@article{BeierliebSchmitzSpringeretal.2024, author = {Beierlieb, Lukas and Schmitz, Alexander and Springer, Raphael and Dietrich, Christian J. and Iffl{\"a}nder, Lukas}, title = {Benchmarking Hyper-Breakpoints for Efficient Virtual Machine Introspection}, series = {Electronics (Special Issue Computer Architecture \& Parallel and Distributed Computing)}, volume = {2025}, journal = {Electronics (Special Issue Computer Architecture \& Parallel and Distributed Computing)}, number = {14 (3)}, publisher = {MDPI}, issn = {2079-9292}, doi = {10.3390/electronics14030534}, url = {http://nbn-resolving.de/urn:nbn:de:hbz:1010-opus4-47235}, pages = {1 -- 20}, year = {2024}, abstract = {Virtual Machine Introspection (VMI) is a powerful technology used to detect and analyze malicious software inside Virtual Machines (VMs) from outside. Asynchronously accessing the VM 's memory can be insufficient for efficiently monitoring what is happening inside of a VM. Active VMI introduces breakpoints to intercept VM execution at relevant points. Especially for frequently visited breakpoints, and even more so for production systems, it is crucial to keep their performance overhead as low as possible. In this paper, we provide a systematization of existing VMI breakpoint implementation variants, propose workloads to quantify the different performance penalties of breakpoints, and implement them in the benchmarking application bpbench. We used this benchmark to measure that, on an Intel Core i5 7300U, SmartVMI's breakpoints take around 81 μs to handle, and keeping the breakpoint invisible costs an additional 21 μs per read access. The availability of bpbench facilitates the comparison of disparate breakpoint mechanisms and their performance optimization with immediate feedback.}, language = {en} } @inproceedings{BoettgerDemirHoernemannetal.2025, author = {B{\"o}ttger, Christian and Demir, Nurullah and H{\"o}rnemann, Jan and Acharyi, Bhupendra and Holz, Thorsten and Pohlmann, Norbert and Große-Kampmann, Matteo and Urban, Tobias}, title = {Understanding Regional Filter Lists: Efficacy and Impact}, series = {Proceedings on Privacy Enhancing Technologies}, volume = {2025}, booktitle = {Proceedings on Privacy Enhancing Technologies}, number = {2}, doi = {10.56553/popets-2025-0063}, url = {http://nbn-resolving.de/urn:nbn:de:hbz:1010-opus4-47195}, pages = {309 -- 324}, year = {2025}, abstract = {Filter lists are used by various users, tools, and researchers to identify tracking technologies on the Web. These lists are created and maintained by dedicated communities. Aside from popular blocking lists (e.g., EasyList), the communities create region-specific blocklists that account for trackers and ads that are only common in these regions. The lists aim to keep the size of a general blocklist minimal while protecting users against region-specific trackers. In this paper, we perform a large-scale Web measurement study to understand how different region-specific filter lists (e.g., a blocklist specifically designed for French users) protect users when visiting websites. We define three privacy scenarios to understand when and how users benefit from these regional lists and what effect they have in practice. The results show that although the lists differ significantly, the number of rules they contain is unrelated to the number of blocked requests. We find that the lists' overall efficacy varies notably. Filter lists also do not meet the expectation that they increase user protection in the regions for which they were designed. Finally, we show that the majority of the rules on the lists were not used in our experiment and that only a fraction of the rules would provide comparable protection for users.}, language = {en} } @inproceedings{HoernemannPohlmannUrbanetal.2024, author = {H{\"o}rnemann, Jan and Pohlmann, Norbert and Urban, Tobias and Große-Kampmann, Matteo}, title = {Sharing is Caring: Towards Analyzing Attack Surfaces on Shared Hosting Providers}, series = {Sicherheit 2024. Lecture Notes in Informatics (LNI), Full Paper Session 7 - Netzwerk- und Softwaresicherheit. Worms. 09.-11.04.2024}, booktitle = {Sicherheit 2024. Lecture Notes in Informatics (LNI), Full Paper Session 7 - Netzwerk- und Softwaresicherheit. Worms. 09.-11.04.2024}, publisher = {Gesellschaft f{\"u}r Informatik e.V.}, address = {Bonn}, doi = {10.18420/sicherheit2024_014}, url = {http://nbn-resolving.de/urn:nbn:de:hbz:1010-opus4-47500}, pages = {217 -- 229}, year = {2024}, abstract = {Abstract In this paper, we shed light on shared hosting services' security and trust implications and measure their attack surfaces. To do so, we analyzed 30 shared hosters and found that all of them might leak relevant information, which could be abused unnoticed. An adversary could use this attack surface to covertly extract data from various third parties registered with a shared hoster. Furthermore, we found that most hosters suffer from vulnerabilities that can be used by an internal attacker (i.e., someone using the service) to compromise other hosted services or the entire system.}, language = {en} } @inproceedings{SteinboeckBleierRaineretal.2024, author = {Steinb{\"o}ck, Magdalena and Bleier, Jakob and Rainer, Mikka and Urban, Tobias and Utz, Christine and Lindorfer, Martina}, title = {Comparing Apples to Androids: Discovery, Retrieval, and Matching of iOS and Android Apps for Cross-Platform Analyses}, series = {MSR '24: Proceedings of the 21st International Conference on Mining Software Repositories}, booktitle = {MSR '24: Proceedings of the 21st International Conference on Mining Software Repositories}, publisher = {ACM Digital Library}, doi = {10.1145/3643991.3644896}, url = {http://nbn-resolving.de/urn:nbn:de:hbz:1010-opus4-47495}, pages = {348 -- 360}, year = {2024}, abstract = {Abstract For years, researchers have been analyzing mobile Android apps to investigate diverse properties such as software engineering practices, business models, security, privacy, or usability, as well as differences between marketplaces. While similar studies on iOS have been limited, recent work has started to analyze and compare Android apps with those for iOS. To obtain the most representative analysis results across platforms, the ideal approach is to compare their characteristics and behavior for the same set of apps, e. g., to study a set of apps for iOS and their respective counterparts for Android. Previous work has only attempted to identify and evaluate such cross-platform apps to a limited degree, mostly comparing sets of apps independently drawn from app stores, manually matching small sets of apps, or relying on brittle matches based on app and developer names. This results in (1) comparing apps whose behavior and properties significantly differ, (2) limited scalability, and (3) the risk of matching only a small fraction of apps. In this work, we propose a novel approach to create an extensive dataset of cross-platform apps for the iOS and Android ecosystems. We describe an analysis pipeline for discovering, retrieving, and matching apps from the Apple App Store and Google Play Store that we used to create a set of 3,322 cross-platform apps out of 10,000 popular apps for iOS and Android, respectively. We evaluate existing and new approaches for cross-platform app matching against a set of reference pairs that we obtained from Google's data migration service. We identify a combination of seven features from app store metadata and the apps themselves to match iOS and Android apps with high confidence (95.82 \%). Compared to previous attempts that identified 14 \% of apps as cross-platform, we are able to match 34 \% of apps in our dataset. To foster future research in the cross-platform analysis of mobile apps, we make our pipeline available to the community.}, language = {en} } @inproceedings{OPUS4-1655, title = {ISSE 2014 Securing electronic business processes. Highlights of the Information Security Solutions Europe 2014 Conference}, editor = {Reimer, Helmut and Pohlmann, Norbert and Schneider, Wolfgang}, publisher = {Springer Vieweg}, address = {Wiesbaden}, isbn = {978-3-658-06707-6}, pages = {XIII, 274}, year = {2014}, language = {en} } @inproceedings{OPUS4-1654, title = {ISSE 2013 Securing electronic business processes. Highlights of the Information security solutions Europe 2013 conference}, editor = {Reimer, Helmut and Pohlmann, Norbert and Schneider, Wolfgang}, publisher = {Springer Vieweg}, address = {Wiesbaden}, isbn = {978-3-658-03370-5}, pages = {XV, 282}, language = {en} } @inproceedings{OPUS4-1656, title = {ISSE 2015. Highlights of the Information Security Solutions Europe 2015 Conference}, editor = {Reimer, Helmut and Pohlmann, Norbert and Schneider, Wolfgang}, publisher = {Springer Vieweg}, address = {Wiesbaden}, isbn = {978-3-658-10933-2}, pages = {XIII, 315}, language = {en} } @inproceedings{OPUS4-1647, title = {Securing electronic business processes. Highlights of the Information Security Solutions Europe/SECURE 2007 Conference}, editor = {Pohlmann, Norbert and Reimer, Helmut and Schneider, Wolfgang}, publisher = {Vieweg}, address = {Wiesbaden}, isbn = {978-3-8348-0346-7}, pages = {XVIII, 444}, year = {2007}, language = {en} } @inproceedings{OPUS4-1653, title = {ISSE 2012 Securing electronic business processes. Highlights of the Information Security Solutions Europe 2012 Conference}, editor = {Reimer, Helmut and Pohlmann, Norbert and Schneider, Wolfgang}, publisher = {Springer Vieweg}, address = {Wiesbaden}, isbn = {978-3-658-00332-6}, pages = {XI, 334}, year = {2012}, language = {en} } @inproceedings{OPUS4-1644, title = {ISSE 2004 - Securing Electronic Business Processes. Highlights of the Information Security Solutions Europe 2004 Conference}, editor = {Paulus, Sachar and Pohlmann, Norbert and Reimer, Helmut}, publisher = {Vieweg}, address = {Wiesbaden}, isbn = {978-3-528-05910-1}, pages = {X, 370}, language = {en} } @inproceedings{OPUS4-1645, title = {ISSE 2005 Securing Electronic Business Processes. Highlights of the Information Security Solutions Europe 2005 Conference}, editor = {Paulus, Sachar and Pohlmann, Norbert and Reimer, Helmut}, publisher = {Vieweg}, address = {Wiesbaden}, isbn = {978-3-8348-0011-4}, pages = {380}, year = {2005}, language = {en} } @inproceedings{OPUS4-1651, title = {Securing electronic business processes. Highlights of the information security solutions Europe 2011 conference}, editor = {Pohlmann, Norbert and Reimer, Helmut and Schneider, Wolfgang}, publisher = {Vieweg + Teubner}, address = {Wiesbaden}, isbn = {978-3-8348-1911-6}, pages = {XI, 392}, language = {en} } @inproceedings{OPUS4-1650, title = {Securing electronic business processes. Highlights of the information security solutions Europe 2010 conference}, editor = {Pohlmann, Norbert and Reimer, Helmut and Schneider, Wolfgang}, publisher = {Vieweg + Teubner}, address = {Wiesbaden}, isbn = {978-3-8348-1438-8}, pages = {IX, 416}, language = {en} } @inproceedings{OPUS4-1649, title = {Securing electronic business processes. Highlights of the Information Security Solutions Europe 2009 Conference}, editor = {Pohlmann, Norbert and Reimer, Helmut and Schneider, Wolfgang}, publisher = {Vieweg + Teubner}, address = {Wiesbaden}, isbn = {978-3-8348-0958-2}, pages = {XIV, 368}, year = {2009}, language = {en} } @inproceedings{OPUS4-1648, title = {Securing electronic business processes. Highlights of the Information Security Solutions Europe 2008 Conference}, editor = {Pohlmann, Norbert and Reimer, Helmut and Schneider, Wolfgang}, publisher = {Vieweg + Teubner}, address = {Wiesbaden}, isbn = {978-3-8348-0660-4}, pages = {XIV, 433}, year = {2008}, language = {en} } @inproceedings{OPUS4-1646, title = {Securing electronic business processes. Highlights of the Information Security Solutions Europe 2006 Conference}, editor = {Paulus, Sachar and Pohlmann, Norbert and Reimer, Helmut}, publisher = {Vieweg}, address = {Wiesbaden}, isbn = {978-3-8348-0213-2}, pages = {XVI, 476}, year = {2006}, language = {en} } @inproceedings{GonzalezRoblesPohlmannEnglingetal.2015, author = {Gonz{\´a}lez Robles, Antonio and Pohlmann, Norbert and Engling, Christoph and J{\"a}ger, Hubert and Ernst, Edmund}, title = {Doubtless Identification and Privacy Preserving of User in Cloud Systems}, series = {ISSE 2015. Highlights of the Information Security Solutions Europe 2015 Conference}, booktitle = {ISSE 2015. Highlights of the Information Security Solutions Europe 2015 Conference}, editor = {Reimer, Helmut and Pohlmann, Norbert and Schneider, Wolfgang}, publisher = {Springer Vieweg}, address = {Wiesbaden}, isbn = {978-3-658-10933-2}, doi = {10.1007/978-3-658-10934-9}, pages = {98 -- 109}, year = {2015}, language = {en} } @inproceedings{FourneStegemannPetersenetal.2014, author = {Fourn{\´e}, Marcel and Stegemann, Kevin and Petersen, Dominique and Pohlmann, Norbert}, title = {Aggregation of Network Protocol Data Near Its Source}, series = {Information and communication technology. Second IFIP TC 5/8 international conference. Proceedings}, booktitle = {Information and communication technology. Second IFIP TC 5/8 international conference. Proceedings}, editor = {Linawati, and Mahendra, Made Sudiana and Neuhold, Erich J. and Tjoa, A Min and You, Ilsun}, publisher = {Springer}, address = {Heidelberg}, isbn = {978-3-642-55031-7}, pages = {482 -- 492}, year = {2014}, language = {en} } @inproceedings{PohlmannHertleinManaras2015, author = {Pohlmann, Norbert and Hertlein, Markus and Manaras, Pascal}, title = {Bring Your Own Device For Authentication (BYOD4A) - The Xign-System}, series = {ISSE 2015. Highlights of the Information Security Solutions Europe 2015 Conference}, booktitle = {ISSE 2015. Highlights of the Information Security Solutions Europe 2015 Conference}, editor = {Reimer, Helmut and Pohlmann, Norbert and Schneider, Wolfgang}, publisher = {Springer Vieweg}, address = {Wiesbaden}, isbn = {978-3-658-10933-2}, doi = {10.1007/978-3-658-10934-9}, pages = {240 -- 251}, year = {2015}, language = {en} } @inproceedings{PohlmannSparenbergSiromaschenkoetal.2014, author = {Pohlmann, Norbert and Sparenberg, Michael and Siromaschenko, Illya and Kilden, Kilian}, title = {Secure Communication and Digital Sovereignty in Europe}, series = {ISSE 2014 Securing Electronic Business Processes. Highlights of the Information Security Solutions Europe 2014 Conference}, booktitle = {ISSE 2014 Securing Electronic Business Processes. Highlights of the Information Security Solutions Europe 2014 Conference}, editor = {Reimer, Helmut and Pohlmann, Norbert and Schneider, Wolfgang}, publisher = {Springer Vieweg}, address = {Wiesbaden}, isbn = {978-3-658-06707-6}, pages = {155 -- 170}, year = {2014}, language = {en} } @inproceedings{CagnazzoHertleinPohlmann2016, author = {Cagnazzo, Matteo and Hertlein, Markus and Pohlmann, Norbert}, title = {An Usable Application for Authentication, Communication and Access Management in the Internet of Things}, series = {Information and Software Technologies. ICIST 2016. Communications in Computer and Information Science}, booktitle = {Information and Software Technologies. ICIST 2016. Communications in Computer and Information Science}, publisher = {Springer}, address = {Cham}, isbn = {978-3-319-46253-0}, doi = {10.1007/978-3-319-46254-7_58}, pages = {722 -- 731}, year = {2016}, language = {en} } @inproceedings{Pohlmann2014, author = {Pohlmann, Norbert}, title = {The next step in IT security after Snowden}, series = {2nd International Communications Colloquium}, booktitle = {2nd International Communications Colloquium}, editor = {Ruland, Christoph}, publisher = {Shaker}, address = {Aachen}, isbn = {978-3-8440-2834-8}, pages = {11 -- 19}, year = {2014}, language = {en} } @inproceedings{GonzalezRoblesPohlmann2014, author = {Gonz{\´a}lez Robles, Antonio and Pohlmann, Norbert}, title = {IdP zur Verifikation der vertrauensw{\"u}rdigen digitalen Identit{\"a}t}, series = {Konferenz: DACH Security. 16.-17. September 2014 in Graz}, booktitle = {Konferenz: DACH Security. 16.-17. September 2014 in Graz}, year = {2014}, language = {de} } @inproceedings{OPUS4-1643, title = {Securing electronic business processes. Highlights of the Information Security Solutions Europe 2003 Conference}, editor = {Paulus, Sachar and Pohlmann, Norbert and Reimer, Helmut}, publisher = {Vieweg}, address = {Wiesbaden}, isbn = {978-3-528-05887-6}, pages = {IX, 225}, language = {en} } @inproceedings{UrbanPohlmann2016, author = {Urban, Tobias and Pohlmann, Norbert}, title = {Sehen heißt glauben: Aufdeckung von Webseiten Manipulation}, series = {Konferenz: DACH Security. 26.-27. September 2016 in Klagenfurt}, booktitle = {Konferenz: DACH Security. 26.-27. September 2016 in Klagenfurt}, year = {2016}, language = {de} } @inproceedings{PerezCooperHawthorneetal.2011, author = {P{\´e}rez, Lance C. and Cooper, Stephen and Hawthorne, Elizabeth K. and Wetzel, Susanne and Brynielsson, Joel and G{\"o}kce, Asim Gencer and Impagliazzo, John and Khmelevsky, Youry and Klee, Karl and Leary, Margaret and Philips, Amelia and Pohlmann, Norbert and Taylor, Blair and Upadhyaya, Shambhu}, title = {Information assurance education in two- and four-year institutions}, series = {Proceedings of the 16th annual conference reports on Innovation and technology in computer science education - working group reports}, booktitle = {Proceedings of the 16th annual conference reports on Innovation and technology in computer science education - working group reports}, editor = {Adams, Liz and Jurgens, Justin Joseph}, publisher = {ACM}, address = {New York, NY}, isbn = {978-1-4503-1122-9}, doi = {10.1145/2078856.2078860}, pages = {39 -- 53}, year = {2011}, language = {en} } @inproceedings{RossowDietrichGrieretal.2012, author = {Rossow, Christian and Dietrich, Christian J. and Grier, Chris and Kreibich, Christian and Paxson, Vern and Pohlmann, Norbert and Bos, Herbert and Van Steen, Maarten}, title = {Prudent Practices for Designing Malware Experiments: Status Quo and Outlook}, series = {IEEE Symposium on Security and Privacy (SP), 2012. 20 - 23 May 2012, San Francisco, California, USA. Proceedings}, booktitle = {IEEE Symposium on Security and Privacy (SP), 2012. 20 - 23 May 2012, San Francisco, California, USA. Proceedings}, editor = {Institute of Electrical and Electronics Engineers (IEEE),}, publisher = {IEEE}, address = {Piscataway, NJ}, isbn = {978-1-4673-1244-8}, doi = {10.1109/SP.2012.14}, pages = {65 -- 79}, year = {2012}, language = {en} } @inproceedings{FeldPohlmannSparenbergetal.2012, author = {Feld, Sebastian and Pohlmann, Norbert and Sparenberg, Michael and Wichmann, Bastian C.}, title = {Analyzing G-20's Key Autonomous Systems and their Intermeshing using AS-Analyzer}, series = {ISSE 2012 Securing Electronic Business Processes : Highlights of the Information Security Solutions Europe 2012 Conference}, booktitle = {ISSE 2012 Securing Electronic Business Processes : Highlights of the Information Security Solutions Europe 2012 Conference}, editor = {Reimer, Helmut and Pohlmann, Norbert and Schneider, Wolfgang}, publisher = {Springer Vieweg}, address = {Wiesbaden}, isbn = {978-3-658-00332-6}, pages = {228 -- 243}, year = {2012}, language = {en} } @inproceedings{SpeierFeinBotheetal.2013, author = {Speier, Andreas and Fein, Christofer and Bothe, David and Reich, Eric and Pohlmann, Norbert}, title = {Draft of a Dynamic Malware Detection on Trustworthy Endpoints}, series = {ISSE 2013 Securing Electronic Business Processes. Highlights of the Information Security Solutions Europe 2013 Conference}, booktitle = {ISSE 2013 Securing Electronic Business Processes. Highlights of the Information Security Solutions Europe 2013 Conference}, editor = {Pohlmann, Norbert and Reimer, Helmut and Schneider, Wolfgang}, publisher = {Springer Vieweg}, address = {Wiesbaden}, isbn = {978-3-658-03370-5}, pages = {3 -- 11}, year = {2013}, language = {en} } @inproceedings{FeldPerreiPohlmannetal.2012, author = {Feld, Sebastian and Perrei, Tim and Pohlmann, Norbert and Schupp, Matthias}, title = {Objectives and Added Value of an Internet Key Figure System for Germany}, series = {ISSE 2011 Securing Electronic Business Processes. Highlights of the Information Security Solutions Europe 2011 Conference}, booktitle = {ISSE 2011 Securing Electronic Business Processes. Highlights of the Information Security Solutions Europe 2011 Conference}, editor = {Pohlmann, Norbert and Reimer, Helmut and Schneider, Wolfgang}, publisher = {Vieweg \& Teubner}, address = {Wiesbaden}, isbn = {978-3-8348-1911-6}, pages = {341 -- 352}, year = {2012}, language = {en} } @inproceedings{DietrichRossowPohlmann2013, author = {Dietrich, Christian J. and Rossow, Christian and Pohlmann, Norbert}, title = {Exploiting Visual Appearance to Cluster and Detect Rogue Software}, series = {SAC '13 Proceedings of the 28th Annual ACM Symposium on Applied Computing}, booktitle = {SAC '13 Proceedings of the 28th Annual ACM Symposium on Applied Computing}, editor = {Shin, Sung Y. and Maldonado, Jos{\´e} Carlos}, publisher = {ACM}, address = {New York, NY}, isbn = {978-1-4503-1656-9}, doi = {10.1145/2480362.2480697}, pages = {1776 -- 1783}, year = {2013}, language = {en} } @inproceedings{DietrichRossowPohlmann2013, author = {Dietrich, Christian J. and Rossow, Christian and Pohlmann, Norbert}, title = {CoCoSpot: Clustering and recognizing botnet command and control channels using traffic analysis}, series = {Computer Networks}, volume = {57}, booktitle = {Computer Networks}, number = {2}, issn = {1389-1286}, doi = {https://doi.org/10.1016/j.comnet.2012.06.019}, pages = {475 -- 486}, year = {2013}, language = {en} } @inproceedings{PetersenPohlmann2013, author = {Petersen, Dominique and Pohlmann, Norbert}, title = {An Ideal Internet Early Warning System}, series = {Advances in IT early warning}, booktitle = {Advances in IT early warning}, editor = {Fraunhofer-Einrichtung f{\"u}r Angewandte und Integrierte Sicherheit -AISEC-, Garching, and Zeilinger, Markus and Schoo, Peter and Hermann, Eckehard}, publisher = {Fraunhofer-Verl.}, address = {Stuttgart}, isbn = {978-3-8396-0474-8}, pages = {9 -- 21}, year = {2013}, language = {en} } @inproceedings{DietrichRossowPohlmann2012, author = {Dietrich, Christian J. and Rossow, Christian and Pohlmann, Norbert}, title = {eID Online Authentication Network Threat Model, Attacks and Implications}, series = {Konferenz: 19. DFN-Workshop „Sicherheit in vernetzten Systemen", 21.-22. Februar 2012 in Hamburg}, booktitle = {Konferenz: 19. DFN-Workshop „Sicherheit in vernetzten Systemen", 21.-22. Februar 2012 in Hamburg}, year = {2012}, language = {en} } @inproceedings{RossowDietrichBosetal.2011, author = {Rossow, Christian and Dietrich, Christian J. and Bos, Herbert and Cavallaro, Lorenzo and Van Steen, Maarten and Freiling, Felix C. and Pohlmann, Norbert}, title = {Sandnet: network traffic analysis of malicious software}, series = {Proceedings of the First Workshop on Building Analysis Datasets and Gathering Experience Returns for Security - BADGERS 2011}, booktitle = {Proceedings of the First Workshop on Building Analysis Datasets and Gathering Experience Returns for Security - BADGERS 2011}, editor = {Association for Computing Machinery ACM,}, publisher = {ACM}, address = {New York, NY}, isbn = {978-1-4503-0768-0}, doi = {10.1145/1978672.1978682}, pages = {78 -- 88}, year = {2011}, language = {en} } @inproceedings{DietrichRossowFreilingetal.2011, author = {Dietrich, Christian J. and Rossow, Christian and Freiling, Felix C. and Bos, Herbert and Van Steen, Maarten and Pohlmann, Norbert}, title = {On Botnets That Use DNS for Command and Control}, series = {Konferenz: Seventh European Conference on Computer Network Defense (EC2ND), 6.-7. September 2011 in Gothenburg, Schweden}, booktitle = {Konferenz: Seventh European Conference on Computer Network Defense (EC2ND), 6.-7. September 2011 in Gothenburg, Schweden}, publisher = {IEEE}, address = {Piscataway, NJ}, isbn = {978-1-4673-2116-7}, doi = {10.1109/EC2ND.2011.16}, pages = {9 -- 16}, year = {2011}, language = {en} } @inproceedings{FeldPohlmann2011, author = {Feld, Sebastian and Pohlmann, Norbert}, title = {Security Analysis of OpenID, followed by a Reference implementation of an nPA-based OpenID Provider}, series = {ISSE 2010 Securing Electronic Business Processes. Highlights of the Information Security Solutions Europe 2010 Conference}, booktitle = {ISSE 2010 Securing Electronic Business Processes. Highlights of the Information Security Solutions Europe 2010 Conference}, editor = {Pohlmann, Norbert and Reimer, Helmut and Schneider, Wolfgang}, publisher = {Vieweg + Teubner}, address = {Wiesbaden}, isbn = {978-3-8348-1438-8}, pages = {13 -- 26}, year = {2011}, language = {de} } @inproceedings{SchmidtBaskeDemletal.2011, author = {Schmidt, Sebastian and Baske, Sascha and Deml, Mathias and Pohlmann, Norbert}, title = {Malware-Erkennung mit statistischen Netzwerkdaten}, series = {Konferenz: 12. Deutscher IT-Sicherheitskongress des BSI. Sicher in die Welt von morgen, 10.-12. Mai 2011 in Bonn, Bad Godesberg}, booktitle = {Konferenz: 12. Deutscher IT-Sicherheitskongress des BSI. Sicher in die Welt von morgen, 10.-12. Mai 2011 in Bonn, Bad Godesberg}, year = {2011}, language = {de} } @inproceedings{FeldPohlmannDeml2011, author = {Feld, Sebastian and Pohlmann, Norbert and Deml, Mathias}, title = {Ein Internet-Kennzahlensystem f{\"u}r Deutschland}, series = {Konferenz: DACH Security. 20.-21. September 2011 in Oldenburg}, booktitle = {Konferenz: DACH Security. 20.-21. September 2011 in Oldenburg}, year = {2011}, language = {de} } @inproceedings{RossowCzerwinskiDietrichetal.2010, author = {Rossow, Christian and Czerwinski, Thomas and Dietrich, Christian J. and Pohlmann, Norbert}, title = {Detecting Gray in Black and White}, series = {Konferenz: MIT Spam Conference. 25.-26. M{\"a}rz 2010 in Boston, USA}, booktitle = {Konferenz: MIT Spam Conference. 25.-26. M{\"a}rz 2010 in Boston, USA}, year = {2010}, language = {en} } @inproceedings{FeldPohlmann2010, author = {Feld, Sebastian and Pohlmann, Norbert}, title = {Ein OpenID-Provider mit Proxy-Funktionalit{\"a}t f{\"u}r den nPA}, series = {Konferenz: DACH Security. 21.-22. September 2010 in Wien}, booktitle = {Konferenz: DACH Security. 21.-22. September 2010 in Wien}, year = {2010}, language = {de} } @inproceedings{HessePohlmann2009, author = {Hesse, Malte and Pohlmann, Norbert}, title = {European internet early warning system}, series = {International Journal of Electronic Security and Digital Forensics}, volume = {2}, booktitle = {International Journal of Electronic Security and Digital Forensics}, number = {1}, issn = {1751-911X}, doi = {10.1504/IJESDF.2009.023871}, pages = {1 -- 17}, year = {2009}, language = {en} } @inproceedings{Pohlmann2009, author = {Pohlmann, Norbert}, title = {IT-Sicherheit im Lauf der Zeit}, series = {Wissenschaftliches Kommunikations- und Sicherheitskolloquium 2009}, booktitle = {Wissenschaftliches Kommunikations- und Sicherheitskolloquium 2009}, editor = {Ruland, Christoph}, publisher = {Shaker}, address = {Aachen}, isbn = {978-3-8322-8143-4}, pages = {1 -- 15}, year = {2009}, language = {de} } @inproceedings{BacksPohlmann2008, author = {Backs, Peter and Pohlmann, Norbert}, title = {Influence of Security Mechanisms on the Quality of Service of VoIP}, series = {ISSE 2008 Securing Electronic Business Processes. Highlights of the Information Security Solutions Europe 2008 Conference}, booktitle = {ISSE 2008 Securing Electronic Business Processes. Highlights of the Information Security Solutions Europe 2008 Conference}, editor = {Pohlmann, Norbert and Reimer, Helmut and Schneider, Wolfgang}, publisher = {Vieweg+Teubner}, address = {Wiesbaden}, doi = {https://doi.org/10.1007/978-3-8348-9283-6_36}, pages = {341 -- 346}, year = {2008}, language = {en} } @inproceedings{HessePohlmannKraaibeek2007, author = {Hesse, Malte and Pohlmann, Norbert and Kraaibeek, Peter}, title = {Sicherheitskonzept f{\"u}r sichere mobile Anwendungen}, series = {Innovationsmotor IT-Sicherheit. Tagungsband zum 10. Deutschen IT-Sicherheitskongress}, booktitle = {Innovationsmotor IT-Sicherheit. Tagungsband zum 10. Deutschen IT-Sicherheitskongress}, editor = {Bundesamt f{\"u}r Sicherheit in der Informationstechnik,}, publisher = {SecuMedia-Verl.}, address = {Gau-Algesheim}, isbn = {978-3-922746-98-0}, pages = {257 -- 271}, year = {2007}, language = {de} } @inproceedings{JungbauerPohlmann2007, author = {Jungbauer, Marian and Pohlmann, Norbert}, title = {Integrity Check of Remote Computer Systems. Trusted Network Connect}, series = {ISSE/SECURE 2007 Securing Electronic Business Processes. Highlights of the Information Security Solutions Europe/SECURE 2007 Conference}, booktitle = {ISSE/SECURE 2007 Securing Electronic Business Processes. Highlights of the Information Security Solutions Europe/SECURE 2007 Conference}, editor = {Pohlmann, Norbert and Reimer, Helmut and Schneider, Wolfgang}, publisher = {Vieweg}, address = {Wiesbaden}, isbn = {978-3-8348-0346-7}, pages = {228 -- 238}, year = {2007}, language = {en} } @inproceedings{HessePohlmann2008, author = {Hesse, Malte and Pohlmann, Norbert}, title = {Internet Situation Awareness}, series = {2008 eCrime Researchers Summit}, booktitle = {2008 eCrime Researchers Summit}, editor = {Institute of Electrical and Electronics Engineers (IEEE),}, publisher = {IEEE}, address = {Piscataway, NJ}, isbn = {978-1-4244-2969-1}, doi = {10.1109/ECRIME.2008.4696966}, pages = {9}, year = {2008}, language = {de} } @inproceedings{DietrichRossowPohlmann2008, author = {Dietrich, Christian J. and Rossow, Christian and Pohlmann, Norbert}, title = {Empirische Untersuchung von IP-Blacklists}, series = {Konferenz: DACH Security. 24.-25. Juni 2008 in Berlin}, booktitle = {Konferenz: DACH Security. 24.-25. Juni 2008 in Berlin}, year = {2008}, language = {de} } @inproceedings{HessePohlmann2006, author = {Hesse, Malte and Pohlmann, Norbert}, title = {Location-Based Security - Ans{\"a}tze f{\"u}r ein Stufenkonzept}, series = {Konferenz: DACH Mobility 2006, 17.-18. Oktober 2006 in Ottobrunn}, booktitle = {Konferenz: DACH Mobility 2006, 17.-18. Oktober 2006 in Ottobrunn}, year = {2006}, language = {de} } @inproceedings{BacksPohlmann2008, author = {Backs, Peter and Pohlmann, Norbert}, title = {Einfluss von Sicherungsmaßnahmen auf die {\"U}bertragungsqualit{\"a}t von VoIP}, series = {Konferenz: SICHERHEIT 2008, 2.-4. April 2008 in Saarbr{\"u}cken}, booktitle = {Konferenz: SICHERHEIT 2008, 2.-4. April 2008 in Saarbr{\"u}cken}, year = {2008}, language = {de} } @inproceedings{HessePohlmann2006, author = {Hesse, Malte and Pohlmann, Norbert}, title = {Sichere Integration mobiler Nutzer in Unternehmensnetzwerke}, series = {Konferenz: DACH Mobility 2006, 17.-18. Oktober 2006 in Ottobrunn}, booktitle = {Konferenz: DACH Mobility 2006, 17.-18. Oktober 2006 in Ottobrunn}, year = {2006}, language = {de} }