TY - CHAP A1 - Böttger, Christian A1 - Demir, Nurullah A1 - Hörnemann, Jan A1 - Acharyi, Bhupendra A1 - Holz, Thorsten A1 - Pohlmann, Norbert A1 - Große-Kampmann, Matteo A1 - Urban, Tobias T1 - Understanding Regional Filter Lists: Efficacy and Impact T2 - Proceedings on Privacy Enhancing Technologies N2 - Filter lists are used by various users, tools, and researchers to identify tracking technologies on the Web. These lists are created and maintained by dedicated communities. Aside from popular blocking lists (e.g., EasyList), the communities create region-specific blocklists that account for trackers and ads that are only common in these regions. The lists aim to keep the size of a general blocklist minimal while protecting users against region-specific trackers. In this paper, we perform a large-scale Web measurement study to understand how different region-specific filter lists (e.g., a blocklist specifically designed for French users) protect users when visiting websites. We define three privacy scenarios to understand when and how users benefit from these regional lists and what effect they have in practice. The results show that although the lists differ significantly, the number of rules they contain is unrelated to the number of blocked requests. We find that the lists’ overall efficacy varies notably. Filter lists also do not meet the expectation that they increase user protection in the regions for which they were designed. Finally, we show that the majority of the rules on the lists were not used in our experiment and that only a fraction of the rules would provide comparable protection for users. KW - user tracking KW - tracking protection KW - filter lists KW - web privacy KW - adblocker Y1 - 2025 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:hbz:1010-opus4-47195 VL - 2025 IS - 2 SP - 309 EP - 324 ER - TY - CHAP A1 - Hörnemann, Jan A1 - Pohlmann, Norbert A1 - Urban, Tobias A1 - Große-Kampmann, Matteo T1 - Sharing is Caring: Towards Analyzing Attack Surfaces on Shared Hosting Providers T2 - Sicherheit 2024. Lecture Notes in Informatics (LNI), Full Paper Session 7 – Netzwerk- und Softwaresicherheit. Worms. 09.-11.04.2024 N2 - Abstract In this paper, we shed light on shared hosting services’ security and trust implications and measure their attack surfaces. To do so, we analyzed 30 shared hosters and found that all of them might leak relevant information, which could be abused unnoticed. An adversary could use this attack surface to covertly extract data from various third parties registered with a shared hoster. Furthermore, we found that most hosters suffer from vulnerabilities that can be used by an internal attacker (i.e., someone using the service) to compromise other hosted services or the entire system. KW - shared hosting KW - data leaks KW - cloud computing Y1 - 2024 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:hbz:1010-opus4-47500 SP - 217 EP - 229 PB - Gesellschaft für Informatik e.V. CY - Bonn ER - TY - CHAP A1 - González Robles, Antonio A1 - Pohlmann, Norbert A1 - Engling, Christoph A1 - Jäger, Hubert A1 - Ernst, Edmund ED - Reimer, Helmut ED - Pohlmann, Norbert ED - Schneider, Wolfgang T1 - Doubtless Identification and Privacy Preserving of User in Cloud Systems T2 - ISSE 2015. Highlights of the Information Security Solutions Europe 2015 Conference Y1 - 2015 SN - 978-3-658-10933-2 U6 - https://doi.org/10.1007/978-3-658-10934-9 SP - 98 EP - 109 PB - Springer Vieweg CY - Wiesbaden ER - TY - CHAP A1 - Fourné, Marcel A1 - Stegemann, Kevin A1 - Petersen, Dominique A1 - Pohlmann, Norbert ED - Linawati, ED - Mahendra, Made Sudiana ED - Neuhold, Erich J. ED - Tjoa, A Min ED - You, Ilsun T1 - Aggregation of Network Protocol Data Near Its Source T2 - Information and communication technology. Second IFIP TC 5/8 international conference. Proceedings Y1 - 2017 SN - 978-3-642-55031-7 SP - 482 EP - 492 PB - Springer CY - Heidelberg ER - TY - CHAP A1 - Pohlmann, Norbert A1 - Hertlein, Markus A1 - Manaras, Pascal ED - Reimer, Helmut ED - Pohlmann, Norbert ED - Schneider, Wolfgang T1 - Bring Your Own Device For Authentication (BYOD4A) – The Xign–System T2 - ISSE 2015. Highlights of the Information Security Solutions Europe 2015 Conference Y1 - 2015 SN - 978-3-658-10933-2 U6 - https://doi.org/10.1007/978-3-658-10934-9 SP - 240 EP - 251 PB - Springer Vieweg CY - Wiesbaden ER - TY - CHAP A1 - Pohlmann, Norbert A1 - Sparenberg, Michael A1 - Siromaschenko, Illya A1 - Kilden, Kilian ED - Reimer, Helmut ED - Pohlmann, Norbert ED - Schneider, Wolfgang T1 - Secure Communication and Digital Sovereignty in Europe T2 - ISSE 2014 Securing Electronic Business Processes. Highlights of the Information Security Solutions Europe 2014 Conference Y1 - 2017 SN - 978-3-658-06707-6 SP - 155 EP - 170 PB - Springer Vieweg CY - Wiesbaden ER - TY - CHAP A1 - Cagnazzo, Matteo A1 - Hertlein, Markus A1 - Pohlmann, Norbert T1 - An Usable Application for Authentication, Communication and Access Management in the Internet of Things T2 - Information and Software Technologies. ICIST 2016. Communications in Computer and Information Science Y1 - 2016 SN - 978-3-319-46253-0 U6 - https://doi.org/10.1007/978-3-319-46254-7_58 SP - 722 EP - 731 PB - Springer CY - Cham ER - TY - CHAP A1 - Pohlmann, Norbert ED - Ruland, Christoph T1 - The next step in IT security after Snowden T2 - 2nd International Communications Colloquium Y1 - 2017 SN - 978-3-8440-2834-8 SP - 11 EP - 19 PB - Shaker CY - Aachen ER - TY - CHAP A1 - González Robles, Antonio A1 - Pohlmann, Norbert T1 - IdP zur Verifikation der vertrauenswürdigen digitalen Identität T2 - Konferenz: DACH Security. 16.-17. September 2014 in Graz Y1 - 2017 ER - TY - CHAP A1 - Urban, Tobias A1 - Pohlmann, Norbert T1 - Sehen heißt glauben: Aufdeckung von Webseiten Manipulation T2 - Konferenz: DACH Security. 26.-27. September 2016 in Klagenfurt Y1 - 2016 ER - TY - CHAP A1 - Pérez, Lance C. A1 - Cooper, Stephen A1 - Hawthorne, Elizabeth K. A1 - Wetzel, Susanne A1 - Brynielsson, Joel A1 - Gökce, Asim Gencer A1 - Impagliazzo, John A1 - Khmelevsky, Youry A1 - Klee, Karl A1 - Leary, Margaret A1 - Philips, Amelia A1 - Pohlmann, Norbert A1 - Taylor, Blair A1 - Upadhyaya, Shambhu ED - Adams, Liz ED - Jurgens, Justin Joseph T1 - Information assurance education in two- and four-year institutions T2 - Proceedings of the 16th annual conference reports on Innovation and technology in computer science education - working group reports Y1 - 2017 SN - 978-1-4503-1122-9 U6 - https://doi.org/10.1145/2078856.2078860 SP - 39 EP - 53 PB - ACM CY - New York, NY ER - TY - CHAP A1 - Rossow, Christian A1 - Dietrich, Christian J. A1 - Grier, Chris A1 - Kreibich, Christian A1 - Paxson, Vern A1 - Pohlmann, Norbert A1 - Bos, Herbert A1 - Van Steen, Maarten ED - Institute of Electrical and Electronics Engineers (IEEE), T1 - Prudent Practices for Designing Malware Experiments: Status Quo and Outlook T2 - IEEE Symposium on Security and Privacy (SP), 2012. 20 - 23 May 2012, San Francisco, California, USA. Proceedings Y1 - 2017 SN - 978-1-4673-1244-8 U6 - https://doi.org/10.1109/SP.2012.14 SP - 65 EP - 79 PB - IEEE CY - Piscataway, NJ ER - TY - CHAP A1 - Feld, Sebastian A1 - Pohlmann, Norbert A1 - Sparenberg, Michael A1 - Wichmann, Bastian C. ED - Reimer, Helmut ED - Pohlmann, Norbert ED - Schneider, Wolfgang T1 - Analyzing G-20's Key Autonomous Systems and their Intermeshing using AS-Analyzer T2 - ISSE 2012 Securing Electronic Business Processes : Highlights of the Information Security Solutions Europe 2012 Conference Y1 - 2017 SN - 978-3-658-00332-6 SP - 228 EP - 243 PB - Springer Vieweg CY - Wiesbaden ER - TY - CHAP A1 - Speier, Andreas A1 - Fein, Christofer A1 - Bothe, David A1 - Reich, Eric A1 - Pohlmann, Norbert ED - Pohlmann, Norbert ED - Reimer, Helmut ED - Schneider, Wolfgang T1 - Draft of a Dynamic Malware Detection on Trustworthy Endpoints T2 - ISSE 2013 Securing Electronic Business Processes. Highlights of the Information Security Solutions Europe 2013 Conference Y1 - 2017 SN - 978-3-658-03370-5 SP - 3 EP - 11 PB - Springer Vieweg CY - Wiesbaden ER - TY - CHAP A1 - Feld, Sebastian A1 - Perrei, Tim A1 - Pohlmann, Norbert A1 - Schupp, Matthias ED - Pohlmann, Norbert ED - Reimer, Helmut ED - Schneider, Wolfgang T1 - Objectives and Added Value of an Internet Key Figure System for Germany T2 - ISSE 2011 Securing Electronic Business Processes. Highlights of the Information Security Solutions Europe 2011 Conference Y1 - 2017 SN - 978-3-8348-1911-6 SP - 341 EP - 352 PB - Vieweg & Teubner CY - Wiesbaden ER - TY - CHAP A1 - Dietrich, Christian J. A1 - Rossow, Christian A1 - Pohlmann, Norbert ED - Shin, Sung Y. ED - Maldonado, José Carlos T1 - Exploiting Visual Appearance to Cluster and Detect Rogue Software T2 - SAC '13 Proceedings of the 28th Annual ACM Symposium on Applied Computing Y1 - 2017 SN - 978-1-4503-1656-9 U6 - https://doi.org/10.1145/2480362.2480697 SP - 1776 EP - 1783 PB - ACM CY - New York, NY ER - TY - CHAP A1 - Dietrich, Christian J. A1 - Rossow, Christian A1 - Pohlmann, Norbert T1 - CoCoSpot: Clustering and recognizing botnet command and control channels using traffic analysis T2 - Computer Networks Y1 - 2017 U6 - https://doi.org/https://doi.org/10.1016/j.comnet.2012.06.019 SN - 1389-1286 VL - 57 IS - 2 SP - 475 EP - 486 ER - TY - CHAP A1 - Petersen, Dominique A1 - Pohlmann, Norbert ED - Fraunhofer-Einrichtung für Angewandte und Integrierte Sicherheit -AISEC-, Garching, ED - Zeilinger, Markus ED - Schoo, Peter ED - Hermann, Eckehard T1 - An Ideal Internet Early Warning System T2 - Advances in IT early warning Y1 - 2017 SN - 978-3-8396-0474-8 SP - 9 EP - 21 PB - Fraunhofer-Verl. CY - Stuttgart ER - TY - CHAP A1 - Dietrich, Christian J. A1 - Rossow, Christian A1 - Pohlmann, Norbert T1 - eID Online Authentication Network Threat Model, Attacks and Implications T2 - Konferenz: 19. DFN-Workshop „Sicherheit in vernetzten Systemen“, 21.-22. Februar 2012 in Hamburg Y1 - 2017 ER - TY - CHAP A1 - Rossow, Christian A1 - Dietrich, Christian J. A1 - Bos, Herbert A1 - Cavallaro, Lorenzo A1 - Van Steen, Maarten A1 - Freiling, Felix C. A1 - Pohlmann, Norbert ED - Association for Computing Machinery ACM, T1 - Sandnet: network traffic analysis of malicious software T2 - Proceedings of the First Workshop on Building Analysis Datasets and Gathering Experience Returns for Security - BADGERS 2011 Y1 - 2017 SN - 978-1-4503-0768-0 U6 - https://doi.org/10.1145/1978672.1978682 SP - 78 EP - 88 PB - ACM CY - New York, NY ER -