@article{BeierliebSchmitzSpringeretal.2024, author = {Beierlieb, Lukas and Schmitz, Alexander and Springer, Raphael and Dietrich, Christian J. and Iffl{\"a}nder, Lukas}, title = {Benchmarking Hyper-Breakpoints for Efficient Virtual Machine Introspection}, series = {Electronics (Special Issue Computer Architecture \& Parallel and Distributed Computing)}, volume = {2025}, journal = {Electronics (Special Issue Computer Architecture \& Parallel and Distributed Computing)}, number = {14 (3)}, publisher = {MDPI}, issn = {2079-9292}, doi = {10.3390/electronics14030534}, url = {http://nbn-resolving.de/urn:nbn:de:hbz:1010-opus4-47235}, pages = {1 -- 20}, year = {2024}, abstract = {Virtual Machine Introspection (VMI) is a powerful technology used to detect and analyze malicious software inside Virtual Machines (VMs) from outside. Asynchronously accessing the VM 's memory can be insufficient for efficiently monitoring what is happening inside of a VM. Active VMI introduces breakpoints to intercept VM execution at relevant points. Especially for frequently visited breakpoints, and even more so for production systems, it is crucial to keep their performance overhead as low as possible. In this paper, we provide a systematization of existing VMI breakpoint implementation variants, propose workloads to quantify the different performance penalties of breakpoints, and implement them in the benchmarking application bpbench. We used this benchmark to measure that, on an Intel Core i5 7300U, SmartVMI's breakpoints take around 81 μs to handle, and keeping the breakpoint invisible costs an additional 21 μs per read access. The availability of bpbench facilitates the comparison of disparate breakpoint mechanisms and their performance optimization with immediate feedback.}, language = {en} } @inproceedings{BoettgerDemirHoernemannetal.2025, author = {B{\"o}ttger, Christian and Demir, Nurullah and H{\"o}rnemann, Jan and Acharyi, Bhupendra and Holz, Thorsten and Pohlmann, Norbert and Große-Kampmann, Matteo and Urban, Tobias}, title = {Understanding Regional Filter Lists: Efficacy and Impact}, series = {Proceedings on Privacy Enhancing Technologies}, volume = {2025}, booktitle = {Proceedings on Privacy Enhancing Technologies}, number = {2}, doi = {10.56553/popets-2025-0063}, url = {http://nbn-resolving.de/urn:nbn:de:hbz:1010-opus4-47195}, pages = {309 -- 324}, year = {2025}, abstract = {Filter lists are used by various users, tools, and researchers to identify tracking technologies on the Web. These lists are created and maintained by dedicated communities. Aside from popular blocking lists (e.g., EasyList), the communities create region-specific blocklists that account for trackers and ads that are only common in these regions. The lists aim to keep the size of a general blocklist minimal while protecting users against region-specific trackers. In this paper, we perform a large-scale Web measurement study to understand how different region-specific filter lists (e.g., a blocklist specifically designed for French users) protect users when visiting websites. We define three privacy scenarios to understand when and how users benefit from these regional lists and what effect they have in practice. The results show that although the lists differ significantly, the number of rules they contain is unrelated to the number of blocked requests. We find that the lists' overall efficacy varies notably. Filter lists also do not meet the expectation that they increase user protection in the regions for which they were designed. Finally, we show that the majority of the rules on the lists were not used in our experiment and that only a fraction of the rules would provide comparable protection for users.}, language = {en} } @inproceedings{HoernemannPohlmannUrbanetal.2024, author = {H{\"o}rnemann, Jan and Pohlmann, Norbert and Urban, Tobias and Große-Kampmann, Matteo}, title = {Sharing is Caring: Towards Analyzing Attack Surfaces on Shared Hosting Providers}, series = {Sicherheit 2024. Lecture Notes in Informatics (LNI), Full Paper Session 7 - Netzwerk- und Softwaresicherheit. Worms. 09.-11.04.2024}, booktitle = {Sicherheit 2024. Lecture Notes in Informatics (LNI), Full Paper Session 7 - Netzwerk- und Softwaresicherheit. Worms. 09.-11.04.2024}, publisher = {Gesellschaft f{\"u}r Informatik e.V.}, address = {Bonn}, doi = {10.18420/sicherheit2024_014}, url = {http://nbn-resolving.de/urn:nbn:de:hbz:1010-opus4-47500}, pages = {217 -- 229}, year = {2024}, abstract = {Abstract In this paper, we shed light on shared hosting services' security and trust implications and measure their attack surfaces. To do so, we analyzed 30 shared hosters and found that all of them might leak relevant information, which could be abused unnoticed. An adversary could use this attack surface to covertly extract data from various third parties registered with a shared hoster. Furthermore, we found that most hosters suffer from vulnerabilities that can be used by an internal attacker (i.e., someone using the service) to compromise other hosted services or the entire system.}, language = {en} } @inproceedings{SteinboeckBleierRaineretal.2024, author = {Steinb{\"o}ck, Magdalena and Bleier, Jakob and Rainer, Mikka and Urban, Tobias and Utz, Christine and Lindorfer, Martina}, title = {Comparing Apples to Androids: Discovery, Retrieval, and Matching of iOS and Android Apps for Cross-Platform Analyses}, series = {MSR '24: Proceedings of the 21st International Conference on Mining Software Repositories}, booktitle = {MSR '24: Proceedings of the 21st International Conference on Mining Software Repositories}, publisher = {ACM Digital Library}, doi = {10.1145/3643991.3644896}, url = {http://nbn-resolving.de/urn:nbn:de:hbz:1010-opus4-47495}, pages = {348 -- 360}, year = {2024}, abstract = {Abstract For years, researchers have been analyzing mobile Android apps to investigate diverse properties such as software engineering practices, business models, security, privacy, or usability, as well as differences between marketplaces. While similar studies on iOS have been limited, recent work has started to analyze and compare Android apps with those for iOS. To obtain the most representative analysis results across platforms, the ideal approach is to compare their characteristics and behavior for the same set of apps, e. g., to study a set of apps for iOS and their respective counterparts for Android. Previous work has only attempted to identify and evaluate such cross-platform apps to a limited degree, mostly comparing sets of apps independently drawn from app stores, manually matching small sets of apps, or relying on brittle matches based on app and developer names. This results in (1) comparing apps whose behavior and properties significantly differ, (2) limited scalability, and (3) the risk of matching only a small fraction of apps. In this work, we propose a novel approach to create an extensive dataset of cross-platform apps for the iOS and Android ecosystems. We describe an analysis pipeline for discovering, retrieving, and matching apps from the Apple App Store and Google Play Store that we used to create a set of 3,322 cross-platform apps out of 10,000 popular apps for iOS and Android, respectively. We evaluate existing and new approaches for cross-platform app matching against a set of reference pairs that we obtained from Google's data migration service. We identify a combination of seven features from app store metadata and the apps themselves to match iOS and Android apps with high confidence (95.82 \%). Compared to previous attempts that identified 14 \% of apps as cross-platform, we are able to match 34 \% of apps in our dataset. To foster future research in the cross-platform analysis of mobile apps, we make our pipeline available to the community.}, language = {en} } @inproceedings{OPUS4-1655, title = {ISSE 2014 Securing electronic business processes. Highlights of the Information Security Solutions Europe 2014 Conference}, editor = {Reimer, Helmut and Pohlmann, Norbert and Schneider, Wolfgang}, publisher = {Springer Vieweg}, address = {Wiesbaden}, isbn = {978-3-658-06707-6}, pages = {XIII, 274}, year = {2014}, language = {en} } @inproceedings{OPUS4-1654, title = {ISSE 2013 Securing electronic business processes. Highlights of the Information security solutions Europe 2013 conference}, editor = {Reimer, Helmut and Pohlmann, Norbert and Schneider, Wolfgang}, publisher = {Springer Vieweg}, address = {Wiesbaden}, isbn = {978-3-658-03370-5}, pages = {XV, 282}, language = {en} } @inproceedings{OPUS4-1656, title = {ISSE 2015. Highlights of the Information Security Solutions Europe 2015 Conference}, editor = {Reimer, Helmut and Pohlmann, Norbert and Schneider, Wolfgang}, publisher = {Springer Vieweg}, address = {Wiesbaden}, isbn = {978-3-658-10933-2}, pages = {XIII, 315}, language = {en} } @inproceedings{OPUS4-1647, title = {Securing electronic business processes. Highlights of the Information Security Solutions Europe/SECURE 2007 Conference}, editor = {Pohlmann, Norbert and Reimer, Helmut and Schneider, Wolfgang}, publisher = {Vieweg}, address = {Wiesbaden}, isbn = {978-3-8348-0346-7}, pages = {XVIII, 444}, year = {2007}, language = {en} } @inproceedings{OPUS4-1653, title = {ISSE 2012 Securing electronic business processes. Highlights of the Information Security Solutions Europe 2012 Conference}, editor = {Reimer, Helmut and Pohlmann, Norbert and Schneider, Wolfgang}, publisher = {Springer Vieweg}, address = {Wiesbaden}, isbn = {978-3-658-00332-6}, pages = {XI, 334}, year = {2012}, language = {en} } @inproceedings{OPUS4-1644, title = {ISSE 2004 - Securing Electronic Business Processes. Highlights of the Information Security Solutions Europe 2004 Conference}, editor = {Paulus, Sachar and Pohlmann, Norbert and Reimer, Helmut}, publisher = {Vieweg}, address = {Wiesbaden}, isbn = {978-3-528-05910-1}, pages = {X, 370}, language = {en} } @inproceedings{OPUS4-1645, title = {ISSE 2005 Securing Electronic Business Processes. Highlights of the Information Security Solutions Europe 2005 Conference}, editor = {Paulus, Sachar and Pohlmann, Norbert and Reimer, Helmut}, publisher = {Vieweg}, address = {Wiesbaden}, isbn = {978-3-8348-0011-4}, pages = {380}, year = {2005}, language = {en} } @inproceedings{OPUS4-1651, title = {Securing electronic business processes. Highlights of the information security solutions Europe 2011 conference}, editor = {Pohlmann, Norbert and Reimer, Helmut and Schneider, Wolfgang}, publisher = {Vieweg + Teubner}, address = {Wiesbaden}, isbn = {978-3-8348-1911-6}, pages = {XI, 392}, language = {en} } @inproceedings{OPUS4-1650, title = {Securing electronic business processes. Highlights of the information security solutions Europe 2010 conference}, editor = {Pohlmann, Norbert and Reimer, Helmut and Schneider, Wolfgang}, publisher = {Vieweg + Teubner}, address = {Wiesbaden}, isbn = {978-3-8348-1438-8}, pages = {IX, 416}, language = {en} } @inproceedings{OPUS4-1649, title = {Securing electronic business processes. Highlights of the Information Security Solutions Europe 2009 Conference}, editor = {Pohlmann, Norbert and Reimer, Helmut and Schneider, Wolfgang}, publisher = {Vieweg + Teubner}, address = {Wiesbaden}, isbn = {978-3-8348-0958-2}, pages = {XIV, 368}, year = {2009}, language = {en} } @inproceedings{OPUS4-1648, title = {Securing electronic business processes. Highlights of the Information Security Solutions Europe 2008 Conference}, editor = {Pohlmann, Norbert and Reimer, Helmut and Schneider, Wolfgang}, publisher = {Vieweg + Teubner}, address = {Wiesbaden}, isbn = {978-3-8348-0660-4}, pages = {XIV, 433}, year = {2008}, language = {en} } @inproceedings{OPUS4-1646, title = {Securing electronic business processes. Highlights of the Information Security Solutions Europe 2006 Conference}, editor = {Paulus, Sachar and Pohlmann, Norbert and Reimer, Helmut}, publisher = {Vieweg}, address = {Wiesbaden}, isbn = {978-3-8348-0213-2}, pages = {XVI, 476}, year = {2006}, language = {en} } @inproceedings{GonzalezRoblesPohlmannEnglingetal.2015, author = {Gonz{\´a}lez Robles, Antonio and Pohlmann, Norbert and Engling, Christoph and J{\"a}ger, Hubert and Ernst, Edmund}, title = {Doubtless Identification and Privacy Preserving of User in Cloud Systems}, series = {ISSE 2015. Highlights of the Information Security Solutions Europe 2015 Conference}, booktitle = {ISSE 2015. Highlights of the Information Security Solutions Europe 2015 Conference}, editor = {Reimer, Helmut and Pohlmann, Norbert and Schneider, Wolfgang}, publisher = {Springer Vieweg}, address = {Wiesbaden}, isbn = {978-3-658-10933-2}, doi = {10.1007/978-3-658-10934-9}, pages = {98 -- 109}, year = {2015}, language = {en} } @inproceedings{FourneStegemannPetersenetal.2014, author = {Fourn{\´e}, Marcel and Stegemann, Kevin and Petersen, Dominique and Pohlmann, Norbert}, title = {Aggregation of Network Protocol Data Near Its Source}, series = {Information and communication technology. Second IFIP TC 5/8 international conference. Proceedings}, booktitle = {Information and communication technology. Second IFIP TC 5/8 international conference. Proceedings}, editor = {Linawati, and Mahendra, Made Sudiana and Neuhold, Erich J. and Tjoa, A Min and You, Ilsun}, publisher = {Springer}, address = {Heidelberg}, isbn = {978-3-642-55031-7}, pages = {482 -- 492}, year = {2014}, language = {en} } @inproceedings{PohlmannHertleinManaras2015, author = {Pohlmann, Norbert and Hertlein, Markus and Manaras, Pascal}, title = {Bring Your Own Device For Authentication (BYOD4A) - The Xign-System}, series = {ISSE 2015. Highlights of the Information Security Solutions Europe 2015 Conference}, booktitle = {ISSE 2015. Highlights of the Information Security Solutions Europe 2015 Conference}, editor = {Reimer, Helmut and Pohlmann, Norbert and Schneider, Wolfgang}, publisher = {Springer Vieweg}, address = {Wiesbaden}, isbn = {978-3-658-10933-2}, doi = {10.1007/978-3-658-10934-9}, pages = {240 -- 251}, year = {2015}, language = {en} } @inproceedings{PohlmannSparenbergSiromaschenkoetal.2014, author = {Pohlmann, Norbert and Sparenberg, Michael and Siromaschenko, Illya and Kilden, Kilian}, title = {Secure Communication and Digital Sovereignty in Europe}, series = {ISSE 2014 Securing Electronic Business Processes. Highlights of the Information Security Solutions Europe 2014 Conference}, booktitle = {ISSE 2014 Securing Electronic Business Processes. Highlights of the Information Security Solutions Europe 2014 Conference}, editor = {Reimer, Helmut and Pohlmann, Norbert and Schneider, Wolfgang}, publisher = {Springer Vieweg}, address = {Wiesbaden}, isbn = {978-3-658-06707-6}, pages = {155 -- 170}, year = {2014}, language = {en} } @inproceedings{CagnazzoHertleinPohlmann2016, author = {Cagnazzo, Matteo and Hertlein, Markus and Pohlmann, Norbert}, title = {An Usable Application for Authentication, Communication and Access Management in the Internet of Things}, series = {Information and Software Technologies. ICIST 2016. Communications in Computer and Information Science}, booktitle = {Information and Software Technologies. ICIST 2016. Communications in Computer and Information Science}, publisher = {Springer}, address = {Cham}, isbn = {978-3-319-46253-0}, doi = {10.1007/978-3-319-46254-7_58}, pages = {722 -- 731}, year = {2016}, language = {en} } @inproceedings{Pohlmann2014, author = {Pohlmann, Norbert}, title = {The next step in IT security after Snowden}, series = {2nd International Communications Colloquium}, booktitle = {2nd International Communications Colloquium}, editor = {Ruland, Christoph}, publisher = {Shaker}, address = {Aachen}, isbn = {978-3-8440-2834-8}, pages = {11 -- 19}, year = {2014}, language = {en} } @inproceedings{GonzalezRoblesPohlmann2014, author = {Gonz{\´a}lez Robles, Antonio and Pohlmann, Norbert}, title = {IdP zur Verifikation der vertrauensw{\"u}rdigen digitalen Identit{\"a}t}, series = {Konferenz: DACH Security. 16.-17. September 2014 in Graz}, booktitle = {Konferenz: DACH Security. 16.-17. September 2014 in Graz}, year = {2014}, language = {de} }