@inproceedings{BoettgerDemirHoernemannetal.2025, author = {B{\"o}ttger, Christian and Demir, Nurullah and H{\"o}rnemann, Jan and Acharyi, Bhupendra and Holz, Thorsten and Pohlmann, Norbert and Große-Kampmann, Matteo and Urban, Tobias}, title = {Understanding Regional Filter Lists: Efficacy and Impact}, series = {Proceedings on Privacy Enhancing Technologies}, volume = {2025}, booktitle = {Proceedings on Privacy Enhancing Technologies}, number = {2}, doi = {10.56553/popets-2025-0063}, url = {http://nbn-resolving.de/urn:nbn:de:hbz:1010-opus4-47195}, pages = {309 -- 324}, year = {2025}, abstract = {Filter lists are used by various users, tools, and researchers to identify tracking technologies on the Web. These lists are created and maintained by dedicated communities. Aside from popular blocking lists (e.g., EasyList), the communities create region-specific blocklists that account for trackers and ads that are only common in these regions. The lists aim to keep the size of a general blocklist minimal while protecting users against region-specific trackers. In this paper, we perform a large-scale Web measurement study to understand how different region-specific filter lists (e.g., a blocklist specifically designed for French users) protect users when visiting websites. We define three privacy scenarios to understand when and how users benefit from these regional lists and what effect they have in practice. The results show that although the lists differ significantly, the number of rules they contain is unrelated to the number of blocked requests. We find that the lists' overall efficacy varies notably. Filter lists also do not meet the expectation that they increase user protection in the regions for which they were designed. Finally, we show that the majority of the rules on the lists were not used in our experiment and that only a fraction of the rules would provide comparable protection for users.}, language = {en} } @inproceedings{HoernemannPohlmannUrbanetal.2024, author = {H{\"o}rnemann, Jan and Pohlmann, Norbert and Urban, Tobias and Große-Kampmann, Matteo}, title = {Sharing is Caring: Towards Analyzing Attack Surfaces on Shared Hosting Providers}, series = {Sicherheit 2024. Lecture Notes in Informatics (LNI), Full Paper Session 7 - Netzwerk- und Softwaresicherheit. Worms. 09.-11.04.2024}, booktitle = {Sicherheit 2024. Lecture Notes in Informatics (LNI), Full Paper Session 7 - Netzwerk- und Softwaresicherheit. Worms. 09.-11.04.2024}, publisher = {Gesellschaft f{\"u}r Informatik e.V.}, address = {Bonn}, doi = {10.18420/sicherheit2024_014}, url = {http://nbn-resolving.de/urn:nbn:de:hbz:1010-opus4-47500}, pages = {217 -- 229}, year = {2024}, abstract = {Abstract In this paper, we shed light on shared hosting services' security and trust implications and measure their attack surfaces. To do so, we analyzed 30 shared hosters and found that all of them might leak relevant information, which could be abused unnoticed. An adversary could use this attack surface to covertly extract data from various third parties registered with a shared hoster. Furthermore, we found that most hosters suffer from vulnerabilities that can be used by an internal attacker (i.e., someone using the service) to compromise other hosted services or the entire system.}, language = {en} } @inproceedings{GonzalezRoblesPohlmannEnglingetal.2015, author = {Gonz{\´a}lez Robles, Antonio and Pohlmann, Norbert and Engling, Christoph and J{\"a}ger, Hubert and Ernst, Edmund}, title = {Doubtless Identification and Privacy Preserving of User in Cloud Systems}, series = {ISSE 2015. Highlights of the Information Security Solutions Europe 2015 Conference}, booktitle = {ISSE 2015. Highlights of the Information Security Solutions Europe 2015 Conference}, editor = {Reimer, Helmut and Pohlmann, Norbert and Schneider, Wolfgang}, publisher = {Springer Vieweg}, address = {Wiesbaden}, isbn = {978-3-658-10933-2}, doi = {10.1007/978-3-658-10934-9}, pages = {98 -- 109}, year = {2015}, language = {en} } @inproceedings{FourneStegemannPetersenetal.2014, author = {Fourn{\´e}, Marcel and Stegemann, Kevin and Petersen, Dominique and Pohlmann, Norbert}, title = {Aggregation of Network Protocol Data Near Its Source}, series = {Information and communication technology. Second IFIP TC 5/8 international conference. Proceedings}, booktitle = {Information and communication technology. Second IFIP TC 5/8 international conference. Proceedings}, editor = {Linawati, and Mahendra, Made Sudiana and Neuhold, Erich J. and Tjoa, A Min and You, Ilsun}, publisher = {Springer}, address = {Heidelberg}, isbn = {978-3-642-55031-7}, pages = {482 -- 492}, year = {2014}, language = {en} } @inproceedings{PohlmannHertleinManaras2015, author = {Pohlmann, Norbert and Hertlein, Markus and Manaras, Pascal}, title = {Bring Your Own Device For Authentication (BYOD4A) - The Xign-System}, series = {ISSE 2015. Highlights of the Information Security Solutions Europe 2015 Conference}, booktitle = {ISSE 2015. Highlights of the Information Security Solutions Europe 2015 Conference}, editor = {Reimer, Helmut and Pohlmann, Norbert and Schneider, Wolfgang}, publisher = {Springer Vieweg}, address = {Wiesbaden}, isbn = {978-3-658-10933-2}, doi = {10.1007/978-3-658-10934-9}, pages = {240 -- 251}, year = {2015}, language = {en} } @inproceedings{PohlmannSparenbergSiromaschenkoetal.2014, author = {Pohlmann, Norbert and Sparenberg, Michael and Siromaschenko, Illya and Kilden, Kilian}, title = {Secure Communication and Digital Sovereignty in Europe}, series = {ISSE 2014 Securing Electronic Business Processes. Highlights of the Information Security Solutions Europe 2014 Conference}, booktitle = {ISSE 2014 Securing Electronic Business Processes. Highlights of the Information Security Solutions Europe 2014 Conference}, editor = {Reimer, Helmut and Pohlmann, Norbert and Schneider, Wolfgang}, publisher = {Springer Vieweg}, address = {Wiesbaden}, isbn = {978-3-658-06707-6}, pages = {155 -- 170}, year = {2014}, language = {en} } @inproceedings{CagnazzoHertleinPohlmann2016, author = {Cagnazzo, Matteo and Hertlein, Markus and Pohlmann, Norbert}, title = {An Usable Application for Authentication, Communication and Access Management in the Internet of Things}, series = {Information and Software Technologies. ICIST 2016. Communications in Computer and Information Science}, booktitle = {Information and Software Technologies. ICIST 2016. Communications in Computer and Information Science}, publisher = {Springer}, address = {Cham}, isbn = {978-3-319-46253-0}, doi = {10.1007/978-3-319-46254-7_58}, pages = {722 -- 731}, year = {2016}, language = {en} } @inproceedings{Pohlmann2014, author = {Pohlmann, Norbert}, title = {The next step in IT security after Snowden}, series = {2nd International Communications Colloquium}, booktitle = {2nd International Communications Colloquium}, editor = {Ruland, Christoph}, publisher = {Shaker}, address = {Aachen}, isbn = {978-3-8440-2834-8}, pages = {11 -- 19}, year = {2014}, language = {en} } @inproceedings{GonzalezRoblesPohlmann2014, author = {Gonz{\´a}lez Robles, Antonio and Pohlmann, Norbert}, title = {IdP zur Verifikation der vertrauensw{\"u}rdigen digitalen Identit{\"a}t}, series = {Konferenz: DACH Security. 16.-17. September 2014 in Graz}, booktitle = {Konferenz: DACH Security. 16.-17. September 2014 in Graz}, year = {2014}, language = {de} } @inproceedings{UrbanPohlmann2016, author = {Urban, Tobias and Pohlmann, Norbert}, title = {Sehen heißt glauben: Aufdeckung von Webseiten Manipulation}, series = {Konferenz: DACH Security. 26.-27. September 2016 in Klagenfurt}, booktitle = {Konferenz: DACH Security. 26.-27. September 2016 in Klagenfurt}, year = {2016}, language = {de} } @inproceedings{PerezCooperHawthorneetal.2011, author = {P{\´e}rez, Lance C. and Cooper, Stephen and Hawthorne, Elizabeth K. and Wetzel, Susanne and Brynielsson, Joel and G{\"o}kce, Asim Gencer and Impagliazzo, John and Khmelevsky, Youry and Klee, Karl and Leary, Margaret and Philips, Amelia and Pohlmann, Norbert and Taylor, Blair and Upadhyaya, Shambhu}, title = {Information assurance education in two- and four-year institutions}, series = {Proceedings of the 16th annual conference reports on Innovation and technology in computer science education - working group reports}, booktitle = {Proceedings of the 16th annual conference reports on Innovation and technology in computer science education - working group reports}, editor = {Adams, Liz and Jurgens, Justin Joseph}, publisher = {ACM}, address = {New York, NY}, isbn = {978-1-4503-1122-9}, doi = {10.1145/2078856.2078860}, pages = {39 -- 53}, year = {2011}, language = {en} }