2012 SN - 1424-9944 VL - 12 IS - 2 SP - 80 EP - 83 PB - Zürich CY - Schulthess Juristische Medien ER -