@inproceedings{KnierimPrangeAltetal.2022, author = {Knierim, Pascal and Prange, Sarah and Alt, Florian and Feger, Sebastian and Schneegass, Stefan and Sasse, M. Angela and Bayerl, Dominik and Hof, Hans-Joachim}, title = {Inclusive Security by Design}, booktitle = {Mensch und Computer 2022 - Workshopband}, editor = {Marky, Karola and Gr{\"u}nefeld, Uwe and Kosch, Thomas}, publisher = {Gesellschaft f{\"u}r Informatik e.V.}, address = {Bonn}, doi = {https://doi.org/10.18420/muc2022-mci-ws14-128}, year = {2022}, language = {en} } @inproceedings{BayerlHutzelmannHof2025, author = {Bayerl, Dominik and Hutzelmann, Thomas and Hof, Hans-Joachim}, title = {Efficient Cross-Architecture Binary Function Embeddings through Knowledge Distillation}, booktitle = {Proceedings of the 11th ACM Cyber-Physical System Security Workshop}, publisher = {ACM}, address = {New York}, isbn = {979-8-4007-1413-9}, doi = {https://doi.org/10.1145/3709017.3737709}, pages = {43 -- 51}, year = {2025}, abstract = {Deep learning has recently been shown to be effective in various tasks related to static binary analysis. One important analysis task is the binary function similarity problem: Given the binary code of two functions compiled with different compilers, different settings, and different processor architectures, the goal is to decide whether the functions are semantically equivalent (i.e. "similar") or not. This problem has numerous applications for embedded systems, for example plagiarism detection, validation of compliance restrictions with usable software licenses, more efficient reverse engineering of existing binary codebases, or vulnerability scanning by detecting known vulnerable functions. In this paper, we propose a novel training scheme for the popular transformer neural network architecture to learn function embeddings directly from instruction listings. Unlike existing approaches, our solution explicitly considers the cross-architecture scenario: we propose a training method to adapt the model to different instruction set architectures (ISA) without having to train a new model from scratch, which allows the model to also be used efficiently for embedded systems, where there are a variety of different processor architectures. We show that our solution achieves a similarity classification accuracy of 89.6\% on a dataset consisting of several real-world open source software projects. Finally, we conduct extensive experiments to demonstrate the effectiveness of knowledge distillation in increasing the computational efficiency of the embedding model. We demonstrate a reduction in the number of parameters from 87M to 23M, while still maintaining a classification accuracy of 87.8\%. Our code and artifacts are available as open source.}, language = {en} } @inproceedings{EderLoewHof2025, author = {Eder, Lukas and L{\"o}w, Jakob and Hof, Hans-Joachim}, title = {Charging Communication Sniffing and Man-in-the-Middle Attacks}, booktitle = {Proceedings of the 16th ACM International Conference on Future and Sustainable Energy Systems}, publisher = {ACM}, address = {New York}, isbn = {979-8-4007-1125-1}, doi = {ttps://doi.org/10.1145/3679240.3734648}, pages = {799 -- 804}, year = {2025}, abstract = {In recent years an increasing amount of electric vehicle fast charging stations have been built to meet the growing demand from rising electric vehicle numbers. The standard for fast charging communication in europe is ISO 15118. In theory the standard includes security controls for authentication and transport encryption. In reality difficulties with implementing those security controls as well as insecure design within the standard lead to multiple possible attack vectors compromising the confidentiality and authenticity of charging communication sessions. The goal of this research is to present different approaches towards performing sniffing and man-in-the-middle attacks against charging communication. We also provide a novel approach, which does not rely on race conditions and thus is more reliable than previous approaches.}, language = {en} } @inproceedings{deMeerWaedtRennochetal.2019, author = {de Meer, Jan and Waedt, Karl and Rennoch, Axel and Hof, Hans-Joachim}, title = {4th GI/ACM Workshop on standardization of I4.0 automation and control systems}, volume = {2019}, booktitle = {Lecture Notes in Informatics (LNI) - Proceedings}, number = {Volume P-295}, publisher = {Gesellschaft f{\"u}r Informatik}, address = {Bonn}, isbn = {978-3-88579-689-3}, issn = {1617-5468}, doi = {https://doi.org/10.18420/inf2019_ws27}, pages = {241 -- 242}, year = {2019}, language = {en} } @inproceedings{MayerVolkersdorferHofbaueretal.2024, author = {Mayer, Kevin and Volkersdorfer, Tina and Hofbauer, Jenny and Heinl, Patrizia and Hof, Hans-Joachim}, title = {Vehicle Security Operations Center for Cooperative, Connected and Automated Mobility}, booktitle = {SECURWARE 2024: The Eighteenth International Conference on Emerging Security Information, Systems and Technologies}, editor = {Hussain, Fatima and Fries, Steffen}, publisher = {IARIA}, address = {[s. l.]}, isbn = {978-1-68558-206-7}, url = {https://www.thinkmind.org/library/SECURWARE/SECURWARE_2024/securware_2024_2_190_30080.html}, pages = {156 -- 164}, year = {2024}, language = {en} } @inproceedings{MichlHof2024, author = {Michl, Marco and Hof, Hans-Joachim}, title = {Towards a Stakeholder-Centric Trust Management Approach for the Automotive Ecosystem}, booktitle = {SECURWARE 2024: The Eighteenth International Conference on Emerging Security Information, Systems and Technologies}, editor = {Hussain, Fatima and Fries, Steffen}, publisher = {IARIA}, address = {[s. l.]}, isbn = {978-1-68558-206-7}, url = {https://www.thinkmind.org/library/SECURWARE/SECURWARE_2024/securware_2024_2_70_30036.html}, pages = {64 -- 70}, year = {2024}, language = {en} } @inproceedings{LoewMayerHof2024, author = {L{\"o}w, Jakob and Mayer, Kevin and Hof, Hans-Joachim}, title = {Fast Charging Communication and Cybersecurity: A Technology Review}, booktitle = {SECURWARE 2024: The Eighteenth International Conference on Emerging Security Information, Systems and Technologies}, editor = {Hussain, Fatima and Fries, Steffen}, publisher = {IARIA}, address = {[s. l.]}, isbn = {978-1-68558-206-7}, url = {https://www.thinkmind.org/library/SECURWARE/SECURWARE_2024/securware_2024_2_50_30030.html}, pages = {52 -- 57}, year = {2024}, language = {en} } @inproceedings{HofSchmidtBrehm2016, author = {Hof, Hans-Joachim and Schmidt, Rainer and Brehm, Lars}, title = {Enabling Digital Transformation Using Secure Decisions as a Service}, booktitle = {Advances in Service-Oriented and Cloud Computing: Workshops of ESOCC 2015, Taormina, Italy, September 15-17, 2015, Revised Selected Papers}, editor = {Celesti, Antonio and Leitner, Philipp}, publisher = {Springer}, address = {Cham}, isbn = {978-3-319-33313-7}, doi = {https://doi.org/10.1007/978-3-319-33313-7_22}, pages = {289 -- 298}, year = {2016}, language = {en} } @article{LoewBayerlHof2022, author = {L{\"o}w, Jakob and Bayerl, Dominik and Hof, Hans-Joachim}, title = {Implementation of a Software Based Glitching Detection Mechanism}, volume = {15}, journal = {International Journal on Advances in Security}, number = {1\&2}, publisher = {IARIA}, address = {[s. l.]}, issn = {1942-2636}, url = {https://www.iariajournals.org/security/tocv15n12.html}, pages = {31 -- 40}, year = {2022}, language = {en} } @article{MayerBayerlHof2021, author = {Mayer, Kevin and Bayerl, Dominik and Hof, Hans-Joachim}, title = {{\"U}berwachung in modernen Fahrzeugen}, volume = {45}, journal = {Datenschutz und Datensicherheit - DuD}, subtitle = {Ergebnisse einer fahrzeugforensischen Untersuchung}, number = {6}, publisher = {Springer}, address = {Berlin}, issn = {1862-2607}, doi = {https://doi.org/10.1007/s11623-021-1459-5}, pages = {399 -- 403}, year = {2021}, language = {de} } @inproceedings{BiankHuberMeyeretal.2019, author = {Biank, Sanjana and Huber, Werner and Meyer, Matthias and Hof, Hans-Joachim and Hempen, Thomas}, title = {Model-based security and safety assurance for automotive safety systems}, booktitle = {Proceedings of 3. ACM Computer Science in Cars Symposium (CSCS 2019)}, subtitle = {Extended Abstract}, publisher = {ACM}, address = {New York}, url = {https://acm-cscs.org/_/2019/}, year = {2019}, language = {en} } @book{TinnefeldBuchnerPetrietal.2019, author = {Tinnefeld, Marie-Theres and Buchner, Benedikt and Petri, Thomas and Hof, Hans-Joachim}, title = {Einf{\"u}hrung in das Datenschutzrecht}, subtitle = {Datenschutz und Informationsfreiheit in europ{\"a}ischer Sicht}, edition = {7., {\"u}berarbeitete und aktualisierte Auflage}, publisher = {De Gruyter Oldenbourg}, address = {Berlin}, isbn = {978-3-11-063031-2}, doi = {https://doi.org/10.1515/9783110630336}, pages = {XXXIX, 563}, year = {2019}, language = {de} } @article{VolkersdorferHof2021, author = {Volkersdorfer, Tina and Hof, Hans-Joachim}, title = {ADAM: An Adversary-Driven Attack Modelling Framework for Model-Based Security Testing}, volume = {14}, journal = {International Journal on Advances in Security}, number = {1\&2}, publisher = {IARIA}, address = {[s. l.]}, issn = {1942-2636}, url = {https://www.iariajournals.org/security/tocv14n12.html}, pages = {12 -- 25}, year = {2021}, language = {en} } @inproceedings{VolkersdorferHof2020, author = {Volkersdorfer, Tina and Hof, Hans-Joachim}, title = {A Concept of an Attack Model for a Model-Based Security Testing Framework}, booktitle = {SECURWARE 2020: The Fourteenth International Conference on Emerging Security Information, Systems and Technologies}, subtitle = {Introducing a holistic perspective of cyberattacks in software engineering}, editor = {Hof, Hans-Joachim and Popescu, Manuela and Yee, George}, publisher = {IARIA}, address = {[s. l.]}, isbn = {978-1-61208-821-1}, url = {http://www.thinkmind.org/index.php?view=article\&articleid=securware_2020_2_130_30046}, pages = {96 -- 101}, year = {2020}, language = {en} } @inbook{Hof2022, author = {Hof, Hans-Joachim}, title = {Cybersecurity f{\"u}r den zukunftsf{\"a}higen Handel}, booktitle = {Der zukunftsf{\"a}hige Handel: Neue online und offline Konzepte sowie digitale und KI-basierte L{\"o}sungen}, editor = {Knoppe, Marc and Rock, Stefan and Wild, Martin}, publisher = {Springer Gabler}, address = {Wiesbaden}, isbn = {978-3-658-36217-1}, doi = {https://doi.org/10.1007/978-3-658-36218-8_11}, pages = {215 -- 237}, year = {2022}, language = {de} } @inbook{Hof2020, author = {Hof, Hans-Joachim}, title = {Cybersicherheit f{\"u}r mobile und intelligente Komponenten}, booktitle = {Cybersicherheit f{\"u}r vernetzte Anwendungen in der Industrie 4.0}, subtitle = {Einf{\"u}hrung und Grundlagen}, editor = {Schulz, Thomas}, publisher = {Vogel Communications Group}, address = {W{\"u}rzburg}, isbn = {978-3-8343-3424-4}, pages = {85 -- 205}, year = {2020}, language = {de} } @article{deAndradeDiasSantosJustoetal.2023, author = {de Andrade, Ricardo and Dias Santos, Max Mauro and Justo, Jo{\~a}o Francisco and Yoshioka, Leopoldo Rideki and Hof, Hans-Joachim and Kleinschmidt, Jo{\~a}o Henrique}, title = {Security architecture for automotive communication networks with CAN FD}, volume = {2023}, pages = {103203}, journal = {Computers \& Security}, number = {129}, publisher = {Elsevier}, address = {Amsterdam}, issn = {1872-6208}, doi = {https://doi.org/10.1016/j.cose.2023.103203}, year = {2023}, language = {en} } @article{MayerCorbettHof2021, author = {Mayer, Kevin and Corbett, Christopher and Hof, Hans-Joachim}, title = {A generalized approach to automotive forensics}, volume = {2021}, pages = {301111}, journal = {Forensic Science International: Digital Investigation}, number = {36, Supplement}, publisher = {Elsevier}, address = {Amsterdam}, issn = {2666-2817}, doi = {https://doi.org/10.1016/j.fsidi.2021.301111}, year = {2021}, abstract = {In the past years, software became an essential topic in modern vehicles, e.g., with the rise of more and more complex driver assistance systems. The advent of automated driving will drive this trend even further. Today, accident investigation, as well as warranty claim analysis, need to take into consideration an analysis of the rapidly increasing proportion of software and security based implementations as part of modern vehicles, the so-called digital forensics. This paper evaluates the general feasibility of digital forensics on a state-of-the-art vehicle. To do so, we analyzed current digital forensics techniques on a state-of-the-art vehicle to constitute gaps in the automotive forensics process used on in-vehicle systems. We present a general process for automotive forensics to close existing gaps and implemented it on a state-of-the-art vehicle in an in-vehicle device manipulation scenario. The implementation uses the on-board diagnostics interface, the diagnostics over internet protocol, as well as the unified diagnostic services for communication. Our implementation requires automotive Ethernet at the diagnostic interface. Our research shows future directions for efficient automotive forensic as well as the exemplary feasibility of automotive forensic analysis on state-of-the-art vehicles without the need for additional invehicle components such as intrusion detection systems or event data recorders.}, language = {en} } @inproceedings{deMeerWaedtRennochetal.2021, author = {de Meer, Jan and Waedt, Karl and Rennoch, Axel and Hof, Hans-Joachim}, title = {The 5th GI/ACM Workshop 2020 scope and draft programme on standardization of secure and safe smart manufacturing systems with respect to IEC 62443 IACS}, volume = {2021}, booktitle = {Lecture Notes in Informatics (LNI): Proceedings}, number = {Volume P-307}, publisher = {Gesellschaft f{\"u}r Informatik e.V.}, address = {Bonn}, isbn = {978-3-88579-701-2}, issn = {1617-5468}, doi = {https://doi.org/10.18420/inf2020_26}, pages = {283 -- 287}, year = {2021}, abstract = {The 5th GI/ACM Workshop Programme on Standardization of Secure and Safe Production within Industrial Automation and Control Systems (IACS) took place virtually at September 28, 2020 at the Karlsruhe Institute of Technology (KIT) that hosted the 50th GI's yearly assembly (GI Informatik 2020 Jahrestagung).}, language = {en} } @inproceedings{MayerCorbettHof2021, author = {Mayer, Kevin and Corbett, Christopher and Hof, Hans-Joachim}, title = {Structured methodology and survey to evaluate data completeness in automotive digital forensics}, booktitle = {19th escar Europe: The World's Leading Automotive Cyber Security Conference}, publisher = {Ruhr-Universit{\"a}t Bochum}, address = {Bochum}, doi = {https://doi.org/10.13154/294-8351}, pages = {52 -- 67}, year = {2021}, language = {en} } @inproceedings{BluemkeMayerHof2024, author = {Bl{\"u}mke, Julian and Mayer, Kevin and Hof, Hans-Joachim}, title = {An Analysis of Security Concerns in Transitioning Battery Management Systems from First to Second Life}, pages = {101}, booktitle = {ARES 24: 19th International Conference on Availability, Reliability and Security}, publisher = {ACM}, address = {New York}, isbn = {979-8-4007-1718-5}, doi = {https://doi.org/10.1145/3664476.3671010}, year = {2024}, abstract = {Lithium-ion batteries are becoming essential vehicle components with the ongoing shift to electric vehicles. Battery management systems manage these batteries. Typically, battery management systems used to be placed deep within the vehicle architecture, away from external interfaces. However, with increasing connectivity to backend systems, e.g., to improve monitoring battery properties and optimize charging, battery management systems have moved closer to the attack surface, increasing security risks. Also, batteries will soon be reused in so-called second life applications, e.g., as an energy storage system in a private home. While conventional methods involve removing the battery and reusing it with a new battery management system, modern methods retain the original system. Though security controls exist for first and second life applications, there is a lack of research on the transition phase. This paper analyzes the phase of transferring the battery management system from the first to the second life of particular relevance for security, privacy, and intellectual property. We try to close this research gap by analyzing the security aspects of a battery management system life cycle and its altering system environment. We are defining the transition phase, identifying necessary activities, and providing cybersecurity needs for the transitioning of battery management systems from first to second life.}, language = {en} } @inproceedings{HofBaumgartZitterbart2007, author = {Hof, Hans-Joachim and Baumgart, Ingmar and Zitterbart, Martina}, title = {Key Exchange for Service Discovery in Secure Content Addressable Sensor Networks}, booktitle = {Kommunikation in Verteilten Systemen (KiVS): 15. Fachtagung Kommunikation in Verteilten Systemen, (KiVS 2007)}, editor = {Braun, Torsten and Carle, Georg and Stiller, Burkhard}, publisher = {Springer}, address = {Berlin}, isbn = {978-3-540-69962-0}, doi = {https://doi.org/10.1007/978-3-540-69962-0_12}, pages = {139 -- 150}, year = {2007}, language = {en} } @inbook{Hof2007, author = {Hof, Hans-Joachim}, title = {Applications of Sensor Networks}, booktitle = {Algorithms for Sensor and Ad Hoc Networks: Advanced Lectures}, editor = {Wagner, Dorothea and Wattenhofer, Roger}, publisher = {Springer}, address = {Berlin}, isbn = {978-3-540-74991-2}, doi = {https://doi.org/10.1007/978-3-540-74991-2_1}, pages = {1 -- 20}, year = {2007}, language = {en} } @inproceedings{ConradHof2007, author = {Conrad, Michael and Hof, Hans-Joachim}, title = {A Generic, Self-organizing, and Distributed Bootstrap Service for Peer-to-Peer Networks}, booktitle = {Self-Organizing Systems: Second International Workshop, IWSOS 2007, Proceedings}, editor = {Hutchison, David and Katz, Randy H.}, publisher = {Springer}, address = {Berlin}, isbn = {978-3-540-74917-2}, doi = {https://doi.org/10.1007/978-3-540-74917-2_7}, pages = {59 -- 72}, year = {2007}, language = {en} } @phdthesis{Hof2008, author = {Hof, Hans-Joachim}, title = {Sichere Dienste-Suche in Sensornetzen}, publisher = {Universit{\"a}t Karlsruhe}, address = {Karlsruhe}, pages = {xiv, 215}, school = {Universit{\"a}t Karlsruhe}, year = {2008}, language = {de} } @inproceedings{FalkHof2009, author = {Falk, Rainer and Hof, Hans-Joachim}, title = {Fighting Insomnia: A Secure Wake-Up Scheme for Wireless Sensor Networks}, booktitle = {Proceedings: The Third International Conference on Emerging Security Information, Systems and Technologies, SECURWARE 2009}, editor = {Falk, Rainer and Goudalo, Wilson and Chen, Eric Y. and Savola, Reijo and Popescu, Manuela}, publisher = {IEEE}, address = {Los Alamitos}, isbn = {978-0-7695-3668-2}, doi = {https://doi.org/10.1109/SECURWARE.2009.36}, pages = {191 -- 196}, year = {2009}, language = {en} } @article{KraftBechlerHofetal.2009, author = {Kraft, Daniel and Bechler, Marc and Hof, Hans-Joachim and P{\"a}hlke, Frank and Wolf, Lars}, title = {Design and evaluation of a security architecture for ad hoc networks}, volume = {5}, journal = {International Journal of Pervasive Computing and Communications}, number = {4}, publisher = {Emerald}, address = {Bingley}, issn = {1742-7371}, doi = {https://doi.org/10.1108/17427370911008848}, pages = {448 -- 475}, year = {2009}, language = {en} } @article{FriesHofDufaureetal.2010, author = {Fries, Steffen and Hof, Hans-Joachim and Dufaure, Thierry and Seewald, Maik}, title = {Security for the Smart Grid - Enhancing IEC 62351 to Improve Security in Energy Automation Control}, volume = {3}, journal = {International Journal on Advances in Security}, number = {3\&4}, publisher = {IARIA}, address = {[s. l.]}, issn = {1942-2636}, url = {https://www.thinkmind.org/library/Sec/Sec_v3_n34_2010/sec_v3_n34_2010_7.html}, pages = {169 -- 183}, year = {2010}, language = {en} } @article{FalkHof2010, author = {Falk, Rainer and Hof, Hans-Joachim}, title = {Security Design for Industrial SensorNetworks}, volume = {52}, journal = {it - Information Technology}, number = {6}, publisher = {De Gruyter}, address = {Berlin}, issn = {2196-7032}, doi = {https://doi.org/10.1524/itit.2010.0611}, pages = {331 -- 339}, year = {2010}, language = {en} } @inproceedings{PonikwarHof2015, author = {Ponikwar, Christoph and Hof, Hans-Joachim}, title = {Overview on Security Approaches in Intelligent Transportation Systems}, booktitle = {SECURWARE 2015: The Ninth International Conference on Emerging Security Information, Systems and Technologies}, subtitle = {Searching for hybrid trust establishment solutions for VANETs}, editor = {Falk, Rainer and Merkle Westphall, Carla and Hof, Hans-Joachim}, publisher = {IARIA}, address = {[s. l.]}, isbn = {978-1-61208-427-5}, url = {https://www.thinkmind.org/library/SECURWARE/SECURWARE_2015/securware_2015_8_10_30019.html}, pages = {160 -- 165}, year = {2015}, language = {en} } @inproceedings{WietfeldMuellerSchmutzleretal.2010, author = {Wietfeld, Christian and M{\"u}ller, Christian and Schmutzler, Jens and Fries, Steffen and Heidenreich, Alla and Hof, Hans-Joachim}, title = {ICT Reference Architecture Design Based on Requirements for Future Energy Marketplaces}, booktitle = {2010 First IEEE International Conference on Smart Grid Communications}, publisher = {IEEE}, address = {Piscataway}, isbn = {978-1-4244-6512-5}, doi = {https://doi.org/10.1109/SMARTGRID.2010.5622062}, pages = {315 -- 320}, year = {2010}, language = {en} } @inproceedings{FalkFriesHof2010, author = {Falk, Rainer and Fries, Steffen and Hof, Hans-Joachim}, title = {Protecting Voice over IP Communication Using Electronic Identity Cards}, booktitle = {Proceedings: The Third International Conference on Advances in Human-Oriented and Personalized Mechanisms, Technologies and Services, CENTRIC 2010}, editor = {Hariprakash, R. and Egyed-Zsigmond, Elod and Hoffmann, Mario}, publisher = {IEEE}, address = {Los Alamitos}, isbn = {978-1-4244-7778-4}, doi = {https://doi.org/10.1109/CENTRIC.2010.12}, pages = {5 -- 10}, year = {2010}, language = {en} } @inproceedings{FalkHof2010, author = {Falk, Rainer and Hof, Hans-Joachim}, title = {Industrial Sensor Network Security Architecture}, booktitle = {Proceedings: The Fourth International Conference on Emerging Security Information, Systems and Technologies, SECURWARE 2010}, editor = {Savola, Reijo and Takesue, Masaru and Falk, Rainer and Popescu, Manuela}, publisher = {IEEE}, address = {Los Alamitos}, isbn = {978-1-4244-7517-9}, doi = {https://doi.org/10.1109/SECURWARE.2010.24}, pages = {97 -- 102}, year = {2010}, language = {en} } @inproceedings{FriesHofSeewald2010, author = {Fries, Steffen and Hof, Hans-Joachim and Seewald, Maik}, title = {Enhancing IEC 62351 to Improve Security for Energy Automation in Smart Grid Environments}, booktitle = {Proceedings: The Fifth International Conference on Internet and Web Applications and Services, ICIW 2010}, editor = {Ortiz, Guadalupe and Sasaki, Hideyasu and Ehmann, Matthias and Dini, Cosmin}, publisher = {IEEE}, address = {Los Alamitos}, isbn = {978-1-4244-6729-7}, doi = {https://doi.org/10.1109/ICIW.2010.28}, pages = {135 -- 142}, year = {2010}, language = {en} } @inproceedings{FalkFriesHof2011, author = {Falk, Rainer and Fries, Steffen and Hof, Hans-Joachim}, title = {ASIA: An Access Control, Session Invocation and Authorization Architecture for Home Energy Appliances in Smart Energy Grid Environments}, booktitle = {ENERGY 2011: The First International Conference on Smart Grids, Green Communications and IT Energy-aware Technologies}, editor = {Gnazzo, Angelantonio and Majumder, Ritwik}, publisher = {IARIA}, address = {[s. l.]}, isbn = {978-1-61208-136-6}, url = {https://www.thinkmind.org/library/ENERGY/ENERGY_2011/energy_2011_2_10_50020.html}, pages = {19 -- 26}, year = {2011}, language = {en} } @inproceedings{Hof2012, author = {Hof, Hans-Joachim}, title = {User-Centric IT Security}, booktitle = {CENTRIC 2012: The Fifth International Conference on Advances in Human-oriented and Personalized Mechanisms, Technologies, and Services}, subtitle = {How to Design Usable Security Mechanisms}, editor = {Berntzen, Lasse and B{\"o}hm, Stephan and Ortiz, Guadalupe}, publisher = {IARIA}, address = {[s. l.]}, isbn = {978-1-61208-232-5}, url = {https://www.thinkmind.org/library/CENTRIC/CENTRIC_2012/centric_2012_1_20_30072.html}, pages = {7 -- 12}, year = {2012}, language = {en} } @inbook{FriesHof2012, author = {Fries, Steffen and Hof, Hans-Joachim}, title = {Smart Grid Security Standardization}, booktitle = {Smart Grid: Applications, Communications, and Security}, editor = {Berger, Lars Torsten and Iniewski, Krzysztof}, publisher = {Wiley}, address = {Hoboken}, isbn = {978-1-118-00439-5}, pages = {321 -- 335}, year = {2012}, language = {en} } @inbook{FriesHof2012, author = {Fries, Steffen and Hof, Hans-Joachim}, title = {Secure Remote Access to Home Energy Appliances}, booktitle = {Smart Grid: Applications, Communications, and Security}, editor = {Berger, Lars Torsten and Iniewski, Krzysztof}, publisher = {Wiley}, address = {Hoboken}, isbn = {978-1-118-00439-5}, pages = {443 -- 453}, year = {2012}, language = {en} } @article{Hof2013, author = {Hof, Hans-Joachim}, title = {Towards Enhanced Usability of IT Security Mechanisms}, volume = {6}, journal = {International Journal on Advances in Security}, subtitle = {How to Design Usable IT Security Mechanisms Using the Example of Email Encryption}, number = {1\&2}, publisher = {IARIA}, address = {[s. l.]}, issn = {1942-2636}, url = {https://www.thinkmind.org/library/Sec/Sec_v6_n12_2013/sec_v6_n12_2013_6.html}, pages = {78 -- 87}, year = {2013}, language = {en} } @inproceedings{BlassHofHurleretal.2003, author = {Blaß, Erik-Oliver and Hof, Hans-Joachim and Hurler, Bernhard and Zitterbart, Martina}, title = {Erste Erfahrungen mit der Karlsruher Sensornetz-Plattform}, booktitle = {1. GI/ITG KuVS Fachgespr{\"a}ch "Sensornetze"}, editor = {Karl, Holger}, publisher = {Technical University Berlin}, address = {Berlin}, pages = {25 -- 33}, year = {2003}, language = {de} } @inproceedings{BlassHofZitterbart2004, author = {Blaß, Erik-Oliver and Hof, Hans-Joachim and Zitterbart, Martina}, title = {S-CAN: Sicheres Overlay f{\"u}r Sensornetze}, booktitle = {2. GI/ITG KuVS Fachgespr{\"a}ch "Drahtlose Sensornetze"}, editor = {Fuhrmann, Thomas}, publisher = {Universit{\"a}t Karlsruhe}, address = {Karlsruhe}, pages = {36 -- 38}, year = {2004}, language = {de} } @inproceedings{HofBlassFuhrmannetal.2004, author = {Hof, Hans-Joachim and Blaß, Erik-Oliver and Fuhrmann, Thomas and Zitterbart, Martina}, title = {Design of a Secure Distributed Service Directory for Wireless Sensornetworks}, booktitle = {Wireless Sensor Networks: Proceedings}, editor = {Karl, Holger and Wolisz, Adam and Willig, Andreas}, publisher = {Springer}, address = {Berlin}, isbn = {978-3-540-24606-0}, doi = {https://doi.org/10.1007/978-3-540-24606-0_19}, pages = {276 -- 290}, year = {2004}, language = {en} } @inproceedings{HurlerHofZitterbart2004, author = {Hurler, Bernhard and Hof, Hans-Joachim and Zitterbart, Martina}, title = {A General Architecture for Wireless Sensor Networks: First Steps}, booktitle = {Proceedings: 24th International Conference on Distributed Computing Systems Workshops}, publisher = {IEEE}, address = {Los Alamitos}, isbn = {0-7695-2087-1}, doi = {https://doi.org/10.1109/ICDCSW.2004.1284069}, pages = {442 -- 444}, year = {2004}, language = {en} } @inproceedings{BechlerHofKraftetal.2004, author = {Bechler, Marc and Hof, Hans-Joachim and Kraft, Daniel and P{\"a}hlke, Frank and Wolf, Lars}, title = {A Cluster-Based Security Architecture for Ad Hoc Networks}, booktitle = {IEEE INFOCOM 2004: The Conference on Computer Communications, Proceedings Volume 4}, publisher = {IEEE}, address = {Piscataway}, isbn = {0-7803-8355-9}, doi = {https://doi.org/10.1109/INFCOM.2004.1354661}, pages = {2393 -- 2403}, year = {2004}, language = {en} } @book{BlessMinkBlassetal.2005, author = {Bless, Roland and Mink, Stefan and Blaß, Erik-Oliver and Conrad, Michael and Hof, Hans-Joachim and Kutzner, Kendy and Sch{\"o}ller, Marcus}, title = {Sichere Netzwerkkommunikation}, subtitle = {Grundlagen, Protokolle und Architekturen}, publisher = {Springer}, address = {Berlin}, isbn = {978-3-540-27896-2}, doi = {https://doi.org/10.1007/3-540-27896-6}, pages = {XXIV, 582}, year = {2005}, language = {de} } @inproceedings{HofBlassZitterbart2005, author = {Hof, Hans-Joachim and Blaß, Erik-Oliver and Zitterbart, Martina}, title = {Secure Overlay for Service Centric Wireless Sensor Networks}, booktitle = {Security in Ad-hoc and Sensor Networks: First EuropeanWorkshop, Revised Selected Papers}, editor = {Castelluccia, Claude and Hartenstein, Hannes and Paar, Christof and Westhoff, Dirk}, publisher = {Springer}, address = {Berlin}, isbn = {978-3-540-30496-8}, doi = {https://doi.org/10.1007/978-3-540-30496-8_11}, pages = {125 -- 138}, year = {2005}, language = {en} } @article{HofZitterbart2005, author = {Hof, Hans-Joachim and Zitterbart, Martina}, title = {SCAN: A secure service directory for service-centric wireless sensor networks}, volume = {28}, journal = {Computer Communications}, number = {13}, publisher = {Elsevier}, address = {Amsterdam}, issn = {1873-703X}, doi = {https://doi.org/10.1016/j.comcom.2004.12.039}, pages = {1517 -- 1522}, year = {2005}, language = {en} } @unpublished{PohlHof2015, author = {Pohl, Christoph and Hof, Hans-Joachim}, title = {Secure Scrum: Development of Secure Software with Scrum}, publisher = {arXiv}, address = {Ithaca}, doi = {https://doi.org/10.48550/arXiv.1507.02992}, year = {2015}, language = {en} } @inbook{Hof2024, author = {Hof, Hans-Joachim}, title = {Digitalisierung in Hochschulen}, booktitle = {Digitalisierung in Industrie-, Handels- und Dienstleistungsunternehmen: Konzepte - L{\"o}sungen - Beispiele}, editor = {Fend, Lars and Hofmann, J{\"u}rgen}, edition = {4., {\"u}berarbeitete und erweiterte Auflage}, publisher = {Springer Gabler}, address = {Wiesbaden}, isbn = {978-3-658-43440-3}, doi = {https://doi.org/10.1007/978-3-658-43441-0_27}, pages = {615 -- 635}, year = {2024}, language = {de} } @article{PohlHof2016, author = {Pohl, Christoph and Hof, Hans-Joachim}, title = {The All Seeing Eye and Apate: Bridging the Gap between IDS and Honeypots}, volume = {9}, journal = {International Journal on Advances in Security}, number = {1\&2}, publisher = {IARIA}, address = {[s. l.]}, issn = {1942-2636}, url = {https://www.iariajournals.org/security/tocv9n12.html}, pages = {1 -- 13}, year = {2016}, language = {en} } @article{PohlHof2016, author = {Pohl, Christoph and Hof, Hans-Joachim}, title = {Secure Scrum and OpenSAMM for Secure Software Development}, volume = {9}, journal = {International Journal on Advances in Security}, number = {1\&2}, publisher = {IARIA}, address = {[s. l.]}, issn = {1942-2636}, url = {https://www.iariajournals.org/security/tocv9n12.html}, pages = {25 -- 35}, year = {2016}, language = {en} } @inproceedings{HofSocher2016, author = {Hof, Hans-Joachim and Socher, Gudrun}, title = {Poster: Security Design Patterns With Good Usability}, booktitle = {WiSec '16: Proceedings of the 9th ACM Conference on Security \& Privacy in Wireless and Mobile Networks}, publisher = {ACM}, address = {New York}, isbn = {978-1-4503-4270-4}, doi = {https://doi.org/10.1145/2939918.2942423}, pages = {227 -- 228}, year = {2016}, language = {en} } @inproceedings{GopinathWischhofJaumannetal.2016, author = {Gopinath, Smriti and Wischhof, Lars and Jaumann, Michael and Ponikwar, Christoph and Hof, Hans-Joachim}, title = {On Context-Aware Communication Mode Selection in Hybrid Vehicular Networks}, booktitle = {GI/ITG KuVS Fachgespr{\"a}ch Inter-Vehicle Communication 2016}, editor = {Scheuermann, Bj{\"o}rn and Dietzel, Stefan}, publisher = {Humboldt-Universit{\"a}t}, address = {Berlin}, doi = {https://doi.org/10.18452/1438}, pages = {24 -- 27}, year = {2016}, language = {en} } @inproceedings{BrueckmannMadlHof2017, author = {Br{\"u}ckmann, Jasmin and Madl, Tobias and Hof, Hans-Joachim}, title = {An Analysis of Automotive Security Based on a Reference Model for Automotive Cyber Systems}, booktitle = {SECURWARE 2017: The Eleventh International Conference on Emerging Securtity Information, Systems and Technologies}, editor = {Merkle Westphall, Carla and Hof, Hans-Joachim and Olmsted, Aspen and Schauer, Stefan and Latzenhofer, Martin and Abidin, Aysajan and Yee, George}, publisher = {IARIA}, address = {[s. l.]}, isbn = {978-1-61208-582-1}, url = {https://www.thinkmind.org/library/SECURWARE/SECURWARE_2017/securware_2017_8_20_38021.html}, pages = {136 -- 141}, year = {2017}, language = {en} } @inproceedings{GopinathWischhofPonikwaretal.2016, author = {Gopinath, Smriti and Wischhof, Lars and Ponikwar, Christoph and Hof, Hans-Joachim}, title = {Hybrid Solutions for Data Dissemination in Vehicular Networks}, booktitle = {2016 Wireless Days (WD)}, editor = {Beylot, Andr{\´e}-Luc and Gayraud, Thierry and Chaput, Emmanuel and Berthou, Pascal and Ricardo, Manuel P. and Medjiah, Samir}, publisher = {IEEE}, address = {Piscataway}, isbn = {978-1-5090-2494-0}, doi = {https://doi.org/10.1109/WD.2016.7461519}, year = {2016}, language = {en} } @inproceedings{PonikwarHofGopinathetal.2016, author = {Ponikwar, Christoph and Hof, Hans-Joachim and Gopinath, Smriti and Wischhof, Lars}, title = {Beyond the Dolev-Yao Model: Realistic Application-Specific Attacker Models for Applications Using Vehicular Communication}, booktitle = {SECURWARE 2016: The Tenth International Conference on Emerging Security Information, Systems and Technologies}, editor = {Merkle Westphall, Carla and Hof, Hans-Joachim and K{\o}ien, Geir and Kr{\´a}l{\´i}k, Luk{\´a}š and Hromada, Martin and Lapkova, Dora}, publisher = {IARIA}, address = {[s. l.]}, isbn = {978-1-61208-493-0}, url = {https://www.thinkmind.org/library/SECURWARE/SECURWARE_2016/securware_2016_1_20_30160.html}, pages = {4 -- 9}, year = {2016}, language = {en} } @inproceedings{PaulHof2016, author = {Paul, Thomas and Hof, Hans-Joachim}, title = {An Empirical Survey on how Much Security and Privacy Customers Want in Instant Messengers}, booktitle = {SECURWARE 2016: The Tenth International Conference on Emerging Security Information, Systems and Technologies}, editor = {Merkle Westphall, Carla and Hof, Hans-Joachim and K{\o}ien, Geir and Kr{\´a}l{\´i}k, Luk{\´a}š and Hromada, Martin and Lapkova, Dora}, publisher = {IARIA}, address = {[s. l.]}, isbn = {978-1-61208-493-0}, url = {https://www.thinkmind.org/library/SECURWARE/SECURWARE_2016/securware_2016_5_40_30064.html}, pages = {89 -- 94}, year = {2016}, language = {en} } @inproceedings{BraunHof2017, author = {Braun, Lukas and Hof, Hans-Joachim}, title = {A System to Save the Internet from the Malicious Internet of Things at Home}, booktitle = {SECURWARE 2017: The Eleventh International Conference on Emerging Securtity Information, Systems and Technologies}, editor = {Merkle Westphall, Carla and Hof, Hans-Joachim and Olmsted, Aspen and Schauer, Stefan and Latzenhofer, Martin and Abidin, Aysajan and Yee, George}, publisher = {IARIA}, address = {[s. l.]}, isbn = {978-1-61208-582-1}, url = {https://www.thinkmind.org/library/SECURWARE/SECURWARE_2017/securware_2017_11_20_30028.html}, pages = {180 -- 185}, year = {2017}, language = {en} } @book{TinnefeldBuchnerPetrietal.2017, author = {Tinnefeld, Marie-Theres and Buchner, Benedikt and Petri, Thomas and Hof, Hans-Joachim}, title = {Einf{\"u}hrung in das Datenschutzrecht}, subtitle = {Datenschutz und Informationsfreiheit in europ{\"a}ischer Sicht}, edition = {6., vollst{\"a}ndig {\"u}berarbeitete und aktualisierte Auflage}, publisher = {De Gruyter Oldenbourg}, address = {Berlin}, isbn = {978-3-11-041673-2}, doi = {https://doi.org/10.1515/9783110416732}, pages = {XXXII, 536}, year = {2017}, language = {de} } @inproceedings{HofbauerMayerHof2023, author = {Hofbauer, Jenny and Mayer, Kevin and Hof, Hans-Joachim}, title = {From SOC to VSOC: Transferring Key Requirements for Efficient Vehicle Security Operations}, booktitle = {Proceedings: The World's Leading Automotive Cyber Security Conference, 21st escar Europe, escar - Embedded Security in Cars}, publisher = {Ruhr-Universit{\"a}t Bochum}, address = {Bochum}, doi = {https://doi.org/10.13154/294-10389}, pages = {92 -- 106}, year = {2023}, language = {en} } @inproceedings{LangerMichlPaulaetal.2022, author = {Langer, Robin and Michl, Marco and Paula, Daniel and Hof, Hans-Joachim and Schweiger, Hans-Georg}, title = {Security analysis of an Event Data Recorder system according to the HEAVENS model}, booktitle = {Proceedings of the 30th Annual Congress of the EVU}, publisher = {EVU}, address = {Berlin}, year = {2022}, language = {en} } @inproceedings{PohlHof2013, author = {Pohl, Christoph and Hof, Hans-Joachim}, title = {The All-Seeing Eye: A Massive-Multi-Sensor Zero-Configuration Intrusion Detection System for Web Applications}, booktitle = {SECURWARE 2013: The Seventh International Conference on Emerging Security Information, Systems and Technologies}, editor = {Hof, Hans-Joachim and Merkle Westphall, Carla}, publisher = {IARIA}, address = {[s. l.]}, isbn = {978-1-61208-298-1}, url = {https://www.thinkmind.org/library/SECURWARE/SECURWARE_2013/securware_2013_4_10_30062.html}, pages = {66 -- 71}, year = {2013}, language = {en} } @inbook{FriesHof2014, author = {Fries, Steffen and Hof, Hans-Joachim}, title = {Regulations and Standards Relevant for Security of the Smart Grid}, booktitle = {Security and Privacy in Smart Grids}, editor = {Xiao, Yang}, publisher = {CRC Press}, address = {Boca Raton}, isbn = {978-1-4398-7783-8}, pages = {205 -- 226}, year = {2014}, language = {en} } @inproceedings{SchmidtkeHof2013, author = {Schmidtke, Alexander and Hof, Hans-Joachim}, title = {Fighting Spam by Breaking the Economy of Advertising by Unsolicited Emails}, booktitle = {SECURWARE 2013: The Seventh International Conference on Emerging Security Information, Systems and Technologies}, editor = {Hof, Hans-Joachim and Merkle Westphall, Carla}, publisher = {IARIA}, address = {[s. l.]}, isbn = {978-1-61208-298-1}, url = {https://www.thinkmind.org/library/SECURWARE/SECURWARE_2013/securware_2013_5_10_30065.html}, pages = {96 -- 101}, year = {2013}, language = {en} } @article{Hof2014, author = {Hof, Hans-Joachim}, title = {Practical Limitations of Technical Privacy Protection}, volume = {38}, journal = {Datenschutz und Datensicherheit - DuD}, subtitle = {On the Current State of IT Security Mechanisms Used for Privacy Protection in the Field}, number = {9}, publisher = {Springer}, address = {Berlin}, issn = {1862-2607}, doi = {https://doi.org/10.1007/s11623-014-0236-0}, pages = {601 -- 605}, year = {2014}, language = {en} } @inproceedings{Hof2008, author = {Hof, Hans-Joachim}, title = {Sichere Nutzung und schnelle Anpassung von Sensornetzen}, booktitle = {Tagungsband: Ambient Assisted Living, 1. Deutscher Kongress mit Ausstellung, Technologien - Anwendungen - Management, 30.01. - 01.02.2008}, publisher = {VDE Verlag}, address = {Berlin}, isbn = {978-3-8007-3076-6}, pages = {113 -- 116}, year = {2008}, language = {de} } @inproceedings{PohlSchlierkampHof2014, author = {Pohl, Christoph and Schlierkamp, Kathrin and Hof, Hans-Joachim}, title = {BREW: A Breakable Web Application for IT-Security Classroom Use}, booktitle = {ECSEE: European Conference Software Engineering Education 2014}, editor = {Hagel, Georg and Mottok, J{\"u}rgen}, publisher = {Shaker Verlag}, address = {Aachen}, isbn = {978-3-8440-3067-9}, pages = {191 -- 205}, year = {2014}, language = {en} } @inproceedings{PohlZugenmaierMeieretal.2015, author = {Pohl, Christoph and Zugenmaier, Alf and Meier, Michael and Hof, Hans-Joachim}, title = {B.Hive: A Zero Configuration Forms Honeypot for Productive Web Applications}, booktitle = {ICT Systems Security and Privacy Protection: 30th IFIP TC 11 International Conference, SEC 2015, Hamburg, Germany, May 26-28, 2015, Proceedings}, editor = {Federrath, Hannes and Gollmann, Dieter}, publisher = {Springer}, address = {Cham}, isbn = {978-3-319-18467-8}, doi = {https://doi.org/10.1007/978-3-319-18467-8_18}, pages = {267 -- 280}, year = {2015}, language = {en} } @inproceedings{PohlMeierHof2015, author = {Pohl, Christoph and Meier, Michael and Hof, Hans-Joachim}, title = {Apate - A Linux Kernel Module for High Interaction Honeypots}, booktitle = {SECURWARE 2015: The Ninth International Conference on Emerging Security Information, Systems and Technologies}, editor = {Falk, Rainer and Merkle Westphall, Carla and Hof, Hans-Joachim}, publisher = {IARIA}, address = {[s. l.]}, isbn = {978-1-61208-427-5}, url = {https://www.thinkmind.org/library/SECURWARE/SECURWARE_2015/securware_2015_6_40_30134.html}, pages = {133 -- 138}, year = {2015}, language = {en} } @inproceedings{FritzKraussHof2024, author = {Fritz, Mario and Krauß, Christoph and Hof, Hans-Joachim}, title = {CSCS '24 - Cyber Security in CarS Workshop}, booktitle = {CCS '24: Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security}, publisher = {ACM}, address = {New York}, isbn = {979-8-4007-0636-3}, doi = {https://doi.org/10.1145/3658644.3691551}, pages = {4914 -- 4916}, year = {2024}, language = {en} } @inproceedings{FalkHofMeyeretal.2008, author = {Falk, Rainer and Hof, Hans-Joachim and Meyer, Ulrike and Niedermeier, Christoph and Sollacher, Rudolf and Vicari, Norbert}, title = {From Academia to the Field: Wireless Sensor Networks for Industrial Use}, booktitle = {7. GI/ITG KuVS Fachgespr{\"a}ch Drahtlose Sensornetze}, editor = {Ritter, Hartmut and Terfloth, Kirsten and Wittenburg, Georg and Schiller, Jochen}, publisher = {Freie Universit{\"a}t Berlin}, address = {Berlin}, url = {https://refubium.fu-berlin.de/handle/fub188/24200}, pages = {93 -- 95}, year = {2008}, language = {en} } @article{BluemkeHof2023, author = {Bl{\"u}mke, Julian and Hof, Hans-Joachim}, title = {Binding the Battery to the Pass: An Approach to Trustworthy Product Life Cycle Data by Using Certificates Based on PUFs}, volume = {16}, journal = {International Journal on Advances in Security}, number = {1\&2}, publisher = {IARIA}, address = {[s. l.]}, issn = {1942-2636}, url = {http://www.iariajournals.org/security/tocv16n12.html}, pages = {44 -- 53}, year = {2023}, language = {en} } @inproceedings{BluemkeLavesHof2025, author = {Bl{\"u}mke, Julian and Laves, Claudius and Hof, Hans-Joachim}, title = {Identifying Building Blocks for Second-Life-Enabled Battery Management Systems}, booktitle = {Conference Proceedings: 2025 IEEE International Conference on Environment and Electrical Engineering and 2025 IEEE Industrial and Commercial Power Systems Europe (EEEIC / I\&CPS Europe), 15-18 July 2025, Chania, Crete - Greece}, editor = {Leonowicz, Zbigniew and Stracqualursi, Erika and Jasinski, Michal}, publisher = {IEEE}, address = {Piscataway}, isbn = {979-8-3315-9515-9}, doi = {https://doi.org/10.1109/EEEIC/ICPSEurope64998.2025.11169196}, year = {2025}, language = {en} } @inproceedings{LoewBayerlMayeretal.2025, author = {L{\"o}w, Jakob and Bayerl, Dominik and Mayer, Kevin and Hof, Hans-Joachim}, title = {DrainDead: Emptying Batteries of Parked Electric Vehicles}, booktitle = {Proceedings of the 3rd USENIX Symposium on Vehicle Security and Privacy (VehicleSec '25)}, publisher = {USENIX Association}, address = {Berkeley}, isbn = {978-1-939133-49-6}, url = {https://www.usenix.org/conference/vehiclesec25/presentation/low}, pages = {233 -- 241}, year = {2025}, language = {en} } @inproceedings{MichlHofKatzenbeisser2024, author = {Michl, Marco and Hof, Hans-Joachim and Katzenbeisser, Stefan}, title = {Classification, Impact, and Mitigation Strategies of Attacks in Automotive Trust Management Systems}, booktitle = {Proceedings of the 2024 on Cyber Security in CarS Workshop (CSCS '24)}, publisher = {ACM}, address = {New York}, isbn = {979-8-4007-1232-6}, doi = {https://doi.org/10.1145/3689936.3694691}, pages = {61 -- 75}, year = {2024}, abstract = {With the advent of connected vehicles, which provide many new comfort functions, the attack surface increased as well. Widespread "hard security" mechanisms are used to secure the vehicle and its infrastructure, but they cannot mitigate all threats, especially if inside attackers are considered. "Soft security" mechanisms, like trust and reputation systems, can help to close the attack surface further. However, such systems add complexity and can also lead to further vulnerabilities. To use such mechanisms securely, this work analyzes attacks targeting trust management systems in the automotive domain. For this purpose, a literature review was conducted, and the extracted attacks were characterized and divided into several clusters, introducing a new nomenclature of attacks against trust management for vehicles. We argue that four main categories of attacks exist. They are distinguished by their target component: communication channel, trust management layer, or application. As a fourth category, we see attacks that are enabled by the use of trust management systems. The outcome of this analysis was used to create an adversary model based on detected attack vectors and to define abstract reference attackers. These can be used to evaluate the resilience of automotive trust management systems against the analyzed attacks. Mitigation strategies against the adversary's capabilities are further presented to avoid vulnerabilities in the design of automotive trust management systems.}, language = {en} } @inproceedings{MadlBrueckmannHof2018, author = {Madl, Tobias and Br{\"u}ckmann, Jasmin and Hof, Hans-Joachim}, title = {CAN Obfuscation by Randomization (CANORa)}, booktitle = {CSCS 2018 Proceedings}, subtitle = {A technology to prevent large-scale malware attacks on driverless autonomous vehicles}, publisher = {ACM}, address = {New York}, isbn = {978-1-4503-6616-8}, url = {https://wp.mpi-inf.mpg.de/cscs/files/2018/09/03-CAN-Obfuscation-by-Randomization-CANORa-A-technology-to-prevent-large-scale-malware-attacks-on-driverless-autonomous-vehicles.pdf}, doi = {https://doi.org/10.1145/3273946.3273953}, year = {2018}, language = {en} } @inproceedings{LoewBayerlHof2021, author = {L{\"o}w, Jakob and Bayerl, Dominik and Hof, Hans-Joachim}, title = {Software Based Glitching Detection}, booktitle = {SECURWARE 2021: The Fifteenth International Conference on Emerging Security Information, Systems and Technologies}, editor = {Hof, Hans-Joachim and Popescu, Manuela and Fongen, Anders}, publisher = {IARIA}, address = {[s. l.]}, isbn = {978-1-61208-919-5}, issn = {2162-2116}, url = {https://www.thinkmind.org/index.php?view=article\&articleid=securware_2021_1_70_30029}, pages = {41 -- 46}, year = {2021}, language = {en} } @inproceedings{MayerHof2022, author = {Mayer, Kevin and Hof, Hans-Joachim}, title = {Digital Forensics Investigation of the Tesla Autopilot File System}, booktitle = {SECURWARE 2022: The Sixteenth International Conference on Emerging Security Information, Systems and Technologies}, editor = {Yee, George}, publisher = {IARIA}, address = {[s. l.]}, isbn = {978-1-68558-007-0}, url = {https://www.thinkmind.org/index.php?view=article\&articleid=securware_2022_1_130_38001}, pages = {82 -- 87}, year = {2022}, language = {en} } @inproceedings{UllrichBayerlHutzelmannetal.2025, author = {Ullrich, Henning and Bayerl, Dominik and Hutzelmann, Thomas and Hof, Hans-Joachim}, title = {Application of Quantum Key Distribution in Intelligent Transport Systems}, pages = {5}, booktitle = {Proceedings of the 2nd Cyber Security in CarS Workshop (CSCS'25)}, publisher = {ACM}, address = {New York}, isbn = {979-8-4007-1928-8}, doi = {https://doi.org/10.1145/3736130.3762692}, year = {2025}, abstract = {Quantum Key Distribution (QKD) enables two parties to generate a secret key, based on quantum physical properties. The secrecy of the exchanged key is guaranteed by these quantum physical properties, even against an attacker using a quantum computer. QKD therefore offers an Quantum Information Theoretically Secure (Q-ITS) alternative to Post Quantum Cryptography (PQC) schemes. This paper discusses advantages and challenges of deploying a QKD system in an Intelligent Transport System (ITS), by examining two exemplary use cases. Approaches to effectively implement QKD in these use cases are proposed, with a short discussion of advantages over the use of classical and PQC schemes.}, language = {en} } @inproceedings{BluemkeHof2022, author = {Bl{\"u}mke, Julian and Hof, Hans-Joachim}, title = {Authentic Batteries: A Concept for a Battery Pass Based on PUF-enabled Certificates}, booktitle = {SECURWARE 2022: The Sixteenth International Conference on Emerging Security Information, Systems and Technologies}, editor = {Yee, George}, publisher = {IARIA}, address = {[s. l.]}, isbn = {978-1-68558-007-0}, url = {https://www.thinkmind.org/index.php?view=article\&articleid=securware_2022_1_120_30051}, pages = {76 -- 81}, year = {2022}, language = {en} } @inproceedings{MayerHof2021, author = {Mayer, Kevin and Hof, Hans-Joachim}, title = {Identification of Automotive Digital Forensics Stakeholders}, booktitle = {SECURWARE 2021: The Fifteenth International Conference on Emerging Security Information, Systems and Technologies}, editor = {Hof, Hans-Joachim and Popescu, Manuela and Fongen, Anders}, publisher = {IARIA}, address = {[s. l.]}, isbn = {978-1-61208-919-5}, issn = {2162-2116}, url = {https://www.thinkmind.org/index.php?view=article\&articleid=securware_2021_1_20_30004}, pages = {8 -- 13}, year = {2021}, language = {en} } @inproceedings{MichlHofKatzenbeisser2025, author = {Michl, Marco and Hof, Hans-Joachim and Katzenbeisser, Stefan}, title = {From Access to Trust: Policy-Based Automotive Trust Management With XACML}, pages = {6}, booktitle = {Proceedings of the 2nd Cyber Security in CarS Workshop (CSCS'25)}, publisher = {ACM}, address = {New York}, isbn = {979-8-4007-1928-8}, doi = {https://doi.org/10.1145/3736130.3764511}, year = {2025}, abstract = {Trust is a fundamental requirement in vehicular systems, particularly in the context of autonomous and cooperative driving, where decisions often depend on data received from other vehicles or infrastructure. This paper presents a novel approach to integrating trust-based reasoning—specifically, decision-making based on subjective logic—into Attribute-Based Access Control (ABAC) systems, using the XACML policy language. We draw a parallel between trust management and access control, showing that trust assessments can be modeled as access decisions and expressed through standard access control policies. This integration allows for the reuse of mature ABAC infrastructure to represent and enforce trust-based decisions. Furthermore, we demonstrate how trust discounting mechanisms, which combine node-based and data-based trust, can be implemented within XACML policies. To evaluate this approach, we introduce a Rust-based XACML engine capable of interpreting trust-enhanced policies. Its integration in both inter- and intra-vehicle scenarios is discussed, assuming a modern zone-based architecture. Our results suggest that policy-based trust management can be efficiently implemented, enabling flexible and standardized trust reasoning in automotive environments.}, language = {en} } @inproceedings{LavesHutzelmannMayeretal.2025, author = {Laves, Claudius and Hutzelmann, Thomas and Mayer, Kevin and Hof, Hans-Joachim}, title = {Driving Down Premiums: A Security and Forensic Analysis of the DriveWell Insurance System}, pages = {9}, booktitle = {Proceedings of the 2nd Cyber Security in CarS Workshop (CSCS'25)}, publisher = {ACM}, address = {New York}, isbn = {979-8-4007-1928-8}, doi = {https://doi.org/10.1145/3736130.3762688}, year = {2025}, abstract = {Modern car insurance companies can dynamically adjust premiums with mobile sensor units that constantly record, analyze, and grade driving behavior. However, attackers can tamper with these systems to cheat the insurance company and reduce their premiums. We developed an attacker model for this threat in conjunction with a risk assessment using the ISO/SAE 21434 Risk Rating Methodology, a widely accepted standard for evaluating and managing risks in automotive systems. To support and showcase our model, we examined the static IT security of the mobile sensor unit DriveWell and its companion Android application HUK Mein Auto. In particular, we utilized digital forensic tools to analyze the stored data in the sensor's internal storage and the app's smartphone storage, with a focus on encryption mechanisms for locally stored data and internet communication. During this analysis, we spotted a critical vulnerability that enables attackers to manipulate their insurance scores and potentially reduce premiums by up to 30\%. Our model and real-world analysis provide a solid foundation for reducing the risk of such manipulation of insurance premiums.}, language = {en} } @inproceedings{HofFritzKrauss2025, author = {Hof, Hans-Joachim and Fritz, Mario and Krauß, Christoph}, title = {CSCS '25 - Cyber Security in CarS Workshop}, booktitle = {CCS '25: Proceedings of the 2025 ACM SIGSAC Conference on Computer and Communications Security}, publisher = {ACM}, address = {New York}, isbn = {979-8-4007-1525-9}, doi = {https://doi.org/10.1145/3719027.3769666}, pages = {4930 -- 4931}, year = {2025}, language = {en} } @inproceedings{RodriguezArozamenaMatutePerezetal.2024, author = {Rodr{\´i}guez-Arozamena, Mario and Matute, Jose and P{\´e}rez, Joshu{\´e} and Ozbay, Burcu and Tezcan, Deryanur and Begecarslan, Enes and Mutlukaya, Irem and Mayer, Kevin and Volkersdorfer, Tina and Hof, Hans-Joachim}, title = {TRA2024 Poster - A Fail-Safe Decision Architecture for CCAM Applications}, booktitle = {Proceedings of the Transport Research Arena (TRA2024) Conference}, publisher = {Zenodo}, address = {Genf}, doi = {https://doi.org/10.5281/zenodo.10995953}, year = {2024}, language = {en} } @inproceedings{HeinlReichlStreichHof2025, author = {Heinl, Patrizia and Reichl-Streich, Andrea-Julia and Hof, Hans-Joachim}, title = {Through the Looking-Glass: The Current AI Landscape in German Hospitals from a Cybersecurity Perspective}, booktitle = {Proceedings: 2025 IEEE 13th International Conference on Healthcare Informatics, ICHI 2025}, publisher = {IEEE}, address = {Piscataway}, isbn = {979-8-3315-2094-6}, doi = {https://doi.org/10.1109/ICHI64645.2025.00078}, pages = {636 -- 647}, year = {2025}, language = {en} } @inproceedings{RodriguezArozamenaMatutePerezetal.2025, author = {Rodr{\´i}guez-Arozamena, Mario and Matute, Jose and P{\´e}rez, Joshu{\´e} and Ozbay, Burcu and Tezcan, Deryanur and Begecarslan, Enes and Mutlukaya, Irem and Mayer, Kevin and Volkersdorfer, Tina and Hof, Hans-Joachim}, title = {A Fail-Safe Decision Architecture for CCAM Applications}, booktitle = {Transport Transitions: Advancing Sustainable and Inclusive Mobility, Proceedings of the 10th TRA Conference, 2024 Dublin, Ireland - Volume 6: Connected Mobility Ecosystems}, editor = {McNally, Ciaran and Carroll, P{\´a}raic and Martinez-Pastor, Beatriz and Ghosh, Bidisha and Efthymiou, Marina and Valantasis-Kanellos, Nikolaos}, publisher = {Springer}, address = {Cham}, isbn = {978-3-032-06763-0}, doi = {https://doi.org/10.1007/978-3-032-06763-0_104}, pages = {731 -- 737}, year = {2025}, abstract = {In the context of Connected, Cooperative, and Automated Mobility (CCAM), precise ego-vehicle positioning and environmental status assessment are crucial. However, these tasks can be susceptible to sensor failures, misuse, and cyberattacks. Automation disengagements and system redundancy are common strategies to achieve Minimum Risk Conditions when failures occur. This paper presents a Fail-Safe decision architecture formulated within the framework of the SELFY project (https://selfy-project.eu/). The main aim is to reduce inaccuracies in GNSS-derived positioning through the incorporation of sensor fusion, AI-guided situational assessment, trajectory planning, and mode decision components. Additionally, the architecture has been designed to enable real-time updates and communication with external entities, including the Vehicle Security Operations Centre.}, language = {en} } @inproceedings{JimenezReyesdelosMozosPereaPanosetal.2025, author = {Jimenez, Victor and Reyes de los Mozos, Mario and Perea Pa{\~n}os, Pau and Fritzsche, Paula Cecilia and Mayer, Kevin and Volkersdorfer, Tina and Hof, Hans-Joachim and Couturier, Christophe and Ernst, Thierry and Zhang, Miao and Saied Mohamed, Mohamed and Rodr{\´i}guez-Arozamena, Mario and Aranguren-Mendieta, I{\~n}igo and P{\´e}rez, Joshu{\´e} and Jousse, Adrien and Murguia, Carlos and van de Wouw, Nathan and Bellessort, Romain and Salami, Behzad and Jevtić, Aleksandar and Bannour, Boutheina and Rodr{\´i}guez Recasens, Manel and Ropero, Isaac and Ozbay, Burcu and Eren, Ali and Bektas, Mustafa and Tezcan, Deryanur and Pilz, Christoph and Haas, Sarah and Lenz, Gernot}, title = {SELFY - Self Assessment, Protection and Healing Tools for a Trustworthy and Resilient CCAM}, booktitle = {Transport Transitions: Advancing Sustainable and Inclusive Mobility, Proceedings of the 10th TRA Conference, 2024 Dublin, Ireland - Volume 6: Connected Mobility Ecosy}, editor = {McNally, Ciaran and Carroll, P{\´a}raic and Martinez-Pastor, Beatriz and Ghosh, Bidisha and Efthymiou, Marina and Valantasis-Kanellos, Nikolaos}, publisher = {Springer}, address = {Cham}, isbn = {978-3-032-06763-0}, doi = {https://doi.org/10.1007/978-3-032-06763-0_106}, pages = {745 -- 751}, year = {2025}, abstract = {SELFY envisions an agnostic toolbox for the self-management of security and resilience of the CCAM (Connected, Cooperative and Automated Mobility) ecosystem, which can be easily deployed to extend the current Operational Design Domain (ODD), providing self-awareness, self-resilience and self-healing mechanisms and enhancing trust between stakeholders. SELFY is based on four pillars: Situational awareness, Resilience, Secure Data Sharing and Trust and provides three groups of tools. SACP (Situational Awareness and Collaborative Perception) tools aim at providing all CCAM actors with a comprehensive understanding of their environment, i.e., the perception of objects, such as other traffic participants and stationary objects. CRHS (Cooperative Resilience and Healing System) tools enable self-protection actions whenever a compromising situation is detected in relation to assets, vehicles, operations, or the system itself. TDMS (Trust and Data Management System) tools establish a secure and trusted environment for data in a collaborative and cooperative context, both for infrastructure and assets, as well as for citizen's data, such as drivers or pedestrians with special attention to privacy considerations. By defining a collaborative environment between the different tools to respond to new threats, risks and attacks SELFY facilitates the comprehension of new challenges in the cybersecurity aspect of CCAMs.}, language = {en} } @inproceedings{JimenezReyesdelosMozosPereaPanosetal.2024, author = {Jimenez, Victor and Reyes de los Mozos, Mario and Perea Pa{\~n}os, Pau and Fritzsche, Paula Cecilia and Mayer, Kevin and Volkersdorfer, Tina and Hof, Hans-Joachim and Couturier, Christophe and Ernst, Thierry and Zhang, Miao and Saied Mohamed, Mohamed and Rodr{\´i}guez-Arozamena, Mario and Aranguren-Mendieta, I{\~n}igo and P{\´e}rez, Joshu{\´e} and Jousse, Adrien and Murguia, Carlos and van de Wouw, Nathan and Bellessort, Romain and Salami, Behzad and Jevtić, Aleksandar and Bannour, Boutheina and Rodr{\´i}guez Recasens, Manel and Ropero, Isaac and Ozbay, Burcu and Eren, Ali and Bektas, Mustafa and Tezcan, Deryanur and Pilz, Christoph and Haas, Sarah and Lenz, Gernot}, title = {SELFY - Self Assessment, Protection \& Healing Tools for a Trustworthy and Resilient CCAM}, booktitle = {Proceedings of the Transport Research Arena (TRA2024) Conference}, publisher = {Zenodo}, address = {Genf}, doi = {https://doi.org/10.5281/zenodo.10978183}, year = {2024}, abstract = {SELFY envisions an agnostic toolbox for the self-management of se-curity and resilience of the CCAM (Connected, Cooperative and Automated Mo-bility) ecosystem, which can be easily deployed to extend the current Operational Design Domain (ODD), providing self-awareness, self-resilience and self-heal-ing mechanisms and enhancing trust between stakeholders. SELFY is based on four pillars: Situational awareness, Resilience, Secure Data Sharing and Trust and provides three groups of tools. SACP (Situational Awareness and Collabo-rative Perception) tools aim at providing all CCAM actors with a comprehensive understanding of their environment, i.e., the perception of objects, such as other traffic participants and stationary objects. CRHS (Cooperative Resilience and Healing System) tools enable self-protection actions whenever a compromising situation is detected in relation to assets, vehicles, operations, or the system itself. TDMS (Trust and Data Management System) tools establish a secure and trusted environment for data in a collaborative and cooperative context, both for infra-structure and assets, as well as for citizen's data, such as drivers or pedestrians with special attention to privacy considerations. By defining a collaborative en-vironment between the different tools to respond to new threats, risks and attacks SELFY facilitates the comprehension of new challenges in the cybersecurity as-pect of CCAMs.}, language = {en} } @unpublished{LoewVasuAshokaHutzelmannetal.2025, author = {L{\"o}w, Jakob and Vasu Ashoka, Vishwa Vimukthi and Hutzelmann, Thomas and Hof, Hans-Joachim}, title = {Security Aspects of ISO 15118 Plug and Charge Payment}, publisher = {arXiv}, address = {Ithaca}, doi = {https://doi.org/10.48550/arXiv.2512.15966}, year = {2025}, language = {en} }