@inproceedings{KnierimPrangeAltetal.2022, author = {Knierim, Pascal and Prange, Sarah and Alt, Florian and Feger, Sebastian and Schneegass, Stefan and Sasse, M. Angela and Bayerl, Dominik and Hof, Hans-Joachim}, title = {Inclusive Security by Design}, booktitle = {Mensch und Computer 2022 - Workshopband}, editor = {Marky, Karola and Gr{\"u}nefeld, Uwe and Kosch, Thomas}, publisher = {Gesellschaft f{\"u}r Informatik e.V.}, address = {Bonn}, doi = {https://doi.org/10.18420/muc2022-mci-ws14-128}, year = {2022}, language = {en} } @inproceedings{BayerlHutzelmannHof2025, author = {Bayerl, Dominik and Hutzelmann, Thomas and Hof, Hans-Joachim}, title = {Efficient Cross-Architecture Binary Function Embeddings through Knowledge Distillation}, booktitle = {Proceedings of the 11th ACM Cyber-Physical System Security Workshop}, publisher = {ACM}, address = {New York}, isbn = {979-8-4007-1413-9}, doi = {https://doi.org/10.1145/3709017.3737709}, pages = {43 -- 51}, year = {2025}, abstract = {Deep learning has recently been shown to be effective in various tasks related to static binary analysis. One important analysis task is the binary function similarity problem: Given the binary code of two functions compiled with different compilers, different settings, and different processor architectures, the goal is to decide whether the functions are semantically equivalent (i.e. "similar") or not. This problem has numerous applications for embedded systems, for example plagiarism detection, validation of compliance restrictions with usable software licenses, more efficient reverse engineering of existing binary codebases, or vulnerability scanning by detecting known vulnerable functions. In this paper, we propose a novel training scheme for the popular transformer neural network architecture to learn function embeddings directly from instruction listings. Unlike existing approaches, our solution explicitly considers the cross-architecture scenario: we propose a training method to adapt the model to different instruction set architectures (ISA) without having to train a new model from scratch, which allows the model to also be used efficiently for embedded systems, where there are a variety of different processor architectures. We show that our solution achieves a similarity classification accuracy of 89.6\% on a dataset consisting of several real-world open source software projects. Finally, we conduct extensive experiments to demonstrate the effectiveness of knowledge distillation in increasing the computational efficiency of the embedding model. We demonstrate a reduction in the number of parameters from 87M to 23M, while still maintaining a classification accuracy of 87.8\%. Our code and artifacts are available as open source.}, language = {en} } @inproceedings{EderLoewHof2025, author = {Eder, Lukas and L{\"o}w, Jakob and Hof, Hans-Joachim}, title = {Charging Communication Sniffing and Man-in-the-Middle Attacks}, booktitle = {Proceedings of the 16th ACM International Conference on Future and Sustainable Energy Systems}, publisher = {ACM}, address = {New York}, isbn = {979-8-4007-1125-1}, doi = {ttps://doi.org/10.1145/3679240.3734648}, pages = {799 -- 804}, year = {2025}, abstract = {In recent years an increasing amount of electric vehicle fast charging stations have been built to meet the growing demand from rising electric vehicle numbers. The standard for fast charging communication in europe is ISO 15118. In theory the standard includes security controls for authentication and transport encryption. In reality difficulties with implementing those security controls as well as insecure design within the standard lead to multiple possible attack vectors compromising the confidentiality and authenticity of charging communication sessions. The goal of this research is to present different approaches towards performing sniffing and man-in-the-middle attacks against charging communication. We also provide a novel approach, which does not rely on race conditions and thus is more reliable than previous approaches.}, language = {en} } @inproceedings{deMeerWaedtRennochetal.2019, author = {de Meer, Jan and Waedt, Karl and Rennoch, Axel and Hof, Hans-Joachim}, title = {4th GI/ACM Workshop on standardization of I4.0 automation and control systems}, volume = {2019}, booktitle = {Lecture Notes in Informatics (LNI) - Proceedings}, number = {Volume P-295}, publisher = {Gesellschaft f{\"u}r Informatik}, address = {Bonn}, isbn = {978-3-88579-689-3}, issn = {1617-5468}, doi = {https://doi.org/10.18420/inf2019_ws27}, pages = {241 -- 242}, year = {2019}, language = {en} } @inproceedings{MayerVolkersdorferHofbaueretal.2024, author = {Mayer, Kevin and Volkersdorfer, Tina and Hofbauer, Jenny and Heinl, Patrizia and Hof, Hans-Joachim}, title = {Vehicle Security Operations Center for Cooperative, Connected and Automated Mobility}, booktitle = {SECURWARE 2024: The Eighteenth International Conference on Emerging Security Information, Systems and Technologies}, editor = {Hussain, Fatima and Fries, Steffen}, publisher = {IARIA}, address = {[s. l.]}, isbn = {978-1-68558-206-7}, url = {https://www.thinkmind.org/library/SECURWARE/SECURWARE_2024/securware_2024_2_190_30080.html}, pages = {156 -- 164}, year = {2024}, language = {en} } @inproceedings{MichlHof2024, author = {Michl, Marco and Hof, Hans-Joachim}, title = {Towards a Stakeholder-Centric Trust Management Approach for the Automotive Ecosystem}, booktitle = {SECURWARE 2024: The Eighteenth International Conference on Emerging Security Information, Systems and Technologies}, editor = {Hussain, Fatima and Fries, Steffen}, publisher = {IARIA}, address = {[s. l.]}, isbn = {978-1-68558-206-7}, url = {https://www.thinkmind.org/library/SECURWARE/SECURWARE_2024/securware_2024_2_70_30036.html}, pages = {64 -- 70}, year = {2024}, language = {en} } @inproceedings{LoewMayerHof2024, author = {L{\"o}w, Jakob and Mayer, Kevin and Hof, Hans-Joachim}, title = {Fast Charging Communication and Cybersecurity: A Technology Review}, booktitle = {SECURWARE 2024: The Eighteenth International Conference on Emerging Security Information, Systems and Technologies}, editor = {Hussain, Fatima and Fries, Steffen}, publisher = {IARIA}, address = {[s. l.]}, isbn = {978-1-68558-206-7}, url = {https://www.thinkmind.org/library/SECURWARE/SECURWARE_2024/securware_2024_2_50_30030.html}, pages = {52 -- 57}, year = {2024}, language = {en} } @article{LoewBayerlHof2022, author = {L{\"o}w, Jakob and Bayerl, Dominik and Hof, Hans-Joachim}, title = {Implementation of a Software Based Glitching Detection Mechanism}, volume = {15}, journal = {International Journal on Advances in Security}, number = {1\&2}, publisher = {IARIA}, address = {[s. l.]}, issn = {1942-2636}, url = {https://www.iariajournals.org/security/tocv15n12.html}, pages = {31 -- 40}, year = {2022}, language = {en} } @article{MayerBayerlHof2021, author = {Mayer, Kevin and Bayerl, Dominik and Hof, Hans-Joachim}, title = {{\"U}berwachung in modernen Fahrzeugen}, volume = {45}, journal = {Datenschutz und Datensicherheit - DuD}, subtitle = {Ergebnisse einer fahrzeugforensischen Untersuchung}, number = {6}, publisher = {Springer}, address = {Berlin}, issn = {1862-2607}, doi = {https://doi.org/10.1007/s11623-021-1459-5}, pages = {399 -- 403}, year = {2021}, language = {de} } @inproceedings{BiankHuberMeyeretal.2019, author = {Biank, Sanjana and Huber, Werner and Meyer, Matthias and Hof, Hans-Joachim and Hempen, Thomas}, title = {Model-based security and safety assurance for automotive safety systems}, booktitle = {Proceedings of 3. ACM Computer Science in Cars Symposium (CSCS 2019)}, subtitle = {Extended Abstract}, publisher = {ACM}, address = {New York}, url = {https://acm-cscs.org/_/2019/}, year = {2019}, language = {en} } @book{TinnefeldBuchnerPetrietal.2019, author = {Tinnefeld, Marie-Theres and Buchner, Benedikt and Petri, Thomas and Hof, Hans-Joachim}, title = {Einf{\"u}hrung in das Datenschutzrecht}, subtitle = {Datenschutz und Informationsfreiheit in europ{\"a}ischer Sicht}, edition = {7., {\"u}berarbeitete und aktualisierte Auflage}, publisher = {De Gruyter Oldenbourg}, address = {Berlin}, isbn = {978-3-11-063031-2}, doi = {https://doi.org/10.1515/9783110630336}, pages = {XXXIX, 563}, year = {2019}, language = {de} } @article{VolkersdorferHof2021, author = {Volkersdorfer, Tina and Hof, Hans-Joachim}, title = {ADAM: An Adversary-Driven Attack Modelling Framework for Model-Based Security Testing}, volume = {14}, journal = {International Journal on Advances in Security}, number = {1\&2}, publisher = {IARIA}, address = {[s. l.]}, issn = {1942-2636}, url = {https://www.iariajournals.org/security/tocv14n12.html}, pages = {12 -- 25}, year = {2021}, language = {en} } @inproceedings{VolkersdorferHof2020, author = {Volkersdorfer, Tina and Hof, Hans-Joachim}, title = {A Concept of an Attack Model for a Model-Based Security Testing Framework}, booktitle = {SECURWARE 2020: The Fourteenth International Conference on Emerging Security Information, Systems and Technologies}, subtitle = {Introducing a holistic perspective of cyberattacks in software engineering}, editor = {Hof, Hans-Joachim and Popescu, Manuela and Yee, George}, publisher = {IARIA}, address = {[s. l.]}, isbn = {978-1-61208-821-1}, url = {http://www.thinkmind.org/index.php?view=article\&articleid=securware_2020_2_130_30046}, pages = {96 -- 101}, year = {2020}, language = {en} } @inbook{Hof2022, author = {Hof, Hans-Joachim}, title = {Cybersecurity f{\"u}r den zukunftsf{\"a}higen Handel}, booktitle = {Der zukunftsf{\"a}hige Handel: Neue online und offline Konzepte sowie digitale und KI-basierte L{\"o}sungen}, editor = {Knoppe, Marc and Rock, Stefan and Wild, Martin}, publisher = {Springer Gabler}, address = {Wiesbaden}, isbn = {978-3-658-36217-1}, doi = {https://doi.org/10.1007/978-3-658-36218-8_11}, pages = {215 -- 237}, year = {2022}, language = {de} } @inbook{Hof2020, author = {Hof, Hans-Joachim}, title = {Cybersicherheit f{\"u}r mobile und intelligente Komponenten}, booktitle = {Cybersicherheit f{\"u}r vernetzte Anwendungen in der Industrie 4.0}, subtitle = {Einf{\"u}hrung und Grundlagen}, editor = {Schulz, Thomas}, publisher = {Vogel Communications Group}, address = {W{\"u}rzburg}, isbn = {978-3-8343-3424-4}, pages = {85 -- 205}, year = {2020}, language = {de} } @article{deAndradeDiasSantosJustoetal.2023, author = {de Andrade, Ricardo and Dias Santos, Max Mauro and Justo, Jo{\~a}o Francisco and Yoshioka, Leopoldo Rideki and Hof, Hans-Joachim and Kleinschmidt, Jo{\~a}o Henrique}, title = {Security architecture for automotive communication networks with CAN FD}, volume = {2023}, pages = {103203}, journal = {Computers \& Security}, number = {129}, publisher = {Elsevier}, address = {Amsterdam}, issn = {1872-6208}, doi = {https://doi.org/10.1016/j.cose.2023.103203}, year = {2023}, language = {en} } @article{MayerCorbettHof2021, author = {Mayer, Kevin and Corbett, Christopher and Hof, Hans-Joachim}, title = {A generalized approach to automotive forensics}, volume = {2021}, pages = {301111}, journal = {Forensic Science International: Digital Investigation}, number = {36, Supplement}, publisher = {Elsevier}, address = {Amsterdam}, issn = {2666-2817}, doi = {https://doi.org/10.1016/j.fsidi.2021.301111}, year = {2021}, abstract = {In the past years, software became an essential topic in modern vehicles, e.g., with the rise of more and more complex driver assistance systems. The advent of automated driving will drive this trend even further. Today, accident investigation, as well as warranty claim analysis, need to take into consideration an analysis of the rapidly increasing proportion of software and security based implementations as part of modern vehicles, the so-called digital forensics. This paper evaluates the general feasibility of digital forensics on a state-of-the-art vehicle. To do so, we analyzed current digital forensics techniques on a state-of-the-art vehicle to constitute gaps in the automotive forensics process used on in-vehicle systems. We present a general process for automotive forensics to close existing gaps and implemented it on a state-of-the-art vehicle in an in-vehicle device manipulation scenario. The implementation uses the on-board diagnostics interface, the diagnostics over internet protocol, as well as the unified diagnostic services for communication. Our implementation requires automotive Ethernet at the diagnostic interface. Our research shows future directions for efficient automotive forensic as well as the exemplary feasibility of automotive forensic analysis on state-of-the-art vehicles without the need for additional invehicle components such as intrusion detection systems or event data recorders.}, language = {en} } @inproceedings{deMeerWaedtRennochetal.2021, author = {de Meer, Jan and Waedt, Karl and Rennoch, Axel and Hof, Hans-Joachim}, title = {The 5th GI/ACM Workshop 2020 scope and draft programme on standardization of secure and safe smart manufacturing systems with respect to IEC 62443 IACS}, volume = {2021}, booktitle = {Lecture Notes in Informatics (LNI): Proceedings}, number = {Volume P-307}, publisher = {Gesellschaft f{\"u}r Informatik e.V.}, address = {Bonn}, isbn = {978-3-88579-701-2}, issn = {1617-5468}, doi = {https://doi.org/10.18420/inf2020_26}, pages = {283 -- 287}, year = {2021}, abstract = {The 5th GI/ACM Workshop Programme on Standardization of Secure and Safe Production within Industrial Automation and Control Systems (IACS) took place virtually at September 28, 2020 at the Karlsruhe Institute of Technology (KIT) that hosted the 50th GI's yearly assembly (GI Informatik 2020 Jahrestagung).}, language = {en} } @inproceedings{MayerCorbettHof2021, author = {Mayer, Kevin and Corbett, Christopher and Hof, Hans-Joachim}, title = {Structured methodology and survey to evaluate data completeness in automotive digital forensics}, booktitle = {19th escar Europe: The World's Leading Automotive Cyber Security Conference}, publisher = {Ruhr-Universit{\"a}t Bochum}, address = {Bochum}, doi = {https://doi.org/10.13154/294-8351}, pages = {52 -- 67}, year = {2021}, language = {en} } @inproceedings{BluemkeMayerHof2024, author = {Bl{\"u}mke, Julian and Mayer, Kevin and Hof, Hans-Joachim}, title = {An Analysis of Security Concerns in Transitioning Battery Management Systems from First to Second Life}, pages = {101}, booktitle = {ARES 24: 19th International Conference on Availability, Reliability and Security}, publisher = {ACM}, address = {New York}, isbn = {979-8-4007-1718-5}, doi = {https://doi.org/10.1145/3664476.3671010}, year = {2024}, abstract = {Lithium-ion batteries are becoming essential vehicle components with the ongoing shift to electric vehicles. Battery management systems manage these batteries. Typically, battery management systems used to be placed deep within the vehicle architecture, away from external interfaces. However, with increasing connectivity to backend systems, e.g., to improve monitoring battery properties and optimize charging, battery management systems have moved closer to the attack surface, increasing security risks. Also, batteries will soon be reused in so-called second life applications, e.g., as an energy storage system in a private home. While conventional methods involve removing the battery and reusing it with a new battery management system, modern methods retain the original system. Though security controls exist for first and second life applications, there is a lack of research on the transition phase. This paper analyzes the phase of transferring the battery management system from the first to the second life of particular relevance for security, privacy, and intellectual property. We try to close this research gap by analyzing the security aspects of a battery management system life cycle and its altering system environment. We are defining the transition phase, identifying necessary activities, and providing cybersecurity needs for the transitioning of battery management systems from first to second life.}, language = {en} } @inbook{Hof2024, author = {Hof, Hans-Joachim}, title = {Digitalisierung in Hochschulen}, booktitle = {Digitalisierung in Industrie-, Handels- und Dienstleistungsunternehmen: Konzepte - L{\"o}sungen - Beispiele}, editor = {Fend, Lars and Hofmann, J{\"u}rgen}, edition = {4., {\"u}berarbeitete und erweiterte Auflage}, publisher = {Springer Gabler}, address = {Wiesbaden}, isbn = {978-3-658-43440-3}, doi = {https://doi.org/10.1007/978-3-658-43441-0_27}, pages = {615 -- 635}, year = {2024}, language = {de} } @inproceedings{BrueckmannMadlHof2017, author = {Br{\"u}ckmann, Jasmin and Madl, Tobias and Hof, Hans-Joachim}, title = {An Analysis of Automotive Security Based on a Reference Model for Automotive Cyber Systems}, booktitle = {SECURWARE 2017: The Eleventh International Conference on Emerging Securtity Information, Systems and Technologies}, editor = {Merkle Westphall, Carla and Hof, Hans-Joachim and Olmsted, Aspen and Schauer, Stefan and Latzenhofer, Martin and Abidin, Aysajan and Yee, George}, publisher = {IARIA}, address = {[s. l.]}, isbn = {978-1-61208-582-1}, url = {https://www.thinkmind.org/library/SECURWARE/SECURWARE_2017/securware_2017_8_20_38021.html}, pages = {136 -- 141}, year = {2017}, language = {en} } @inproceedings{BraunHof2017, author = {Braun, Lukas and Hof, Hans-Joachim}, title = {A System to Save the Internet from the Malicious Internet of Things at Home}, booktitle = {SECURWARE 2017: The Eleventh International Conference on Emerging Securtity Information, Systems and Technologies}, editor = {Merkle Westphall, Carla and Hof, Hans-Joachim and Olmsted, Aspen and Schauer, Stefan and Latzenhofer, Martin and Abidin, Aysajan and Yee, George}, publisher = {IARIA}, address = {[s. l.]}, isbn = {978-1-61208-582-1}, url = {https://www.thinkmind.org/library/SECURWARE/SECURWARE_2017/securware_2017_11_20_30028.html}, pages = {180 -- 185}, year = {2017}, language = {en} } @book{TinnefeldBuchnerPetrietal.2017, author = {Tinnefeld, Marie-Theres and Buchner, Benedikt and Petri, Thomas and Hof, Hans-Joachim}, title = {Einf{\"u}hrung in das Datenschutzrecht}, subtitle = {Datenschutz und Informationsfreiheit in europ{\"a}ischer Sicht}, edition = {6., vollst{\"a}ndig {\"u}berarbeitete und aktualisierte Auflage}, publisher = {De Gruyter Oldenbourg}, address = {Berlin}, isbn = {978-3-11-041673-2}, doi = {https://doi.org/10.1515/9783110416732}, pages = {XXXII, 536}, year = {2017}, language = {de} } @inproceedings{HofbauerMayerHof2023, author = {Hofbauer, Jenny and Mayer, Kevin and Hof, Hans-Joachim}, title = {From SOC to VSOC: Transferring Key Requirements for Efficient Vehicle Security Operations}, booktitle = {Proceedings: The World's Leading Automotive Cyber Security Conference, 21st escar Europe, escar - Embedded Security in Cars}, publisher = {Ruhr-Universit{\"a}t Bochum}, address = {Bochum}, doi = {https://doi.org/10.13154/294-10389}, pages = {92 -- 106}, year = {2023}, language = {en} } @inproceedings{LangerMichlPaulaetal.2022, author = {Langer, Robin and Michl, Marco and Paula, Daniel and Hof, Hans-Joachim and Schweiger, Hans-Georg}, title = {Security analysis of an Event Data Recorder system according to the HEAVENS model}, booktitle = {Proceedings of the 30th Annual Congress of the EVU}, publisher = {EVU}, address = {Berlin}, year = {2022}, language = {en} } @inproceedings{FritzKraussHof2024, author = {Fritz, Mario and Krauß, Christoph and Hof, Hans-Joachim}, title = {CSCS '24 - Cyber Security in CarS Workshop}, booktitle = {CCS '24: Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security}, publisher = {ACM}, address = {New York}, isbn = {979-8-4007-0636-3}, doi = {https://doi.org/10.1145/3658644.3691551}, pages = {4914 -- 4916}, year = {2024}, language = {en} } @article{BluemkeHof2023, author = {Bl{\"u}mke, Julian and Hof, Hans-Joachim}, title = {Binding the Battery to the Pass: An Approach to Trustworthy Product Life Cycle Data by Using Certificates Based on PUFs}, volume = {16}, journal = {International Journal on Advances in Security}, number = {1\&2}, publisher = {IARIA}, address = {[s. l.]}, issn = {1942-2636}, url = {http://www.iariajournals.org/security/tocv16n12.html}, pages = {44 -- 53}, year = {2023}, language = {en} } @inproceedings{BluemkeLavesHof2025, author = {Bl{\"u}mke, Julian and Laves, Claudius and Hof, Hans-Joachim}, title = {Identifying Building Blocks for Second-Life-Enabled Battery Management Systems}, booktitle = {Conference Proceedings: 2025 IEEE International Conference on Environment and Electrical Engineering and 2025 IEEE Industrial and Commercial Power Systems Europe (EEEIC / I\&CPS Europe), 15-18 July 2025, Chania, Crete - Greece}, editor = {Leonowicz, Zbigniew and Stracqualursi, Erika and Jasinski, Michal}, publisher = {IEEE}, address = {Piscataway}, isbn = {979-8-3315-9515-9}, doi = {https://doi.org/10.1109/EEEIC/ICPSEurope64998.2025.11169196}, year = {2025}, language = {en} } @inproceedings{LoewBayerlMayeretal.2025, author = {L{\"o}w, Jakob and Bayerl, Dominik and Mayer, Kevin and Hof, Hans-Joachim}, title = {DrainDead: Emptying Batteries of Parked Electric Vehicles}, booktitle = {Proceedings of the 3rd USENIX Symposium on Vehicle Security and Privacy (VehicleSec '25)}, publisher = {USENIX Association}, address = {Berkeley}, isbn = {978-1-939133-49-6}, url = {https://www.usenix.org/conference/vehiclesec25/presentation/low}, pages = {233 -- 241}, year = {2025}, language = {en} } @inproceedings{MichlHofKatzenbeisser2024, author = {Michl, Marco and Hof, Hans-Joachim and Katzenbeisser, Stefan}, title = {Classification, Impact, and Mitigation Strategies of Attacks in Automotive Trust Management Systems}, booktitle = {Proceedings of the 2024 on Cyber Security in CarS Workshop (CSCS '24)}, publisher = {ACM}, address = {New York}, isbn = {979-8-4007-1232-6}, doi = {https://doi.org/10.1145/3689936.3694691}, pages = {61 -- 75}, year = {2024}, abstract = {With the advent of connected vehicles, which provide many new comfort functions, the attack surface increased as well. Widespread "hard security" mechanisms are used to secure the vehicle and its infrastructure, but they cannot mitigate all threats, especially if inside attackers are considered. "Soft security" mechanisms, like trust and reputation systems, can help to close the attack surface further. However, such systems add complexity and can also lead to further vulnerabilities. To use such mechanisms securely, this work analyzes attacks targeting trust management systems in the automotive domain. For this purpose, a literature review was conducted, and the extracted attacks were characterized and divided into several clusters, introducing a new nomenclature of attacks against trust management for vehicles. We argue that four main categories of attacks exist. They are distinguished by their target component: communication channel, trust management layer, or application. As a fourth category, we see attacks that are enabled by the use of trust management systems. The outcome of this analysis was used to create an adversary model based on detected attack vectors and to define abstract reference attackers. These can be used to evaluate the resilience of automotive trust management systems against the analyzed attacks. Mitigation strategies against the adversary's capabilities are further presented to avoid vulnerabilities in the design of automotive trust management systems.}, language = {en} } @inproceedings{MadlBrueckmannHof2018, author = {Madl, Tobias and Br{\"u}ckmann, Jasmin and Hof, Hans-Joachim}, title = {CAN Obfuscation by Randomization (CANORa)}, booktitle = {CSCS 2018 Proceedings}, subtitle = {A technology to prevent large-scale malware attacks on driverless autonomous vehicles}, publisher = {ACM}, address = {New York}, isbn = {978-1-4503-6616-8}, url = {https://wp.mpi-inf.mpg.de/cscs/files/2018/09/03-CAN-Obfuscation-by-Randomization-CANORa-A-technology-to-prevent-large-scale-malware-attacks-on-driverless-autonomous-vehicles.pdf}, doi = {https://doi.org/10.1145/3273946.3273953}, year = {2018}, language = {en} } @inproceedings{LoewBayerlHof2021, author = {L{\"o}w, Jakob and Bayerl, Dominik and Hof, Hans-Joachim}, title = {Software Based Glitching Detection}, booktitle = {SECURWARE 2021: The Fifteenth International Conference on Emerging Security Information, Systems and Technologies}, editor = {Hof, Hans-Joachim and Popescu, Manuela and Fongen, Anders}, publisher = {IARIA}, address = {[s. l.]}, isbn = {978-1-61208-919-5}, issn = {2162-2116}, url = {https://www.thinkmind.org/index.php?view=article\&articleid=securware_2021_1_70_30029}, pages = {41 -- 46}, year = {2021}, language = {en} } @inproceedings{MayerHof2022, author = {Mayer, Kevin and Hof, Hans-Joachim}, title = {Digital Forensics Investigation of the Tesla Autopilot File System}, booktitle = {SECURWARE 2022: The Sixteenth International Conference on Emerging Security Information, Systems and Technologies}, editor = {Yee, George}, publisher = {IARIA}, address = {[s. l.]}, isbn = {978-1-68558-007-0}, url = {https://www.thinkmind.org/index.php?view=article\&articleid=securware_2022_1_130_38001}, pages = {82 -- 87}, year = {2022}, language = {en} } @inproceedings{UllrichBayerlHutzelmannetal.2025, author = {Ullrich, Henning and Bayerl, Dominik and Hutzelmann, Thomas and Hof, Hans-Joachim}, title = {Application of Quantum Key Distribution in Intelligent Transport Systems}, pages = {5}, booktitle = {Proceedings of the 2nd Cyber Security in CarS Workshop (CSCS'25)}, publisher = {ACM}, address = {New York}, isbn = {979-8-4007-1928-8}, doi = {https://doi.org/10.1145/3736130.3762692}, year = {2025}, abstract = {Quantum Key Distribution (QKD) enables two parties to generate a secret key, based on quantum physical properties. The secrecy of the exchanged key is guaranteed by these quantum physical properties, even against an attacker using a quantum computer. QKD therefore offers an Quantum Information Theoretically Secure (Q-ITS) alternative to Post Quantum Cryptography (PQC) schemes. This paper discusses advantages and challenges of deploying a QKD system in an Intelligent Transport System (ITS), by examining two exemplary use cases. Approaches to effectively implement QKD in these use cases are proposed, with a short discussion of advantages over the use of classical and PQC schemes.}, language = {en} } @inproceedings{BluemkeHof2022, author = {Bl{\"u}mke, Julian and Hof, Hans-Joachim}, title = {Authentic Batteries: A Concept for a Battery Pass Based on PUF-enabled Certificates}, booktitle = {SECURWARE 2022: The Sixteenth International Conference on Emerging Security Information, Systems and Technologies}, editor = {Yee, George}, publisher = {IARIA}, address = {[s. l.]}, isbn = {978-1-68558-007-0}, url = {https://www.thinkmind.org/index.php?view=article\&articleid=securware_2022_1_120_30051}, pages = {76 -- 81}, year = {2022}, language = {en} } @inproceedings{MayerHof2021, author = {Mayer, Kevin and Hof, Hans-Joachim}, title = {Identification of Automotive Digital Forensics Stakeholders}, booktitle = {SECURWARE 2021: The Fifteenth International Conference on Emerging Security Information, Systems and Technologies}, editor = {Hof, Hans-Joachim and Popescu, Manuela and Fongen, Anders}, publisher = {IARIA}, address = {[s. l.]}, isbn = {978-1-61208-919-5}, issn = {2162-2116}, url = {https://www.thinkmind.org/index.php?view=article\&articleid=securware_2021_1_20_30004}, pages = {8 -- 13}, year = {2021}, language = {en} } @inproceedings{MichlHofKatzenbeisser2025, author = {Michl, Marco and Hof, Hans-Joachim and Katzenbeisser, Stefan}, title = {From Access to Trust: Policy-Based Automotive Trust Management With XACML}, pages = {6}, booktitle = {Proceedings of the 2nd Cyber Security in CarS Workshop (CSCS'25)}, publisher = {ACM}, address = {New York}, isbn = {979-8-4007-1928-8}, doi = {https://doi.org/10.1145/3736130.3764511}, year = {2025}, abstract = {Trust is a fundamental requirement in vehicular systems, particularly in the context of autonomous and cooperative driving, where decisions often depend on data received from other vehicles or infrastructure. This paper presents a novel approach to integrating trust-based reasoning—specifically, decision-making based on subjective logic—into Attribute-Based Access Control (ABAC) systems, using the XACML policy language. We draw a parallel between trust management and access control, showing that trust assessments can be modeled as access decisions and expressed through standard access control policies. This integration allows for the reuse of mature ABAC infrastructure to represent and enforce trust-based decisions. Furthermore, we demonstrate how trust discounting mechanisms, which combine node-based and data-based trust, can be implemented within XACML policies. To evaluate this approach, we introduce a Rust-based XACML engine capable of interpreting trust-enhanced policies. Its integration in both inter- and intra-vehicle scenarios is discussed, assuming a modern zone-based architecture. Our results suggest that policy-based trust management can be efficiently implemented, enabling flexible and standardized trust reasoning in automotive environments.}, language = {en} } @inproceedings{LavesHutzelmannMayeretal.2025, author = {Laves, Claudius and Hutzelmann, Thomas and Mayer, Kevin and Hof, Hans-Joachim}, title = {Driving Down Premiums: A Security and Forensic Analysis of the DriveWell Insurance System}, pages = {9}, booktitle = {Proceedings of the 2nd Cyber Security in CarS Workshop (CSCS'25)}, publisher = {ACM}, address = {New York}, isbn = {979-8-4007-1928-8}, doi = {https://doi.org/10.1145/3736130.3762688}, year = {2025}, abstract = {Modern car insurance companies can dynamically adjust premiums with mobile sensor units that constantly record, analyze, and grade driving behavior. However, attackers can tamper with these systems to cheat the insurance company and reduce their premiums. We developed an attacker model for this threat in conjunction with a risk assessment using the ISO/SAE 21434 Risk Rating Methodology, a widely accepted standard for evaluating and managing risks in automotive systems. To support and showcase our model, we examined the static IT security of the mobile sensor unit DriveWell and its companion Android application HUK Mein Auto. In particular, we utilized digital forensic tools to analyze the stored data in the sensor's internal storage and the app's smartphone storage, with a focus on encryption mechanisms for locally stored data and internet communication. During this analysis, we spotted a critical vulnerability that enables attackers to manipulate their insurance scores and potentially reduce premiums by up to 30\%. Our model and real-world analysis provide a solid foundation for reducing the risk of such manipulation of insurance premiums.}, language = {en} } @inproceedings{HofFritzKrauss2025, author = {Hof, Hans-Joachim and Fritz, Mario and Krauß, Christoph}, title = {CSCS '25 - Cyber Security in CarS Workshop}, booktitle = {CCS '25: Proceedings of the 2025 ACM SIGSAC Conference on Computer and Communications Security}, publisher = {ACM}, address = {New York}, isbn = {979-8-4007-1525-9}, doi = {https://doi.org/10.1145/3719027.3769666}, pages = {4930 -- 4931}, year = {2025}, language = {en} } @inproceedings{HeinlReichlStreichHof2025, author = {Heinl, Patrizia and Reichl-Streich, Andrea-Julia and Hof, Hans-Joachim}, title = {Through the Looking-Glass: The Current AI Landscape in German Hospitals from a Cybersecurity Perspective}, booktitle = {Proceedings: 2025 IEEE 13th International Conference on Healthcare Informatics, ICHI 2025}, publisher = {IEEE}, address = {Piscataway}, isbn = {979-8-3315-2094-6}, doi = {https://doi.org/10.1109/ICHI64645.2025.00078}, pages = {636 -- 647}, year = {2025}, language = {en} } @inproceedings{RodriguezArozamenaMatutePerezetal.2025, author = {Rodr{\´i}guez-Arozamena, Mario and Matute, Jose and P{\´e}rez, Joshu{\´e} and Ozbay, Burcu and Tezcan, Deryanur and Begecarslan, Enes and Mutlukaya, Irem and Mayer, Kevin and Volkersdorfer, Tina and Hof, Hans-Joachim}, title = {A Fail-Safe Decision Architecture for CCAM Applications}, booktitle = {Transport Transitions: Advancing Sustainable and Inclusive Mobility, Proceedings of the 10th TRA Conference, 2024 Dublin, Ireland - Volume 6: Connected Mobility Ecosystems}, editor = {McNally, Ciaran and Carroll, P{\´a}raic and Martinez-Pastor, Beatriz and Ghosh, Bidisha and Efthymiou, Marina and Valantasis-Kanellos, Nikolaos}, publisher = {Springer}, address = {Cham}, isbn = {978-3-032-06763-0}, doi = {https://doi.org/10.1007/978-3-032-06763-0_104}, pages = {731 -- 737}, year = {2025}, abstract = {In the context of Connected, Cooperative, and Automated Mobility (CCAM), precise ego-vehicle positioning and environmental status assessment are crucial. However, these tasks can be susceptible to sensor failures, misuse, and cyberattacks. Automation disengagements and system redundancy are common strategies to achieve Minimum Risk Conditions when failures occur. This paper presents a Fail-Safe decision architecture formulated within the framework of the SELFY project (https://selfy-project.eu/). The main aim is to reduce inaccuracies in GNSS-derived positioning through the incorporation of sensor fusion, AI-guided situational assessment, trajectory planning, and mode decision components. Additionally, the architecture has been designed to enable real-time updates and communication with external entities, including the Vehicle Security Operations Centre.}, language = {en} } @inproceedings{JimenezReyesdelosMozosPereaPanosetal.2025, author = {Jimenez, Victor and Reyes de los Mozos, Mario and Perea Pa{\~n}os, Pau and Fritzsche, Paula Cecilia and Mayer, Kevin and Volkersdorfer, Tina and Hof, Hans-Joachim and Couturier, Christophe and Ernst, Thierry and Zhang, Miao and Saied Mohamed, Mohamed and Rodr{\´i}guez-Arozamena, Mario and Aranguren-Mendieta, I{\~n}igo and P{\´e}rez, Joshu{\´e} and Jousse, Adrien and Murguia, Carlos and van de Wouw, Nathan and Bellessort, Romain and Salami, Behzad and Jevtić, Aleksandar and Bannour, Boutheina and Rodr{\´i}guez Recasens, Manel and Ropero, Isaac and Ozbay, Burcu and Eren, Ali and Bektas, Mustafa and Tezcan, Deryanur and Pilz, Christoph and Haas, Sarah and Lenz, Gernot}, title = {SELFY - Self Assessment, Protection and Healing Tools for a Trustworthy and Resilient CCAM}, booktitle = {Transport Transitions: Advancing Sustainable and Inclusive Mobility, Proceedings of the 10th TRA Conference, 2024 Dublin, Ireland - Volume 6: Connected Mobility Ecosy}, editor = {McNally, Ciaran and Carroll, P{\´a}raic and Martinez-Pastor, Beatriz and Ghosh, Bidisha and Efthymiou, Marina and Valantasis-Kanellos, Nikolaos}, publisher = {Springer}, address = {Cham}, isbn = {978-3-032-06763-0}, doi = {https://doi.org/10.1007/978-3-032-06763-0_106}, pages = {745 -- 751}, year = {2025}, abstract = {SELFY envisions an agnostic toolbox for the self-management of security and resilience of the CCAM (Connected, Cooperative and Automated Mobility) ecosystem, which can be easily deployed to extend the current Operational Design Domain (ODD), providing self-awareness, self-resilience and self-healing mechanisms and enhancing trust between stakeholders. SELFY is based on four pillars: Situational awareness, Resilience, Secure Data Sharing and Trust and provides three groups of tools. SACP (Situational Awareness and Collaborative Perception) tools aim at providing all CCAM actors with a comprehensive understanding of their environment, i.e., the perception of objects, such as other traffic participants and stationary objects. CRHS (Cooperative Resilience and Healing System) tools enable self-protection actions whenever a compromising situation is detected in relation to assets, vehicles, operations, or the system itself. TDMS (Trust and Data Management System) tools establish a secure and trusted environment for data in a collaborative and cooperative context, both for infrastructure and assets, as well as for citizen's data, such as drivers or pedestrians with special attention to privacy considerations. By defining a collaborative environment between the different tools to respond to new threats, risks and attacks SELFY facilitates the comprehension of new challenges in the cybersecurity aspect of CCAMs.}, language = {en} } @inproceedings{JimenezReyesdelosMozosPereaPanosetal.2024, author = {Jimenez, Victor and Reyes de los Mozos, Mario and Perea Pa{\~n}os, Pau and Fritzsche, Paula Cecilia and Mayer, Kevin and Volkersdorfer, Tina and Hof, Hans-Joachim and Couturier, Christophe and Ernst, Thierry and Zhang, Miao and Saied Mohamed, Mohamed and Rodr{\´i}guez-Arozamena, Mario and Aranguren-Mendieta, I{\~n}igo and P{\´e}rez, Joshu{\´e} and Jousse, Adrien and Murguia, Carlos and van de Wouw, Nathan and Bellessort, Romain and Salami, Behzad and Jevtić, Aleksandar and Bannour, Boutheina and Rodr{\´i}guez Recasens, Manel and Ropero, Isaac and Ozbay, Burcu and Eren, Ali and Bektas, Mustafa and Tezcan, Deryanur and Pilz, Christoph and Haas, Sarah and Lenz, Gernot}, title = {SELFY - Self Assessment, Protection \& Healing Tools for a Trustworthy and Resilient CCAM}, booktitle = {Proceedings of the Transport Research Arena (TRA2024) Conference}, publisher = {Zenodo}, address = {Genf}, doi = {https://doi.org/10.5281/zenodo.10978183}, year = {2024}, abstract = {SELFY envisions an agnostic toolbox for the self-management of se-curity and resilience of the CCAM (Connected, Cooperative and Automated Mo-bility) ecosystem, which can be easily deployed to extend the current Operational Design Domain (ODD), providing self-awareness, self-resilience and self-heal-ing mechanisms and enhancing trust between stakeholders. SELFY is based on four pillars: Situational awareness, Resilience, Secure Data Sharing and Trust and provides three groups of tools. SACP (Situational Awareness and Collabo-rative Perception) tools aim at providing all CCAM actors with a comprehensive understanding of their environment, i.e., the perception of objects, such as other traffic participants and stationary objects. CRHS (Cooperative Resilience and Healing System) tools enable self-protection actions whenever a compromising situation is detected in relation to assets, vehicles, operations, or the system itself. TDMS (Trust and Data Management System) tools establish a secure and trusted environment for data in a collaborative and cooperative context, both for infra-structure and assets, as well as for citizen's data, such as drivers or pedestrians with special attention to privacy considerations. By defining a collaborative en-vironment between the different tools to respond to new threats, risks and attacks SELFY facilitates the comprehension of new challenges in the cybersecurity as-pect of CCAMs.}, language = {en} }