TY - CHAP A1 - Kirst, Stefan A1 - Clausing, Eric A1 - Dittmann, Jana A1 - Vielhauer, Claus ED - Lewis, Colin ED - Burgess, Douglas T1 - A first approach to the detection and equalization of distorted latent fingerprints and microtraces on non-planar surfaces with confocal laser microscopy T2 - Konferenz: SPIE Security + Defence 24-27 September 2012; Edinburgh, United Kingdom/ Titel: Proceedings Volume 8546 SPIE Security + Defence | 24-27 September 2012 Optics and Photonics for Counterterrorism, Crime Fighting, and Defence VIII Y1 - 2012 UR - http://proceedings.spiedigitallibrary.org/proceeding.aspx?doi=10.1117/12.971452 U6 - https://doi.org/10.1117/12.971452 PB - SPIE ER - TY - CHAP A1 - Clausing, Eric A1 - Kraetzer, Christian A1 - Dittmann, Jana A1 - Vielhauer, Claus T1 - A first approach for digital representation and automated classification of toolmarks on locking cylinders using confocal laser microscopy T2 - Konferenz: SPIE Security + Defence 24-27 September 2012; Edinburgh, United Kingdom/ Titel: Proceedings Volume 8546 - SPIE Security + Defence 24-27 September 2012 - Optics and Photonics for Counterterrorism, Crime Fighting, and Defence VIII Y1 - 2012 UR - http://proceedings.spiedigitallibrary.org/proceeding.aspx?doi=10.1117/12.971454 U6 - https://doi.org/10.1117/12.971454 PB - SPIE ER - TY - CHAP A1 - Merkel, Ronny A1 - Pocs, Matthias A1 - Dittmann, Jana A1 - Vielhauer, Claus ED - Di Pietro, Roberto ED - Herranz, Javier ED - Damiani, Ernesto ED - State, Radu T1 - Proposal of Non-invasive Fingerprint Age Determination to Improve Data Privacy Management in Police Work from a Legal Perspective Using the Example of Germany T2 - Konferenz: International Workshop on Autonomous and Spontaneous Security/ Titel: Data Privacy Management and Autonomous Spontaneous Security T3 - Lecture notes in computer science - 7731 Y1 - 2013 UR - 978-3-642-35889-0 978-3-642-35890-6 SN - 978-3-642-35889-0 978-3-642-35890-6 U6 - https://doi.org/10.1007/978-3-642-35890-6_5 SP - 61 EP - 74 PB - Springer Berlin Heidelberg CY - Berlin, Heidelberg ER - TY - INPR A1 - Wendzel, Steffen A1 - Caviglione, Luca A1 - Mazurczyk, Wojciech A1 - Mileva, Aleksandra A1 - Dittmann, Jana A1 - Krätzer, Christian A1 - Lamshöft, Kevin A1 - Vielhauer, Claus A1 - Hartmann, Laura A1 - Keller, Jörg A1 - Neubert, Tom A1 - Zillien, Sebastian T1 - A Generic Taxonomy for Steganography Methods N2 - A unified understanding of terms and their applicability is essential for every scientific discipline: steganography is no exception. Being divided into several domains (for instance, text steganography, digital media steganography, and network steganography), it is crucial to provide a unified terminology as well as a taxonomy that is not limited to some specific applications or areas. A prime attempt towards a unified understanding of terms was conducted in 2015 with the introduction of a pattern-based taxonomy for network steganography. Six years later, in 2021, the first work towards a pattern-based taxonomy for steganography was proposed. However, this initial attempt still faced several shortcomings, e.g., the lack of patterns for several steganography domains (the work mainly focused on network steganography and covert channels), various terminology issues, and the need of providing a tutorial on how the taxonomy can be used during engineering and scientific tasks, including the paper-writing process.

As the consortium who published this initial 2021-study on steganography patterns, in this paper we present the first comprehensive pattern-based taxonomy tailored to fit all known domains of steganography, including smaller and emerging areas, such as filesystem steganography and cyber-physical systems steganography. Besides, to make our contribution more effective and promote the use of the taxonomy to advance research on steganography, we also provide a thorough tutorial on its utilization.

Our pattern collection is available at https://patterns.ztt.hs-worms.de.

Y1 - 2023 U6 - https://doi.org/10.36227/techrxiv.20215373.v1 ER - TY - CHAP A1 - Lamshöft, Kevin A1 - Neubert, Tom A1 - Krätzer, Christian A1 - Vielhauer, Claus A1 - Dittmann, Jana T1 - Information Hiding in Cyber Physical Systems: Challenges for Embedding, Retrieval and Detection using Sensor Data of the SWAT Dataset T2 - IH&MMSec '21: Proceedings of the ACM Workshop on Information Hiding and Multimedia Security; Virtual Event Belgium, June 22 - 25, 2021 KW - Information Hiding KW - Steganography KW - Covert Channels KW - Network Covert Channels KW - Cyber Physical Systems KW - Industrial Control Systems KW - Sensor KW - Steganalysis KW - Detection KW - Warden Y1 - 2021 SN - 978-1-4503-8295-3 U6 - https://doi.org/10.1145/3437880.3460413 SP - 113 EP - 124 PB - ACM CY - New York ER - TY - CHAP A1 - Wendzel, Steffen A1 - Caviglione, Luca A1 - Mazurczyk, Wojciech A1 - Mileva, Aleksandra A1 - Dittmann, Jana A1 - Krätzer, Christian A1 - Lamshöft, Kevin A1 - Vielhauer, Claus A1 - Hartmann, Laura A1 - Keller, Jörg A1 - Neubert, Tom T1 - A Revised Taxonomy of Steganography Embedding Patterns T2 - Konferenz: ARES 2021: The 16th International Conference on Availability, Reliability and Security, Vienna Austria, 2021/ Konferenzband: Proc. of the 16th International Conference on Availability, Reliability and Security (ARES'21), August 17--20, 2021, Vienna, Austria N2 - Steganography embraces several hiding techniques which spawn across multiple domains. However, the related terminology is not unified among the different domains, such as digital media steganography, text steganography, cyber-physical systems steganography, network steganography (network covert channels), local covert channels, and out-of-band covert channels. To cope with this, a prime attempt has been done in 2015, with the introduction of the so-called hiding patterns, which allow to describe hiding techniques in a more abstract manner. Despite significant enhancements, the main limitation of such a taxonomy is that it only considers the case of network steganography. Therefore, this paper reviews both the terminology and the taxonomy of hiding patterns as to make them more general. Specifically, hiding patterns are split into those that describe the embedding and the representation of hidden data within the cover object. As a first research action, we focus on embedding hiding patterns and we show how they can be applied to multiple domains of steganography instead of being limited to the network scenario. Additionally, we exemplify representation patterns using network steganography. Y1 - 2021 UR - https://dl.acm.org/doi/10.1145/3465481.3470069 SN - 978-1-4503-9051-4 U6 - https://doi.org/10.1145/3465481.3470069 SP - 1 EP - 12 PB - ACM CY - Vienna Austria ER - TY - CHAP A1 - Kevin, Lamshöft A1 - Hildebrandt, Mario A1 - Altschaffel, Robert A1 - Keil, Oliver A1 - Hempel, Ivo A1 - Dittmann, Jana A1 - Neubert, Tom A1 - Vielhauer, Claus T1 - Resilience against and detection of information hiding in nuclear instrumentation and control systems within the scope of NSS 17-T T2 - Kerntechnik 2022, Leipzig, 21. - 22. Juni 2022 Y1 - 2022 UR - https://www.kerntechnik.com PB - INFORUM Verlags- und Verwaltungsgesellschaft mbH CY - Berlin ER - TY - JOUR A1 - Whiskerd, Nicholas A1 - Körtge, Nicklas A1 - Jürgens, Kris A1 - Ezennaya-Gomez, Salatiel A1 - Vielhauer, Claus A1 - Dittmann, Jana A1 - Hildebrandt, Mario T1 - Keystroke biometrics in the encrypted domain: a first study on search suggestion functions of web search engines JF - EURASIP Journal on Information Security KW - keystroke dynamics KW - biometrics KW - search engines KW - encrypted domain Y1 - 2020 U6 - https://doi.org/10.1186/s13635-020-0100-8 IS - 2020:2 PB - Springer ER - TY - CHAP A1 - Hildebrandt, Mario A1 - Lamshöft, Kevin A1 - Dittmann, Jana A1 - Neubert, Tom A1 - Vielhauer, Claus T1 - Information Hiding in Industrial Control Systems: An OPC UA based Supply Chain Attack and its Detection T2 - Proceedings of the 2020 ACM Workshop on Information Hiding and Multimedia Security (IH&MMSec’20), June 22–24, 2020, Denver, CO, USA KW - Information Hiding KW - Steganography KW - Process automation KW - Industrial Control Systems KW - OPC UA Y1 - 2020 U6 - https://doi.org/10.1145/3369412 SP - 115 EP - 120 PB - The Association for Computing Machinery CY - New York ER - TY - CHAP A1 - Ezennaya-Gomez, Salatiel A1 - Vielhauer, Claus A1 - Dittmann, Jana ED - Katsikas, Sokratis ED - Lambrinoudakis, Costas ED - Cuppens, Nora ED - Mylopoulos, John ED - Kalloniatis, Christos ED - Meng, Weizhi ED - Furnell, Steven ED - Pallas, Frank ED - Pohle, Jörg ED - Sasse, M. Angela ED - Abie, Habtamu ED - Ranise, Silvio ED - Verderame, Luca ED - Vidal, Jorge Maestre ED - Cambiaso, Enrico ED - Monge, Marco Antonio Sotelo T1 - A Semantic Model for Embracing Privacy as Contextual Integrity in the Internet of Things T2 - European Symposium on Research in Computer Security, Cham, 2022 Konferenzband: Computer Security. ESORICS 2021 International Workshops N2 - Due to the increasing number of complaints alleging privacy violations against companies to data protection authorities, the translation of business goals to system design goals and the subsequent consequences for customers’ privacy poses a challenge for many companies. For this reason, there is a need to bridge the economics of privacy and threats to privacy. To this end, our work relies on the concept of privacy as contextual integrity. This framework defines privacy as appropriate information flows subjected to social norms within particular social contexts or spheres. In this paper, we introduce a preliminary version of a semantic model which aims to relate and provide understanding on how well-established business goals may affect their customers’ privacy by designing IoT devices with permission access, data acquired by sensors, among other factors. Finally, we provide a use case application showing how to use the semantic model. The model aims to be an educational tool for professionals in business informatics during the modeling and designing process of a product which may gather sensitive data or may infer sensitive information, giving an understanding of the interaction of the product and its footprint with diverse actors (humans or machines). In the future, a further complete model of the presented may also target other groups, such as law enforcement bodies, as part of their educational training in such systems. T3 - Lecture notes in computer science - 13106 Y1 - 2022 UR - https://link.springer.com/10.1007/978-3-030-95484-0_24 SN - 978-3-030-95483-3 978-3-030-95484-0 U6 - https://doi.org/10.1007/978-3-030-95484-0_24 IS - 13106 SP - 413 EP - 423 PB - Springer CY - Cham ER - TY - CHAP A1 - Hildebrandt, Mario A1 - Altschaffel, Robert A1 - Lamshöft, Kevin A1 - Lange, Mathias A1 - Szemkus, Martin A1 - Neubert, Tom A1 - Vielhauer, Claus A1 - Ding, Yongjian A1 - Dittmann, Jana T1 - Threat Analysis of Steganographic and Covert Communication in Nuclear I&C Systems T2 - Konferenz: International Conference on Nuclear Security: Sustaining and Strengthening Efforts (ICONS), Vienna, Austria, 2020/ Konferenzband: International Conference on Nuclear Security: Sustaining and Strengthening Efforts N2 - Steganographic and covert communication is increasingly used for hiding attacks. Often information hiding is used by attackers in advanced persistent threats in order to operate without being noticed. Attackers might use it to hide data exfiltration or control channels for persistent malware. The paper analyzes potential threats to operational technology by investigating different communication protocols towards their suitability as cover channels. Using a generalized network architecture model and the communication flows of nuclear power plants, the attack potential using information hiding is exemplary assessed. An example for a supply chain attack for command injection is given on the foundation of the OPC UA protocol and an off-theshelf programmable logic controller. Subsequently, recommendations for a strategic and operational preparation for operators towards the prevention and detection of information hiding attacks are derived. Y1 - 2020 UR - https://www.researchgate.net/publication/350966454_Threat_Analysis_of_Steganographic_and_Covert_Communication_in_Nuclear_IC_Systems PB - IAEA CY - Vienna, Austria ER - TY - JOUR A1 - Pilgermann, Michael A1 - Vielhauer, Claus A1 - Petrov, Denis A1 - Dittmann, Jana A1 - Krätzer, Christian T1 - Attribution im IT-Grundschutz des BSI: Ausweitung der Detektion von Cyberangriffen im IT-Sicherheitsprozess JF - Datenschutz und Datensicherheit (DuD) N2 - Inzwischen hat sich die Einsicht durchgesetzt, dass Cyberangriffe nicht komplett verhindert werden können. Stattdessen sollen die möglichen Auswirkungen von Vorfällen sinnvoll reduziert werden. Damit steigt die Bedeutung der Erkennung von Sicherheitsvorfällen, um schnell reagieren und das Schadensausmaß begrenzen zu können. Damit die Fortschritte bei der Erkennung künftig auch in der Praxis angewendet werden können, ist eine Verankerung in den entsprechenden Vorgehensweisen erforderlich. Dies erfolgt nachfolgend am Beispiel des IT-Grundschutzes, dessen Methoden in der deutschsprachigen IT-Sicherheitscommunity verbreitet sind. Y1 - 2025 U6 - https://doi.org/10.1007/s11623-025-2173-5 VL - 49 IS - 11 SP - 731 EP - 736 PB - Springer ER -