TY - CHAP A1 - Knierim, Pascal A1 - Prange, Sarah A1 - Alt, Florian A1 - Feger, Sebastian A1 - Schneegass, Stefan A1 - Sasse, M. Angela A1 - Bayerl, Dominik A1 - Hof, Hans-Joachim ED - Marky, Karola ED - Grünefeld, Uwe ED - Kosch, Thomas T1 - Inclusive Security by Design T2 - Mensch und Computer 2022 - Workshopband UR - https://doi.org/10.18420/muc2022-mci-ws14-128 KW - usable security KW - inclusion KW - self-determined security Y1 - 2022 UR - https://doi.org/10.18420/muc2022-mci-ws14-128 PB - Gesellschaft für Informatik e.V. CY - Bonn ER - TY - CHAP A1 - Bayerl, Dominik A1 - Hutzelmann, Thomas A1 - Hof, Hans-Joachim T1 - Efficient Cross-Architecture Binary Function Embeddings through Knowledge Distillation T2 - Proceedings of the 11th ACM Cyber-Physical System Security Workshop N2 - Deep learning has recently been shown to be effective in various tasks related to static binary analysis. One important analysis task is the binary function similarity problem: Given the binary code of two functions compiled with different compilers, different settings, and different processor architectures, the goal is to decide whether the functions are semantically equivalent (i.e. "similar") or not. This problem has numerous applications for embedded systems, for example plagiarism detection, validation of compliance restrictions with usable software licenses, more efficient reverse engineering of existing binary codebases, or vulnerability scanning by detecting known vulnerable functions. In this paper, we propose a novel training scheme for the popular transformer neural network architecture to learn function embeddings directly from instruction listings. Unlike existing approaches, our solution explicitly considers the cross-architecture scenario: we propose a training method to adapt the model to different instruction set architectures (ISA) without having to train a new model from scratch, which allows the model to also be used efficiently for embedded systems, where there are a variety of different processor architectures. We show that our solution achieves a similarity classification accuracy of 89.6% on a dataset consisting of several real-world open source software projects. Finally, we conduct extensive experiments to demonstrate the effectiveness of knowledge distillation in increasing the computational efficiency of the embedding model. We demonstrate a reduction in the number of parameters from 87M to 23M, while still maintaining a classification accuracy of 87.8%. Our code and artifacts are available as open source. UR - https://doi.org/10.1145/3709017.3737709 Y1 - 2025 UR - https://doi.org/10.1145/3709017.3737709 UR - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:bvb:573-61584 SN - 979-8-4007-1413-9 SP - 43 EP - 51 PB - ACM CY - New York ER - TY - CHAP A1 - Eder, Lukas A1 - Löw, Jakob A1 - Hof, Hans-Joachim T1 - Charging Communication Sniffing and Man-in-the-Middle Attacks T2 - Proceedings of the 16th ACM International Conference on Future and Sustainable Energy Systems N2 - In recent years an increasing amount of electric vehicle fast charging stations have been built to meet the growing demand from rising electric vehicle numbers. The standard for fast charging communication in europe is ISO 15118. In theory the standard includes security controls for authentication and transport encryption. In reality difficulties with implementing those security controls as well as insecure design within the standard lead to multiple possible attack vectors compromising the confidentiality and authenticity of charging communication sessions. The goal of this research is to present different approaches towards performing sniffing and man-in-the-middle attacks against charging communication. We also provide a novel approach, which does not rely on race conditions and thus is more reliable than previous approaches. UR - ttps://doi.org/10.1145/3679240.3734648 Y1 - 2025 UR - ttps://doi.org/10.1145/3679240.3734648 UR - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:bvb:573-60183 SN - 979-8-4007-1125-1 SP - 799 EP - 804 PB - ACM CY - New York ER - TY - CHAP A1 - Mayer, Kevin A1 - Volkersdorfer, Tina A1 - Hofbauer, Jenny A1 - Heinl, Patrizia A1 - Hof, Hans-Joachim ED - Hussain, Fatima ED - Fries, Steffen T1 - Vehicle Security Operations Center for Cooperative, Connected and Automated Mobility T2 - SECURWARE 2024: The Eighteenth International Conference on Emerging Security Information, Systems and Technologies Y1 - 2024 UR - https://www.thinkmind.org/library/SECURWARE/SECURWARE_2024/securware_2024_2_190_30080.html SN - 978-1-68558-206-7 SP - 156 EP - 164 PB - IARIA CY - [s. l.] ER - TY - CHAP A1 - Michl, Marco A1 - Hof, Hans-Joachim ED - Hussain, Fatima ED - Fries, Steffen T1 - Towards a Stakeholder-Centric Trust Management Approach for the Automotive Ecosystem T2 - SECURWARE 2024: The Eighteenth International Conference on Emerging Security Information, Systems and Technologies Y1 - 2024 UR - https://www.thinkmind.org/library/SECURWARE/SECURWARE_2024/securware_2024_2_70_30036.html SN - 978-1-68558-206-7 SP - 64 EP - 70 PB - IARIA CY - [s. l.] ER - TY - CHAP A1 - Löw, Jakob A1 - Mayer, Kevin A1 - Hof, Hans-Joachim ED - Hussain, Fatima ED - Fries, Steffen T1 - Fast Charging Communication and Cybersecurity: A Technology Review T2 - SECURWARE 2024: The Eighteenth International Conference on Emerging Security Information, Systems and Technologies Y1 - 2024 UR - https://www.thinkmind.org/library/SECURWARE/SECURWARE_2024/securware_2024_2_50_30030.html SN - 978-1-68558-206-7 SP - 52 EP - 57 PB - IARIA CY - [s. l.] ER - TY - JOUR A1 - Löw, Jakob A1 - Bayerl, Dominik A1 - Hof, Hans-Joachim T1 - Implementation of a Software Based Glitching Detection Mechanism JF - International Journal on Advances in Security KW - computer security KW - clocks KW - microcontrollers KW - program compilers KW - program control structures Y1 - 2022 UR - https://www.iariajournals.org/security/tocv15n12.html SN - 1942-2636 VL - 15 IS - 1&2 SP - 31 EP - 40 PB - IARIA CY - [s. l.] ER - TY - JOUR A1 - Mayer, Kevin A1 - Bayerl, Dominik A1 - Hof, Hans-Joachim T1 - Überwachung in modernen Fahrzeugen BT - Ergebnisse einer fahrzeugforensischen Untersuchung JF - Datenschutz und Datensicherheit - DuD UR - https://doi.org/10.1007/s11623-021-1459-5 Y1 - 2021 UR - https://doi.org/10.1007/s11623-021-1459-5 SN - 1862-2607 VL - 45 IS - 6 SP - 399 EP - 403 PB - Springer CY - Berlin ER - TY - CHAP A1 - Biank, Sanjana A1 - Huber, Werner A1 - Meyer, Matthias A1 - Hof, Hans-Joachim A1 - Hempen, Thomas T1 - Model-based security and safety assurance for automotive safety systems BT - Extended Abstract T2 - Proceedings of 3. ACM Computer Science in Cars Symposium (CSCS 2019) KW - Model-based Testing KW - Security KW - Safety KW - Verification KW - Validation Y1 - 2019 UR - https://acm-cscs.org/_/2019/ UR - https://cscs19.cispa.saarland/ PB - ACM CY - New York ER - TY - BOOK A1 - Tinnefeld, Marie-Theres A1 - Buchner, Benedikt A1 - Petri, Thomas A1 - Hof, Hans-Joachim T1 - Einführung in das Datenschutzrecht BT - Datenschutz und Informationsfreiheit in europäischer Sicht UR - https://doi.org/10.1515/9783110630336 KW - Europa KW - Deutschland KW - Datenschutz KW - Informationsfreiheit KW - Recht Y1 - 2019 UR - https://doi.org/10.1515/9783110630336 SN - 978-3-11-063031-2 SN - 978-3-11-063033-6 SN - 978-3-11-063045-9 PB - De Gruyter Oldenbourg CY - Berlin ET - 7., überarbeitete und aktualisierte Auflage ER - TY - JOUR A1 - Volkersdorfer, Tina A1 - Hof, Hans-Joachim T1 - ADAM: An Adversary-Driven Attack Modelling Framework for Model-Based Security Testing JF - International Journal on Advances in Security KW - attack model KW - adversary model KW - model-based testing KW - security testing KW - penetration test Y1 - 2021 UR - https://www.iariajournals.org/security/tocv14n12.html SN - 1942-2636 VL - 14 IS - 1&2 SP - 12 EP - 25 PB - IARIA CY - [s. l.] ER - TY - CHAP A1 - Volkersdorfer, Tina A1 - Hof, Hans-Joachim ED - Hof, Hans-Joachim ED - Popescu, Manuela ED - Yee, George T1 - A Concept of an Attack Model for a Model-Based Security Testing Framework BT - Introducing a holistic perspective of cyberattacks in software engineering T2 - SECURWARE 2020: The Fourteenth International Conference on Emerging Security Information, Systems and Technologies KW - attack model KW - adversary model KW - model-based testing KW - security testing KW - penetration test Y1 - 2020 UR - http://www.thinkmind.org/index.php?view=article&articleid=securware_2020_2_130_30046 SN - 978-1-61208-821-1 SP - 96 EP - 101 PB - IARIA CY - [s. l.] ER - TY - CHAP A1 - Hof, Hans-Joachim ED - Knoppe, Marc ED - Rock, Stefan ED - Wild, Martin T1 - Cybersecurity für den zukunftsfähigen Handel T2 - Der zukunftsfähige Handel: Neue online und offline Konzepte sowie digitale und KI-basierte Lösungen UR - https://doi.org/10.1007/978-3-658-36218-8_11 Y1 - 2022 UR - https://doi.org/10.1007/978-3-658-36218-8_11 SN - 978-3-658-36217-1 SN - 978-3-658-36218-8 N1 - Access provided by Nationallizenz Ebooks Medicine SP - 215 EP - 237 PB - Springer Gabler CY - Wiesbaden ER - TY - CHAP A1 - Hof, Hans-Joachim ED - Schulz, Thomas T1 - Cybersicherheit für mobile und intelligente Komponenten BT - Einführung und Grundlagen T2 - Cybersicherheit für vernetzte Anwendungen in der Industrie 4.0 Y1 - 2020 SN - 978-3-8343-3424-4 SP - 85 EP - 205 PB - Vogel Communications Group CY - Würzburg ER - TY - JOUR A1 - de Andrade, Ricardo A1 - Dias Santos, Max Mauro A1 - Justo, João Francisco A1 - Yoshioka, Leopoldo Rideki A1 - Hof, Hans-Joachim A1 - Kleinschmidt, João Henrique T1 - Security architecture for automotive communication networks with CAN FD JF - Computers & Security UR - https://doi.org/10.1016/j.cose.2023.103203 Y1 - 2023 UR - https://doi.org/10.1016/j.cose.2023.103203 SN - 1872-6208 VL - 2023 IS - 129 PB - Elsevier CY - Amsterdam ER - TY - JOUR A1 - Mayer, Kevin A1 - Corbett, Christopher A1 - Hof, Hans-Joachim T1 - A generalized approach to automotive forensics JF - Forensic Science International: Digital Investigation N2 - In the past years, software became an essential topic in modern vehicles, e.g., with the rise of more and more complex driver assistance systems. The advent of automated driving will drive this trend even further. Today, accident investigation, as well as warranty claim analysis, need to take into consideration an analysis of the rapidly increasing proportion of software and security based implementations as part of modern vehicles, the so-called digital forensics. This paper evaluates the general feasibility of digital forensics on a state-of-the-art vehicle. To do so, we analyzed current digital forensics techniques on a state-of-the-art vehicle to constitute gaps in the automotive forensics process used on in-vehicle systems. We present a general process for automotive forensics to close existing gaps and implemented it on a state-of-the-art vehicle in an in-vehicle device manipulation scenario. The implementation uses the on-board diagnostics interface, the diagnostics over internet protocol, as well as the unified diagnostic services for communication. Our implementation requires automotive Ethernet at the diagnostic interface. Our research shows future directions for efficient automotive forensic as well as the exemplary feasibility of automotive forensic analysis on state-of-the-art vehicles without the need for additional invehicle components such as intrusion detection systems or event data recorders. UR - https://doi.org/10.1016/j.fsidi.2021.301111 KW - Automotive KW - Digital forensics KW - Diagnostics KW - Forensic KW - Cyber security KW - Embedded KW - Vehicle Y1 - 2021 UR - https://doi.org/10.1016/j.fsidi.2021.301111 UR - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:bvb:573-16762 SN - 2666-2817 VL - 2021 IS - 36, Supplement PB - Elsevier CY - Amsterdam ER - TY - CHAP A1 - de Meer, Jan A1 - Waedt, Karl A1 - Rennoch, Axel A1 - Hof, Hans-Joachim T1 - The 5th GI/ACM Workshop 2020 scope and draft programme on standardization of secure and safe smart manufacturing systems with respect to IEC 62443 IACS T2 - Lecture Notes in Informatics (LNI): Proceedings N2 - The 5th GI/ACM Workshop Programme on Standardization of Secure and Safe Production within Industrial Automation and Control Systems (IACS) took place virtually at September 28, 2020 at the Karlsruhe Institute of Technology (KIT) that hosted the 50th GI’s yearly assembly (GI Informatik 2020 Jahrestagung). UR - https://doi.org/10.18420/inf2020_26 Y1 - 2021 UR - https://doi.org/10.18420/inf2020_26 UR - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:bvb:573-16834 SN - 978-3-88579-701-2 SN - 1617-5468 VL - 2021 IS - Volume P-307 SP - 283 EP - 287 PB - Gesellschaft für Informatik e.V. CY - Bonn ER - TY - CHAP A1 - Mayer, Kevin A1 - Corbett, Christopher A1 - Hof, Hans-Joachim T1 - Structured methodology and survey to evaluate data completeness in automotive digital forensics T2 - 19th escar Europe: The World's Leading Automotive Cyber Security Conference UR - https://doi.org/10.13154/294-8351 Y1 - 2021 UR - https://doi.org/10.13154/294-8351 SP - 52 EP - 67 PB - Ruhr-Universität Bochum CY - Bochum ER - TY - CHAP A1 - Blümke, Julian A1 - Mayer, Kevin A1 - Hof, Hans-Joachim T1 - An Analysis of Security Concerns in Transitioning Battery Management Systems from First to Second Life T2 - ARES 24: 19th International Conference on Availability, Reliability and Security N2 - Lithium-ion batteries are becoming essential vehicle components with the ongoing shift to electric vehicles. Battery management systems manage these batteries. Typically, battery management systems used to be placed deep within the vehicle architecture, away from external interfaces. However, with increasing connectivity to backend systems, e.g., to improve monitoring battery properties and optimize charging, battery management systems have moved closer to the attack surface, increasing security risks. Also, batteries will soon be reused in so-called second life applications, e.g., as an energy storage system in a private home. While conventional methods involve removing the battery and reusing it with a new battery management system, modern methods retain the original system. Though security controls exist for first and second life applications, there is a lack of research on the transition phase. This paper analyzes the phase of transferring the battery management system from the first to the second life of particular relevance for security, privacy, and intellectual property. We try to close this research gap by analyzing the security aspects of a battery management system life cycle and its altering system environment. We are defining the transition phase, identifying necessary activities, and providing cybersecurity needs for the transitioning of battery management systems from first to second life. UR - https://doi.org/10.1145/3664476.3671010 KW - battery management system KW - BMS KW - second life batteries KW - cybersecurity KW - security control KW - transition Y1 - 2024 UR - https://doi.org/10.1145/3664476.3671010 UR - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:bvb:573-49625 SN - 979-8-4007-1718-5 PB - ACM CY - New York ER - TY - CHAP A1 - Hof, Hans-Joachim ED - Fend, Lars ED - Hofmann, Jürgen T1 - Digitalisierung in Hochschulen T2 - Digitalisierung in Industrie-, Handels- und Dienstleistungsunternehmen: Konzepte - Lösungen - Beispiele UR - https://doi.org/10.1007/978-3-658-43441-0_27 Y1 - 2024 UR - https://doi.org/10.1007/978-3-658-43441-0_27 SN - 978-3-658-43440-3 SN - 978-3-658-43441-0 SP - 615 EP - 635 PB - Springer Gabler CY - Wiesbaden ET - 4., überarbeitete und erweiterte Auflage ER - TY - CHAP A1 - Hofbauer, Jenny A1 - Mayer, Kevin A1 - Hof, Hans-Joachim T1 - From SOC to VSOC: Transferring Key Requirements for Efficient Vehicle Security Operations T2 - Proceedings: The World’s Leading Automotive Cyber Security Conference, 21st escar Europe, escar – Embedded Security in Cars UR - https://doi.org/10.13154/294-10389 Y1 - 2023 UR - https://doi.org/10.13154/294-10389 N1 - Auch veröffentlicht auf Zenodo: https://zenodo.org/records/10182821 SP - 92 EP - 106 PB - Ruhr-Universität Bochum CY - Bochum ER - TY - CHAP A1 - Langer, Robin A1 - Michl, Marco A1 - Paula, Daniel A1 - Hof, Hans-Joachim A1 - Schweiger, Hans-Georg T1 - Security analysis of an Event Data Recorder system according to the HEAVENS model T2 - Proceedings of the 30th Annual Congress of the EVU Y1 - 2022 PB - EVU CY - Berlin ER - TY - CHAP A1 - Fritz, Mario A1 - Krauß, Christoph A1 - Hof, Hans-Joachim T1 - CSCS ’24 – Cyber Security in CarS Workshop T2 - CCS ’24: Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security UR - https://doi.org/10.1145/3658644.3691551 Y1 - 2024 UR - https://doi.org/10.1145/3658644.3691551 SN - 979-8-4007-0636-3 SP - 4914 EP - 4916 PB - ACM CY - New York ER - TY - JOUR A1 - Blümke, Julian A1 - Hof, Hans-Joachim T1 - Binding the Battery to the Pass: An Approach to Trustworthy Product Life Cycle Data by Using Certificates Based on PUFs JF - International Journal on Advances in Security KW - physical unclonable function KW - Certificate Transparency KW - electric vehicle battery KW - battery identity KW - battery pass KW - cybersecurity Y1 - 2023 UR - http://www.iariajournals.org/security/tocv16n12.html SN - 1942-2636 VL - 16 IS - 1&2 SP - 44 EP - 53 PB - IARIA CY - [s. l.] ER - TY - CHAP A1 - Blümke, Julian A1 - Laves, Claudius A1 - Hof, Hans-Joachim ED - Leonowicz, Zbigniew ED - Stracqualursi, Erika ED - Jasinski, Michal T1 - Identifying Building Blocks for Second-Life-Enabled Battery Management Systems T2 - Conference Proceedings: 2025 IEEE International Conference on Environment and Electrical Engineering and 2025 IEEE Industrial and Commercial Power Systems Europe (EEEIC / I&CPS Europe), 15-18 July 2025, Chania, Crete - Greece UR - https://doi.org/10.1109/EEEIC/ICPSEurope64998.2025.11169196 Y1 - 2025 UR - https://doi.org/10.1109/EEEIC/ICPSEurope64998.2025.11169196 SN - 979-8-3315-9515-9 PB - IEEE CY - Piscataway ER - TY - CHAP A1 - Löw, Jakob A1 - Bayerl, Dominik A1 - Mayer, Kevin A1 - Hof, Hans-Joachim T1 - DrainDead: Emptying Batteries of Parked Electric Vehicles T2 - Proceedings of the 3rd USENIX Symposium on Vehicle Security and Privacy (VehicleSec ’25) Y1 - 2025 UR - https://www.usenix.org/conference/vehiclesec25/presentation/low SN - 978-1-939133-49-6 SP - 233 EP - 241 PB - USENIX Association CY - Berkeley ER - TY - CHAP A1 - Michl, Marco A1 - Hof, Hans-Joachim A1 - Katzenbeisser, Stefan T1 - Classification, Impact, and Mitigation Strategies of Attacks in Automotive Trust Management Systems T2 - Proceedings of the 2024 on Cyber Security in CarS Workshop (CSCS ’24) N2 - With the advent of connected vehicles, which provide many new comfort functions, the attack surface increased as well. Widespread "hard security" mechanisms are used to secure the vehicle and its infrastructure, but they cannot mitigate all threats, especially if inside attackers are considered. "Soft security" mechanisms, like trust and reputation systems, can help to close the attack surface further. However, such systems add complexity and can also lead to further vulnerabilities. To use such mechanisms securely, this work analyzes attacks targeting trust management systems in the automotive domain. For this purpose, a literature review was conducted, and the extracted attacks were characterized and divided into several clusters, introducing a new nomenclature of attacks against trust management for vehicles. We argue that four main categories of attacks exist. They are distinguished by their target component: communication channel, trust management layer, or application. As a fourth category, we see attacks that are enabled by the use of trust management systems. The outcome of this analysis was used to create an adversary model based on detected attack vectors and to define abstract reference attackers. These can be used to evaluate the resilience of automotive trust management systems against the analyzed attacks. Mitigation strategies against the adversary's capabilities are further presented to avoid vulnerabilities in the design of automotive trust management systems. UR - https://doi.org/10.1145/3689936.3694691 Y1 - 2024 UR - https://doi.org/10.1145/3689936.3694691 UR - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:bvb:573-53694 SN - 979-8-4007-1232-6 SP - 61 EP - 75 PB - ACM CY - New York ER - TY - CHAP A1 - Löw, Jakob A1 - Bayerl, Dominik A1 - Hof, Hans-Joachim ED - Hof, Hans-Joachim ED - Popescu, Manuela ED - Fongen, Anders T1 - Software Based Glitching Detection T2 - SECURWARE 2021: The Fifteenth International Conference on Emerging Security Information, Systems and Technologies KW - computer security KW - clocks KW - microcontrollers KW - program compilers KW - program control structures Y1 - 2021 UR - https://www.thinkmind.org/index.php?view=article&articleid=securware_2021_1_70_30029 SN - 978-1-61208-919-5 SN - 2162-2116 SP - 41 EP - 46 PB - IARIA CY - [s. l.] ER - TY - CHAP A1 - Mayer, Kevin A1 - Hof, Hans-Joachim ED - Yee, George T1 - Digital Forensics Investigation of the Tesla Autopilot File System T2 - SECURWARE 2022: The Sixteenth International Conference on Emerging Security Information, Systems and Technologies KW - automotive KW - vehicle KW - digital forensics KW - automotive digital forensics KW - tesla KW - autopilot KW - metadata KW - vehicle forensics Y1 - 2022 UR - https://www.thinkmind.org/index.php?view=article&articleid=securware_2022_1_130_38001 SN - 978-1-68558-007-0 SP - 82 EP - 87 PB - IARIA CY - [s. l.] ER - TY - CHAP A1 - Ullrich, Henning A1 - Bayerl, Dominik A1 - Hutzelmann, Thomas A1 - Hof, Hans-Joachim T1 - Application of Quantum Key Distribution in Intelligent Transport Systems T2 - Proceedings of the 2nd Cyber Security in CarS Workshop (CSCS’25) N2 - Quantum Key Distribution (QKD) enables two parties to generate a secret key, based on quantum physical properties. The secrecy of the exchanged key is guaranteed by these quantum physical properties, even against an attacker using a quantum computer. QKD therefore offers an Quantum Information Theoretically Secure (Q-ITS) alternative to Post Quantum Cryptography (PQC) schemes. This paper discusses advantages and challenges of deploying a QKD system in an Intelligent Transport System (ITS), by examining two exemplary use cases. Approaches to effectively implement QKD in these use cases are proposed, with a short discussion of advantages over the use of classical and PQC schemes. UR - https://doi.org/10.1145/3736130.3762692 Y1 - 2025 UR - https://doi.org/10.1145/3736130.3762692 UR - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:bvb:573-63186 SN - 979-8-4007-1928-8 PB - ACM CY - New York ER - TY - CHAP A1 - Blümke, Julian A1 - Hof, Hans-Joachim ED - Yee, George T1 - Authentic Batteries: A Concept for a Battery Pass Based on PUF-enabled Certificates T2 - SECURWARE 2022: The Sixteenth International Conference on Emerging Security Information, Systems and Technologies KW - physical unclonable function KW - Certificate Transparency KW - electric vehicle battery KW - battery identity KW - battery pass Y1 - 2022 UR - https://www.thinkmind.org/index.php?view=article&articleid=securware_2022_1_120_30051 SN - 978-1-68558-007-0 SP - 76 EP - 81 PB - IARIA CY - [s. l.] ER - TY - CHAP A1 - Mayer, Kevin A1 - Hof, Hans-Joachim ED - Hof, Hans-Joachim ED - Popescu, Manuela ED - Fongen, Anders T1 - Identification of Automotive Digital Forensics Stakeholders T2 - SECURWARE 2021: The Fifteenth International Conference on Emerging Security Information, Systems and Technologies KW - automotive KW - digital forensics KW - forensic KW - cyber security KW - embedded KW - vehicle KW - car KW - automobile KW - stakeholder Y1 - 2021 UR - https://www.thinkmind.org/index.php?view=article&articleid=securware_2021_1_20_30004 SN - 978-1-61208-919-5 SN - 2162-2116 SP - 8 EP - 13 PB - IARIA CY - [s. l.] ER - TY - CHAP A1 - Michl, Marco A1 - Hof, Hans-Joachim A1 - Katzenbeisser, Stefan T1 - From Access to Trust: Policy-Based Automotive Trust Management With XACML T2 - Proceedings of the 2nd Cyber Security in CarS Workshop (CSCS’25) N2 - Trust is a fundamental requirement in vehicular systems, particularly in the context of autonomous and cooperative driving, where decisions often depend on data received from other vehicles or infrastructure. This paper presents a novel approach to integrating trust-based reasoning—specifically, decision-making based on subjective logic—into Attribute-Based Access Control (ABAC) systems, using the XACML policy language. We draw a parallel between trust management and access control, showing that trust assessments can be modeled as access decisions and expressed through standard access control policies. This integration allows for the reuse of mature ABAC infrastructure to represent and enforce trust-based decisions. Furthermore, we demonstrate how trust discounting mechanisms, which combine node-based and data-based trust, can be implemented within XACML policies. To evaluate this approach, we introduce a Rust-based XACML engine capable of interpreting trust-enhanced policies. Its integration in both inter- and intra-vehicle scenarios is discussed, assuming a modern zone-based architecture. Our results suggest that policy-based trust management can be efficiently implemented, enabling flexible and standardized trust reasoning in automotive environments. UR - https://doi.org/10.1145/3736130.3764511 Y1 - 2025 UR - https://doi.org/10.1145/3736130.3764511 UR - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:bvb:573-64731 SN - 979-8-4007-1928-8 PB - ACM CY - New York ER - TY - CHAP A1 - Laves, Claudius A1 - Hutzelmann, Thomas A1 - Mayer, Kevin A1 - Hof, Hans-Joachim T1 - Driving Down Premiums: A Security and Forensic Analysis of the DriveWell Insurance System T2 - Proceedings of the 2nd Cyber Security in CarS Workshop (CSCS’25) N2 - Modern car insurance companies can dynamically adjust premiums with mobile sensor units that constantly record, analyze, and grade driving behavior. However, attackers can tamper with these systems to cheat the insurance company and reduce their premiums. We developed an attacker model for this threat in conjunction with a risk assessment using the ISO/SAE 21434 Risk Rating Methodology, a widely accepted standard for evaluating and managing risks in automotive systems. To support and showcase our model, we examined the static IT security of the mobile sensor unit DriveWell and its companion Android application HUK Mein Auto. In particular, we utilized digital forensic tools to analyze the stored data in the sensor’s internal storage and the app’s smartphone storage, with a focus on encryption mechanisms for locally stored data and internet communication. During this analysis, we spotted a critical vulnerability that enables attackers to manipulate their insurance scores and potentially reduce premiums by up to 30%. Our model and real-world analysis provide a solid foundation for reducing the risk of such manipulation of insurance premiums. UR - https://doi.org/10.1145/3736130.3762688 Y1 - 2025 UR - https://doi.org/10.1145/3736130.3762688 UR - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:bvb:573-64728 SN - 979-8-4007-1928-8 PB - ACM CY - New York ER - TY - CHAP A1 - Hof, Hans-Joachim A1 - Fritz, Mario A1 - Krauß, Christoph T1 - CSCS '25 - Cyber Security in CarS Workshop T2 - CCS ’25: Proceedings of the 2025 ACM SIGSAC Conference on Computer and Communications Security UR - https://doi.org/10.1145/3719027.3769666 Y1 - 2025 UR - https://doi.org/10.1145/3719027.3769666 SN - 979-8-4007-1525-9 SP - 4930 EP - 4931 PB - ACM CY - New York ER - TY - CHAP A1 - Rodríguez-Arozamena, Mario A1 - Matute, Jose A1 - Pérez, Joshué A1 - Ozbay, Burcu A1 - Tezcan, Deryanur A1 - Begecarslan, Enes A1 - Mutlukaya, Irem A1 - Mayer, Kevin A1 - Volkersdorfer, Tina A1 - Hof, Hans-Joachim T1 - TRA2024 Poster - A Fail-Safe Decision Architecture for CCAM Applications T2 - Proceedings of the Transport Research Arena (TRA2024) Conference UR - https://doi.org/10.5281/zenodo.10995953 Y1 - 2024 UR - https://doi.org/10.5281/zenodo.10995953 UR - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:bvb:573-55180 PB - Zenodo CY - Genf ER - TY - CHAP A1 - Heinl, Patrizia A1 - Reichl-Streich, Andrea-Julia A1 - Hof, Hans-Joachim T1 - Through the Looking-Glass: The Current AI Landscape in German Hospitals from a Cybersecurity Perspective T2 - Proceedings: 2025 IEEE 13th International Conference on Healthcare Informatics, ICHI 2025 UR - https://doi.org/10.1109/ICHI64645.2025.00078 Y1 - 2025 UR - https://doi.org/10.1109/ICHI64645.2025.00078 SN - 979-8-3315-2094-6 SP - 636 EP - 647 PB - IEEE CY - Piscataway ER - TY - CHAP A1 - Rodríguez-Arozamena, Mario A1 - Matute, Jose A1 - Pérez, Joshué A1 - Ozbay, Burcu A1 - Tezcan, Deryanur A1 - Begecarslan, Enes A1 - Mutlukaya, Irem A1 - Mayer, Kevin A1 - Volkersdorfer, Tina A1 - Hof, Hans-Joachim ED - McNally, Ciaran ED - Carroll, Páraic ED - Martinez-Pastor, Beatriz ED - Ghosh, Bidisha ED - Efthymiou, Marina ED - Valantasis-Kanellos, Nikolaos T1 - A Fail-Safe Decision Architecture for CCAM Applications T2 - Transport Transitions: Advancing Sustainable and Inclusive Mobility, Proceedings of the 10th TRA Conference, 2024 Dublin, Ireland - Volume 6: Connected Mobility Ecosystems N2 - In the context of Connected, Cooperative, and Automated Mobility (CCAM), precise ego-vehicle positioning and environmental status assessment are crucial. However, these tasks can be susceptible to sensor failures, misuse, and cyberattacks. Automation disengagements and system redundancy are common strategies to achieve Minimum Risk Conditions when failures occur. This paper presents a Fail-Safe decision architecture formulated within the framework of the SELFY project (https://selfy-project.eu/). The main aim is to reduce inaccuracies in GNSS-derived positioning through the incorporation of sensor fusion, AI-guided situational assessment, trajectory planning, and mode decision components. Additionally, the architecture has been designed to enable real-time updates and communication with external entities, including the Vehicle Security Operations Centre. UR - https://doi.org/10.1007/978-3-032-06763-0_104 Y1 - 2025 UR - https://doi.org/10.1007/978-3-032-06763-0_104 UR - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:bvb:573-65868 SN - 978-3-032-06763-0 SP - 731 EP - 737 PB - Springer CY - Cham ER - TY - CHAP A1 - Jimenez, Victor A1 - Reyes de los Mozos, Mario A1 - Perea Paños, Pau A1 - Fritzsche, Paula Cecilia A1 - Mayer, Kevin A1 - Volkersdorfer, Tina A1 - Hof, Hans-Joachim A1 - Couturier, Christophe A1 - Ernst, Thierry A1 - Zhang, Miao A1 - Saied Mohamed, Mohamed A1 - Rodríguez-Arozamena, Mario A1 - Aranguren-Mendieta, Iñigo A1 - Pérez, Joshué A1 - Jousse, Adrien A1 - Murguia, Carlos A1 - van de Wouw, Nathan A1 - Bellessort, Romain A1 - Salami, Behzad A1 - Jevtić, Aleksandar A1 - Bannour, Boutheina A1 - Rodríguez Recasens, Manel A1 - Ropero, Isaac A1 - Ozbay, Burcu A1 - Eren, Ali A1 - Bektas, Mustafa A1 - Tezcan, Deryanur A1 - Pilz, Christoph A1 - Haas, Sarah A1 - Lenz, Gernot ED - McNally, Ciaran ED - Carroll, Páraic ED - Martinez-Pastor, Beatriz ED - Ghosh, Bidisha ED - Efthymiou, Marina ED - Valantasis-Kanellos, Nikolaos T1 - SELFY - Self Assessment, Protection and Healing Tools for a Trustworthy and Resilient CCAM T2 - Transport Transitions: Advancing Sustainable and Inclusive Mobility, Proceedings of the 10th TRA Conference, 2024 Dublin, Ireland - Volume 6: Connected Mobility Ecosy N2 - SELFY envisions an agnostic toolbox for the self-management of security and resilience of the CCAM (Connected, Cooperative and Automated Mobility) ecosystem, which can be easily deployed to extend the current Operational Design Domain (ODD), providing self-awareness, self-resilience and self-healing mechanisms and enhancing trust between stakeholders. SELFY is based on four pillars: Situational awareness, Resilience, Secure Data Sharing and Trust and provides three groups of tools. SACP (Situational Awareness and Collaborative Perception) tools aim at providing all CCAM actors with a comprehensive understanding of their environment, i.e., the perception of objects, such as other traffic participants and stationary objects. CRHS (Cooperative Resilience and Healing System) tools enable self-protection actions whenever a compromising situation is detected in relation to assets, vehicles, operations, or the system itself. TDMS (Trust and Data Management System) tools establish a secure and trusted environment for data in a collaborative and cooperative context, both for infrastructure and assets, as well as for citizen’s data, such as drivers or pedestrians with special attention to privacy considerations. By defining a collaborative environment between the different tools to respond to new threats, risks and attacks SELFY facilitates the comprehension of new challenges in the cybersecurity aspect of CCAMs. UR - https://doi.org/10.1007/978-3-032-06763-0_106 Y1 - 2025 UR - https://doi.org/10.1007/978-3-032-06763-0_106 UR - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:bvb:573-66819 SN - 978-3-032-06763-0 SP - 745 EP - 751 PB - Springer CY - Cham ER - TY - CHAP A1 - Jimenez, Victor A1 - Reyes de los Mozos, Mario A1 - Perea Paños, Pau A1 - Fritzsche, Paula Cecilia A1 - Mayer, Kevin A1 - Volkersdorfer, Tina A1 - Hof, Hans-Joachim A1 - Couturier, Christophe A1 - Ernst, Thierry A1 - Zhang, Miao A1 - Saied Mohamed, Mohamed A1 - Rodríguez-Arozamena, Mario A1 - Aranguren-Mendieta, Iñigo A1 - Pérez, Joshué A1 - Jousse, Adrien A1 - Murguia, Carlos A1 - van de Wouw, Nathan A1 - Bellessort, Romain A1 - Salami, Behzad A1 - Jevtić, Aleksandar A1 - Bannour, Boutheina A1 - Rodríguez Recasens, Manel A1 - Ropero, Isaac A1 - Ozbay, Burcu A1 - Eren, Ali A1 - Bektas, Mustafa A1 - Tezcan, Deryanur A1 - Pilz, Christoph A1 - Haas, Sarah A1 - Lenz, Gernot T1 - SELFY - Self Assessment, Protection & Healing Tools for a Trustworthy and Resilient CCAM T2 - Proceedings of the Transport Research Arena (TRA2024) Conference N2 - SELFY envisions an agnostic toolbox for the self-management of se-curity and resilience of the CCAM (Connected, Cooperative and Automated Mo-bility) ecosystem, which can be easily deployed to extend the current Operational Design Domain (ODD), providing self-awareness, self-resilience and self-heal-ing mechanisms and enhancing trust between stakeholders. SELFY is based on four pillars: Situational awareness, Resilience, Secure Data Sharing and Trust and provides three groups of tools. SACP (Situational Awareness and Collabo-rative Perception) tools aim at providing all CCAM actors with a comprehensive understanding of their environment, i.e., the perception of objects, such as other traffic participants and stationary objects. CRHS (Cooperative Resilience and Healing System) tools enable self-protection actions whenever a compromising situation is detected in relation to assets, vehicles, operations, or the system itself. TDMS (Trust and Data Management System) tools establish a secure and trusted environment for data in a collaborative and cooperative context, both for infra-structure and assets, as well as for citizen's data, such as drivers or pedestrians with special attention to privacy considerations. By defining a collaborative en-vironment between the different tools to respond to new threats, risks and attacks SELFY facilitates the comprehension of new challenges in the cybersecurity as-pect of CCAMs. UR - https://doi.org/10.5281/zenodo.10978183 Y1 - 2024 UR - https://doi.org/10.5281/zenodo.10978183 UR - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:bvb:573-53724 PB - Zenodo CY - Genf ER - TY - INPR A1 - Löw, Jakob A1 - Vasu Ashoka, Vishwa Vimukthi A1 - Hutzelmann, Thomas A1 - Hof, Hans-Joachim T1 - Security Aspects of ISO 15118 Plug and Charge Payment UR - https://doi.org/10.48550/arXiv.2512.15966 Y1 - 2025 UR - https://doi.org/10.48550/arXiv.2512.15966 PB - arXiv CY - Ithaca ER -